Effective date: 16 October 2025
Controller: N/A , trading as (t/a) Grand Royal UK Contact: dreamlandsteam@gmail.com.
EU/EEA Representative (GDPR Art. 27, if required): N/A
Data Protection Officer (if appointed): N/A.
This notice explains how we handle personal data for https://rust.grandroyal.uk/, our store, and our Rust servers, in line with the UK GDPR and the Data Protection Act 2018.
Account & Contact: username, email, purchase history, support requests.
Server & Technical: IP address, device/browser info, game/server identifiers, timestamps, crash logs, anti‑cheat and security events, limited gameplay telemetry for operations and fair‑play.
Payments: processed by [Stripe/PayPal/etc.] — we receive transaction metadata (amount, status, token/ID) but not full card numbers.
Cookies & similar tech: see §7.
From you (forms, checkout, gameplay), from your device (logs/cookies), and from third parties (payment, anti‑cheat, analytics).
Provide Services, purchases, support — contract.
Security, moderation, fraud/abuse prevention — legitimate interests.
Analytics & improvements — legitimate interests or consent where required.
Marketing communications — consent (withdraw anytime).
Legal compliance (tax/accounting) — legal obligation.
Service providers acting under contract and our instructions:
Hosting/Datacentre (Germany): [Provider]
DDoS/Anti‑cheat: [Provider]
Payments: [Stripe/PayPal/etc.]
Email/CRM: [Provider]
Analytics: [Provider]
Transfers between the UK and EEA may rely on adequacy decisions or appropriate safeguards such as EU SCCs and the UK IDTA/Addendum. Details available on request.
Account data: for the life of the account and [X months] after closure.
Server logs & security events: [7–30 days], unless needed for incident investigation.
Financial records: [6–10 years] for legal obligations.
Data is then deleted or anonymised.
We use strictly necessary cookies for core functionality and, with consent where required, analytics and marketing cookies. Manage preferences via [Cookie Settings link/button]. Non‑essential cookies are set only after opt‑in in regions requiring consent (e.g., UK and Germany).
Depending on your location, you may have rights to access, rectify, erase, restrict, object (including to profiling based on legitimate interests), and data portability. Where processing relies on consent, you can withdraw it at any time. You can complain to the UK ICO or your local EEA authority. Contact dreamlandsteam@gmail.com; we will verify identity and respond within statutory deadlines.
Not directed to children under 13. If we learn we collected data contrary to law, we will delete it.
We apply appropriate technical and organisational measures (access controls, encryption in transit, backups, monitoring, incident response). No system is perfectly secure; report issues to dreamlandsteam@gmail.com.
We will post updates here and change the effective date. Material changes may be notified in‑product or by email where appropriate.
Contact (privacy): dreamlandsteam@gmail.com,