Privacy Policy
What personal data PlexaRP holds about you, what we record while you play, who we share it with, how long we keep it, and the rights you have over it.
Last updated 12 October 2026
What changed
- 12 October 2026: new section 4.8 on news and event emails for RoleplayProject Balkan, which Phytoventures Ltd sends through its Partner Portal: double opt-in from Balkan UCP settings, in-game settings or our sign-up page, optional open and click counting with separate consent, Resend as our processor, how long we keep it, how to unsubscribe, and that the franchise partner never sees your email address. Matching rows in sections 7, 10 and 12.
- 11 October 2026: a named list of every company that handles your data for us, including Groq (AI), Intercom, proxycheck.io, ip-api.com, Discord, Telegram, Cloudflare, Tebex, Hetzner, Cfx.re, CrowdSec and ElectronAC, with where they are (sections 10 and 11). SonoranCAD is removed because we do not use it.
- New section 5 on what is recorded while you play: anti-cheat screen capture, report screenshots, chat and text logging (including copies in private staff Discord channels), CCTV replays and connection checks.
- New section 6 on AI: the AI characters in the city and what they remember, our support, ticket and report assistants, staff tools and the website assistant.
- A lawful basis for each purpose (section 7), honest retention periods (section 12) and how account deletion now works (section 12a).
- Marketing emails now need your opt-in (section 4.7). Age checks (section 8) and your rights and the ICO route (sections 15 and 16) are clearer.
1. Who we are
Phytoventures Ltd runs PlexaRP and is responsible for your personal data.
PlexaRP is run by Phytoventures Ltd, registered in England and Wales (company number 16388003), registered office Belmont Suite, Chorley New Road, Horwich, Bolton, England, BL6 6HG (“we”, “us”). We are the controller of the personal data described here, which means we decide how and why it is used. Our ICO registration number is ZC041842.
This policy covers everything that makes up PlexaRP: our English and Balkan game servers on FiveM, plexarp.com, the UCP (ucp.plexarp.com and bucp.plexarp.com), Lifeinvader, Backstage, Rigged, the wiki, Zombiez, the bug portal, our forums and radio, our Discord and Telegram bots, the developer API and our support channels (the “Service”). We follow the UK GDPR and the Data Protection Act 2018.
2. How to contact us
One address for anything about your data. You do not need an account.
Email [email protected] about your data or this policy, or write to Phytoventures Ltd at the address above. You do not need an account to contact us, and being banned does not stop you making a request.
3. The short version
The main points, before the detail.
- We collect what we need to run your account and the game, keep it fair and safe, and handle support.
- We record a lot while you play: chat, texts, trades, CCTV in the city and anti-cheat data. Staff use it to investigate reports and cheating. Section 5 lists all of it.
- Most of our AI runs on our own servers. Two features send data to Groq in the US: our website and UCP support assistant, and one staff investigation tool (section 6).
- We never sell your data and we do not use advertising trackers.
- We send news and event emails only if you opt in.
- You can download your main account data, ask for everything we hold, and delete your account.
4. What we collect
The kinds of personal data we hold, and where they come from.
4.1 Account and identity
- username, email address, password (stored as a hash), two-factor and passkey data, trusted devices;
- your characters’ names and details;
- accounts you link: Discord (ID, username, avatar and sign-in tokens), Telegram (ID and username) and Spotify;
- your confirmation that you are 18 or over, when you gave it, and the version of the Terms you accepted.
4.2 Connection and device data
- IP address, connection times, and your FiveM licence identifiers (the game’s “hardware ID” and “serial” fields hold these, not real hardware identifiers);
- approximate location (country, region and city) worked out from your IP address on our own servers, using a local database. It is only an estimate;
- whether your connection comes from a VPN, proxy or data centre. To check this, we send your IP address to proxycheck.io when you sign up, log in, apply or verify your Discord;
- browser and device details, crash logs and performance data.
4.3 Gameplay, community and economy records
- what your characters do and own: inventories, money, vehicles, properties, jobs and progression;
- the item ledger (every item created, moved, traded, sold or destroyed and the accounts involved), trades, Market listings, items bought with RP points, match insurance and provably fair records for Zombiez cases;
- linked-account checks for trades, which compare FiveM licence identifiers and IP addresses across current and 90-day login history;
- posts, messages, profiles and uploads on Lifeinvader, Backstage, the forums and the UCP;
- reports, tickets, appeals, warnings, jails, bans and staff notes about your account.
