Your GDS
We are committed to protecting the privacy of our website visitors, service users, individual customers, and customer personnel. This policy explains how we collect, use, and safeguard personal data when operating this website. We act as a data controller, meaning we determine the purposes and methods of processing your personal data.
In this policy, “we,” “us,” and “our” refer to GDS Artistic Services Ltd.
We may process the following categories of personal data:
We collect personal data primarily when you provide it to us, when you use our website and services, or when information is generated as part of providing those services. We only process personal data where there is a lawful basis for doing so under applicable data protection law.
Please avoid providing personal data about other individuals unless you are authorised or otherwise entitled to provide it to us. If you do provide information about another person, you should ensure that doing so is appropriate in the circumstances.
Providing Our Website and Services: We may process your personal data to operate your account, provide access to digital products and services, process and fulfil purchases or subscriptions, record downloads, provide customer support, and manage your use of our website. Where processing is necessary to provide a service or fulfil a contract with you, the legal basis is performance of a contract or taking steps at your request before entering into a contract.
Website Administration: We may process personal data where necessary to administer and maintain our website, manage user accounts, maintain records, and ensure the website functions correctly. The legal basis for this processing is our legitimate interests, namely the effective administration and operation of our website and business.
Relationships & Communications: We may process contact data, account data, customer relationship data, transaction data, and communication data to communicate with you, respond to enquiries, provide support, and handle complaints. The legal basis may be performance of a contract, taking steps at your request before entering into a contract, or our legitimate interests in maintaining customer relationships and providing appropriate support.
User-Requested Email Notifications: Where you voluntarily provide your email address and explicitly choose to receive email notifications from us, we may process your email address and notification preferences to send those requested communications. The legal basis is your consent. You can withdraw your consent at any time.
Site Usage and Improvement: We may use information generated through your use of our website, such as account activity, feature usage, and download records, to understand how our website and services are being used and to improve their functionality and reliability. The legal basis for this processing is our legitimate interests, namely maintaining and improving our website and services.
Record Keeping: We may process personal data to maintain account records, transaction records, download records, backups, and other business records. The legal basis may be performance of a contract, compliance with a legal obligation, or our legitimate interests in maintaining accurate records and ensuring operational continuity.
Security: We may process personal data to protect our website, services, accounts, and users, including detecting and preventing fraud, abuse, unauthorised access, and other security issues. The legal basis for this processing is our legitimate interests in protecting our business, systems, and users.
Legal Claims: We may process personal data where necessary to establish, exercise, or defend legal claims. The legal basis is our legitimate interests in establishing, exercising, or defending our legal rights.
Legal Compliance: We may process personal data where necessary to comply with our legal and regulatory obligations. The legal basis for this processing is compliance with a legal obligation.
Your personal data stored in our website database is hosted by our hosting service provider, Krystal Hosting. Our website server is located in New York, United States.
We use bunny.net as a content delivery network (CDN) to store and deliver digital products and files. Digital files are distributed through Bunny's global network of edge locations so that downloads can be served efficiently from locations close to users. When a file is downloaded, Bunny may process technical information associated with the download request, such as the requested file URL, IP address, browser or user-agent information, and other standard HTTP request information. Our download URLs use temporary signed access tokens and do not contain your username, email address, or account ID.
Financial transactions related to our website and services are handled by third-party payment providers, including PayPal and Stripe. We share information with these providers to the extent necessary to process payments, subscriptions, refunds, and related payment enquiries or disputes.
If you choose to receive email notifications from us, your email address and relevant subscription information are shared with our email service provider, SendGrid, so that those notifications can be delivered to you.
We may disclose your personal data to professional advisers, insurers, or other service providers where reasonably necessary to operate our business, obtain professional advice, manage risks, or protect our business interests.
We may also disclose personal data where necessary to comply with a legal obligation, respond to a lawful request from a competent authority, establish, exercise, or defend legal claims, or protect the rights, property, or security of our business, website, or users.
Where personal data is transferred outside the United Kingdom or European Economic Area (EEA), we will ensure that appropriate safeguards are in place where required by applicable data protection law.
We aim to disclose only the personal data that is reasonably necessary for the relevant purpose and require service providers processing personal data on our behalf to provide appropriate protection for that data.
Some of the service providers we use may process personal data outside the United Kingdom, including in the United States and other countries. For example, our website and database are hosted on a server located in New York, United States, and some of our service providers may process information internationally as part of providing their services.
