Privacy Policy
This Privacy Policy explains how Maddison Games Ltd ("we", "us", "our") collects, uses and protects personal data when you use Murder Mystery Downloads (murdermysterydownloads.com). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Maddison Games Ltd is a UK-based company established in 2003, operating the Murder Mystery Host and Murder Mystery Downloads brands for murder mystery party game kits. We are the data controller for the personal data collected through this website.
Contact us at: murdermysterydownloads.com/contact
What data we collect
When you purchase a game and use this portal, we collect:
- Email address — used to identify your account and send your access code ater purchase. Stored as one-way encryption — we only use it to allow you to log on. We are unable to reverse it to recover your original email address.
- Access code — a unique code generated for your account by us.
- Payment information — processed by PayPal. We do not store card or payment details.
- IP address — logged on each login to enable us to detect suspicious activity and protect your account.
- Browser information — user agent string logged on login for security purposes and observing general trends of access.
- Download activity — which files you open and when, for account management and abuse prevention.
How we use your data
- To provide access to your purchased digital files
- To send your access code and order confirmations by email
- To detect and prevent fraudulent or abusive use of access codes
- To respond to support enquiries
- To comply with legal obligations
Legal basis for processing
- Contract performance — processing your order and providing access to files you have purchased
- Legitimate interests — fraud prevention and account security monitoring
- Legal obligation — retaining transaction records as required by law
Data retention
- Order and transaction records — retained for 7 years (HMRC requirement)
- Login logs — retained for 12 months
- Download logs — retained for 12 months
- Contact form messages — retained for 2 years
Third parties
We share data with the following third parties only where necessary:
- PayPal — to process payments. PayPal's privacy policy applies to data they collect: paypal.com/uk/legalhub/privacy-full
- Website hosting provider — our VPS provider processes log data solely to enable the hosting of this website
We do not sell, rent or share your personal data with any other third parties.
Cookies and sessions
This site uses a single session cookie to keep you logged in during your visit. This cookie is strictly necessary for the site to function and contains no personal information. It expires when you close your browser or log out. We do not use tracking cookies, analytics cookies or advertising cookies.
Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data, subject to legal retention requirements
- Restriction — request that we restrict processing of your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, please contact us. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO).
Security
We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted data and protected storage.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised. Continued use of this site after changes constitutes acceptance of the updated policy.