4.4 Payments
RPP+ is paid for through Tebex, which handles your card or payment details. We receive your username, what you bought, the amount, the date, a reference and when your subscription renews or ends. We never receive your full card details. We also keep records of older payments made through the UCP card checkout (Revolut), PayPal and Telegram Stars, all now closed, and a record that you agreed to RPP+ starting straight away at checkout.
4.5 Age checks
If we ask you to verify your age, see section 8.
4.6 Support
Your tickets, reports, emails and any files you attach. If we add live chat to our website, we will keep your name, any email address you give, the conversation and a scrambled (one-way) form of your IP address used only to stop abuse, and the chat is copied into our private staff support channels in Discord.
4.7 Marketing preferences and consent records
We send news, event and offer emails only if you tick the box to receive them, at sign-up or in your UCP settings. You can unsubscribe at any time from the link in every email or in Settings. We keep a record of each choice you make (what you agreed to, the wording, when, and the IP address used) so we can show we had your permission. Service emails, such as security alerts, support replies, receipts, RPP+ renewal reminders and changes to these documents, are not marketing and are sent whatever you choose.
4.8 News and event emails for RoleplayProject Balkan
News and event emails for players of our Balkan server, RoleplayProject Balkan, are sent by Phytoventures Ltd on behalf of the Balkan franchise partner, through our Partner Portal. We are the controller for these emails, as for the rest of this policy: we hold the list and the consent records and decide how emails are sent. The franchise partner writes the emails and picks which groups of players get them, and we check its first email and any large send. The franchise partner never sees your email address or any other personal data for this; it only sees totals, such as how many people an email went to.
- What we use: your email address, your opt-in record (what you agreed to, the exact wording, when, where, and the IP address used), and, to decide whether you fall into a group the partner picked, when you joined and the date you last played (for example “played in the last 30 days”). Nothing else about your account is used.
- Lawful basis: your consent (UK GDPR Article 6(1)(a) and the Privacy and Electronic Communications Regulations 2003). We keep consent records and the unsubscribe list to show we had consent and to make sure we never email you after you say no.
- Double opt-in: when you switch these emails on in your Balkan UCP settings, in the in-game /settings, or on the sign-up page at phytoventures.net/portal/p/balkan/emails, we email you a confirmation link (valid for 72 hours) and only start once you press it. If you ticked the news emails box when you created your Balkan account, that tick counts as your opt-in.
- Opens and clicks: only counted if you tick a separate box on the sign-up page. Then the email has a tiny image that tells us when it was opened, and links pass through our server so a click can be counted. We record the time, not your IP address or device. Opt-ins from the UCP or the game are never counted this way.
- Resend sends these emails for us as our processor (section 10): it receives your address and the email, and tells us whether it was delivered, bounced or marked as spam.
- How long: addresses given on the sign-up page are kept encrypted while you are subscribed and deleted when you unsubscribe (or after 7 days if you never confirm). For each email sent, the address is kept encrypted only until it is sent, then wiped. Consent records and the unsubscribe list (a one-way code of your address) are kept as long as we need them to honour your unsubscribe and show we had consent.
- Stopping them: use the one-click unsubscribe link in any email, switch them off in your Balkan UCP settings or in game, ask on the sign-up page, or email [email protected]. It takes effect straight away, including for an email that is already going out, and both the Partner Portal and your account show you as unsubscribed. The Phytoventures privacy policy (phytoventures.net/privacy, section 7) covers the same emails for people who sign up without a game account.
5. What is recorded while you play
Running a fair, safe roleplay city means recording a lot. This is all of it, and you cannot switch it off.
5.1 Chat and commands
We log text chat and commands, including /me, /do, out-of-character chat (/b and OOC) and private messages (/pm), with the time and your character’s location. Staff use the logs to investigate reports. Copies of chat and text messages are also kept in private, staff-only channels in our Discord so staff can search them. Other players who were near you can read the lines they could see at the time on their UCP for 30 days, so they can look back over a scene. This includes out-of-character lines they could see.
5.2 In-game texts
In-game phone texts are stored so your phone works. A copy of each text (who sent it, both phone numbers and the first 100 characters) is posted to a private staff channel in our Discord. If a text cannot be delivered because the recipient is offline and has linked Discord, it is sent to them as a Discord direct message.