Where applicable data protection law requires safeguards for an international transfer of personal data, we will take appropriate steps to ensure that the transfer is subject to an appropriate transfer mechanism and that your personal data continues to receive an appropriate level of protection.
Our digital products are distributed through a global content delivery network. As described in this policy, the delivery of digital files may involve the processing of technical information associated with download requests in locations around the world.
Personal data that you choose to publish publicly through our website may also be accessible from countries around the world. Once information has been made publicly available, we cannot control how third parties may access or use it.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining accounts and records, complying with legal obligations, and establishing, exercising, or defending legal claims.
Different types of personal data may be retained for different periods depending on the purpose for which they are used and any applicable legal or business requirements. For example:
If you request deletion of your account, we will delete your account and associated personal data from our active systems without undue delay, except where we have a lawful reason to retain particular information.
Some information may remain in backups for a limited period while those backups are securely overwritten or deleted as part of our normal backup procedures.
We may retain personal data for longer where necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.
We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
Our website uses Imunify WebShield CAPTCHA as part of our hosting infrastructure to help protect against automated abuse, malicious traffic, and unauthorised access. Access to administrative systems and personal data is restricted to authorised access where reasonably necessary to operate and maintain our website and services.
Data transmitted between your browser and our website is protected using HTTPS and Transport Layer Security (TLS) encryption.
User account passwords are not stored in plain text. Passwords are securely hashed and salted before being stored in our database.
We routinely monitor website and security logs and use notification systems to identify certain unexpected login activity and suspected unauthorised access attempts. We investigate relevant security events and take reasonable steps to protect accounts and our systems.
You are responsible for keeping your account password confidential and should notify us if you believe that your account has been accessed without your permission. We do not ask you to provide your account password by email or through our contact forms.
While we take reasonable measures to protect personal data, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
We review our security measures from time to time and take reasonable steps to address identified security risks and maintain the security of our website and services.
If we become aware of a personal data breach, we will assess the breach and take any action required by applicable data protection law, including notifying affected individuals or the relevant supervisory authority where legally required.
This section summarises your rights under applicable data protection law. Some rights are subject to specific conditions and exemptions.
Your principal rights include:
We will normally provide a copy of your personal data free of charge. We may charge a reasonable fee for additional copies where permitted by law, or refuse a request where it is manifestly unfounded or excessive.
We may need to verify your identity before responding to a request. This is to help protect personal data from being disclosed to someone who is not authorised to receive it.
To exercise any of your rights, please contact us in writing or using the contact details provided on our website.
We will respond to valid requests without undue delay and normally within one month of receiving the request. Where permitted by law, this period may be extended by up to two further months if the request is complex or we receive a large number of requests. If an extension is required, we will inform you within the initial one-month period and explain the reason for the delay.
Our website uses fonts provided by Google Fonts. When fonts are loaded, your browser may connect to Google's servers and transmit technical information, such as your IP address and browser information, to deliver the fonts.
Our website may also contain links to, or embedded content from, third-party services, including YouTube. When you view embedded YouTube content, your browser may connect to YouTube's servers and transmit technical information such as your IP address and browser information. YouTube may also use cookies or similar technologies.
Third-party services may process your personal data in accordance with their own privacy policies. We do not control the privacy practices of third-party websites or services, and we recommend reviewing their privacy policies before using them.
For more information about how Google handles personal data, please see Google's Privacy Policy.
Our website and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from, or permit individuals under the age of 18 to create accounts or use our services.
If we become aware that an individual under 18 has provided us with personal data or created an account, we will take reasonable steps to delete the account and associated personal data promptly.
If you believe that an individual under 18 has provided us with personal data, please contact us using the contact details provided on our website so that we can investigate and take appropriate action.
We aim to keep the personal data we hold about you accurate and up to date. Please let us know if your personal data changes or if you believe any information we hold about you is inaccurate or incomplete.
You may request an update or correction to your personal data at any time by contacting us using the contact details provided on our website. We may need to verify your identity before making changes to your personal data.
You may also be able to update certain information directly through your account where those features are available.
We may update this policy from time to time by publishing a revised version on our website. Changes will take effect when the revised policy is published, unless otherwise stated.
We recommend checking this page periodically for any updates to information about our use of cookies and browser storage.
Postal address:
Office 14978, Box 4336, Manchester, M61 0BW, United Kingdom
Contact:
support: support@gamedeveloperstudio.com
2d Game Asset store
Suggest an asset
About GDS editor
Launch GDS editor
Log in
news feed
About
License
resources
support@gamedeveloperstudio.com
connect on discord
