1. Who we are
Laius Entertainment ("we", "us", "our") is a company based in Poland. We provide services to users worldwide and comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the UK GDPR where applicable. We develop and publish games on the Roblox platform.
For the purposes of the EU General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR), Laius Entertainment is the data controller responsible for the processing of your personal data in connection with our website and services.
- Website: laiusentertainment.com
- General enquiries: [email protected]
- Legal and data protection enquiries: [email protected]
Laius Entertainment is not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR, as our core activities do not involve large-scale systematic monitoring of individuals or large-scale processing of special categories of data. For any data protection enquiries, please contact us at [email protected].
2. What data we collect and why
We only collect personal data where we have a lawful basis to do so. The categories of data we process, and the purposes for which we process them, are set out below.
2.1 Roblox game data
When you play our games on the Roblox platform, we may receive and process the following data provided by Roblox:
- Your Roblox username
- Your Roblox user ID
- Limited game activity data (such as in-game progress and interactions)
Lawful basis: Legitimate interests under Article 6(1)(f) GDPR (to provide and improve our games).
The collection and processing of data on the Roblox platform is also subject to Roblox's own privacy policy and terms of use. We encourage you to review those separately.
2.2 Customer support and live chat (Intercom)
If you contact us through our support chat, Intercom may collect your name, email, browser/device information, messages, and chat history. We use this data to respond to support requests and improve our help process. Intercom stores this data on our behalf as a processor.
Our live chat may use LaiusAI, an AI support assistant powered by Fin from Intercom. LaiusAI can answer common questions and help resolve simple support requests. If it cannot help, or if you would rather speak to a person, you can request a human agent.
- Your name or alias
- Your email address
- The content of your messages and any attachments
- Technical metadata such as your browser type, device, and IP address
We process support conversations under our legitimate interest in providing customer service. Your messages may also be stored and used to train our support team and improve the quality of our service.
Lawful basis: Legitimate interests under Article 6(1)(f) GDPR (to provide customer support and respond to enquiries).
2.3 Merch store orders (Shopify and fulfilment)
If you place an order or begin checkout in our merch store, we and our service providers may process information needed to take payment, produce the item, ship the order, prevent fraud, handle support, and comply with tax and accounting obligations.
This may include your name, email address, billing and shipping address, order contents, selected country or region, discount or promo codes, payment status, fulfilment status, shipping tracking information, and messages you send us about the order.
Checkout and payments are handled through Shopify and payment providers. We do not receive or store your full card details.
Lawful basis: Contract under Article 6(1)(b) GDPR (to process and fulfil your order), legal obligation under Article 6(1)(c) GDPR (for tax and accounting records), and legitimate interests under Article 6(1)(f) GDPR (to prevent fraud, provide support, and manage our store).
2.4 Voluntary contributions (Buy Me a Coffee)
We accept voluntary contributions through Buy Me a Coffee. Any personal or payment data you provide when making a contribution is processed by Buy Me a Coffee in accordance with their own privacy policy. We may receive limited information such as your name or username and contribution amount.
Lawful basis: Legitimate interests under Article 6(1)(f) GDPR (to process and acknowledge your voluntary contribution).
2.5 Newsletter and marketing emails
You can choose to subscribe to the Laius Newsletter through our website footer. We use Brevo to manage newsletter subscriptions, confirmation emails, mailing lists, and email delivery.
When you subscribe, we collect and process:
- Your email address
- Your subscription status, including confirmation, unsubscribe, and bounce records
- Basic technical information connected with the subscription or email delivery, such as date, time, IP address, browser or device information, and email delivery records
- Email interaction information, such as whether a newsletter was delivered, opened, or clicked, where this is provided by Brevo and permitted by applicable law
We use this information to send Laius Entertainment news, updates, resources, and occasional information about our games or community. We do not sell newsletter subscriber data and we do not use newsletter data for automated decisions that produce legal or similarly significant effects.
Lawful basis: Consent under Article 6(1)(a) GDPR and UK GDPR. For direct marketing by email, we rely on your consent where required by applicable electronic communications laws, including EU and UK ePrivacy rules. You can withdraw your consent at any time by using the unsubscribe link in any newsletter email or by contacting us at [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
If you are under 16 and located in Poland or another EU country where parental consent is required, please ask a parent or guardian before subscribing. If you are in the United Kingdom and under 13, parent or guardian consent is required.
2.6 Safety Centre reports
If you submit a report through the Safety Centre, we collect the information you choose to enter in the form. This can include your username or contact details, the reported player or account, where the issue happened, the reason for the report, your description, and any evidence files you upload.
Safety Centre reports are sent directly to our moderation team so they can review the concern and decide what action is needed. Moderators receive the form fields and evidence you submit. We do not show moderators your IP address as part of the report.
3. Infrastructure and service providers
To deliver our website and services securely and reliably, we use the following infrastructure providers. These providers may process limited technical data (such as IP addresses and request metadata) as part of their operations:
- Amazon CloudFront โ Content Delivery Network (CDN)
- Cloudflare โ CDN and security services
- Brevo โ newsletter subscription management, confirmation emails, mailing lists, and email delivery
- Shopify โ online store, checkout, order management, payment-related services, and customer privacy controls for the merch store
- Printful โ print-on-demand fulfilment, production, shipping, and order issue handling for merch products
Each of these providers acts as a data processor on our behalf where they process data for us. Some providers, including Shopify, may also act as an independent controller for limited parts of their own services. Their own privacy notices will apply to those parts.