5.3 Anti-cheat (ElectronAC)
On our English server we use ElectronAC, a third-party anti-cheat run by Electron Services. While you are connected it checks your game client for cheats. Depending on the settings we choose in ElectronAC’s dashboard, it can take screenshots of your screen, read text shown on your screen to look for known cheat menus, record short video clips of your screen, and stream your screen to staff live. ElectronAC also looks up the approximate location of your IP address using ip-api.com. Only authorised staff can see this data, and we use it only to investigate cheating and handle appeals. ElectronAC is not used on our Balkan server.
5.4 Reports
When you send a report with /report, the game takes a screenshot of your screen and attaches it to the report, with your position, the players near you and recent nearby chat, so staff can see what happened. The report text and the names involved are also sent to Intercom, which we use to handle reports (section 10).
5.5 CCTV in the city
In-game CCTV cameras record the positions, outfits and vehicles (including plates) of characters in view. “Audio” cameras also record up to 240 characters of what is said nearby and /me text. Players and staff with access can replay footage. Raw footage is deleted after 7 days. Clips that someone saves, for example as evidence, are kept until they are deleted.
5.6 Automated abuse checks
A tool running on our servers scores private messages (/pm), some out-of-character chat (/b) and the Zombiez lobby for abuse. Messages it flags are posted to a private staff channel in our Discord for a person to review. In our Discord servers, a similar tool deletes messages it scores as very likely abusive and may time the sender out (section 14).
5.7 Our Discord servers
In our Discord servers, and in the faction Discord servers where our bot is present, our bot logs messages, edits and deletions for moderation.
5.8 Connection checks
If you open a support ticket about not being able to connect, our Discord bot can run a connection check. It looks at your recent connection history on both servers (times, approximate location and whether the connection worked), our firewall and CrowdSec blocks, our VPN checks and the game server log, then posts a summary with your IP address masked and a fuller note for staff. If your Discord is not linked to an account, it may ask you to share your IP address through a private form in the ticket. If it finds our firewall blocked you by mistake, it can lift the block on its own. We will never ask you to post your IP address in a public channel.
5.9 No opt-out
You cannot turn this recording off, because we need it to keep the city fair and safe. The settings that hide chat channels only change what you see on your own screen.
6. AI and automated assistants
Where we use AI, what it sees, and where it runs. Most of it runs on our own servers.
- AI characters in the city, such as Marcus Vale, the bartender. They run on our own servers. They keep the last 40 messages of each character’s conversation with them, plus short notes of facts your character has told them, so they can recognise regulars. These are kept while your character exists.
- Our support assistant on the website and the UCP answers general questions. Your question and the last few messages are sent to Groq in the US to produce the answer. We store the conversation with your account ID (if you are signed in) and IP address.
- The ticket assistant in Discord and the Report Assistant in game run on our own servers. They read the records needed to answer, such as your characters, recent transactions and warnings. They may answer first, move a stuck character, deliver your own vehicle, or close a report if you do not reply within 10 minutes. Ticket assistant replies are marked as automatic. You can ask for a person at any time.
- Staff tools. Staff use AI to help search records during investigations. Most of these tools run on our own servers, including one that looks at login records, IP addresses and licence identifiers. One UCP staff tool sends a player’s chat logs, nearby chat, positions, deaths and reports to Groq in the US to summarise them. Our Discord staff assistant can search the web through DuckDuckGo, which receives only the search words. Staff make the decisions.
- Applications. An assistant on our own servers scores some faction, starter and allowance applications in Discord, and may decide them (section 14).
- Management tools. Our management uses AI tools from Anthropic (US) to help run the Service. When needed, these can look up account records, including email and IP address.
7. Why we use your data (lawful bases)
The law requires a reason for each use. Here is ours.
