Astrofish Games Ltd Privacy Notice

Effective Date: 17 September 2026

Astrofish Games Ltd is committed to handling personal information fairly and transparently. This notice
explains what information we use, why we use it, who we share it with, and your rights when you visit
our website, contact us, interact with our advertising, or engage with us in a business or professional
context.

1. Who we are and how to contact us

Astrofish Games Ltd is the controller of personal information covered by this notice.
Email: contact@astrofishgames.com
Address: Astrofish Games Ltd, 16 Beaufort Court Admirals Way, Docklands, London, United Kingdom, E14 9XL.

2. What information we may collect

  • Depending on how you interact with us, we may collect or receive:
    Business and contact information, such as your name, work email address, company, job title or
    professional role, and relevant professional profile details.

  • Communications and relationship information, such as emails, social-media messages, customer-support
    enquiries, meeting notes, project or opportunity information, and appropriate notes about our business
    interactions.

  • Website and technical information processed in connection with our Squarespace-hosted website, such as browser, device and network information, referring pages, pages visited, searches, clicks and timestamps. Squarespace may also process IP addresses and other technical identifiers as part of providing and securing the website.

  • Advertising and campaign information, such as UTM parameters and aggregated campaign statistics
    including impressions, clicks, outbound clicks, placement and advertising costs.

We do not intentionally collect special-category personal data for advertising or business-development
purposes, and we do not sell personal information.

3. Where information comes from

We may receive personal information directly from you when you email us, use our website contact form,
message us on social media, or otherwise communicate with us. We may also obtain professional contact
information from LinkedIn, company websites, public professional profiles, referrals, introductions or existing
business relationships. If we obtain your personal information from another source and then contact you, we will make this privacy notice available to you as required by applicable data-protection law.

4. How and why we use personal information

  • We use personal information only where we have an appropriate lawful basis. The main purposes are:
    Responding to customer, product, commission, recruitment and support enquiries, and taking steps
    requested before entering into a contract or performing an existing contract.

  • Managing business development and professional relationships, including identifying relevant business
    contacts, following up potential projects or partnerships, and maintaining appropriate business records. We
    generally rely on legitimate interests for this activity.

  • Operating, securing and improving our website and business systems, including fraud and spam prevention
    and understanding website performance.

  • Advertising our products, measuring advertising performance, and using advertising-platform audience
    tools where permitted by law.

  • Meeting legal, accounting, contractual or dispute-resolution requirements.

Our lawful bases
Depending on the activity, we rely on:

Contract or steps before a contract - for enquiries, commissions, customer support and other communications connected with entering into or performing an agreement.

Legitimate interests - for proportionate business development, maintaining professional relationships and business records, protecting and operating our website and systems, understanding website performance, and advertising our products where permitted by law.

Consent - where applicable law requires consent, including for certain cookies or electronic marketing activities.

Where we rely on legitimate interests, we consider whether the processing is necessary and proportionate and whether our interests are overridden by your rights and interests.

We do not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

Where we ask you to provide personal information, you are generally not under a statutory or contractual obligation to do so. However, we may be unable to respond to an enquiry, provide requested support or enter into or perform an agreement if you do not provide information reasonably necessary for that purpose.

5. Business development, Pipedrive and professional networking

We use Pipedrive as our customer relationship management system to organise business-development activity
and professional relationships. Records may include names, work email addresses, organisations, job roles,
communication history, interaction notes and information relevant to a potential or existing business
opportunity.

We also use LinkedIn for professional networking and business development. If you contact us through
LinkedIn, Facebook or Instagram, we may process your profile or account name and the contents of your
message in order to respond, provide support, or manage a relevant business relationship. Where appropriate,
relevant professional contact details or interaction notes may be recorded in Pipedrive.

We may contact relevant business contacts in their professional capacity where permitted by applicable law.
You may object to direct marketing at any time. If you do, we will stop using your personal information for that
purpose and may keep minimal information needed to ensure we respect your request.


6. Website, Squarespace analytics and cookies

Our website is hosted by Squarespace. Squarespace may process technical and usage information, including IP addresses and online identifiers, where necessary to provide, secure and operate the website.

We have disabled Squarespace's Activity Log, so we do not use that feature to retain or view visitor-level IP address activity.

