Privacy Policy for tictactoes.co.uk

Last Updated: 8th February 2025

This privacy policy explains how tictactoes.co.uk collects, uses, and protects your personal data when you use our website. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. We adhere to the principles outlined in the UKHSA's "Approval Standards and Guidelines: Privacy Notice" where applicable and strive to be transparent about our data practices.

1. Who We Are

tictactoes.co.uk is a website providing access to the Tic-Tac-Toe game online. Our website address is: https://tictactoes.co.uk.

2. What Personal Data We Collect and Why We Collect It

We collect limited personal data to provide and improve our services. The types of data we collect and the reasons for collecting them are:

• Analytics Data (Anonymous and Pseudonymised): We use Google Analytics to collect information about how you use our website. This data is anonymised and pseudonymised to protect your identity. This may include:
  • Pages visited
  • Time spent on each page
  • Referring website
  • Type of device used
  • Browser type
  • General geographic location (e.g., city)

  We use this information to:

  • Understand how users interact with our website.
  • Identify areas for improvement.
  • Monitor website performance.
  • Analyze trends.

  This processing is based on our legitimate interest in improving our website and providing a better user experience. We ensure that this data is processed in a way that does not allow us to directly identify you.

• Cookies: We use cookies to improve your experience on our website. These may include:
  • Functional Cookies: These cookies are essential for the website to function correctly (e.g., remembering your theme preference).
  • Analytics Cookies: Used by Google Analytics (see above).

  We use cookies to:

  • Remember your preferences (e.g., dark mode).
  • Analyze website traffic (through Google Analytics).

  You can control cookies through your browser settings. You can choose to accept or reject cookies. Please note that disabling cookies may affect your experience on our website.

• No Account Creation or Direct Identifiers: We do not require you to create an account, and we do not collect any directly identifying information such as your name, email address, or phone number.

3. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. These measures include:

• Using secure hosting providers.
• Regularly updating our website and software.
• Limiting access to data to authorized personnel only (where applicable – most data is handled by Google Analytics).
• Using encryption to protect data in transit (HTTPS).

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy, or for a longer period if required by law. Analytics data in Google Analytics is subject to Google's data retention policies. We regularly review our data retention policies to ensure compliance.

5. Your Rights

Under the GDPR and the Data Protection Act 2018, you have certain rights regarding your personal data. However, given the limited data we collect and the use of anonymisation and pseudonymisation techniques, some of these rights may be limited in their applicability. Your rights include:

• The right to access: You have the right to request access to the personal data we hold about you. However, because we primarily collect anonymised and pseudonymised data through Google Analytics, it may be difficult or impossible for us to identify any specific data relating to you.
• The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. As we do not collect directly identifying information, this right is unlikely to be applicable.
• The right to erasure: You have the right to request that we erase your personal data. Again, due to anonymisation and pseudonymisation, this may be difficult or impossible to implement effectively.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data.
• The right to object: You have the right to object to the processing of your personal data.
• The right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• The right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time. However, we do not currently rely on consent as the basis for processing data.

To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request within one month.

6. Third-Party Services

We use the following third-party services:

• Google Analytics: For website analytics. Please see Google's privacy policy for more information: https://policies.google.com/privacy. We have configured Google Analytics to anonymize IP addresses and have data retention settings in place.

We carefully select our third-party service providers and ensure that they comply with the GDPR.

7. Data Transfers Outside the UK

Your personal data may be transferred to and processed in countries outside the UK. We will take all reasonable steps to ensure that your personal data is treated securely and in accordance with this privacy policy and applicable data protection laws. Specifically, data collected by Google Analytics may be stored on servers located around the world.

8. Children's Privacy

Our website is not directed to children under the age of 13, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us, and we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will post any changes on our website. Your continued use of our website after any changes constitutes your acceptance of the new privacy policy.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at: admin@tictactoes.co.uk

11. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues (https://ico.org.uk/).