| What we do | Lawful basis |
|---|---|
| Run your account, the game, your characters, the economy and support | Contract: we need it to provide the Service you signed up for |
| Sell and manage RPP+, including renewal reminders | Contract; legal obligation for tax and accounting records |
| Moderation and safety: chat and text logging, staff Discord copies, CCTV, reports and screenshots, abuse scoring, Discord logging, linked-account checks | Legitimate interests: keeping the community safe and fair, and enforcing our rules |
| Anti-cheat (ElectronAC), VPN checks, firewall and connection checks | Legitimate interests: preventing cheating, attacks and ban evasion. Reading information on your device for anti-cheat is strictly necessary for the game you asked to play |
| Age checks | Section 8 |
| AI characters and support assistants | Legitimate interests: making the city feel alive and answering questions quickly |
| Service emails (security, support, receipts, policy changes) | Contract; legitimate interests in running your account |
| News and event emails, including RoleplayProject Balkan emails sent through the Partner Portal (section 4.8) | Consent, which you can withdraw at any time |
| Analytics cookies on plexarp.com | Consent (Cookie Policy) |
| Improving the Service, including when our players are online, in aggregate | Legitimate interests: making the game better |
| Records of terms acceptance and consents | Legal obligation to show we are accountable; legitimate interests |
| Keeping ban records after a banned account is deleted | Legitimate interests: stopping ban evasion, and defending legal claims |
| Responding to the police, regulators and legal claims | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against your rights. You can object (section 15). We will stop unless we have a compelling reason to continue, such as investigating cheating or abuse.
8. Age checks and sensitive data
We only check ID if we have reason to. When we do, we never see your documents.
The Service is for adults. At sign-up and on our website you confirm you are 18 or over, and we record when. We do not ask for ID to join. If we have reason to think an account may belong to someone under 18, or the law requires it, we ask the account holder to complete an age check with Didit (didit.me). You can also choose to verify at any time.
Didit scans your ID document and takes a short selfie to check it is really you, on its own website. Didit processes that document and face data, which is special category data, under its privacy policy. We never receive your document, photo, name, date of birth or face data. We receive and keep only the check’s reference, the date, and whether you were approved or declined, while your account exists. To link the result to your account, we give Didit an internal reference number and nothing else.
Lawful basis. We carry out age checks to protect children and to meet our duties under the Online Safety Act 2023. That is in our legitimate interests (UK GDPR Article 6(1)(f)), and for the face check it is in the substantial public interest of safeguarding children (Article 9(2)(g), with Data Protection Act 2018, Schedule 1, paragraph 18). We keep an appropriate policy document for this processing, which you can ask to see.
If you are declined. Staff cannot remove a check request once it has been made. If Didit declines you and you think that is wrong, email [email protected]. A person will review your case, arrange another way to prove your age where possible, and reply within 14 days.
We do not otherwise ask for sensitive data such as health or beliefs. Please do not send it to us unless it is needed for a support or safety issue.
9. Cookies
The cookies we set, and the analytics you can say no to, are in the Cookie Policy.
Our Cookie Policy lists every cookie and storage key we use. Google Analytics runs on plexarp.com only if you choose Accept all.
10. Who we share data with
Every company that handles personal data for us, what they get, and where they are.
10.1 Companies that work for us
| Company | What for | What they receive | Where |
|---|---|---|---|
| Hetzner Online | Hosting all our servers and databases | All the data we hold | Finland (EU) |
| Cloudflare | Website security and delivery | IP address and request details for our websites | Worldwide, including the US |
| Discord | Our community, support tickets, staff logs and photo storage | Discord ID and username, ticket messages, copies of chat and text logs, flagged messages and connection-check notes in private staff channels, undelivered texts sent to you, and photos taken with the in-game phone | US |
| Telegram | Our Telegram bot, if you link it | Telegram ID, username and the alerts and sign-in codes you choose | Worldwide |
| Groq | The website and UCP support assistant, and one staff investigation tool (section 6) | Your questions and recent messages; for the staff tool, a player’s chat logs, nearby chat, positions, deaths and reports | US |
| Intercom | Handling in-game reports | Report text, the reported name, your username and character name | US |
| proxycheck.io | Checking for VPNs and proxies at sign-up and login | IP address | Outside the UK |
| Electron Services (ElectronAC) | Anti-cheat on the English server | Game identifiers, IP address, screen captures and detection data (section 5.3) | Outside the UK |
| ip-api.com | Approximate IP location for ElectronAC | IP address | Outside the UK |
| CrowdSec | Blocking attacks on our servers | IP addresses of connections that look like attacks | France (EU) |
| Cfx.re (FiveM) | Running the game platform | FiveM identifiers and your connection to our servers | Outside the UK |
| Tebex | Selling RPP+ | Your order, username and payment, which Tebex takes directly from you | UK |
| Didit | Age checks, when needed | Your ID document and selfie, which you give to Didit directly (section 8) | EU |
| Resend | Sending our emails, including news and event emails for RoleplayProject Balkan (section 4.8) | Your email address, the email, and whether it was delivered, bounced or marked as spam | US company, EU servers |
| Proton | Our email inboxes, including [email protected] | Emails you send us | Switzerland |
| Website analytics (only if you accept) and fonts on the UCP | Analytics cookie IDs and pages viewed; IP address when fonts load | US | |
| DuckDuckGo | Web searches by our staff assistant | The search words only | US |
| Anthropic | AI tools our management use to run the Service | Account records looked up when needed, which can include email and IP address | US |
| Spotify | Music features, if you link your Spotify account | The link between your accounts and what you choose to play | Sweden (EU) |
Our forums, radio site, AI models and most of our tools run on our own servers, so they do not appear above.
