Your privacy matters to us. It is Gleeboard Ltd's policy to respect your privacy and comply with applicable laws and regulations regarding any personal information we may collect about you, including across https://www.sillyrobotcards.com/ and other sites we operate.

Personal information means data that can reasonably identify you—such as your name, contact details, device information, payment details, and how you interact with our services.

Our website may contain links to third-party sites and services. Those organisations have their own privacy policies. After following a link, please review their policy to understand how they handle personal information. Our policy does not apply once you leave our site.

This policy is effective as of 24 February 2023 and was last updated on the same date.

Information we collect falls into two categories: “voluntarily provided” information and “automatically collected” information.

Voluntarily provided information is anything you knowingly share with us, such as details submitted when creating an account, uploading artwork, or contacting support.

Automatically collected information is data sent by your devices when you access our products and services.

Log Data

When you visit our website, our servers may automatically record standard data such as your IP address, browser type and version, pages visited, timestamps, time spent on each page, and other diagnostic details.

If an error occurs, we may collect additional technical information about the device, the action you attempted, and other context that helps us diagnose the problem. You may not always receive a notification when this logging takes place.

While this information is not identifying on its own, it might be combined with other data to personally identify you.

Personal Information

We may request personal information—for example when you register or contact us—including:

• Email address
• Home or mailing address

User-Generated Content

“User-generated content” refers to materials (text, image, or video content) voluntarily supplied to us for publication, processing, or usage on our platform. Such content is linked to the account or email address used to submit it.

Please note that any content you submit for public publication may be accessible to others. Once published, it may be difficult to remove due to the nature of the service and third-party archiving.

We only collect and use personal information when we have a legitimate reason to do so, and we collect only what is reasonably necessary to provide our services.

When We Collect Data

• Register an account
• Purchase a subscription or product
• Access our content via a browser or mobile device
• Contact us via email, social media, or similar channels
• Mention Silly Robot Cards on social media

How We Use Data

• Provide core platform features and personalised services
• Deliver products or services you have ordered

We may combine voluntarily provided and automatically collected information with research data from trusted sources to offer localised pricing, language, and other helpful context.

Security of Your Personal Information

We protect personal information with commercially acceptable safeguards designed to prevent loss, theft, unauthorised access, disclosure, copying, use, or modification. While we work hard to secure your data, no method of electronic transmission or storage is entirely risk-free.

You are responsible for maintaining strong passwords and safeguarding access to any accounts associated with Silly Robot Cards.

How Long We Keep Information

We retain personal information only for as long as necessary to provide the service you requested. For example, account data is retained while your account remains active. When no longer required, we delete or anonymise personal information unless retention is necessary for legal, accounting, reporting, archival, or research obligations.

Our products and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

We may disclose personal information to:

• Parents, subsidiaries, or affiliates of Gleeboard Ltd
• Third-party service providers (e.g., IT support, hosting, analytics, advertising networks, payment operators, maintenance partners)
• Employees, contractors, and related entities
• Existing or potential agents and business partners
• Credit reporting agencies, courts, tribunals, and regulators if you fail to pay for goods or services
• Courts, tribunals, regulators, and law enforcement as required by law or to protect our legal rights
• Third parties assisting with information, products, services, or direct marketing
• Third parties engaged to collect and process data
• Any entity that acquires all or substantially all of our assets or business

Third parties we currently rely on include Google Analytics, Mixpanel, Hotjar, Google Adsense, Bing Ads, and Stripe.

Personal information may be stored or processed in the United Kingdom, United States, Netherlands, or any location where we or our partners maintain facilities. These countries may have different data protection laws than your own.

When transferring personal information internationally we comply with applicable law and protect the information in line with this privacy policy.

Your choice: Providing personal information is optional, but declining may impact access to certain features or services.

Information from third parties: If we receive personal information about you from another party, we protect it according to this policy. Third parties providing information about someone else must have that person’s consent.

Marketing permission: You can withdraw consent for direct marketing at any time by contacting us.

Access: You may request details of personal information we hold about you.

Correction: Contact us to correct information that is inaccurate, outdated, incomplete, irrelevant, or misleading.

Non-discrimination: We will not discriminate against you for exercising your privacy rights.

Download: We can provide a copy of your personal information on request.

Data breaches: We comply with all applicable laws regarding data breach notification.

Complaints: Contact us if you believe we have breached data protection laws. We will investigate and respond in writing. You may also contact a regulator or data protection authority.

Unsubscribe: Opt out of marketing communications using the links provided or by contacting us directly. We may request additional information to verify your identity.

