Privacy Policy

1. Introduction

Welcome to UrShopy. We are committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our platform.

This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We respect your privacy rights and are committed to protecting your personal data.

1.1. Data Controller

The data controller responsible for processing your personal data is:

UrShopy
Email: app@urshopy.com
Website: https://urshopy.com

If you have any questions about this Privacy Policy or our data practices, please contact us using the information provided above.

2. Information We Collect

We may collect the following types of information:

Personal Information: Name, email address, and any information you voluntarily provide through our contact forms.
Usage Data: Information about how you interact with our games and website, including game preferences and play time.
Device Information: Browser type, device type, operating system, and IP address.
Cookies: Small data files stored on your device to enhance your browsing experience and analyze site traffic.

2.1. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

Consent: When you provide explicit consent, such as accepting cookies for analytics or marketing purposes.
Legitimate Interest: To improve our services, analyze website usage, and ensure website security.
Contractual Necessity: To provide the services you request and respond to your inquiries.
Legal Obligation: To comply with applicable laws and regulations.

3. How We Use Your Information

We use collected information for the following purposes:

To provide and improve our gaming services
To respond to your inquiries and provide customer support
To personalize your gaming experience
To analyze and improve our website performance
To comply with legal obligations

3.1. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

Contact Form Data: Retained for up to 2 years after your last inquiry, unless you request deletion earlier.
Analytics Data: Retained for up to 26 months (Google Analytics default retention period).
Cookie Preferences: Retained for 1 year, after which consent will be requested again.
Legal Requirements: Some data may be retained longer if required by law or for legal proceedings.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of our website may not function properly without cookies.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

Our website uses third-party services that may process your personal data:

Google Analytics: We use Google Analytics to analyze website usage. Google may process your data in the United States. Google Privacy Policy
Google AdSense: We use Google AdSense to display advertisements. Google may process your data for personalized advertising. Google Privacy Policy

Our website may also include links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

6.1. Data Transfers Outside the EEA

Some of our third-party service providers (such as Google Analytics and Google AdSense) may transfer and process your personal data outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Other appropriate safeguards as required by GDPR

By using our website, you consent to the transfer of your data to these third-party services as described in this Privacy Policy.

7. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right of Access (Article 15): You have the right to access and receive a copy of your personal data that we hold.
Right to Rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17): You have the right to request deletion of your personal data ("right to be forgotten") in certain circumstances.
Right to Restrict Processing (Article 18): You have the right to request restriction of processing your personal data in certain circumstances.
Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object (Article 21): You have the right to object to processing of your personal data for specific purposes, including direct marketing.
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights:

To exercise any of these rights, please contact us at app@urshopy.com or use our Data Rights Request Form. We will respond to your request within 30 days as required by GDPR. We may need to verify your identity before processing your request.

Submit a Data Rights Request

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and in any event within 72 hours of becoming aware of the breach, where feasible.

We have implemented appropriate technical and organizational measures to prevent data breaches, but in the unlikely event of a breach, we will take immediate action to contain and address it.

9. Supervisory Authority

If you are located in the European Economic Area (EEA) and believe that we have not addressed your concerns regarding the processing of your personal data, you have the right to lodge a complaint with your local data protection supervisory authority.

You can find your local supervisory authority at: https://edpb.europa.eu/about-edpb/board/members_en