Data Controller & Glasgow Contact Details
For the purposes of the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Data Controller is Treble Spot Reels Conservatory Ltd (Company No. SC748291), located at The Garment Factory, 10 Montrose Street, Glasgow, G1 1RE, United Kingdom.
Our Data Privacy Officer can be contacted directly by electronic mail at privacy@treblespotreels.com or by telephone at +44 7914 345678.
Information We Collect
Because Treble Spot Reels operates without financial transactions, payment cards, or commercial billing, we practice strict data minimisation:
- Patron Induction Data: Electronic mail address, chosen Screen Name, Date of Birth (solely to verify 18+ eligibility), and a one-way cryptographic passphrase hash (`password_hash`).
- Conservatory Preferences & Ledger: Selected lighting scene (`display_scene`), session reminder interval (`reminder_minutes`), fictional Play Credit ledger entries, and any self-imposed Account Break timestamp (`break_until`).
- Support Dispatches: Name, reply email, topic, message body, and generated reference code when you submit our support form.
- Device-Local Tokens: Wax hallmarks (`tsr:claims`) and recent cylinder slugs (`tsr:recent`) remain in your browser’s `localStorage` and are not transmitted to our servers.
Lawful Bases for Processing under Article 6 UK GDPR
- Art. 6(1)(b) · Performance of Service
- Maintaining your patron ledger, authenticating sign-ins, and honouring Account Breaks you activate.
- Art. 6(1)(c) & (f) · Eligibility & Security
- Verifying that patrons are aged 18 or older and protecting the conservatory from automated abuse.
- Art. 6(1)(a) · Explicit Consent (Google Consent Mode v2)
- Optional analytics telemetry is disabled by default (`denied`) and only activates if you explicitly click “Allow Analytics” in our banner or Consent Mode v2 Preferences.
Data Retention & Vault Security
Passphrases are never stored in plain text; they are hashed using PHP’s native `password_hash()` algorithm. Access to our server-side JSON data vault is restricted by filesystem locks (`flock`) and web-server access denials.
Patron accounts are retained for as long as you maintain your membership. Support correspondence records are retained for 12 months from resolution before permanent deletion.
Your Statutory Rights & the Information Commissioner’s Office (ICO)
Under the UK GDPR, you hold the right of access (Subject Access Request), the right to rectification, the right to erasure (“right to be forgotten”), the right to restrict processing, the right to data portability, and the right to withdraw consent at any time.
To exercise any of these statutory rights, write to privacy@treblespotreels.com. You also have the statutory right to lodge a complaint with the United Kingdom supervisory authority, the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
Third-Party Data Sharing
Treble Spot Reels Conservatory Ltd never sells, rents, or trades patron email addresses or personal records to marketing brokers. When you launch an interactive cylinder on `play.php`, your browser loads the demonstration iframe directly from the respective game studio’s content delivery network in practice mode without transmitting your conservatory email or identity.