Website Privacy Policy
Version: v2.0
Effective Date: 8 September 2025
​
​
1. SCOPE AND APPLICATION
1.1 This Privacy Policy applies only to the public websites operated by Twisted Works Ltd, including www.twistedworks.com and any subdomains, the Website.
1.2 This Policy does not apply to our games, game accounts, online services, platform services, purchases, or any other products. Those services have separate privacy notices provided in the product, in-store, or in service.
​
2. CONTROLLER AND CONTACT
2.1 Twisted Works Ltd is the controller of personal data processed through the Website.
2.2 Registered address: 3rd Floor, 86 to 90 Paul Street, London, United Kingdom, EC2A 4NE.
2.3 Data protection contact: dataprotection@twistedworks.com
2.4 Security contact for vulnerability reports, no bug bounty implied: dataprotection@twistedworks.com
2.5 You may complain to a data protection authority. In the United Kingdom, the authority is the Information Commissioner’s Office.
​
3. WHAT WE COLLECT ON THE WEBSITE
3.1 We do not ask you to provide personal information on the Website.
3.2 The Website collects only technical and usage data generated by your browser and device, for example:
a. internet protocol address, user agent, device and browser information, referrer, request time
b. pages viewed, time on page, clicks, scrolls, navigation paths
c. server logs necessary to deliver the Website and keep it secure
d. cookie identifiers that are strictly necessary to operate the Website.
3.3 We do not collect payment data on the Website.
3.4 We do not intentionally collect special category data or criminal offence data through the Website.
3.5 If you contact us by email in relation to the Website, for example 'hello@twistedworks.com' or 'dataprotection@twistedworks.com', we will process the contact details and content of that communication to handle the request. That processing is covered by this Policy.
​
4. COOKIES AND SIMILAR TECHNOLOGIES
4.1 We use essential cookies only, for example, to provide load balancing, security, and basic functionality.
4.2 If non-essential cookies such as analytics are introduced in future, we will request your consent before setting them, and we will update this Policy.
4.3 You can control cookies through your browser settings.
​
5. PURPOSES AND LAWFUL BASES
5.1 We use personal data collected through the Website for the following purposes and on the following lawful bases under UK GDPR and the Data Protection Act 2018
a. to operate, maintain, and secure the Website, legitimate interests
b. to measure performance and improve content using aggregated reports that do not identify you, legitimate interests
c. to comply with legal obligations, legal obligation
d. for any non essential cookies introduced in future, consent.
5.2 We do not sell personal data.
5.3 We do not run targeted advertising on the Website.
​
6. DISCLOSURE OF PERSONAL DATA
6.1 We share personal data with trusted service providers who assist in operating the Website, for example, hosting, content delivery, security services, email delivery, and professional advisers.
6.2 These providers are required to protect personal data and to act only on our documented instructions.
6.3 We may disclose personal data to regulators or authorities where required by law.
​
7. INTERNATIONAL TRANSFERS
7.1 Where personal data is transferred outside the United Kingdom or the European Economic Area, we apply appropriate safeguards, including United Kingdom or European adequacy regulations or standard contractual clauses, together with any additional measures required by law.
​
8. SECURITY
8.1 We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, least privilege, monitoring, and periodic reviews.
8.2 Access to personal data is limited to personnel and service providers who have a business need and are under confidentiality obligations.
​
9. RETENTION
9.1 Security logs are retained for a limited period necessary to detect and investigate incidents.
9.2 Aggregated measurement data that does not identify you may be retained for longer to understand Website performance.
9.3 Personal data that is no longer required is deleted or anonymised.
​
10. YOUR RIGHTS
10.1 Subject to conditions and exemptions in law, you may have the right to request access, correction, erasure, restriction, objection, and data portability, and to withdraw consent where consent is relied upon.
10.2 To exercise rights, contact dataprotection@twistedworks.com. We aim to respond within one month and will inform you if additional time is required for complex requests.
10.3 You may complain to a data protection authority. In the United Kingdom, this is the Information Commissioner’s Office.
​
11. CHILDREN
11.1 The Website is not directed to children under 13 years of age.
11.2 We do not knowingly collect personal information from children via the Website. If you believe we have collected personal data from a child under 13 through the Website, contact dataprotection@twistedworks.com and we will delete it promptly.
​
12. THIRD PARTY SITES AND EMBEDS
12.1 The Website may link to or embed content from third-party providers, for example, video players or social widgets.
12.2 Those providers control their own collection and use of data. Review their privacy policies.
​
13. CHANGES TO THIS POLICY
13.1 We may update this Policy to reflect changes in law or how the Website operates.
13.2 The current version is posted on this page and applies from the date shown at the top.