Privacy Policy

Last updated: 25 March 2026

1. Introduction Royal Masquerade Studios ("we", "us", or "our") operates in the Entertainment sector in England. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our services, websites, applications, events, or other products (collectively, the "Services").

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should stop using our Services immediately.

2. Data Controller The data controller responsible for your personal data is:

Royal Masquerade Studios Region: England

We process your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. Personal Data We May Collect We may collect and process the following categories of personal data:

3.1 Data you provide directly

• Identification data: name, username or similar identifier.
• Contact data: email address, phone number, postal address (if provided).
• Account data: login details (excluding passwords in plain text), profile information, preferences.
• Communication data: messages you send to us (for example, via email, contact forms, or support channels), feedback, and other communications.
• Payment and purchase data: partial payment information (processed via third‑party payment providers), purchase history, billing details (where applicable).
• Content submissions: any content you create or share via our Services (for example, comments, reviews, submissions to events or competitions).

3.2 Data collected automatically When you use our Services, we may automatically collect:

• Device and technical data: IP address, device type, operating system, browser type and version, language settings, time zone, country, and other technical identifiers.
• Usage data: pages viewed, links clicked, access dates and times, features used, interactions with content, crash logs, and performance data.
• Cookies and similar technologies data: information collected via cookies, pixels, and similar technologies (see section 8 below).

3.3 Data from third parties We may receive personal data about you from:

• Social networks and platforms: when you choose to connect or interact with our Services via third‑party platforms (for example, logging in with a social media account or engaging with our official pages or content).
• Payment providers: limited information to confirm transactions, prevent fraud, and process refunds.
• Marketing and analytics partners: aggregated or pseudonymised information about how you interact with our content and advertisements.

4. Purposes and Legal Bases for Processing We process your personal data only when we have a valid legal basis. These include performance of a contract, compliance with legal obligations, legitimate interests, and your consent.

4.1 To provide and operate our Services

• Managing user accounts.
• Delivering digital content, entertainment experiences, and related features.
• Processing purchases, subscriptions, bookings, and other transactions.
• Providing customer support. Legal bases: performance of a contract; legitimate interests (to provide an effective and secure service).

4.2 To communicate with you

• Responding to enquiries and support requests.
• Sending important notices regarding changes to our terms, policies, or Services. Legal bases: performance of a contract; legitimate interests (to ensure you are informed about your use of the Services).

4.3 Marketing and promotions

• Sending newsletters, offers, event invitations, and updates related to Royal Masquerade Studios and our entertainment products or services.
• Customising marketing content based on your interests and usage, where permitted. Legal bases: your consent (where required); legitimate interests (to promote and develop our business) where local laws allow. You can opt out of marketing communications at any time (see section 10).

4.4 Analytics and service improvement

• Monitoring and analysing usage and performance.
• Developing new features, content, and services.
• Conducting research and statistical analysis (usually in aggregated or pseudonymised form). Legal bases: legitimate interests (to understand how our Services are used and improve them).

4.5 Security, fraud prevention, and legal compliance

• Protecting against, investigating, and deterring fraudulent, unauthorised, or illegal activity.
• Enforcing our terms and conditions.
• Complying with legal obligations, court orders, and requests from competent authorities. Legal bases: legal obligation; legitimate interests (to protect our rights, users, and business).

5. How We Share Your Personal Data We do not sell your personal data. We may share it in the following limited circumstances:

5.1 Service providers and partners We may share data with trusted third‑party vendors who perform services on our behalf, such as:

• Hosting providers and cloud infrastructure.
• Payment processors.
• Analytics and performance monitoring tools.
• Email delivery and communication services.
• Marketing and advertising partners (where permitted by law and your preferences). These third parties are required to use your personal data only as necessary to perform services for us and to protect it in line with this Policy and applicable law.

5.2 Business transfers In connection with any actual or potential merger, acquisition, sale of assets, restructuring, or similar corporate transaction involving Royal Masquerade Studios, your data may be transferred as part of the business assets. In such cases, we will take appropriate steps to ensure your privacy rights remain protected and will inform you where required by law.

5.3 Legal obligations and protection of rights We may disclose your personal data where we believe it is necessary to:

• Comply with a legal obligation, regulation, or governmental request.
• Protect the rights, property, or safety of Royal Masquerade Studios, our users, or others.
• Detect, prevent, or address fraud, security, or technical issues.

6. International Data Transfers We are based in England but may use service providers or partners located in other countries. If your personal data is transferred outside the UK or European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as:
   • Adequacy regulations or decisions for the destination country.
   • Standard Contractual Clauses approved by relevant authorities.
   • Other lawful mechanisms permitted under data protection laws.

You may contact us for more information about the safeguards we use for international transfers (see section 12).

7. Data Retention We keep your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. The criteria we use to determine retention periods include:
   • The nature and sensitivity of the data.
   • The purposes for which we process it and whether those purposes can be achieved by other means.
   • Applicable legal, regulatory, tax, and accounting requirements.

When personal data is no longer needed, we will delete it or anonymise it so it can no longer be linked to you.

8. Cookies and Similar Technologies We may use cookies, pixels, and similar technologies to:
   • Enable core functionality of our Services.
   • Remember your preferences.
   • Analyse how our Services are used.
   • Deliver and measure the effectiveness of marketing campaigns.

You can manage cookies through your browser settings and, where applicable, through consent tools we provide. Disabling some cookies may affect the functionality or performance of our Services.

9. Security of Your Personal Data We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures may include encryption, access controls, secure servers, and regular security reviews.

However, no system is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of any account credentials and for all activities that occur under your account.

10. Your Rights Under the UK GDPR and other applicable laws, you may have the following rights regarding your personal data:

• Right of access: to obtain confirmation about whether we process your data and request a copy of your personal data.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restriction: to request that we limit the processing of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used, machine‑readable format and transmit it to another controller where technically feasible.
• Right to object: to object to processing based on our legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us using the details in section 12. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local supervisory authority if you believe your data protection rights have been infringed.

11. Children’s Privacy Our Services are generally intended for a general audience and are not primarily directed at children under 13 years old (or other age as defined by local law). We do not knowingly collect personal data from children without appropriate parental or guardian consent where required by law.

If you believe that a child has provided us with personal data without the necessary consent, please contact us and we will take appropriate steps to delete such data.

12. Contact Us If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, you can contact us at:

Royal Masquerade Studios Region: England

Please include sufficient information for us to identify you and respond to your request.

13. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will take appropriate steps to inform you, such as updating the "Last updated" date, posting a notice within our Services, or contacting you directly where required by law.

We encourage you to review this Policy periodically to stay informed about how we handle your personal data.