Noxcrew Logo Red.png
 

Privacy policy

Last updated: 9th June 2021

What is the purpose of this document?

This policy describes how Noxcrew Holdings Limited and its subsidiaries (collectively, “Noxcrew” or “we” or “us” or “our”) handle your personal data.

Noxcrew Ltd and Noxcrew Online Ltd are "data controllers". This means that these companies are responsible for deciding how we hold and use personal data about you. This privacy notice describes how and why your personal data will be used and how long it will usually be retained for. It provides you with certain information that must be provided under data protection legislation.

Personal data is information about individuals or information from which individuals can be identified (personal data). The types of personal data we collect about you will depend your relationship with us.

Noxcrew collects information about you and is responsible for that information. It collects this information in different ways, for example, when you play Minecraft on Noxcrew servers, use the Noxcrew website or post on a Noxcrew social media profile. You have rights in connection with this information and you can contact Noxcrew at our dataprotection email about those rights.

If you are a child and do not understand the contents of this document please ask your parent or guardian to read and explain this document to you.

Data protection principles

We will comply with data protection law and principles, which means that your data will be:

  • Used lawfully, fairly and in a transparent way.

  • Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.

  • Relevant to the purposes we have told you about.

  • Accurate and kept up to date.

  • Kept only as long as necessary for the purposes we have told you about.

  • Kept securely.

The kind of information we hold about you

We may collect, store, and use the following categories of personal data about you:

  • Any information provided in a contact form, event application form, or other sign up form, including name, title, telephone number, personal email address, online aliases, video game username and any passwords for accounts.

  • Any data collected in association with your participation in an event and/or a promotion run by Noxcrew, including your UUID, IP address, and Discord User ID.

  • Comments you make on one of our forums, platforms or social media profiles or comments you make on your social media accounts about yourself or comments made by others about you on any of the above.

  • Information about you in any marketing or other video that features your image, your voice and/or you as a character within a game.

  • Other business contact details.

How is your personal data collected?

We may collect your personal data from the following sources:

  • We may collect your personal data from you, including when you sign up and/or participate in our forums and any events taking place on digital servers run by Noxcrew.

  • We may collect your personal data from Minecraft skin servers, for example, we may collect your Minecraft username when you connect to our Minecraft server.

  • We may also collect your personal data through different third party platforms, including YouTube, Instagram, Twitch, LinkedIn, Twitter, Discord and TikTok. For example, when you use tools to tag us and mention us in your posts, statuses and comments on your accounts, during your participation on these platforms, when you upload videos based on our content that feature your image, your voice and/or you as a character in a game on a third party platform, and when you provide us with your personal data on our accounts on these platforms, for example, when you comment on one of our posts on Twitter.

  • We may also collect your personal data through other individuals who may, for example, mention you on our forums, social media accounts or the communications they send to us.

  • We may also collect your personal data through cookies and other tracking technologies on our website. For more information on this please see our Cookie Policy.

We may receive information about you from you and/or other individuals you work with within the scope of our relationship with the organisation you are engaged by, for example, if you work for an event partner or other organisation we have a relationship with, such as a professional services firm.

How we will use your personal data

We will use the personal data we collect about you for the following purposes and lawful bases:

  • To administer your registration and/or participation in our forums and events, for example, to publish comments you make on our forums as this is necessary for the performance of relevant contracts with you.

  • Keep records related to support enquiries, servers or events on the legitimate interests of running our business.

  • To produce and/or circulate videos in which your image, your voice and/or you are featured as a character in a game, or to otherwise share information about you, for example sharing information about you on a leaderboard when you take part in one of our promotions, on our legitimate interests of promoting our business and events.

  • To deliver marketing materials to you, on the basis of your consent.

  • To deliver materials to you (depending on the nature of the communication and/or whether you are being contacted via a professional email address), on the legitimate interests of growing our business.

  • To request information from you that we need to collect under legal requirements, when this is necessary to comply with legal or regulatory requirements.

  • To run our everyday operations, for example, communications between personnel and different entities within our group of companies, communications between personnel at Noxcrew and personnel at partner organisations, including event partners or sponsors.

  • To respond to any communications from you, for example, when you contact us via the ‘Contact us’ page on our website or when you share IT support queries. This will be done on the basis of your consent (if you contact us with a query or in circumstances where it is appropriate for us to reply, we will proceed on the basis that you consent to us using your personal data to the extent required to respond to you).

  • To administer and protect our business and the website, including troubleshooting, data analysis and system testing, on the legitimate interests of running our business, provision of administration and IT services, including network security.

