1. Overview
The UK General Data Protection Regulation (UK GDPR), retained in UK law following the departure from the European Union, together with the Data Protection Act 2018, governs how AlphaPlay UK collects, stores, processes, and shares personal data.
AlphaPlay UK is committed to full compliance with these regulations. This statement should be read alongside our Privacy Policy, which provides more detailed information about how we handle your personal data.
2. Lawful Basis for Processing
Under UK GDPR Article 6, every processing activity must be based on a lawful ground. The following lawful bases apply to AlphaPlay UK:
Contract (Article 6(1)(b))
Processing is necessary to fulfil a subscription or trial order placed with AlphaPlay UK, or to take steps at the request of the individual prior to entering a contract.
Legitimate Interests (Article 6(1)(f))
Processing is necessary for our legitimate business interests — including fraud prevention, website security, and improving our services — where these are not overridden by your fundamental rights and freedoms.
Legal Obligation (Article 6(1)(c))
Processing is necessary to comply with a legal obligation, such as maintaining financial records required by HMRC.
Consent (Article 6(1)(a))
Where we rely on consent, for example for optional marketing communications, you may withdraw consent at any time without affecting the lawfulness of earlier processing.
3. Data Controller Identity
AlphaPlay UK acts as the data controller for all personal data collected through the website and as part of the subscription service. As data controller, we determine the purposes and means of processing your personal data.
- Business Name: AlphaPlay UK
- Email: info@alphaplay.uk
- Website: https://alphaplay.uk
4. Personal Data We Process
AlphaPlay UK processes the following categories of personal data:
| Category | Examples | Lawful Basis |
|---|---|---|
| Identity | Name | Contract |
| Contact | Email, WhatsApp | Contract |
| Technical | IP (partial), browser | Legitimate Interests |
| Subscription | Plan, device, duration | Contract |
| Communications | Support messages | Legitimate Interests |
We do not process special categories of personal data (sensitive data) such as health, biometric, or political information.
5. Your Data Subject Rights
Under UK GDPR you have the following rights:
Right of Access
Request a copy of personal data we hold about you (Subject Access Request).
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data in certain circumstances ("right to be forgotten").
Right to Restrict
Request that we limit how we use your data.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Rights re: Automated Decisions
Not to be subject to solely automated decisions that significantly affect you.
Right to Withdraw Consent
Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, contact info@alphaplay.uk. We will respond within 30 calendar days. Complex or multiple requests may be extended by a further two months, in which case we will notify you.
6. International Data Transfers
Where personal data is transferred outside the United Kingdom — for example, through cloud hosting infrastructure — AlphaPlay UK ensures that appropriate safeguards are in place, such as UK adequacy regulations, Standard Contractual Clauses, or binding corporate rules, to provide a level of protection equivalent to UK GDPR.
7. Retention Periods
Personal data is retained only as long as necessary. Our standard retention periods are:
- Order and subscription records: 6 years from last transaction (UK statutory minimum).
- Contact and support messages: 12 months.
- Trial requests: 6 months from the trial date.
- Technical/security logs: Up to 90 days.
Data is securely deleted or fully anonymised when the retention period expires.
8. Data Protection Impact Assessment
AlphaPlay UK conducts a Data Protection Impact Assessment (DPIA) where proposed processing activities are likely to result in high risk to individuals' rights and freedoms. DPIAs are documented and reviewed periodically in line with the ICO's guidance on high-risk processing.
9. Data Breach Procedure
In the event of a personal data breach, AlphaPlay UK will:
- Assess the breach and its likely risk to affected individuals within 24 hours of becoming aware.
- Notify the Information Commissioner's Office (ICO) within 72 hours where there is a risk to individuals' rights and freedoms.
- Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
- Document all breaches and the response measures taken, regardless of whether ICO notification is required.
10. Data Protection Contact
While AlphaPlay UK is not currently required to appoint a formal Data Protection Officer under UK GDPR, all data protection enquiries and subject access requests should be directed to our team:
- Email: info@alphaplay.uk
- WhatsApp: +44 7366 256739
11. ICO Registration & Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal data has been processed unlawfully:
- ICO Website: ico.org.uk
- ICO Helpline: 0303 123 1113
We encourage you to contact us first so that we have the opportunity to address your concern before you escalate to the ICO.