PRIVACY POLICY INFORMATION NOTICE PURSUANT TO ARTICLES 13 AND 14 OF UK GDPR
Dear User,
in compliance with Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR), Chigu Holding Limited (doing business as Tabletop Junction) informs you about the processing of your personal data.
Who will process your personal data?
Your personal data will be processed by Chigu Holding Limited (hereinafter, also "Company" or "Tabletop Junction"), with registered office at 8 Richmond Court, Richmond Dale Bristol, Bristol, BS82UX, United Kingdom, which will act in quality of "Data Controller" for the purposes described below.
You can contact the Data Controller at the following email address: privacy@tabletop-junction.app.
Data Processors
Personal data can be processed in the name and on behalf of the Company also by other subjects who will be duly appointed "Data Processors", belonging to the following categories:
| Category of Data Processor | Specific Providers |
|---|---|
| Analytics & Error Reporting | PostHog, Sentry |
| Hosting & Cloud Services | Supabase |
How and why we will process your personal data?
Your data will be processed for specific purposes pertaining to different fields of activity, as legally required under the UK GDPR.
(i) Usage of the Mobile App "Tabletop Junction"
| PURPOSE | CATEGORIES OF PERSONAL DATA | PRINCIPLE OF LAWFULNESS (UK GDPR Article 6) | PERIOD OF STORAGE |
|---|---|---|---|
| Creating account, login, and profile management (Core Service) | Name, Email Address, Password (hashed) | Execution of a contract (Art. 6(1)(b)) | Up to the deletion of the account |
| Providing Location-Based Game Matching (Core Service) | Precise Geographic Location (GPS Data) | Execution of a contract (Art. 6(1)(b)) | Only for the duration required to process the location query. |
| Providing Real-time Chat and Game Management (Core Service) | Name, Email Address, User Content (Chat messages, Game details) | Execution of a contract (Art. 6(1)(b)) | Up to the deletion of the account |
| Digital Communications (Push Notifications) | Name, Technical Device ID | Execution of a contract (Art. 6(1)(b)) | Up to the withdrawal of the consent (managed in OS settings) |
(ii) App Maintenance and Improvement
| PURPOSE | CATEGORIES OF PERSONAL DATA | PRINCIPLE OF LAWFULNESS (UK GDPR Article 6) | PERIOD OF STORAGE |
|---|---|---|---|
| Analytics and User Behaviour Analysis (via PostHog) | Usage Data (Features clicked, Session duration, IP address) | Legitimate Interests (Art. 6(1)(f)) – Interest in service improvement. | As long as necessary for analysis, or up to account deletion. |
| Error, Bug, and Crash Reporting (via Sentry) | Technical Data (Device IDs, Crash logs) | Legitimate Interests (Art. 6(1)(f)) – Interest in proper and safe conduct of business activity. | Up to the end of the intervention/fix. |
| Maintenance, operation, and security of IT services | All your personal data | Legitimate Interests (Art. 6(1)(f)) & Legal Obligation (Art. 6(1)(c)) | Up to the end of the intervention. |
Data Provision and Transfer
Data Provision
In all cases where the Principle of Lawfulness is the Execution of a Contract (i.e., for the core functions of the App), the provision of your personal data is mandatory and necessary for us to deliver the service. Failure to provide this data would make it impossible to use the App.
Categories of Recipients
In addition to the Data Processors mentioned above, your personal data will be shared with:
- Other App Users: Your Name, Game Details, and Chat Messages are publicly visible to other users to facilitate the connection and communication required for the service.
- Legal and Regulatory Authorities: As required to comply with our legal obligations (Art. 6(1)(c)).
Transfers Extra UK
Some Data Processors (such as PostHog or Sentry) may use servers located in non-UK territory (e.g., the EU or the US). When transferring data outside the UK, we ensure the transfers are covered by an Adequacy Regulation or appropriate safeguards, such as Standard Contractual Clauses (SCCs), to maintain equivalent protection to that provided in the UK.
Data Retention and Deletion
Your personal data is stored until you ask for the removal of your account.
If you wish to exercise your right to erasure, you must send a request to privacy@tabletop-junction.app. We will process the deletion of all associated data unless we are legally required to retain certain information (for example, for tax or legal compliance).
Which are your rights?
Under the UK GDPR, you can exercise the following rights by sending a specific request to the Data Controller at the email address: privacy@tabletop-junction.app. We will process the deletion of
| RIGHT | UK GDPR ARTICLE | DESCRIPTION |
|---|---|---|
| ACCESS | Article 15 | The right to obtain confirmation as to whether or not your personal data is being processed, and access to that data and related information. |
| RECTIFICATION | Article 16 | The right to obtain the correction of inaccurate personal data and the completion of incomplete data. |
| ERASURE (Right to be Forgotten) | Article 17 | The right to obtain the erasure of your personal data when it is no longer necessary for the purposes collected or when you withdraw consent (where applicable). |
| RESTRICTION OF PROCESSING | Article 18 | The right to obtain the limitation of processing if the accuracy of the data is contested, the processing is unlawful, or if the data is required for legal claims. |
| OBJECTION | Article 21 | The right to object to processing that is based on public interest or legitimate interests (where applicable). |
| DATA PORTABILITY | Article 20 | The right to receive the personal data concerning you in a structured, commonly used, and machine-readable format. |
| COMPLAINT | Article 77 | The right to lodge a complaint with a supervisory authority, specifically the Information Commissioner's Office (ICO) in the UK. |