1. Who is responsible for your data
IT-MSP LTD (trading as Detectively), company number 10544919, registered in England and Wales, is the "data controller" for the personal data described here. You can reach us about privacy at info@it-msp.net.
2. What we collect
- Account data: your email address and an encrypted password when you register.
- Purchase data: a record of tokens bought, amounts, dates and your purchase history. Card payments are handled by Stripe — we do not see or store your full card number.
- Gameplay data: the cases you start, progress, verdicts, scores and timestamps.
- Technical data: basic information needed to run the service securely (for example, your authentication session and limited server logs).
3. How we use your data and our lawful basis
- To provide the service — create and manage your account, deliver the cases you buy, save your progress (basis: performance of our contract with you).
- To take payment — process purchases and grant tokens (basis: performance of our contract).
- To contact you — send account confirmation, password resets and essential service messages (basis: performance of our contract / our legitimate interests).
- To keep the service secure — prevent fraud, abuse and unauthorised access (basis: our legitimate interests).
- To meet legal duties — for example keeping VAT and transaction records (basis: legal obligation).
4. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run Detectively:
- Stripe — payment processing.
- Our hosting and database infrastructure — to store your account and gameplay data and serve the site.
- Microsoft — to send transactional email (such as account confirmation and password resets).
We may also disclose data where required by law or to protect our legal rights.
5. Cookies and local storage
We use only essential cookies and browser local storage needed to keep you signed in and to remember your progress within a case. We do not use advertising or third-party tracking cookies.
6. How long we keep it
We keep your account and gameplay data for as long as your account is active. Transaction and VAT records are kept for as long as the law requires (generally six years). If you ask us to delete your account, we will remove or anonymise your personal data except where we must keep certain records for legal reasons.
7. International transfers
Some of our providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) to protect your data.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted ("right to be forgotten"), subject to legal exceptions;
- restrict or object to certain processing;
- request a copy of your data in a portable format;
- withdraw consent where we rely on it.
To exercise any of these, email info@it-msp.net. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Children
Detectively is not intended for children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the "last updated" date shown above.