Your GDPR Rights

Last updated: January 15, 2026

The General Data Protection Regulation (GDPR) gives you strong rights over your personal data. This page explains those rights and how to use them at craftludo.com.

Data Controller Information

The data controller for craftludo.com is:

craftludo.com
167 Norfolk Street
London, ON N6A 1M2
Canada
Email: support@craftludo.com

We are responsible for how your data is collected and used on our website.

Your Rights Under GDPR

You have the following rights regarding your personal data:

1. Right of Access

You can ask us what personal data we hold about you. We will provide:

• A copy of your personal data
• Why we process it
• Who we share it with
• How long we keep it
• Where the data came from

We provide this free of charge within 30 days.

2. Right to Correction

If your data is wrong or incomplete, you can ask us to fix it. We will:

• Correct errors within 30 days
• Tell third parties about the correction (if we shared the data)
• Tell you which third parties were informed

3. Right to Deletion (Right to be Forgotten)

You can ask us to delete your data when:

• We no longer need it
• You withdraw consent
• You object to processing
• We processed it unlawfully
• Law requires deletion

We may keep some data if required by law or for legal claims.

4. Right to Restrict Processing

You can limit how we use your data when:

• You dispute its accuracy (while we check)
• Processing is unlawful but you do not want deletion
• We no longer need it, but you need it for legal claims
• You have objected (while we consider your objection)

We will still store the data but will not use it without your consent.

5. Right to Data Portability

You can ask for your data in a format that is:

• Structured
• Commonly used
• Machine-readable (like CSV or JSON)

You can also ask us to send your data directly to another service when possible.

6. Right to Object

You can object to processing based on:

• Legitimate interests
• Direct marketing
• Research or statistics

For direct marketing, we will stop right away. For other cases, we will stop unless we have strong legal grounds.

7. Rights Related to Automated Decisions

You have the right to:

• Not be subject to decisions based only on automated processing
• Get human review of automated decisions
• Express your point of view
• Contest the decision

We do not currently make automated decisions that significantly affect you.

How to Exercise Your Rights

To use any of these rights, contact us:

We may ask for ID to verify your identity. This protects your data from unauthorized access.

Response Time

We will respond to your request within 30 days. If your request is complex, we may extend this by 60 more days. We will tell you if we need more time.

Consent and Withdrawal

When we process data based on your consent, you can withdraw it at any time. To withdraw consent:

1. Email us at support@craftludo.com
2. Use the unsubscribe link in our emails
3. Change your cookie settings on our website

Withdrawal does not affect processing done before you withdrew consent.

Managing Cookies

You can control cookies through:

• Our cookie banner (when you first visit)
• Your browser settings
• Clearing cookies from your device

Note: Blocking essential cookies may affect site function.

Cookie Preferences

Cookie Type	Required	Can Opt Out
Essential	Yes	No
Analytics	No	Yes
Marketing	No	Yes

Data We Process

Under GDPR, we process these types of data:

• Identity Data: Name, username
• Contact Data: Email address
• Technical Data: IP address, browser type, device info
• Usage Data: Pages visited, game progress
• Preference Data: Game settings, language choice

Legal Basis for Processing

We process your data under these legal bases:

• Consent (Article 6(1)(a)): For cookies and marketing emails
• Contract (Article 6(1)(b)): To provide our game service
• Legitimate Interest (Article 6(1)(f)): For security and site improvement
• Legal Obligation (Article 6(1)(c)): When law requires us to keep records

International Transfers

Your data is stored in Canada. If we transfer data to other countries, we ensure protection through:

• Standard contractual clauses approved by regulators
• Adequacy decisions
• Your explicit consent

Data Security

We protect your data with:

• SSL/TLS encryption for data in transit
• Encrypted storage for data at rest
• Access controls and authentication
• Regular security testing
• Staff training on data protection

Data Breach Notification

If a data breach occurs that risks your rights, we will:

• Notify the relevant authority within 72 hours
• Contact you directly if there is high risk to you
• Explain what happened and what we are doing

Children's Data

We do not knowingly collect data from children under 16 without parental consent. If we learn we have such data, we will delete it promptly.

Filing a Complaint

If you are unhappy with how we handle your data, you can:

1. Contact us first at support@craftludo.com
2. File a complaint with your local data protection authority

For EU residents, find your authority at: EDPB Member List

For Canadian residents, contact the Office of the Privacy Commissioner of Canada.

Updates to This Page

We may update this page to reflect changes in law or our practices. Check back from time to time for updates.

Contact Us

For any questions about your GDPR rights:

craftludo.com
Email: support@craftludo.com
Address: 167 Norfolk Street, London, ON N6A 1M2, Canada

We are here to help you understand and exercise your rights.