Privacy Notice

This Privacy Notice was updated on 25 July 2018

Table of Contents

INTRODUCTION

HOW & WHEN WE COLLECT YOUR PERSONAL DATA

TYPES OF PERSONAL DATA WE COLLECT

WHY & HOW WE USE YOUR PERSONAL DATA

WHAT THE DIFFERENT LAWFUL BASES MEAN

KEEPING YOUR PERSONAL DATA SECURE

WHO WE SHARE PERSONAL DATA WITH

COOKIES

WHERE YOUR PERSONAL DATA IS PROCESSED

HOW LONG WE HOLD YOUR DATA FOR

YOUR RIGHTS OVER YOUR PERSONAL DATA

DATA PROTECTION OFFICER

CHANGES AND UPDATES TO THIS PRIVACY NOTICE

ANY QUESTIONS?











 

INTRODUCTION

Hi. We’re Square Enix Limited. You probably know us from all the SQUARE ENIX®, EIDOS®, Crystal Dynamics® and TAITO® branded entertainment content we develop, publish, distribute and license, including: FINAL FANTASY®, DRAGON QUEST®, TOMB RAIDER® and SPACE INVADERS®.

This Privacy Notice applies to you if you are a customer or subscriber of Square Enix Limited or if you are just visiting one of our websites where this Privacy Notice is posted. So please take the time to read this Privacy Notice, as it explains how we protect your information and respect your privacy.

 

HOW & WHEN WE COLLECT YOUR PERSONAL DATA

From the moment you begin interacting with Square Enix Limited, we are collecting information. Sometimes the personal data we collect is provided by you and sometimes it is collected automatically.

You give us data when you: register or update a Square Enix Members account or Square Enix Account, update your profile or other account details, use our paid-for services, apply for a job with us, attend an interview or assessment, opt-in to our marketing messages, subscribe to our mailing lists, call us, email us, live chat with us online, chat to us in-game, make a purchase from us, enter one of our competitions and/or answer one of our surveys, fill in a form conduct a search or post content on our website, interact with other users on our online services, register to attend our events or ‘follow’, ‘like’, post to or interact with our social media accounts.

We collect your data automatically when you: browse and/or use any of our website pages, interact with other users on our online services, receive an email from us, log into your Square Enix Members or Square Enix Account, play one of our games, live chat with us online, chat to us or other users in-game or make a purchase from us.

 

TYPES OF PERSONAL DATA WE COLLECT

Contact details

Your name, address, telephone number and email address.

Account profile data

Your name, email address, birth date, username and password.

Financial information

Your bank account number, credit/debit card details and billing address.

Information that identifies you

Your birth date, IP address, login information, browser type and version, time zone setting, browser plug-in types, geolocation information about where you might be, operating system and version, cookies, Google AdID, Apple IDFA and unique device IDs.

Information on how you use our websites

Your URL clickstreams (the path you take through our site), products/services you view or purchase, page response times, download errors, how long you stay on our pages, what you do on those pages and other actions.

Information on how you purchase and use our games and services

The gaming platform you are using, mobile and hardware identifiers, device event information, crash reports, language options you choose, subtitles selected, version of the game being played, game scores, game metrics, achievements, rankings, time played, feature usage, game feature usage, player performance and progression, in-game purchases, downloadable content purchases, micro transactions, timezone, timestamp, session duration, challenges or gifts sent to other players and number of friends on the platform.

Survey information

Any information that you decide to provide to us when you complete one of our surveys.

Employment information (only when you apply for job roles with us)

Name, email address, employment history, references, education history, results of pre-employment screening, relevant experience, achievements, skills and qualifications and the outcome of any interviews or tests that are part of the recruitment process.

Information recorded at Live Square Enix Events

Photographs and/or videos of you.

Information provided to us by third parties

Game Platforms
Nickname, username, user ID, friends list, email address, geolocation, language and date of birth

Mobile Platform Providers and App Stores
Username, device ID, purchase history and geo-location.

Facebook
Name, email address and friends playing the same game

What about really sensitive data?

We do not actively collect any “sensitive data” about you (data that is intended to identify your racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your sexual life or orientation and criminal offences or alleged offences). So, please do not send us your sensitive data, or post it anywhere on our services.

What about children’s data?

We do not target our games to children under 13 and we do not knowingly collect any personal data from any person under 13 years of age.

If you think we have unintentionally collected personal data from someone under the age of 13, please let us know by contacting us here.

 

WHY & HOW WE USE YOUR PERSONAL DATA

We will only use your personal data for certain specified reasons and only where we have a lawful basis to do so. Below are the reasons we use your personal information and the lawful bases for doing so:

Registering your account

When you sign up to use our website, we will use the details provided on your account registration form.

Our lawful basis for this use of your data is: performing our contract with you.

Keeping our websites and gaming services running

Providing you our games and services online, login authentication, age verification, remembering your settings, processing payments, hosting and back-end infrastructure and access to our websites.

Our lawful bases for this use of your data are: performing our contract with you, to comply with our legal obligations or legitimate interests to keep our services running.

