DERVALYN LTD is a UK company operating across commerce, digital products, technology and games. We use personal information only for defined business, service, security and legal purposes. Optional analytics or marketing technologies on this website require your choice before they are enabled.
1. Who we are
DERVALYN LTD (company number 17470871) is the controller of personal information described in this policy when DERVALYN decides why and how that information is used.
Registered office: Suite 11220, 5 Brayford Square, London, United Kingdom, E1 0SG.
Privacy contact: privacy@dervalyn.com.
2. What this policy covers
This policy applies to this corporate website, the DERVALYN game catalogue and playable web pages, business communications, and DERVALYN-controlled digital products or services that link to this policy. A specific game, app, shop, platform integration or other product may provide an additional privacy notice where its data use differs from this general policy.
Third-party platforms such as app stores, social platforms, payment providers or game portals process information under their own privacy terms when they act independently from DERVALYN.
3. Personal information we may process
- Contact and enquiry information: name, email address, organisation, message content and related correspondence when you contact us.
- Customer and transaction information: order, billing, delivery, entitlement or support information where a DERVALYN service offers a direct transaction. Payment card details should normally be handled by the relevant payment provider rather than stored by this corporate website.
- Technical and security information: IP address, browser or device information, timestamps, request data, security events and server logs where generated by our hosting or security systems.
- Product and game information: gameplay events, device capabilities, crash or diagnostic information, account identifiers, preferences or progress only where a particular product actually uses those features and gives appropriate notice.
- Consent and preference information: your website privacy choices and any marketing preferences.
- Business administration information: supplier, partner, contractor or professional contact information needed to operate the company.
4. Why we use information and our lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Responding to enquiries, partnership discussions and support requests | Legitimate interests in communicating and operating our business; steps at your request before entering a contract where applicable |
| Providing a purchased or requested product or service | Performance of a contract; legitimate interests for business-to-business administration |
| Accounting, tax, regulatory and legal records | Legal obligation and legitimate interests in establishing or defending legal rights |
| Site, product and account security; fraud and abuse prevention | Legitimate interests in keeping our services, users and business secure; legal obligation where applicable |
| Optional analytics, advertising or similar non-essential technologies | Consent where required |
| Product improvement using limited, proportionate usage or diagnostic information | Legitimate interests, or consent where the law or the nature of the technology requires it |
Where we rely on legitimate interests, we consider the necessity of the processing and its impact on individuals. Where consent is our basis, you may withdraw it at any time without affecting processing that was lawful before withdrawal.
5. When information is required
Where a form, transaction or service marks information as required, we need that information to respond to your request, take steps at your request before entering into a contract, perform a contract, comply with a legal obligation, or provide the relevant feature or service. If you do not provide required information, we may be unable to process the request, complete the transaction or provide the relevant service.
6. Where information comes from
We usually obtain information directly from you, from your use of a DERVALYN-controlled service, or from technical systems needed to operate and secure that service. We may also receive business contact information from organisations you represent, service providers, public business sources, or a platform through which you use a DERVALYN product.
7. Cookies and similar technologies
The corporate website uses necessary browser storage to remember privacy choices. Public pages do not load non-essential analytics or marketing technologies by default in this release. If optional technologies are configured later, they must remain disabled until the required choice has been made.
See our Cookie Policy and use the control at any time.
8. Games, apps and third-party platforms
DERVALYN develops and publishes games and other digital products. A game may run on DERVALYN infrastructure or through an independent platform such as TikTok, YouTube, an app store or a game portal. Simply following a link from one of those platforms to a DERVALYN page does not make that platform part of this website. The platform may separately process account, device, advertising, purchase or usage information under its own privacy terms. Where DERVALYN itself collects additional information through a platform integration or game feature, we will provide or link to product-specific information where appropriate.
9. Children and younger users
Some games or online products may be likely to be accessed by people under 18 even when they are not specifically directed at children. We take a data-minimisation approach and assess age-appropriate privacy requirements for relevant services. Where the UK Children's Code applies, we aim to make the best interests of children a primary design consideration and use high-privacy defaults appropriate to the service.
For more information, see Children & Games Privacy.
10. Who we may share information with
We may share information only where reasonably necessary with categories such as hosting and infrastructure providers, professional advisers, payment or commerce providers, distribution platforms, customer-support or security providers, and public authorities where disclosure is required by law. We do not sell personal information as a business model.
When another organisation acts as our processor, we expect appropriate contractual and security safeguards. Where another organisation acts as an independent controller, its own privacy notice also applies.
11. International transfers
Technology and platform providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we use an available lawful transfer mechanism, such as UK adequacy regulations or appropriate contractual safeguards, and apply supplementary measures where appropriate.
To request further information about an international transfer safeguard, including a copy where available, contact privacy@dervalyn.com.
12. How long we keep information
We keep personal information only for as long as needed for the purpose for which it was collected, taking account of legal, tax, accounting, security and dispute-resolution requirements.
| Type | Typical approach |
|---|---|
| General enquiries and business correspondence | Normally up to 24 months after the last substantive contact, unless a continuing relationship or legal reason requires longer |
| Transaction, contract and accounting records | For the period required by applicable accounting, tax and legal rules, commonly longer than ordinary correspondence |
| Security and diagnostic logs | Kept for a limited period appropriate to security and troubleshooting, unless retained for an active incident or legal requirement |
| Consent and privacy preference records | For as long as needed to demonstrate and respect your current choice; website preference storage is refreshed periodically |
| Game or product data | As stated in the relevant product notice or for the minimum period necessary to provide the feature |
13. Your data protection rights
Depending on the circumstances, UK data protection law may give you rights to request access, rectification, erasure, restriction, portability, or to object to processing. You may also withdraw consent where processing is based on consent. Rights are not absolute and may depend on the legal basis and context.
Use our Privacy Choices page to see how to make a request. We may ask for proportionate information to confirm your identity before disclosing or changing personal information.
14. Your right to object
Where we rely on legitimate interests, you may object to that processing based on your particular situation. You may object at any time to processing of your personal information for direct marketing, where applicable. To exercise your right to object, use our Privacy Choices page or contact privacy@dervalyn.com.
15. Automated decisions and profiling
This corporate website does not make decisions producing legal or similarly significant effects about visitors using solely automated processing. If a DERVALYN product introduces such processing, we will provide the information and safeguards required by applicable law.
16. Security
We use technical and organisational measures intended to protect information against unauthorised access, loss, alteration or disclosure. No internet service can guarantee absolute security, so we also limit collection and access where practical.
17. Changes to this policy
We may update this policy when our services, technology or legal obligations change. We will update the date shown above and, where required, provide a more prominent notice before materially different processing begins.
18. Contact and complaints
For a privacy question or request, email privacy@dervalyn.com.
You also have the right to complain to the UK Information Commissioner's Office (ICO). We encourage you to contact us first so we can try to resolve the issue, but this does not affect your right to contact the ICO.