10.2 Other players
Other players see your characters, what they say and do in the city, and what you post publicly. Players near you can read the chat lines they could see for 30 days on the UCP (section 5.1). Your UCP profile and Lifeinvader profile show what you choose to make public.
10.3 Apps and sites you sign in to
If you sign in to another site or app with your PlexaRP account, we show you what it will receive before anything is shared: always your username and account ID, and your email address only if you agree. That site or app is then responsible for how it uses your data. Our own forums and radio site receive your username and email address so your accounts stay linked.
10.4 Authorities and advisers
We share data with the police, regulators or courts where the law requires or allows it, for example to report child sexual abuse material or threats to life. We may share data with our legal and professional advisers, and with a buyer if the business is sold.
We never sell personal data.
11. Transfers outside the UK
Some of the companies above are in the US or elsewhere. Here is how your data is protected.
Our servers are in Finland, which the UK treats as giving adequate protection. Where a company above is in the US, we rely on the UK Extension to the EU-US Data Privacy Framework for companies certified under it, or on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. For other countries we rely on UK adequacy regulations where they exist, or on those same contracts. You can ask us for details of the safeguard for any transfer.
12. How long we keep data
Some data has a fixed period. Much of it does not yet: until it does, it stays until you delete your account.
| Data | How long |
|---|---|
| Account details, characters, items, money and properties | While your account is open. Deleted when you delete your account (section 12a). |
| Chat logs, private messages, in-game texts and their copies in our staff Discord | No fixed period yet. Kept while your account exists. |
| Login and connection history (IP address, approximate location, licence identifiers) | No fixed period yet. Kept while your account exists. |
| Reports, screenshots, appeals, warnings and staff notes | No fixed period yet. Kept while your account exists, and while a ban stands. |
| CCTV footage | 7 days. Saved clips until they are deleted. |
| AI assistant conversations and AI character memory | No fixed period yet. Kept while your account or character exists. |
| Support tickets | No fixed period yet. Kept while your account exists. |
| Payment records | 6 years after the end of the financial year they belong to, for tax law. |
| Ban records of a banned account | While the ban stands, even if the account is deleted (section 12a). |
| RoleplayProject Balkan news emails (section 4.8) | Sign-up page addresses: while subscribed, or 7 days if unconfirmed. Addresses in send records: until sent. Consent records and the unsubscribe list: as long as needed to honour your unsubscribe. |
| Website server logs | 14 days. |
| Database backups | Encrypted. Daily copies for 14 days, weekly copies for 8 weeks, then deleted. |
We are working on fixed periods for the records marked “no fixed period yet”, and will publish them here when they are in place. Data held by Discord, ElectronAC, Didit and the other companies in section 10 is also subject to their own retention rules.
12a. Deleting your account
You can delete your account at any time. After a 10-day safety window, your data is deleted or made anonymous, apart from a few records the law or a ban requires us to keep.
Request deletion from ucp.plexarp.com/settings, or email [email protected].
The 10-day window
If your account is not banned, deletion waits 10 days, to protect you from mistakes, hacked accounts and pressure from others. You can cancel by signing in during that time. Nobody, including staff, can shorten it. We email you when deletion is scheduled and when it is done. If your account is banned, deletion happens straight away.
What happens
- Deleted: your account details (username, email, password, two-factor and passkey data, trusted devices), your linked Discord, Telegram and Spotify accounts (we also revoke our Discord access with Discord), your characters and everything they own, your login history, your private messages and texts, your posts and uploads, your support tickets, your settings and your consent records.
- Made anonymous: records that belong to someone else, or are part of the city’s shared history, where you only appear: for example the other side of a bank transfer, a police report another player wrote, or a chat scene with other players. We remove your name and account from them, so they no longer identify you.