  • To seek your views on our services and events, on the basis of our legitimate interests in improving our services and events.

  • To administer a sale or possible sale of the whole of or part of our business or the restructuring of our business on the legitimate interests of facilitating any such possible or actual transaction or restructuring.

We may also process your personal data for additional purposes in the future, but only if such purposes are compatible with those listed above and if we believe that the same lawful basis applies.

In certain circumstances, failure to provide us with personal data about your or another person may prevent us from performing any legal obligations to you or another person. For example, if you make a data subject access request, we may need to verify who you are before providing personal data to you; if you do not provide the information we reasonably need to verify your identity, we may not be able to comply with the subject access request.

Data sharing

We set out below the circumstances in which your personal data might be shared with third parties.

  • Service providers: We share the personal data collected by Noxcrew with service providers we use to help us operate our business, including organisations that provide us with technology related services, such as cloud-based storage services (Google), [, digital infrastructure services (Equinix Metal), web hosting, cloud computing and servers related services (OVH cloud), Minecraft related avatar services (Crafthead) and web infrastructure and security services (Cloudflare)].

  • Event or other partners: Your personal data might be shared with third party organisations as part of our relationship with them, for example, when such organisations are involved in the operation of our events. We ask for your consent when such organisations want to send you marketing communications.

  • Social media and other platforms: Your personal data may be shared with other parties and/or on our social media accounts for the purposes and the legitimate interests of facilitating our operations and promoting our events and your profile (where applicable), including on YouTube, Instagram, Twitch, LinkedIn, Twitter, Discord and Tik Tok.

  • HMRC and law enforcement agencies: We may also disclose your personal data to HMRC and/or law enforcement agencies in order to assist with any investigations, when we bring a claim or defend ourselves against a claim that requires the disclosure of the personal data, and when we engage professional advisors.

  • Sale/restructuring: We may also transfer your personal data to third parties in the context of a sale or possible sale of the whole of or part of our business or the restructuring of our business.

  • Other data sharing: There are other circumstances in which we may need to share your data with third parties. For example, in connection with legal proceedings or if we need to protect or defend our legal rights. We will always only share your data in other circumstances where it is lawful to do so.

International transfers

We may share your personal data with organisations that process data in and/or are incorporated in territories outside of the UK and/or EEA and which do not provide the same level of protection to personal data as countries subject to the General Data Protection Regulation ((EU) 2016/679) or other applicable data protection law.

Where necessary, appropriate safeguards are implemented for transfers of data, including standard contractual clauses approved by the European Commission which can be found at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en and supplementary measures if we deem it necessary in the circumstances, such as further contractual commitments.

For the time being, no additional safeguards have to be implemented for transfers between the EEA and the UK. No transfer restrictions apply for transfers from the UK to the EEA, and no transfer restrictions for transfers from the EEA to the UK will apply until 30 June 2021 or until an adequacy decision is adopted for the UK. We are keeping track of developments and will be implementing any safeguards for such transfers, if any become necessary. However, a draft adequacy decision for the UK has already been published.

Data retention

We may retain your personal data for a period of up to 6 years for purposes of bringing and/or defending our interests in legal claims. After this period, we will securely destroy your personal data in accordance with applicable laws and regulations.

If you unsubscribe from our marketing communications, we will maintain a record of your unsubscribe request and associate it with your email address to ensure you do not receive future communications.

Your rights in connection with your personal data

Under certain circumstances, by law you have the right to:

  • Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).

  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.

  • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.

  • Request the transfer of your personal data to another party.

If you want to review, verify, correct or request erasure of your personal data, object to the processing of your personal data, or request that we transfer a copy of your personal data to another party, please contact us at our dataprotection email.

Right to withdraw consent

In order to consider your application into any event, it is necessary for us to process your personal data. You have the right to withdraw your consent to us processing your personal data at any time. To withdraw your consent, please contact us at our dataprotection email.

Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to our retention policy, we will dispose of your personal data securely.

Complaints

You have the right to make a complaint at your local data protection authority if your privacy rights are violated – in the UK this is the Information Commissioner's Office (ICO) - https://ico.org.uk, the UK supervisory authority for data protection issues.

Contact us

If you have any questions about this privacy notice, or how we handle your personal data, please contact us at our dataprotection email.

Noxcrew Ltd and Noxcrew Online Ltd are registered with the ICO as “data controllers”. Their ICO registration numbers are ZA264503 and ZA930171, respectively.