Data Protection Policy for ControllerHub

1. Introduction

Protecting your personal data is a priority for us at ControllerHub. As a platform providing digital and physical video game products, accessories, and related services, we are committed to safeguarding your privacy and ensuring that your data is handled with care, transparency, and in full compliance with applicable data protection laws. This Data Protection Policy explains what personal data we collect, how we use it, and the measures we take to protect your information.

2. Scope of this Policy

This policy applies to all customers, visitors, and users who interact with our game store, whether online via our website and mobile applications or offline at our physical locations. It governs the collection, processing, retention, and sharing of personal data related to account creation, purchases, customer support, marketing communications, and other store activities.

3. Personal Data We Collect

We collect various types of personal data necessary to provide our services effectively. This includes:

• Account Details: Name, email address, username, password, and contact information provided during registration.
• Purchase Information: Details of products purchased, transaction dates, billing and shipping addresses, payment method metadata (excluding full payment credentials).
• Technical Data: IP addresses, device type, browser type and version, operating system, and cookies or similar tracking technologies.
• Behavioral Data: Browsing patterns, search queries, cart activity, product preferences, and wishlists.
• Communication Data: Records of customer service interactions, inquiries, complaints, feedback, and subscription preferences.
• Marketing Preferences: Consents and opt-ins for promotional emails, newsletters, and special offers.
• Third-Party Account Data: When linking social media or other external accounts, data permitted by those services may be collected.

4. How We Collect Your Data

Your data is collected through various means including:

• Direct Input: Information you provide by filling forms, making purchases, registering accounts, or contacting customer support.
• Automated Technologies: Cookies, web beacons, and analytics tools collect data about your device and usage behavior.
• Third-Party Sources: Data from payment processors, shipping partners, and marketing platforms that assist in fulfilling orders or campaigns.
• In-Store Interaction: Personal information collected at physical points of sale or events.

All data collection complies with the principles of transparency, purpose limitation, and data minimization.

5. Purpose and Use of Personal Data

We use your personal data for the following primary purposes:

• Order Fulfillment: Processing payments, shipping orders, managing returns, and providing receipts.
• Account Management: Creating and maintaining your user profile, storing preferences, and managing subscriptions.
• Customer Support: Responding to inquiries, resolving complaints, and improving service quality.
• Marketing: Sending newsletters, promotional offers, and relevant recommendations based on your preferences and purchase history, only with your consent.
• Security and Fraud Prevention: Detecting and preventing unauthorized access, fraudulent transactions, and abuse.
• Service Improvement: Analyzing website usage and customer feedback to enhance our store and product offerings.
• Legal Compliance: Maintaining records and fulfilling obligations related to tax, consumer protection, and financial regulations.

We process your data strictly within the boundaries defined by these purposes and do not use it for unrelated activities.

6. Legal Basis for Processing

• Contractual Necessity: To execute purchase agreements and provide the services you request.
• Consent: For marketing communications and optional services, with the ability to withdraw consent at any time.
• Legitimate Interests: Such as preventing fraud, improving our platform, and maintaining the security of our systems.
• Legal Obligations: Compliance with applicable laws, tax reporting, and regulatory requests.

Where consent is required, we ensure it is freely given, specific, informed, and unambiguous.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes stated, or as mandated by law. Typical retention periods include:

• Account Data: Retained for the duration of your account activity plus a reasonable period after account closure.
• Transaction Records: Kept for several years to comply with tax and financial auditing regulations.
• Marketing Data: Maintained until you opt out of communications.
• Customer Support Records: Retained for internal quality control and resolution purposes.

When data is no longer needed, it is securely deleted or anonymized.

8. Data Security Measures

Protecting your data is fundamental. We implement technical and organizational safeguards including:

• Encryption: Protecting data during transmission and storage.
• Access Controls: Restricting data access to authorized personnel only.
• Secure Servers: Using firewalls and intrusion detection systems.
• Regular Audits: Conducting vulnerability assessments and penetration testing.
• Employee Training: Ensuring staff understand data protection responsibilities.
• Incident Response: Having procedures to detect, respond to, and mitigate data breaches.

We recommend users create strong passwords and monitor their accounts for suspicious activity.

9. Sharing and Disclosure of Personal Data

We do not sell or trade your personal data. However, data may be shared with trusted partners under strict confidentiality agreements for purposes such as:

• Payment Processing: Secure handling of transactions by certified providers.
• Shipping and Logistics: Sharing address and contact details with couriers for order delivery.
• Marketing Services: Platforms assisting in campaign management with your consent.
• Technical Support: Service providers helping maintain and improve our infrastructure.
• Legal Authorities: When required by law enforcement or court orders.

Third parties are obligated to adhere to data protection standards and use data solely for agreed purposes.

10. International Data Transfers

As our store operates globally, your data may be transferred to countries with different data protection regulations. In such cases, we ensure adequate safeguards are in place, such as contractual agreements and security measures, to protect your data rights regardless of location.

11. Your Rights

You have important rights concerning your personal data, including:

• Access: Obtain a copy of your data we hold.
• Correction: Request updates to inaccurate or incomplete information.
• Deletion: Ask for your data to be erased when no longer necessary.
• Restriction: Limit processing in specific scenarios.
• Objection: Object to direct marketing or processing based on legitimate interests.
• Data Portability: Receive your data in a structured format for transfer to another service.

Requests can be submitted via your account interface or by contacting our data protection team. We respond within legally mandated timeframes.

12. Cookies and Tracking Technologies

We use cookies and similar tools to enhance your shopping experience, analyze usage, and personalize content. You can control cookie settings through your browser or device preferences. Essential cookies are necessary for the store’s core functions, while others require your consent.

13. Children’s Privacy

Our store is not intended for children under the age of 13, and we do not knowingly collect personal data from minors without parental consent. If we become aware of such data, it will be promptly deleted.

14. Changes to This Policy

This Data Protection Policy may be updated to reflect changes in legal requirements, technology, or business operations. We encourage you to review it periodically. Continued use of our services after updates signifies acceptance of the revised policy.

15. Contact Information

If you have questions about this policy or your personal data, please contact our data protection officer at:

ControllerHub
Data Protection Office
West City, Catherine Street, Henderson, Auckland 0612, New Zealand
[email protected]

We are committed to protecting your privacy and addressing your concerns promptly.