Enabling you to communicate with other users

Certain parts of our websites and online services enable you to communicate and interact with other users. We will use information you have provided us to enable these interactions and communications on our websites and online services.

Our lawful basis for this use of your data is: performing our contract with you.

Processing payments

We will use your information to process payments for our goods and services.

Our lawful basis for this use of your data is: performing our contract with you.

Targeted advertising

Through cookies, clear GIFs, web beacons and tracking pixels we will use your information to deliver relevant advertisements and offers to you and measure the effectiveness of the advertising and offers. These technologies connect your behaviour across different websites, mobile apps and devices and enable tailored advertising to be served to your game, web browser, or mobile device. Please also see our Cookie Policy.

Our lawful basis for this use of your data is: your consent.

Social media

We will use your information to communicate with you where you message us, respond to our posts, “like” our posts, tweet or retweet us or otherwise interact with us directly on social media platforms.

Our lawful bases for this use of your data are: our legitimate interests in promoting our brand and communicating with interested individuals.

Anti-cheat, anti-tampering, fraud and unlawful activity detection and prevention

To enforce our rules and policies, protect our customers and business, protect the competitive integrity of our games, investigate, and deter against fraudulent, unauthorised or illegal activity.

Our lawful bases for this use of your data are: our legitimate interests to operate a safe and lawful business or where we have a legal obligation to do so.

Community and customer support

Handling all enquiries or complaints, troubleshooting and solving technical issues over live chat, phone, email and in-game chat, making necessary changes to our products and services and monitoring your participation in our forums and all parts of our services that allow you to publicly post information or interact with other users.

Our lawful bases for this use of your data are: performing our contract with you, our legitimate interests to provide you with customer service, our legitimate interest in providing the correct products and services to our website users or to comply with our legal obligations.

Improving and developing our games, services and websites

Traffic optimisation, in-game data collection, analytics and research, including profiling and the use of machine learning (we sometimes use carefully selected third parties to do this on our behalf), cheat detection and prevention, managing landing pages and heat mapping our sites.

Our lawful bases for this use of your data are: performing our contract with you and our legitimate interests in learning about the types of people who are interested in our games, websites and services, to keep our games, online services and websites updated and relevant, to develop our business and to inform our marketing strategy.

Recruitment

To evaluate your suitability for a role that you have applied for, verify your academic qualifications and work experience, review and audit our recruitment processes and its outcomes and identify any future employment opportunities that you may be suitable for.

Our lawful basis for this use of your data is: our legitimate interests to recruit new employees or contractors.

Contests

To process your entry into, contests, surveys or other promotional events that we run from time to time, should you decide to participate in them.

Our lawful bases for this use of your data is: your consent or contract.

Live Square Enix Events

To photograph you and record videos which you may be visible in, for promotional use at our live events.

Our lawful bases for this use of your data are: your consent if you are a guest at the event or contract if you are a contestant.

Marketing

Sending you communications about our services, products and features that you have agreed to receive.

Our lawful bases for this use of your data are: your consent or our legitimate interests to provide you with marketing communications where we may lawfully do so.

 

WHAT THE DIFFERENT LAWFUL BASES MEAN

This section explains what the lawful bases we rely on for processing your personal data actually mean.

Consent

You have provided us clear and unambiguous consent for us to process your personal information for a specific purpose. You have the right to withdraw this consent at any time.

Contract

We need to process your personal information for us to fulfil our contractual relationship with you.

Legitimate interests

We need to process your personal information for our legitimate interests, or the legitimate interests of a third party, in conducting and managing our business and our relationship with you. Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you.

 

KEEPING YOUR PERSONAL DATA SECURE

We will treat your data with the utmost care and take all reasonable steps to protect it. With that in mind, we have a range of robust policies, processes and technical measures in place, and maintain physical, technical and administrative safeguards to protect your personal information.

We secure access to all transactional areas of our websites and apps: access to your personal data is password-protected, transactional information is secured and tokenised to ensure it is protected and our systems are regularly monitored for possible vulnerabilities and attacks.

However, remember that, unfortunately, no data transmission is guaranteed to be 100% secure and you are always responsible for keeping your username and password secret and safe!

If you believe your personal data has been breached, please contact us immediately at DPO@eu.square-enix.com.

 

WHO WE SHARE PERSONAL DATA WITH

Third parties process information about your purchases and use of our games on our behalf. We provide these trusted third parties only the information they need to perform their specific services for the exact purposes we specify in our contract with them. If we stop using their services, any of your data held by them will either be securely and permanently deleted or rendered irreversibly anonymous. In all cases, we apply measures to keep your data safe and your privacy protected.

We share your personal data with third-party IT companies who support our website, online services and other business systems, payment services providers who process your payments for goods and services, fraud detection and prevention companies who help us prevent cheating, abuse, fraud, tampering, or other unauthorised use of our services and direct marketing companies who help us manage our electronic communications with you.

Personal data is shared with Google, Facebook and other third-party advertising partners so they can show you products that might be of interest to you while you are browsing the internet. For example, if you provide us with your email address we may share it with Facebook so that you can receive targeted ads from us when you use Facebook, and so that other users of Facebook who share similar interests to you can also receive targeted ads from us. This is based on your consent to marketing.

