App Privacy Policy

Last updated 30/03/22

Introduction

Background

Arcade Ltd is an immersive production agency that uses cutting-edge technologies such as augmented reality and artificial intelligence to create engaging digital experiences for visitors to cultural organisations.

We respect your privacy and we are committed to protecting your personal information. We ask that you read this Privacy Policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal information through your use of our Apps, your rights in relation to your personal information, and on how to contact us and data protection authorities in the event you have a complaint.

It is important that you read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal information about you so that you are fully aware of how and why we are using your data. This Privacy Policy supplements the other notices and is not intended to override them.

What does this Privacy Policy Cover?

Our Privacy Policy tells you how we look after, use and share the personal information that we collect from you and also how you can manage your consent; as well as action your rights. Please read this carefully.

When you use any of our Apps, you are agreeing to our Privacy Policy, but you can manage your consent at any time.

Who Collects Information About You?

Arcade Limited (“we”, “us”, “our”, “Arcade”) collects, uses and is responsible for your personal information. When we do so, we are responsible as a ‘data controller’ of that information.

Our registered office is at 32 Great Sutton Street, London, EC1V 0NB

Our Privacy Lead is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions, including any requests to exercise your legal rights, please contact our Privacy Lead at privacy@arcade-xr.com.

How to Complain

We hope that we can resolve any query or concern that you raise about our use of your personal information.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Changes to the Privacy Policy and your duty to inform us of changes.

We keep this Privacy Policy under regular review and may make changes to it from time to time. When we do so, we will inform you by updating this section.

It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your relationship with us.

Links to Other Websites

Our Apps may include links to third-party websites and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the Privacy Policy of every website you visit.

The Data We Collect About You

When you use our Apps, you may give us information directly (if contacting our support email), and we’ll store that information on our systems and use it for the purposes described in this Privacy Policy. Some limited information is also collected automatically for analytics purposes.

Creating a Player Profile

We may let you create a player profile that is stored locally on your device. Your player profile may include information like:

Your choice of colour theme
Your username

Photos and Videos

Our Apps may request permission to use your camera and local storage for the purpose of viewing augmented reality content, capturing photos or recording videos, and saving photos or videos to your device. Any images or videos you capture are only stored locally on your device and will never be automatically transmitted to us or any other third party by any of our apps, unless you explicitly give consent to do so as part of an experience. This might include circumstances where you consent to externally sharing a photo via a sharing function, or submitting a photo to a third party as part of a competition, etc.

Contacting Us for Support

If you choose to contact Arcade via contact@arcade-xr.com or any other Arcade email address, by telephone or by post, we may store some or all of the following personal information for a short period if you’ve provided us with it:

Name
Address
Email Address
Telephone Number
Details about a child’s use of any of the applications for which we provide support

You may choose whether or not to give some information to us. However, not providing certain information may mean you cannot enjoy all or parts of our Apps.

How Do We Use Your Personal Information

Under the GDPR, we must always have a lawful basis for using personal information. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal information, to meet our legal and regulatory obligations, or because it is in our legitimate business interests to use it. Where we have said that using or keeping your information is “necessary for our legitimate interest”, we have carried out an assessment to ensure this is not unfair to you. Where we have said that we are relying on consent, we will seek consent from the parent or guardian if the user is under the age of 13.

Your Personal Information May be Used for the Following Purposes:

To provide a requested service or carry out a contract with you:

Supplying our support services to you. Your personal details are required in order for us to correspond with you regarding any issues or questions you may have regarding the Apps for which we supply support services.
Communicating with you for customer service purposes. This may include responding to emails, calls or written correspondence from you.
Where we have your consent, We may from time to time ask you for your consent for other purposes, which we will explain to you at the time

To meet our legal and regulatory obligations:

Dealing with requests from you to exercise your rights under data protection laws.
To respond to requests from regulators, courts or government authorities.

Necessary for our legitimate interests:

Ensuring our Apps work as intended on your device and as necessary to provide the content or services you request on our Apps.
Responding to your inquiries and fulfilling your requests, for example, when you send us questions, suggestions, compliments or complaints, or when you request information about our Apps. We may also take such into account when improving our Apps, products and services.
Defending or bringing claims to protect our legal rights and interests, including to enforce our Terms of Service.

Who Will You Share My Personal Information With?

We will not share any of your personal information with any third parties for any purpose, subject to two exceptions:

In some limited circumstances, we may be legally required to share certain personal information, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
When we need to enforce our Terms of Service, investigate fraud, reduce credit risk, exercise our legal rights or defend against legal claims.

Automated Decision Making

We do not carry out automated decision making using the information we collect from you.

Change of Purpose

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us using the details provided in this Privacy Policy.

If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required and permitted by law.

Security & Retention

Keeping Your Data Secure

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business or legal need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

For How Long Do We Keep Your Personal Information?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

In relation to personal information made available through email, telephone or postal correspondence, this will be stored for no longer than two years from the point at which reason for the communication has been resolved.

In some circumstances you can ask us to delete your data – please see below.

In some circumstances we may anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

International Data Transfers

Where possible, we try to only process your information within the UK and European Economic Area (EEA). If we or any third party transfers your information outside of the UK or EEA, we always require that appropriate safeguards are in place to protect the information when it is processed.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal information. These include rights to:

Object to processing of your personal information where we are relying on legitimate interests as the legal basis of our processing your personal information, or where we use your personal information for direct marketing purposes. If we have compelling legal grounds to carry on processing your personal information, we will be able to continue to do so.
Request access to your personal information (commonly known as a “data subject access request”) and to certain other supplementary information that this Privacy Policy is already designed to address.
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing (see below).
Object to decisions being taken by automated means which produce legal effects concerning you or significantly affect you.
Request restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to you or to a third party. We will provide to you, or a third party you have chosen, your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
Withdraw consent at any time where we are relying on consent to process your personal information.

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

If you would like to exercise any of these rights, please email our Privacy Lead at privacy@arcade-xr.com and let us have enough information to identify you.