Definitions and Interpretation

In this Privacy Policy, unless the context otherwise requires:

• "Application" refers to Storylines - Mystery of Spicy, including all associated services and platforms;
• "Personal Information" means any information relating to an identified or identifiable natural person;
• "User" means any individual who accesses or uses the Application;
• "We", "Us", or "Our" refers to Storylines - Mystery of Spicy and its operators;
• "Processing" means any operation performed on personal data.

Information Collection

2.1 Categories of Information Collected

We collect and process the following categories of personal information:

• Identity Data: First name, last name, username, or similar identifiers
• Contact Data: Email address, telephone numbers, and mailing address
• Technical Data: IP address, browser type and version, device information, operating system
• Profile Data: Username, password, preferences, feedback, and survey responses
• Usage Data: Information about how you use our Application and services
• Marketing Data: Your preferences in receiving marketing communications

2.2 Methods of Collection

Information is collected through direct interactions, automated technologies, and third-party sources as permitted by applicable law.

Use of Information

We will only use your personal information when the law allows us to. Most commonly, we will use your information in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you
• Where it is necessary for our legitimate interests and your interests do not override those interests
• Where we need to comply with a legal or regulatory obligation
• Where you have given explicit consent for specific purposes

Disclosure of Information

4.1 Internal Disclosures

Personal information may be shared within our organization on a need-to-know basis for operational purposes.

4.2 External Disclosures

We may share your personal information with external parties including:

• Service providers who provide IT and system administration services
• Professional advisers including lawyers, bankers, auditors, and insurers
• Government bodies that require reporting of processing activities
• Third parties to whom we may sell, transfer, or merge parts of our business

Data Security Measures

We have implemented appropriate security measures to prevent your personal information from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized manner. We employ:

• Encryption protocols for data transmission and storage
• Access control mechanisms and authentication systems
• Regular security assessments and penetration testing
• Employee training on information security practices
• Incident response and business continuity procedures

Data Retention

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Retention periods are determined based on the type of information, applicable legal requirements, and business necessity.

User Rights and Choices

Under certain circumstances, you have rights under data protection laws in relation to your personal information, including the right to:

• Request Access to your personal information
• Request Correction of inaccurate or incomplete personal information
• Request Erasure of your personal information
• Object to Processing of your personal information
• Request Restriction of processing your personal information
• Request Transfer of your personal information to another party
• Withdraw Consent at any time where we are relying on consent

Children's Privacy

Our Application is not directed to individuals under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information from our records promptly.

International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions recognizing equivalent protection
• Binding corporate rules for intra-group transfers

Regulatory Compliance

10.1 General Data Protection Regulation (GDPR)

For users in the European Economic Area, we comply with GDPR requirements. We process personal data lawfully, fairly, and transparently. You have enhanced rights regarding your personal data as outlined in Section 7.

10.2 California Consumer Privacy Act (CCPA)

California residents have specific rights under CCPA, including:

• The right to know what personal information is collected
• The right to know whether personal information is sold or disclosed
• The right to say no to the sale of personal information
• The right to access your personal information
• The right to equal service and price

Note: We do not sell personal information.

10.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions where we operate.

---