Your information
Privacy Policy.
Clear information about the data we handle.
Last updated: 3 November 2026.
01. Who we are
IRVENZA LTD, company number 17548366, provides commissioned browser and mobile game development services under the Irvenza brand. Our registered address is 24 Pembroke Court Alma Street, Rochdale, Lancashire, England, OL12 0BF.
Contact us at [email protected] or +44 7700 900382. Website: irvenza.co.uk.
We are the controller for personal information used to manage our own enquiries and business relationships. This policy explains our approach under the UK GDPR and the Data Protection Act 2018, as amended.
02. Information we handle
When you contact us, we receive the information you choose to provide: your name, business contact details, organisation, correspondence, project briefs, contracts and client-supplied materials. Please avoid sending unnecessary personal information or sensitive data.
This website has no account registration, order checkout or online payment fields. Email and telephone links open your chosen communication service. We do not collect player data through this website. Analytics and personal-data processing inside any game we develop are defined separately for that project.
03. Purposes and lawful bases
- Contract: responding to steps you request before entering a contract and delivering services where you are a contracting party.
- Legitimate interests: handling business enquiries, communicating with client representatives, keeping proportionate project records and protecting our legal interests. We balance these interests against your rights.
- Legal obligation: keeping records required by law and responding to lawful requests.
- Consent: where we ask for permission for a specific optional use. You can withdraw it at any time by email, without affecting the lawfulness of earlier processing.
We do not use personal information for automated decisions or profiling that produce legal or similarly significant effects.
04. When we act as a processor
If a client asks us to process personal data on their behalf, the client determines the purposes and we act as a processor under documented instructions and an Article 28 UK GDPR agreement. That agreement sets the scope, confidentiality, security, approved subprocessors and assistance with data-subject requests.
Access to project data is limited to authorised people who need it. Storage, retention and secure return or deletion are agreed with the client. Requests concerning a client’s player data should go to that client as controller; we assist as required by our agreement.
06. International transfers
If personal information is transferred outside the UK, we will use a lawful transfer mechanism, such as applicable UK adequacy regulations or approved contractual safeguards, and assess additional protections where required. Contact us for information about safeguards relevant to your data. Client project transfers must also comply with the agreed processing instructions.
07. How long we keep information
We retain enquiry correspondence only while it is needed to respond, follow up and maintain a relevant business record. We review it when an enquiry closes and delete information no longer needed.
Contract and accounting records are kept for the periods needed to meet applicable legal obligations and manage legal claims. Project materials follow the retention and deletion schedule agreed in the contract. Where a legal hold applies, relevant records may be kept until it ends. You can ask us about the retention criteria for your information.
08. Security
We restrict access to authorised people, use appropriate account and access controls, and agree secure handling arrangements for project materials. Protection measures are proportionate to the data and the project. No method of transmission or storage can be guaranteed completely secure; please contact us if you suspect a data-security issue.
10. Your rights
Subject to the applicable conditions, you can request access, rectification, erasure, restriction and data portability. You can object to processing based on legitimate interests and withdraw consent where processing relies on consent. These rights are not absolute.
Email [email protected] to exercise a right. We may need proportionate information to verify your identity. We normally respond within one month; if a lawful extension or clarification is needed, we will explain it.
You may raise a concern with us and complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You do not have to contact us before making a complaint.
11. Age restriction
Our business services and this website are intended for people aged 18 or over acting for themselves or an organisation. We do not knowingly request personal information from children through this site. If you believe a child has provided information, contact us so we can take appropriate action. Age requirements for commissioned games are considered separately with each client.
12. Changes to this policy
We will update this page if our processing or legal requirements change and provide further notice where required. The date below identifies the latest revision.
Last updated: 3 November 2026.