- Returned to the city: properties and businesses you owned go back on the market.
- Kept: payment records for 6 years for tax law, with only what tax needs; a record that a deletion happened, with no name, email or IP address; and the record of any data protection request you made.
Your account becomes an empty placeholder with no personal data, so the rest of the city’s records still work. If any part of a deletion fails, the whole deletion is undone, retried and checked by staff, rather than being marked as done.
Banned accounts
If your account is banned when it is deleted, we keep your username, email address, the IP address and licence identifiers recorded against the ban, the ban details, and the moderation records about the ban, for as long as the ban stands. We use them only to stop ban evasion and to deal with any appeal or legal claim. Our legal bases are UK GDPR Articles 6(1)(f) and 17(3)(e), and Data Protection Act 2018, Schedule 2, paragraph 5. You can still appeal the ban (Terms, section 14a).
Backups and other copies
Backups are deleted within 8 weeks, so a deleted account is gone from them by then. We do not restore individual accounts from backups. Messages that other players received from you, and copies in our private staff Discord channels, may remain until they are deleted under section 12.
13. Security
How we protect your data.
We use access controls so staff see only what their role needs, logs of staff access, encrypted connections, hashed passwords, encrypted backups, firewalls and attack blocking. No system is perfectly secure, so please use a strong password and two-factor sign-in. If a breach puts you at high risk, we will tell you.
14. Automated decisions
Some decisions are made by our systems without a person deciding first. You can ask for a person.
These can affect you without a person deciding first:
- Item hand-backs between accounts. If an item is handed back within 7 days between two different accounts, the second offence jails the character for 3 hours and removes the item, and the third bans the account permanently.
- Trades between linked accounts are blocked (section 4.3).
- Discord moderation. Messages scored as very likely abusive are deleted, and the sender may be timed out for up to 60 minutes.
- Sign-up and login checks. Connections from VPNs, proxies and data centres may be blocked, and our firewall may block addresses that look like an attack.
- Applications. Some faction, starter and allowance applications are decided by an assistant when it is confident enough, and some are approved automatically.
- Reports and tickets. An assistant may close a report if you do not reply within 10 minutes. You can reopen it.
- Age checks. Didit approves or declines a check (section 8).
If any of these affects you, you can ask for a person to review it, explain your side and challenge the outcome, through an appeal on the UCP, a support ticket, or [email protected]. Staff can reverse any automated action. The Terms of Service (section 14a) explain how appeals work.
15. Your rights
What you can ask us to do with your data, and how.
You have the right to:
- get a copy of your personal data;
- have inaccurate data corrected;
- have your data deleted (section 12a);
- have us restrict how we use your data;
- object to how we use it where we rely on legitimate interests, and to marketing at any time;
- receive data you gave us in a format you can take elsewhere;
- withdraw consent at any time, where we rely on consent;
- have a person review an automated decision (section 14); and
- complain to us and to the Information Commissioner’s Office (section 16).
To use any of these rights, email [email protected]. You do not need an account, and being banned does not stop you. We may ask you to prove who you are. We reply within one month, or tell you within that month if we need up to two more months for a complex request.
You can download a copy of your main account data from your UCP settings at any time. That download does not include everything, such as chat logs and messages. If you want everything we hold, email us.
16. Complaints
Tell us first if you can. You can always go to the ICO.
If you are unhappy with how we have handled your data, email [email protected]. We will acknowledge your complaint within 30 days, look into it and tell you the outcome.
You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, by phone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. If you live in the EU, you can also complain to the data protection authority where you live.
17. Adults only
The Service is for people aged 18 and over.
The Service is for adults only and is not designed for children. We do not knowingly collect data from anyone under 18. If we have reason to think a player is under 18, we ask them to complete an age check (section 8). If they are under 18, we close the account, delete their data as section 12a describes, and refund the unused part of any RPP+ month. If you think a child is using the Service, tell us at [email protected].
18. Changes to this policy
We will tell you about important changes.
We update this policy when the Service or the law changes. We show what changed at the top of this page. If we make an important change to how we use your data, we will tell you by email or on the UCP before it takes effect.
19. Contact
How to reach us about your data.
Phytoventures Ltd, registered in England and Wales, company number 16388003
Registered office: Belmont Suite, Chorley New Road, Horwich, Bolton, England, BL6 6HG
ICO registration number: ZC041842
Data protection: [email protected]
General: [email protected]