We use cookies to understand how you use our site and to tailor content to your preferences. A cookie is a small piece of data stored on your device that helps us recognise you on future visits. Refer to our Cookies Policy for detailed information.

If Gleeboard Ltd or its assets are acquired—or in the unlikely event we cease trading or enter bankruptcy—personal information may be transferred to the acquiring party as part of the transaction. Any new owner will be bound by this policy or an equivalent successor policy.

Our website may link to external sites not operated by us. We have no control over their content or privacy practices and cannot accept responsibility for their policies.

We may update this privacy policy to reflect changes to our business, accepted practices, or legal obligations. Updates will be posted at the same URL.

When changes are significant or required by law, we will notify you using your preferred communication method. Where required, we will seek consent or provide opt-in/opt-out options for new uses of personal information.

International Transfers of Personal Information

When disclosure of your personal information is governed solely by Australian privacy laws, some third parties may not be regulated by the Privacy Act or the Australian Privacy Principles. If such parties breach the Australian Privacy Principles, they may not be accountable under the Privacy Act and you may not have recourse under that legislation.

Data Controller / Data Processor

The GDPR distinguishes between organisations that determine the purposes and means of processing personal information (“data controllers”) and those that process personal information on behalf of controllers (“data processors”). Gleeboard Ltd is the Data Controller for the personal information you provide via Silly Robot Cards.

Legal Bases for Processing Personal Information

We collect and use personal information lawfully, fairly, and transparently. Where consent is required and you are under 16, we will obtain consent from a parent or legal guardian. Our lawful bases include:

Consent from You

When you give consent for a specific purpose—such as receiving support—you may withdraw it at any time. Withdrawal does not impact previous processing activities.

Performance of a Contract or Transaction

We process personal information to fulfil contracts or take preparatory steps, for example when you purchase products or subscriptions.

Our Legitimate Interests

We rely on legitimate interests to operate, improve, and promote our services, conduct research, understand our audience, and protect our legal rights.

Compliance with Law

We may be required to process or retain personal information to comply with legal obligations such as court orders, investigations, or regulatory requirements.

International Transfers Outside the EEA

Transfers of personal information from the European Economic Area (EEA) to other countries are protected using safeguards such as European Commission standard contractual clauses, binding corporate rules, or other lawful mechanisms.

Your GDPR Rights

Restrict: Request restriction of processing if you contest accuracy, believe processing is unlawful, require data for legal claims, or object based on legitimate interests.

Object: Object to processing based on legitimate or public interests. We will cease processing unless we demonstrate compelling legitimate grounds.

Data portability: Request a machine-readable copy of your personal information or ask us to transfer it to another controller.

Deletion: Request deletion of personal information. We will explain any legal reasons requiring retention. If you delete your account, we erase associated personal information within 30 days, though publicly cached content may remain accessible via third parties.

Under California Civil Code Section 1798.83, California residents with predominantly household relationships with Silly Robot Cards may request details of personal information shared with other organisations for marketing purposes.

To submit a request, contact us with “Request for California privacy information” in the subject line. Requests may be made once per calendar year. We will provide categories of personal information shared, along with recipient names and addresses.

Do Not Track

We do not currently respond to “Do Not Track” browser signals. We follow the standards set out in this privacy policy.

Cookies and Pixels

You may decline cookies via your browser settings, though functionality is governed by your browser’s capabilities. Refer to the Cookies section of this policy for more information.

CCPA-Permitted Financial Incentives

We may offer financial incentives allowed under the CCPA that relate reasonably to the value of your personal information. Participation requires opt-in consent, which you may revoke at any time.

California Notice of Collection

In the past 12 months we collected identifiers (e.g., name, email, phone number, IP address, account ID) and customer records (billing and shipping address, payment details). These categories are used for the purposes described in the “Collection and Use of Information” section.

Right to Know and Delete

California residents may request deletion of personal information and details about our data practices over the past 12 months, including:

• Categories of personal information collected
• Sources of personal information
• Categories of personal information disclosed or sold
• Categories of third parties receiving personal information
• Business or commercial purposes for collecting or selling data
• Specific pieces of personal information collected

To exercise these rights, contact us using the details provided in this policy.

Shine the Light

California residents may request information about how we share certain personal information with third parties and affiliates for direct marketing. Include “California Privacy Rights Request” along with your name and contact information when submitting a request.

For questions or concerns about this policy or your personal information, contact:

Mattheu
https://www.sillyrobotcards.com/help/contactus