Under very specific circumstances, we will share your personal data with third parties (including law enforcement bodies) in order to respond to fraudulent or criminal (or potentially fraudulent or criminal) activity on our systems or at our events. We may also be required by law to disclose your personal data to the police or to another law enforcement, regulatory or government body, in your country of origin or elsewhere, including upon receiving a legally valid request to do so. We assess these requests on a case-by-case basis, and we take the privacy of our customers into consideration when responding.

 

COOKIES

Cookies are small amounts of information in the form of text files which are stored on the device you use to access our website. We use cookies to allow our services to operate effectively and to enhance your experience when using our services and to bring you relevant advertising.

Please have a look at our Cookie Policy for more info.

 

WHERE YOUR PERSONAL DATA IS PROCESSED

We are a global organisation, so we sometimes need to share your personal data with our other offices, or with other third parties and suppliers, who are located outside the European Economic Area (“EEA”).

When it is necessary for us to transfer your personal data out of the EEA, we will only do so where the transfer is authorised under applicable EU law, including where the transfer is made to a country the European Commission has deemed to have adequate data protection laws, is governed by the Model Contractual Clauses (European Commission: Model contracts for the transfer of personal data to third countries) for data transfers between EU and non-EU countries or is authorised by another recognized transfer mechanism under applicable law . For transfers to the U.S. we do so under the E.U.-U.S. and Swiss-U.S. Privacy Shield Framework, which we participate in. This is to ensure that suitable safeguards to protect the privacy and security of your personal data are applied and are consistent with your relationship with us and the practices described in this Privacy Notice. To learn more about the Privacy Shield Framework, and to view our certification, please visit European Commission: EU-US Privacy Shield. To view our certification and a list of companies certified under the Privacy Shield Framework, please visit https://www.privacyshield.gov/list.

 

HOW LONG WE HOLD YOUR DATA FOR

We will only retain your personal data for as long as you are a customer and/or are using our services and for no longer than is necessary after that. We will securely destroy or irreversibly anonymise the information once it is no longer necessary to retain it. We operate a data retention policy and continually review it to ensure we and are not holding onto your information for longer than is necessary.

 

YOUR RIGHTS OVER YOUR PERSONAL DATA

Your right of access

You have the right to request copies of your personal data. This right always applies. However, there are some exemptions, which means you may not always receive all the information we process. More about this right.

Your right to rectification

You have the right to request that we rectify information you think is inaccurate and/or complete information you think is incomplete. This right always applies. More about this right.

Your right to erasure

You have the right to request that we erase your personal information in certain circumstances. More about this right.

Your right to restriction of processing

You have the right to request that we restrict the processing of your information in certain circumstances. More about this right.

Your right to object to processing

You have the right to object to us processing your personal information if we are processing your information based on our legitimate interests. More about this right.

Your right to data portability

You have the right to request that we transfer your personal data from one organisation to another, or that we provide a copy of it to you. The right only applies to information you have given us and that we are processing based on your consent or a contract you have with us. More about this right.

You are not required to pay any charge for exercising these rights.

For more information or to exercise your above rights, please contact us at DSAR@eu.square-enix.com or write to us at:

FAO: Data Protection Officer
Square Enix Ltd
240 Black Friars Road
London, UK
SE1 8NW

You may also lodge a complaint regarding our use of your personal information. We ask that you please tell us first so we can have a chance to look into your concerns. If you remain unsatisfied, you can contact the Information Commissioners Office on their website at www.ico.org.uk/make-a-complaint.

 

DATA PROTECTION OFFICER

Square Enix Limited is headquartered in London, in the United Kingdom. We have appointed a data protection officer for you to contact if you have any questions or concerns about your personal data. Our data protection officer can be contacted at:

DPO@eu.square-enix.com, or by writing to

FAO: Data Protection Officer
Square Enix Ltd
240 Black Friars Road
London, UK
SE1 8NW

 

CHANGES AND UPDATES TO THIS PRIVACY NOTICE

As our services and products change from time to time, you should expect this Privacy Notice to change as well. We reserve the right to amend this Privacy Notice at any time, for any reason. We will make all reasonable endeavours to notify you of any changes. We may also email periodic reminders of this Privacy Notice, and will email customers who have a registered Square Enix Account or Square Enix Members account of any material changes to this Privacy Notice. Nevertheless, you should check here regularly to see the current Privacy Notice that is in effect and any changes that may have been made to it.

 

ANY QUESTIONS?

You made it to the end! We do hope you have enjoyed reading this Privacy Notice and we commend you on your dedication to understanding how we handle your personal data and your rights to control it. If this Privacy Notice hasn’t answered all your questions, or if you have any comments or ideas about how we can make this Privacy Notice even better, please don’t hesitate to contact our DPO at:

DPO@eu.square-enix.com or in writing to

FAO: Data Protection Officer
Square Enix Ltd
240 Black Friars Road
London, UK
SE1 8NW