At spotcuepuzzle, accessible from www.spotcuepuzzle.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by spotcuepuzzle and how we use it.
This Privacy Policy applies strictly to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in spotcuepuzzle. This policy is formulated in accordance with the European General Data Protection Regulation (GDPR), the Australian Privacy Act 1988, and standard international digital commerce merchant compliance requirements.
1. Data Controller
For the purposes of the GDPR and applicable international data protection laws, spotcuepuzzle is the independent and sole Data Controller of your personal information. We operate as a direct-to-consumer, self-operated brand. Our registered corporate details are as follows:
Brand / Operator: spotcuepuzzle
Website: www.spotcuepuzzle.com
Registered Address: Suite 302, 13/15 Wentworth Ave, Sydney NSW 2000, Australia
Telephone Contact: +61 282756767
Data Protection Email: difference@spotcuepuzzle.com
2. Age Restriction & Minimum Age Threshold
To access our desktop online “Spot the Difference” puzzle game packages and to ensure standard financial security framework compliance, you must be at least 18 years of age to create an account, purchase packages, or use this website.
We do not knowingly collect or solicit personal identifiable information from children under the age of 18. If we discover or are notified that a person under 18 has provided us with personal data or executed a financial transaction without verifiable parental consent, we will immediately terminate the account, erase all associated data from our servers, and restrict access in accordance with global consumer protection regulations.
3. Information We Collect and How We Use It
We collect personal data necessary to provide our digital puzzle services, manage accounts, and secure transactions. This includes:
Identity & Account Data: Email address, account username, and password created by you.
Transaction & Access Data: Records of the puzzle game packages you have unlocked, purchase history, and technical access logs for desktop browser compatibility.
Technical & Device Data: IP address, browser type, operating system, and session data to optimize gameplay performance, enhance platform security, and prevent unauthorized service abuse.
4. Third-Party Payment Processing
All financial transactions on our platform are handled securely through our designated third-party payment gateway provider: Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.).
To complete a purchase, you will provide your credit card or payment credentials directly to Stripe. spotcuepuzzle does not store, view, or process your full credit card numbers or sensitive CVV codes on our own servers.
Stripe collects, utilizes, and stores your financial information under its own independent privacy practices. Stripe will process your personal transactional data in accordance with the GDPR and PCI-DSS (Payment Card Industry Data Security Standard) requirements to ensure transaction security and prevent fraudulent activities.
5. Data Retention Period
In accordance with GDPR minimization principles and Australian statutory financial frameworks, we only retain your personal data for as long as necessary to fulfill the specific purposes we collected it for:
Account Data: Retained as long as your spotcuepuzzle player account remains active. If you request account erasure, your account data will be deleted or permanently anonymized within 30 days.
Financial and Transactional Logs: Financial transaction logs transmitted via Stripe, purchase histories, and invoices are retained for a minimum mandatory period of 7 years. This retention is strictly required to comply with statutory legal obligations, corporate tax compliance, financial accounting directives, and global transaction verification standards under both Australian corporate tax laws and European revenue frameworks.
Technical Logs: Server communication logs and access records used for security monitoring and game error resolution are retained for no longer than 90 days.
6. Your Data Protection Rights (GDPR & Privacy Act)
We want to ensure you are fully aware of all of your data protection rights. Every European and global user is entitled to the following:
The Right to Access: You have the right to request copies of your personal data from us.
The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
The Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data, subject to legal retention overrides (such as mandatory tax and financial transaction records).
The Right to Restrict/Object to Processing: You have the right to object to or restrict our processing of your personal data under certain operational conditions.
The Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you.
7. Contact and Exercising Your Rights
If you have additional questions, wish to exercise any of your data privacy rights, or require support regarding your personal information, please contact our Data Protection Team directly via email at difference@spotcuepuzzle.com. We will respond to and address your request within 30 days as mandated by international legal frameworks.