Privacy Policy

Privacy Policy

ZONE-RUSH.COM

Last updated: 12 January 2026

This Privacy Policy explains how INDIGO INTELLECT LTD (“we”, “us”, “our”) collects, uses, shares, and protects personal data when you use zone-rush.com and/or play.zone-rush.com and related services (the “Service”).

We aim to comply with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018, and (where applicable) the EU GDPR.

1. Who We Are (Data Controller) and How to Contact Us

Data Controller: INDIGO INTELLECT LTD
Company No.: 15605156
Registered office: 20 Wenlock Road, London, England, N1 7GU
Privacy/contact email: info@zone-rush.com

If you have questions about this Privacy Policy or want to exercise your rights, email info@zone-rush.com.

2. What Personal Data We Collect

We may collect the following categories of personal data:

2.1 Data you provide directly

• Account and profile data: username/nickname, email address (if used), password hash (never your plain password), profile settings.
• Support communications: messages you send to customer support, attachments/screenshots, and associated metadata.
• User Content (if enabled): chat messages, forum/community posts, feedback submissions (where such features exist).

2.2 Data collected automatically when you use the Service

• Device and technical data: IP address, device identifiers, browser type/version, operating system, language settings, time zone, and device characteristics.
• Usage data: pages/screens viewed, session duration, gameplay events/telemetry (e.g., progress, game state actions), crash logs, performance metrics.
• Approximate location: derived from IP (city/region-level), used for security, fraud prevention, and localisation.

2.3 Payment and transaction data

• Transaction metadata: purchase time, amount, currency, product purchased, payment status, chargeback/dispute status, and internal order identifiers.
• Limited payment instrument data: we generally do not store full card numbers. Payment details are processed by our payment service providers (PSPs). We may receive tokenised references and fraud signals from PSPs.

2.4 Data from third parties (where applicable)

• Authentication providers: if you log in via a third-party method, we may receive identifiers and basic profile data permitted by that provider.
• Fraud and risk data: signals and scoring from PSPs or anti-fraud vendors, to protect the Service and prevent payment abuse.

3. Why We Use Your Data

We use personal data to:

1. Provide and operate the Service
   1. create and maintain Accounts
   1. deliver digital content (Virtual Currency/Items)
   1. run gameplay features and in-game functionality
2. Process payments and prevent fraud
   1. process transactions, handle refunds
   1. detect suspicious activity, prevent chargeback abuse, comply with PSP requirements
3. Customer support and communications
   1. respond to requests, troubleshoot issues, notify you of account/security matters
4. Improve, secure, and maintain the Service
   1. analytics and product improvement
   1. bug fixing, performance monitoring, security testing
5. Legal and compliance
   1. comply with legal obligations (e.g., tax, accounting, lawful requests)
   1. enforce Terms & Conditions, investigate misuse, protect rights and users
6. Marketing (limited)
   1. where permitted by law and your preferences, we may send service updates or marketing communications. You can opt out at any time.

4. Legal Bases for Processing (UK GDPR / EU GDPR)

We rely on one or more of the following legal bases:

• Contract: to provide the Service and deliver Purchases you request.
• Legitimate interests: to secure the Service, prevent fraud, improve features, and maintain system integrity (balanced against your rights).
• Legal obligation: to comply with law (e.g., financial recordkeeping, responding to lawful requests).
• Consent: for certain cookies/trackers and for some marketing communications (where required). You can withdraw consent.

5. How We Share Personal Data

We may share personal data with:

1. Payment providers / acquirers / PSPs
   1. to process transactions, authentication (e.g., 3DS), fraud prevention, refunds, and dispute handling.
2. Service providers (processors)
   1. hosting and infrastructure providers
   1. analytics and performance monitoring providers
   1. customer support tooling providers
   1. security and anti-fraud vendors
3. Professional advisers
   1. legal, compliance, accounting, auditors (as needed)
4. Authorities and legal recipients
   1. law enforcement, regulators, courts, or other third parties where required or permitted by law
5. Corporate transactions
   1. if we undergo a merger, acquisition, reorganisation, or asset sale, personal data may be transferred as part of that transaction (subject to safeguards).

We do not sell personal data.

6. International Transfers

Our servers, PSPs, and service providers may be located in countries outside the UK/EEA. When transferring personal data internationally, we apply appropriate safeguards, which may include:

• UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs,
• EU Standard Contractual Clauses (SCCs) (where applicable),
• or other lawful mechanisms.

You may request further information on safeguards by contacting info@zone-rush.com.

7. Data Retention

We retain personal data only as long as necessary for the purposes described above, including:

• Account data: for as long as your Account remains active and for a reasonable period after closure to handle disputes, security, and legal obligations.
• Transaction records: typically retained for up to 6 years (or longer if required) for accounting, tax, and dispute resolution.
• Support tickets: retained for a reasonable period to improve support quality and maintain audit trails.
• Security logs: retained for limited periods appropriate to security needs.

We may anonymise or aggregate data for analytics, in which case it is no longer personal data.

8. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”) in certain circumstances
• Restrict processing in certain circumstances
• Object to processing based on legitimate interests
• Data portability (for data processed by automated means under contract/consent)
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with a supervisory authority

To exercise rights, email info@zone-rush.com. We may need to verify your identity before fulfilling requests.

Complaints

• UK: You can complain to the Information Commissioner’s Office (ICO).
• EEA: You can also complain to your local data protection authority (where EU GDPR applies).

9. Security Measures

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit where feasible, monitoring, and security review practices.

No system is perfectly secure. You are responsible for keeping your login credentials confidential and using strong passwords.

10. Children and Minors

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data, contact info@zone-rush.com and we will take appropriate steps.

For users aged 13–17, parents/guardians should supervise usage and Purchases.

11. Cookies and Similar Technologies

We use cookies and similar technologies for:

• essential site functionality,
• security,
• analytics/performance,
• and (where enabled) marketing.

Details and controls are provided in our Cookie Policy and cookie consent tools on the website.

12. Third-Party Links and Integrations

The Service may contain links to third-party sites or integrations (e.g., PSP pages). We are not responsible for third-party privacy practices. Please review their privacy notices.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the website and change the “Last updated” date. Continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

14. Contact

For privacy questions or rights requests: info@zone-rush.com