policy

Last updated: 16th August, 2025

This Privacy Policy explains how Cubed Events Limited (“we”, “our”, “us”) collects, uses, and protects your personal information in connection with Cubed 2025 and related services. By using our website or purchasing a Cubed Events Limited package, you agree to the practices described here.

Part A – Consent to Data Processing

1. By agreeing to this Privacy Policy, you consent to the lawful and fair processing of:
   • Personal data submitted in any form on our website,
   • Technical data such as pages visited, visitor numbers, session duration,
   • Age information (where required),
   • Identifiers including in-game names, IP addresses, and cookies.
2. Cubed Events Limited acts as a data controller and processes this data for the purposes of:
   • Fulfilling contractual and statutory duties,
   • Delivering our digital services and the Cubed convention,
   • Responding to enquiries or complaints,
   • Marketing future Cubed events,
   • Informing you of promotions or offers relevant to Cubed.
3. Automated services used for processing may include third-party providers. These services:
   • Are run by authorised processors,
   • Securely retrieve and store submitted data,
   • Do not make final legal decisions without human review,
   • May require staff oversight or intervention.
4. By using our services you also confirm:
   • If under 16, you have obtained parental consent,
   • You agree to Stripe’s terms when making purchases through their payment system,
   • Stripe acts as a separate data controller for payment data, with Cubed Events Limited acting as a processor of data passed from Stripe,
   • You will provide accurate and up-to-date information (age, email, organisation),
   • You consent to the use of trusted third-party analytics providers (e.g. Google Analytics, Hotjar) and authorised Cubed Events Limited staff (“data handlers”).
5. Cubed Events Limited will not sell, rent, or share your personal data with third parties beyond the processors named above, except where required by law. Sensitive categories of data (e.g. political views, religion, sexual orientation) will never be requested.
6. You may withdraw consent at any time by contacting our Data Protection Team (see Part C).

Part B – General Information

7. This policy explains your rights under the UK GDPR and Data Protection Act 2018, our responsibilities, and your options if you have concerns.
8. You have the right to object to processing, including where you withdraw consent. Cubed Events Limited will only continue processing where we can demonstrate legitimate grounds that override your rights.
9. Personal data will normally be retained for up to two years after the Convention ends, unless required longer by law.
10. Your enforceable rights (see Part D) include access, rectification, erasure, and restriction of your personal data. Remedies and complaints are explained in Part E.
11. If we update this Privacy Policy, the revised version will be posted on our website with the new effective date. Continuing to use our services after the update means you accept the changes unless you notify us of consent withdrawal.
12. Cubed Events Limited is not responsible for data entered into third-party websites, forms, or clients. Data will not be transferred outside the UK/EU unless lawful safeguards exist.

Part C – Identity of Data Controllers

13. The Directors of Cubed Events Limited act as senior data controllers for all personal data processed.
14. For GDPR enquiries, please contact our Data Protection Team at gdpr@cubedcon.com
15. Other authorised staff may act as “data handlers” under strict confidentiality agreements.
16. Cubed Events Limited acts as:

• Controller for the primary data listed in Part A,
• Processor for payment data transferred from Stripe.

17. We will respond to all data protection requests without undue delay.

Part D – Your Rights

18. You have the following rights under the GDPR and Data Protection Act 2018:

• To access your personal data and information about its processing,
• To request rectification of inaccurate data,
• To request erasure of your data in certain circumstances (e.g. withdrawal of consent),
• To restrict processing temporarily,
• To receive your data in a portable format and have it transferred to another controller,
• To object to processing carried out under legitimate interests,
• To avoid automated decision-making that produces significant legal effects,
• To be notified promptly of any personal data breach affecting you.

19. To exercise your rights, contact us at .

Part E – Remedies and Complaints

20. If you believe your data protection rights have been breached, you may:

• Lodge a complaint with the UK Information Commissioner’s Office (ICO),
• Seek judicial remedy in the courts of England and Wales,
• Seek compensation if you have suffered damage as a result of unlawful processing.

Part F – Stripe as a Processor

21. Payments are handled securely by Stripe. Stripe is a separate controller for your payment information and processes it under its own Privacy Policy.
22. Cubed Events Limited only receives limited data from Stripe to fulfil your purchase and provide VIP benefits.

Part G – Jurisdiction

23. This Privacy Policy is governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the English courts.

‍