In accordance with the new EU General Data Protection Regulation (GDPR), this privacy policy sets out how SteamMarket processes personal data (that is, information by which an individual can be identified) collected by us in the course of our lawful activities and explains our obligations and your rights under GDPR and any subsequent UK legislation and regulations (‘Data Protection laws’). All data collected, regardless of geographic origin, will be processed in accordance with this privacy policy.

This policy has been put in place to protect your rights under the new Data Protection laws, and it is important that you understand what we will do with your data and are happy with this. References to the processing of information includes: the collection, use, storage, and protection of data.

StreamMarket is the ‘data processor’ for the purposes of this policy, and the policy extends to its staff, customers, suppliers, and anyone else processing data on our behalf from time to time. StreamMarketis committed to ensuring that your privacy is protected. Any personal data collected by StreamMarketwill only be processed in accordance with this privacy policy.

Organisations are permitted to process data if they have a legal basis for doing so. StreamMarketprocesses data on the basis that:

• Express and informed consent from respective parties
• StreamMarkethas a legitimate interest in processing data; and/or
• It is necessary in relation to a contract or agreement which the person/business has entered or because the person/business has asked for something to be done so they can enter into a contract or agreement; and/or
• There is a legal obligation on StreamMarketto process data.

Where StreamMarket is relying solely on consent as the basis for processing data, we are required to obtain your explicit consent and you can modify or withdraw this consent at any time by notifying us in writing, although this may affect the extent to which we are able to provide services to or interact with you in future.

What data do we collect?

We collect the data necessary for StreamMarketto process and dispatch orders Data collected and processed may include, but not be limited to:

• Names and contact information such as telephone numbers, email and postal addresses
• Items ordered that is part of a purchase and any preferences states within this purchase order
• Such other information that is relevant and necessary for StreamMarketto carry out its activitiesand legal obligations.

What we do with the data we process

Stream Marketuses the data collected to maintain accurate internal records of our engagement with partner organisations and staff. We do not use third-party data processors to process personal data on our behalf. But we procure services from providersto support Stream Marketespecially relating to hosting. These providersare located with U.K and EU The records we collect assist our activities run in accordance with our business objectives, includingprocessing purchase orders and dispatching orders. Data may be processed and viewed, to the extent necessary, by staffduringStreamMarket’s activities (all of whom work in accordance with this privacy policy) and will be retained only for as long as is reasonable and permissible in law. Amazon, as the data owner, may request deletion of data at any time in writing, subject to any overriding legal requirement for its retention.

Any personal data is shared under the strict understanding that this is only for the purposes of the activities directly related to StreamMarket. We do not sell or rent your personal information to third parties. We do not share your information, except as provided in this Privacy Policy.

Your rights in relation to your personal data

Amazon may request details of personal information which we collected. Any such request must be submitted in writing. Amazon may choose to restrict the collection or use of information, but this may inhibit or limit the serviceStreamMarket provides to customers. Amazon may, at any time, change its mind about what information we can collect.

Amazonis responsible for the accuracy of data provided to SteamMarket. If data held by Amazon changes, it is responsibility of Amazon to update us with incorrect or incomplete information as soon as possible. We may use information to send order placed by customer and any other information about StreamMarket and matters relating to our activities which we think may be of interest to the customer. We will only share data with trusted third parties like logistic company or where necessary for us to dispatch order or as stated above, and only once we are satisfied that any such use of data will accord with our privacy policy.

Security

We are committed to ensuring information we process is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, policies and procedures to safeguard and secure the data we process. Staff processing data on behalf of StreamMarketdo so in accordance with this policy and on the basis that StreamMarketis satisfied that they can and will adhere to our high standards for data protection and

Where is data stored?

All information is stored on our secure servers by our third-party providers; UK Fast and Max Cluster. Any and all transactions are encrypted using SSL technology.

Reviewing Data

We will review data annually each Q3, to ensure that it falls into the categories as agreed in Developer’s agreement. Any data found not to fall into the above categories will be deleted from our live records. We will review our privacy policy each Q3, to ensure that it complies with UK Data Processing legislation.

Disposal

Once an order is processed the details will be held for the following 30 days as per our policy, on the 31st day the data collected will be automatically deleted. Amazon may also request for data deletion, any such requets will be responded to within 25 days of receipt of such request. Subject to any overriding legal requirement for its retention, records will be permanently removed from our database.

Data Breach

A data breach policy has been put in place and issued to all existing staff members.

Updating these Policies

We reserve the right to update our policies at any time without prior notice. Any changes to this policy will reflect the contractual requirementdictated by Developer’s agreement.