Our website uses cookies and similar technologies provided by Squarespace. Required cookies are used where necessary for security, functionality and to remember certain website preferences. We may also use Squarespace analytics and performance cookies to understand visitor numbers, website usage and performance. These non-essential cookies are used only where permitted and subject to applicable consent requirements. Depending on their purpose, cookies may last only for the duration of your browsing session or remain on your device for a longer period.

You can accept, reject or manage non-essential cookies using the cookie controls available on our website, and you can change your preferences at any time using the cookie settings control in the website footer.

We currently use Squarespace's built-in website analytics and do not use Google Analytics.

Embedded third-party content, such as videos, may allow the relevant provider to receive technical information or use cookies in accordance with its own privacy terms and your cookie choices.


7. Pinterest advertising and marketplace links

We use Pinterest to advertise products, including products available through the Unity Asset Store and Fab. Pinterest may use information it already holds about its users to decide which advertisements to show. We may use Pinterest engagement audiences and Actalike audiences to reach people who have interacted with our Pins or ads, or other Pinterest users with similar interests or behaviour.

These audiences are created within Pinterest. We do not receive the names or email addresses of individual users included in those audiences. We may receive aggregated campaign information such as impressions, clicks, outbound clicks, click-through rates, placement and advertising costs.

We do not currently use the Pinterest Tag or Conversions API on our website, upload customer contact lists to Pinterest, or send Unity Asset Store or Fab purchase information to Pinterest for advertising or conversion targeting.

Advertising links may go directly to the Unity Asset Store or Fab and may contain UTM or similar campaign identifiers. These parameters help identify the advertising source, campaign or creative and are not intentionally populated by us with names, email addresses or other directly identifying customer information.

Once you visit the Unity Asset Store or Fab, the relevant marketplace processes your activity under its own privacy notice and terms.

8. Service providers and platforms

  • We use third-party services to operate our business. Depending on how you interact with us, these may include:

  • Squarespace - website hosting and website analytics.

  • Google Workspace - business email and communications.

  • Pipedrive - customer relationship management and business-development records.

  • LinkedIn and Meta Platforms (Facebook and Instagram) - professional networking and communications.

  • Pinterest - advertising and advertising-audience management.

  • Unity and Epic Games/Fab - third-party marketplaces through which our products are distributed.

These providers may process information on our behalf or may independently determine how information
relating to their own platforms is processed. Their own privacy notices also apply when you use their services.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was
collected, taking account of our legal, accounting, contractual and dispute-resolution needs.

  • Customer and support correspondence is kept for as long as reasonably needed to provide support and
    maintain appropriate business records.

  • Business-development and prospect records are kept while they remain reasonably relevant to an existing
    or potential professional relationship and are reviewed from time to time. Records that are no longer
    needed may be deleted or anonymised.

    Where you object to direct marketing, we may retain minimal suppression information so that we do not
    contact you again inadvertently.

10. International transfers and security

Some service providers may process personal information outside the United Kingdom. Where UK data-
protection law requires safeguards for an international transfer, we rely on applicable adequacy arrangements
or appropriate contractual and organisational safeguards.

We use appropriate technical and organisational measures to protect personal information against loss, misuse,
unauthorised access, alteration or disclosure. Access to business systems is limited to the company owner and
any authorised employee, service providers or contractors where necessary.

11. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access your personal
information, correct inaccurate information, request erasure, restrict processing, object to processing, receive
certain information in a portable format, and withdraw consent where consent is the lawful basis.
You have the right to object at any time to the use of your personal information for direct marketing, including
related profiling.

To exercise your rights, email contact@astrofishgames.com. We normally respond within one calendar month
and do not charge a fee unless the law permits us to do so.


12. Complaints

If you have concerns about how we use your personal information, please contact us first at
contact@astrofishgames.com. You also have the right to complain to the UK Information Commissioner's Office
(ICO): https://ico.org.uk/make-a-complaint/

13. Ground Runner: Trials
Ground Runner: Trials is no longer available for purchase through Steam or the Meta Quest Store.

The game itself does not collect or process personal data from players. Steam and Meta may historically have processed user information in accordance with their own privacy policies and platform terms. Astrofish Games Ltd only received aggregated sales and performance information from those platforms and did not receive personal information such as player names, email addresses or payment details.

14. Changes to this notice
We may update this Privacy Notice when our practices, services or legal obligations change. The effective date
at the top of this notice shows when it was last updated.