Privacy Policy
Owner and Data Controller
Chaoss Entertainment Ltd
Regus, 25 Clarendon Road, Redhill, RH1 1QZ
Contact (privacy): contact@chaotic.co.uk
Types of Data We Collect
We collect personal data directly from you and automatically when you use our website/application. This may include:
- Identity & contact data: first name, last name, email address, phone number, date of birth, billing/shipping address, name.
- Account & usage data: page views, browsing history, clicks, keypress/motion/touch events, mouse movements, scroll position, session statistics, number of users, language, geographic position, referral URL, order ID, data relating to point of sale, metadata.
- Transaction & payment data: payment info, purchase history.
- Device & tracker data: cookies/Trackers, unique device identifiers (e.g., IDFA/GAID), usage data.
- Data you communicate: information provided while using the service or to enable the service.
Unless stated otherwise, requested data is mandatory to provide our services. If you’re unsure which data is mandatory, please contact us.
Any use of cookies or other tracking tools by us or by third-party services we use is to provide the service requested by you and for the other purposes described in this policy and in our Cookie Policy.
You are responsible for third-party personal data obtained, published, or shared through this application.
Mode and Place of Processing
Methods of processing
We apply appropriate security measures to prevent unauthorised access, disclosure, modification, or destruction. Processing is performed using IT tools and follows organisational procedures related to the stated purposes. Data may be accessible to certain internal roles (e.g., administration, sales, marketing, legal, system administration) and to external providers acting as processors (e.g., technical service providers, mail carriers, hosting providers, IT companies, communications agencies). An updated list of these parties is available on request.
Place
Data is processed at our operating offices and where third-party processors are located. Depending on your location, transfers may involve sending data to a country other than your own. See the service-specific sections for more details.
Retention time
Personal data is processed and stored for as long as required by the purposes for which it was collected (see “Further Information for Users in the European Union” for more detail).
Prize draw display name
In order to evidence Add rules are legitimate we use your name and location to display during live prize draws, any objection to this must be notified to us at contact@chaotic.co.uk
Community Initiatives & Chaotic Fund
When you apply for or participate in The Chaotic Fund, we collect and process certain personal data submitted through our online form. This may include your name, email address, contact details, and information relevant to your request or nomination.
Your personal data is collected for the following purposes:
- To review and manage Chaotic Fund applications
- To communicate with you about your submission or updates to the initiative
- To report on the impact and reach of the Chaotic Fund
- To send you related communications if you have consented to receive them
All information submitted through the Chaotic Fund form is securely processed and stored via HubSpot, which acts as our data processor. You can view HubSpot’s Privacy Policy here.
Participation in the Chaotic Fund is entirely voluntary. By submitting a form, you consent to the storage and processing of your personal data for these purposes. You may withdraw this consent or request deletion of your data at any time by contacting contact@chaotic.co.uk.
.
Purposes of Processing
We process data in order to:
- Provide and operate the service, including contacting the user, handling payments, managing contacts and messages, platform services and hosting, building and running this application, traffic optimisation and distribution, infrastructure monitoring.
- Ensure safety, detect malicious or fraudulent activity, enforce our terms, and respond to enforcement requests.
- Run analytics, tag management, interaction with external social networks and platforms.
- Serve advertising and remarketing/behavioural targeting.
- Display content from external platforms.
- Provide spam and bot protection.
Services and Categories of Personal Data
Advertising
Used to display ads (including personalised ads where consented) and measure conversions. Some services use cookies/Trackers, device IDs, and behavioural retargeting. You can usually opt out via service-specific settings and our Cookie Policy.
- Meta ads conversion tracking (Meta Pixel)
Personal data: Trackers, usage data
Provider: Meta Platforms Ireland Limited — Privacy Policy / Opt out - Meta Audience Network
Personal data: Trackers, device advertising identifiers, usage data
Provider: Meta Platforms Ireland Limited — Privacy Policy / Opt out - Meta Lookalike Audience
Personal data: Trackers, usage data
Provider: Meta Platforms Ireland Limited — Privacy Policy / Opt out - Google Ad Manager
Personal data: Trackers, usage data
Provider: Google Ireland Limited — Privacy Policy - Google Ads conversion tracking
Personal data: Trackers, usage data
Provider: Google Ireland Limited — Privacy Policy - Google AdSense
Personal data: Trackers, usage data
Provider: Google LLC — Privacy Policy / Opt Out - Direct marketing via SMS (Voodoo SMS)
Personal data: first name, last name, phone number
Provider: Voodoo SMS — Privacy Policy
Analytics
Used to monitor and analyse web traffic and user behaviour.
- Google Analytics 4
Personal data: number of users, session statistics, Trackers, usage data
Provider: Google LLC — Privacy Policy / Opt out - Meta Events Manager
Personal data: browsing history, clicks, page views, Trackers, usage data
Provider: Meta Platforms, Inc. — Privacy Policy / Opt out
Contacting the User
- Contact form
Personal data: email address, first name, last name, phone number
Purpose: respond to enquiries and requests - Mailing list / newsletter
Personal data: email address, first name, last name
Providers: - Phone contact
Personal data: phone number
Purpose: commercial/promotional communications and support requests (where permitted)
Handling Payments
Payments are processed via external providers; you provide payment details directly to them. We receive only status/notifications.
- Cashflows
Personal data: email address, first name, last name, Trackers, usage data
Provider: Cashflows — Privacy Policy
Infrastructure monitoring
This type of service allows this Application to monitor the use and behaviour of its components so its performance, operation, maintenance and troubleshooting can be improved.
Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Application..
- Flareapp.io
Personal data: various types of Data as specified in the privacy policy of the service a
Provider: Flareapp.io — Privacy Policy
Interaction with External Social Networks and Platforms
May collect traffic data even when not used; interaction is subject to your social settings.
Managing Contacts and Sending Messages
- Mailchimp
Personal data: email address, first name, last name
Provider: Intuit Inc. — Privacy Policy - Klaviyo
Personal data: email address, purchase history, Trackers, usage data
Provider: Klaviyo Inc. — Privacy Policy – Opt out - OneSignal (push notifications)
Personal data: email address, geographic position, language, device advertising identifiers, Trackers, usage data
Provider: Lilomi, Inc. — Privacy Policy – Opt out - Trustpilot Automatic Feedback Service
Personal data: email address, Trackers, usage data
Provider: Trustpilot A/S — Privacy Policy - Voodoo SMS
Personal data: first name, last name, phone number
Provider: Voodoo SMS — Privacy Policy - HubSpot
Personal data: email address, purchase history, Trackers, usage data
Provider: HubSpot — Privacy Policy
Remarketing and Behavioural Targeting
- Meta Custom Audience
Personal data: email address, Trackers
Provider: Meta Platforms Ireland Limited — Privacy Policy – Opt out - Facebook Remarketing
Personal data: Trackers, usage data
Provider: Meta Platforms Ireland Limited — Privacy Policy – Opt out - Remarketing with Google Analytics
Personal data: Trackers, usage data
Provider: Google Ireland Limited — Privacy Policy – Opt Out
Spam and Bots Protection
- Google reCAPTCHA
Personal data: answers to questions, clicks, keypress/motion/mouse/touch events, scroll position, Trackers, usage data
Provider: Google Ireland Limited — Privacy Policy
Tag Management
- Google Tag Manager
Personal data: usage data
Provider: Google Ireland Limited — Privacy Policy - Facebook Pixel
Personal data: usage data
Provider: Meta Platforms Ireland Limited — Privacy Policy – Opt out
Traffic Optimisation and Distribution
- Cloudflare
Personal data: Trackers and data as specified by the provider
Provider: Cloudflare, Inc. — Privacy Policy
Opting Out of Interest-Based Advertising
In addition to provider-specific opt-outs, you can manage your preferences via our Cookie Policy and your browser/device settings. See the “Cookie Policy” for more details.
Further Information About Processing
Selling goods and services online
We use personal data to provide services or sell goods, including payment and delivery. The data collected depends on the payment system used.
Cookie Policy
We use cookies/Trackers. For details and controls, see our Cookie Policy.
Further Information for Users in the European Union
Legal basis of processing
We process data where one or more apply:
- Consent for one or more specific purposes.
- Contract performance or pre-contractual steps.
- Legal obligation.
- Public interest/exercise of official authority.
- Legitimate interests pursued by us or a third party.
We’re happy to clarify which legal basis applies to specific processing.
Retention
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
- Contractual purposes: retained until the contract is fully performed.
- Legitimate interests: retained as needed to fulfil those purposes.
- Consent: retained until withdrawn.
- Legal obligations/authority orders: retained for the required period.
The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Your GDPR rights
Subject to law, you may:
- Withdraw consent at any time.
- Object to processing (where the legal basis is not consent).
- Access your data and obtain a copy.
- Rectify inaccurate data.
- Restrict processing.
- Request erasure.
- Receive your data in a portable format and transmit it to another controller.
- Lodge a complaint with your data protection authority.
Right to object to processing
Where processing is based on public interest, official authority, or legitimate interests, you may object on grounds relating to your situation. For direct marketing, you may object at any time, free of charge, and we will stop processing for that purpose.
How to exercise your rights
Contact us using the details at the top of this policy. Requests are free and answered as early as possible, always within one month. Where feasible, we will inform recipients of any rectification/erasure/restriction unless impossible or disproportionate.
Additional Information
Legal action
We may use personal data for legal purposes in court or prior to legal action arising from misuse of this application or related services. We may be required to disclose data on request of public authorities.
Additional information on request
We may provide additional/contextual information about particular services or processing upon request.
System logs and maintenance
For operation and maintenance, this application and third-party services may collect system logs or use other personal data (such as IP address).
Information not contained here
More details about data collection/processing are available on request (see contact details above).
Changes to this policy
We may change this policy at any time by posting updates here and, where technically/legally feasible, notifying users through the application or via contact details we hold. Please check this page regularly. Where changes affect processing based on consent, we will collect new consent where required.
Definitions and Legal References
- Personal Data (or Data): information that identifies or can identify a natural person.
- Usage Data: information collected automatically (e.g., IP address, request time, response status, device/browser details, pages visited, time on page, and related telemetry).
- User: the individual using this application (data subject).
- Data Subject: the natural person to whom the personal data refers.
- Data Processor (Processor): entity processing personal data on behalf of the controller.
- Data Controller (Owner): entity determining purposes and means of processing.
- This Application: the means by which the user’s personal data is collected/processed.
- Service: the service provided by this application.
- European Union (EU): includes all EU/EEA member states.
- Cookie: small set of data stored in the user’s browser.
- Tracker: any technology enabling tracking of users (e.g., cookies, identifiers, pixels, scripts, e-tags, fingerprinting).
Legal information: This privacy policy relates solely to this application, unless stated otherwise.
Last updated: 21st October 2025