For Shopify checkout and related consumer services, please also see the Shopify Consumer Privacy Policy.
4. Use of artificial intelligence
We may use artificial intelligence in limited ways to support safety and customer service. In live chat, LaiusAI may answer common support questions through Intercom. You can request a human agent if you need one or if the AI response does not resolve your issue.
We may also use automated tools, including AI-based moderation tools, to help review safety-related reports or messages sent through features in our Roblox games. For example, these tools may help identify whether a report is likely to be about a player safety concern and whether it should be sent to our moderation team for review.
These tools are used to help protect players and reduce spam or misuse of safety reporting features. Some safety reports may be automatically triaged before they are reviewed by a human. They do not make final moderation decisions such as bans, account restrictions, or enforcement actions without human review by our moderation team.
Where required by law, you have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. If you believe a moderation decision has been made in error, you can request human review by contacting us at [email protected].
5. Cookies
Our main website uses only cookies that are strictly necessary for the functioning of the site. These include security cookies (Cloudflare) and session cookies. Our live chat (Intercom) only loads and sets cookies when you choose to open it.
The merch store and Shopify checkout may use cookies and similar technologies needed for cart, checkout, localisation, discount codes, Shop Pay, fraud prevention, and customer privacy choices. We do not use analytics, advertising, or marketing cookies on our main website.
For further details, please refer to our Cookie Policy.
6. International data transfers
Some of our service providers process data outside the European Economic Area (EEA) and the United Kingdom. In particular, our customer support platform (Intercom) is hosted in the United States. OpenAI, Amazon CloudFront, Cloudflare, and Brevo or its approved subprocessors may also process data in the United States or other countries outside the EEA or the United Kingdom. Where such transfers occur, we ensure that appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreements or Addenda, where applicable
- Adequacy decisions where the European Commission or UK Secretary of State has determined the receiving country provides adequate protection
7. Data retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:
- Roblox game data: Retained until you request deletion or until we receive a right-to-erasure notification from Roblox on your behalf. You may also request deletion directly by contacting us at [email protected].
- Customer support data (Intercom): Retained for up to 24 months after your last interaction, unless a longer period is required for legal or dispute resolution purposes.
- Voluntary contribution data (Buy Me a Coffee): Any data associated with your contribution is processed and retained by Buy Me a Coffee in accordance with their own privacy policy. We do not store payment information.
- Newsletter data (Brevo): Retained until you unsubscribe, withdraw consent, or ask us to delete it, unless we need to keep limited records for legal, security, suppression-list, or compliance purposes. Brevo may also keep unsubscribe and suppression records to make sure you do not receive further marketing emails after opting out.
8. Your rights
Under the EU GDPR (enforced in Poland by the President of the Personal Data Protection Office, UODO) and the UK GDPR (enforced by the Information Commissioner's Office, ICO), you have the following rights in relation to your personal data:
- Right of access โ You have the right to request a copy of the personal data we hold about you.
- Right to rectification โ You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to erasure (right to be forgotten) โ You have the right to request that we delete your personal data, subject to certain legal exceptions. If you request deletion of your data through Roblox, Roblox will notify us and we will delete your data from our systems within one month of receiving the notification. To request deletion of data held by Laius Entertainment outside of Roblox (such as support conversations or website data), please contact [email protected].
- Right to restriction of processing โ You have the right to request that we limit how we use your data in certain circumstances.
- Right to data portability โ You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to object โ You have the right to object to our processing of your personal data where we rely on legitimate interests.
- Right not to be subject to automated decision-making โ You have the right to request human review of any decision made solely by automated means that significantly affects you (see Section 4).
- Right to withdraw consent โ Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by law.
8.1 Right to lodge a complaint
If you are unsatisfied with how we handle your data or your rights request, you have the right to lodge a complaint with the relevant supervisory authority:
- Poland: Prezes Urzฤdu Ochrony Danych Osobowych (UODO) โ uodo.gov.pl
- United Kingdom: Information Commissioner's Office (ICO) โ ico.org.uk
9. Children's privacy
We take the privacy of children very seriously. Our games are published on the Roblox platform, which has its own age restrictions, parental controls, and privacy protections in place. We do not knowingly collect personal information from children beyond what Roblox provides to us through its platform.
Under the GDPR, the processing of personal data of a child below the age of 16 (or a lower age set by individual EU Member States, which is 16 in Poland) requires consent from the holder of parental responsibility. Under the UK GDPR, this age threshold is 13. We rely on Roblox to obtain such consent where required.
Newsletter subscriptions are voluntary. If a child subscribes directly to our newsletter and parental consent is required by law, the child must have permission from a parent or guardian. If you are a parent or guardian and believe your child subscribed without the required consent, please contact us and we will remove the subscription.
If you are a parent or guardian and believe that your child has provided personal data to us directly, please contact us at [email protected] and we will take steps to delete such information promptly.
10. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include the use of encrypted connections (HTTPS/TLS), access controls, and security services provided by Cloudflare.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
- Live chat: laiusentertainment.com
- General support: [email protected]
- Legal and data protection: [email protected]