Flint Bay Mysteries
Privacy Policy
Last updated: 7 October 2026
This policy explains how Web Media Network LTD uses personal information on flintbaymysteries.com. It covers this promotional website and its mailing list, not data collected by a future game app or a store where you buy it.
1. Who is responsible?
Web Media Network LTD, United Kingdom, is the operator of this website and the controller of personal information processed for its own website and mailing-list purposes.
2. Information we use and why
- Website delivery and security: our hosting provider may process your IP address, requested pages, browser information and access times to deliver and protect the site. Our legal basis is our legitimate interest in operating a secure website.
- Launch emails: if you subscribe, we process your email address and subscription/confirmation records to send the Room 9 launch news described in the form. This is based on your consent. Viewing the signup form does not subscribe you.
- Enquiries: if you contact us, we use your contact details and message to respond, based on our legitimate interest in answering enquiries or, where relevant, taking steps you request before a contract.
We do not request payment information through this website. This version does not include our own advertising pixels or analytics service.
3. Optional services and recipients
EmailOctopus, operated by Three Hearts Digital Ltd, provides the signup form and mailing-list service. Its script loads Google's reCAPTCHA to help prevent automated abuse and may load Google-hosted fonts for the form. These services receive connection and device information when loaded, even if you do not submit an email address. If you subscribe, EmailOctopus processes your subscription for us.
YouTube / Google provides the trailer player. We use a locally hosted poster and load the embedded player when you press play. Loading it sends information such as your IP address and browser details to Google. Google's own privacy terms also apply. An external YouTube link takes you to a separately operated website.
Website hosting: the website is hosted in the United States. Our hosting service processes connection information to deliver and protect the website.
We may also disclose information where required by law or necessary to establish, exercise or defend legal claims. We do not sell our subscriber list.
4. International processing
Hosting in the USA and using external providers can involve processing outside the UK or European Economic Area. Transfers must have an appropriate legal basis, such as an applicable adequacy decision, applicable UK adequacy regulations or contractual safeguards. A provider's participation in a transfer framework must be checked; hosting in the USA alone is not a safeguard.
5. How long we keep information
- Launch-list data: until you withdraw consent or the launch-notification purpose ends, followed by deletion or anonymisation unless a limited record is needed for legal obligations or claims.
- Consent and unsubscribe records: only as needed to demonstrate permission, honour your withdrawal and meet applicable legal responsibilities. Unsubscribe records are not used to send further marketing.
- Enquiries: only as long as needed to deal with them and any related legal obligations or claims.
- Technical logs: retained for operational, security and applicable legal purposes, with periods depending on the hosting service and the reason for retention.
6. Your choices and rights
You can unsubscribe through the link in each marketing email. Your browser provides controls for cookies and site data. Withdrawing consent does not affect earlier lawful processing. Clearing browser data does not unsubscribe you from an existing mailing list.
Depending on applicable law, you may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interests. We may need proportionate information to verify your identity. For UK GDPR and applicable EU GDPR requests, we normally respond within one month; permitted extensions will be explained.
You can complain to the UK Information Commissioner’s Office (ICO) or your competent local authority. Visitors outside the UK may also have rights under their local laws, including the EU GDPR where it applies.
7. Children and security
The mailing list is intended for people aged 16 or over. Please do not submit a child's email address. Children under 16 should not use the mailing-list signup. We use appropriate access controls and security measures; no online service can promise absolute security.
8. Changes and provider information
We will update this policy when our practices change. If the purpose of the mailing list changes, we will obtain any further permission required.