GDPR Rights and Data Protection
Last Updated: January 2025
1. Introduction
Express Alone Limited is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This page explains your rights under GDPR and how you can exercise them.
2. Data Controller Information
Data Controller: Express Alone Limited
Address:
25 Durham Street
Frankton, Hamilton 3204
New Zealand
Contact Email: support@expressalone.com
For any questions about how we process your personal data or to exercise your rights, please contact us using the details above.
3. Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:
3.1 Right to Access
You have the right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
How to exercise: Send an email to support@expressalone.com with the subject line "Data Access Request"
3.2 Right to Rectification
You have the right to request correction of the personal data we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected.
How to exercise: Contact us at support@expressalone.com with the details you wish to correct
3.3 Right to Erasure (Right to be Forgotten)
You have the right to request deletion of your personal data where:
- The personal data is no longer necessary for the purposes for which it was collected
- You withdraw your consent (where processing was based on consent)
- You object to the processing and there are no overriding legitimate grounds
- The personal data has been unlawfully processed
- The personal data must be erased to comply with a legal obligation
How to exercise: Send an email to support@expressalone.com with the subject line "Data Deletion Request"
3.4 Right to Restriction of Processing
You have the right to request restriction of processing of your personal data where:
- You contest the accuracy of the data
- The processing is unlawful but you do not want the data erased
- We no longer need the data but you need it for legal claims
- You have objected to processing pending verification of legitimate grounds
How to exercise: Contact us at support@expressalone.com explaining your reason for restriction
3.5 Right to Data Portability
You have the right to request transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
This right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
How to exercise: Send an email to support@expressalone.com with the subject line "Data Portability Request"
3.6 Right to Object
You have the right to object to processing of your personal data where:
- We are relying on a legitimate interest as the legal basis for processing
- Your personal data is being processed for direct marketing purposes
- Your personal data is being processed for scientific or historical research purposes
How to exercise: Contact us at support@expressalone.com explaining your objection
3.7 Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
We do not currently use automated decision-making processes that significantly affect our users.
4. How to Exercise Your Rights
To exercise any of your GDPR rights, please:
- Send an email to support@expressalone.com
- Include "GDPR Request" in the subject line
- Clearly state which right you wish to exercise
- Provide sufficient information to identify you
- Include any relevant details about your request
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of any such extension.
5. Withdrawing Consent
Where we process your personal data based on your consent, you have the right to withdraw that consent at any time.
To withdraw consent:
- For cookie consent: Use the cookie settings on our website
- For marketing communications: Click the unsubscribe link in any email
- For other consent: Contact us at support@expressalone.com
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
6. Cookie Management
You can manage your cookie preferences at any time:
- Click on the cookie settings button on our website
- Adjust your browser settings to block or delete cookies
- Contact us at support@expressalone.com for assistance
Please note that blocking certain cookies may impact your experience on our website.
7. Data We Collect
We collect and process the following categories of personal data:
- Identity Data: Name, username, age verification status
- Contact Data: Email address
- Technical Data: IP address, browser type, device information
- Usage Data: Information about how you use our website and services
- Gaming Data: Game preferences, playing history, achievements
8. Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: For cookies, marketing communications, and optional features
- Contract: To provide our services to you
- Legal Obligation: To comply with age verification and other legal requirements
- Legitimate Interests: To improve our services and ensure security
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Account data: Retained while your account is active
- Gaming data: Stored locally on your device, can be cleared anytime
- Contact information: Retained until you request deletion
- Legal compliance data: Retained as required by law
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Employee training on data protection
- Incident response procedures
11. Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Binding corporate rules
12. Third-Party Data Sharing
We may share your personal data with:
- Service providers who assist in operating our website
- Analytics providers to help us improve our services
- Legal authorities when required by law
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
13. Data Breach Notification
In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay.
We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
14. Children's Data
Our service is not intended for anyone under the age of 18. We do not knowingly collect or process personal data from children.
If you believe we have collected data from a child, please contact us immediately at support@expressalone.com
15. Your Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe we have not handled your personal data in accordance with GDPR.
In New Zealand, you can contact:
Office of the Privacy Commissioner
PO Box 10094, The Terrace
Wellington 6143, New Zealand
Phone: 0800 803 909
Website: www.privacy.org.nz
For EU residents, you can contact your local data protection authority.
16. Updates to This Page
We may update this GDPR rights page from time to time. Any changes will be posted on this page with an updated revision date.
We encourage you to review this page periodically to stay informed about your rights and how we protect your data.
17. Contact Information
For any questions about your GDPR rights or our data processing practices, please contact us:
- Email: support@expressalone.com
- Alternative Email: info@expressalone.com
- Contact Email: contact@expressalone.com
- Address: 25 Durham Street, Frankton, Hamilton 3204, New Zealand
We aim to respond to all inquiries within 48 hours.
18. Additional Resources
For more information about data protection and your rights: