Privacy Policy

Applies to: United States, European Union, United Kingdom, Canada, Australia, Brazil, and all jurisdictions where Services are offered

Overview

This Privacy Policy explains how Bond Street Entertainment LLC collects, uses, discloses, stores, and protects personal information when you use our website, simulation tools, and related Services.

Certain key terms used in this policy — such as “personal data,” “controller,” “process,” and “data subject” — have the meanings assigned in Article 4 of the EU General Data Protection Regulation (GDPR). This policy applies to all users of the Services regardless of location.

This policy applies only to personal information collected through the Services. It does not apply to information collected offline or by third parties that we do not control.

By using our Services — including the website and simulation tools — you consent to our privacy practices as described in this policy. If you do not agree, please do not use the Services.

1. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, do not submit any information about yourself to us.

If you believe a child under 13 has provided personal information to us, please contact us at [Insert Contact Email] and we will take appropriate steps to delete it.

2. Personal Information We Collect

We may collect the following categories of personal information:

• Identifiers: Name, email address, account name, and account credentials.
• Internet or network activity: IP address, browser type, device type, pages visited, features used, and session duration.
• Communications: Messages, support requests, feedback, and correspondence.
• Usage and preference information: Settings, selected features, and interaction history.
• Technical information: Operating system, device identifiers, and log data.

We collect this information directly from you, automatically through your use of the Services, and from service providers that support our operations.

3. How We Use Personal Information

We use personal information to:

• Provide and operate the Services.
• Create and manage user accounts.
• Respond to questions and support requests.
• Improve the Services, including analytics and performance monitoring.
• Detect, prevent, and investigate fraud, abuse, or security issues.
• Enforce our Terms and protect our rights, users, and systems.
• Comply with legal obligations.
• Send administrative notices and service-related communications.

We may also combine anonymized or aggregated usage data with other information for legitimate business purposes such as product development and service improvements.

We rely on the following legal bases to process personal data: your consent; compliance with applicable law; our legitimate interests in operating and improving the Services; fulfillment of contractual obligations; and protection of the rights, property, and safety of the Company and its users.

4. Cookies and Similar Technologies

We use cookies and similar technologies to keep the Services functioning, remember preferences, analyze traffic, and improve user experience. Where required by law, we will ask for consent before using non-essential cookies or tracking technologies.

Cookies help us:

• Maintain user sessions.
• Remember preferences and settings.
• Analyze website traffic and performance.
• Improve the Services.

You can manage or disable cookies through your browser settings. Some features of the Services may not function properly if cookies are disabled.

Do Not Track (“DNT”) is a browser setting that signals websites not to track user behavior across sites. Our Services do not track users across third-party websites and therefore do not respond to DNT signals.

5. How We Share Personal Information

We may share personal information with:

• Hosting and infrastructure providers.
• Analytics and performance monitoring providers.
• Email and notification service providers.
• Security and fraud prevention providers.
• Legal or government authorities when required by applicable law.
• Buyers or successors in the event of a merger, acquisition, reorganization, or asset sale.

Service providers may only use personal information as needed to provide services to us and are required to keep it confidential. We do not sell personal information.

6. International Transfers

Bond Street Entertainment LLC is based in the United States. Your personal information may be processed in the United States and other countries where our service providers operate. Data protection laws in these jurisdictions may differ from those in your country of residence.

Where cross-border transfers of personal data are required — including transfers from the EU, UK, Canada, Australia, or Brazil — we use appropriate safeguards such as standard contractual clauses or other legally recognized transfer mechanisms to protect your information.

7. Data Retention

We retain personal information only for as long as reasonably necessary to provide the Services, maintain records, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of information, the purpose of collection, and any applicable legal or operational requirements.

8. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction.

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security of personal data transmitted through the Services.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

• Know what personal information we collect and how we use it.
• Access your personal information.
• Correct inaccurate or incomplete personal information.
• Delete personal information we hold about you.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Opt out of sale or sharing of personal information, if applicable.

To exercise any of these rights, contact us at [Insert Contact Email] with “Data Subject Access Request” in the subject line. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction if you believe your privacy rights have been violated.

10. European Union — GDPR

If you are located in the European Union or European Economic Area, the GDPR applies to how we process your personal data. Under the GDPR, you have the following rights:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — to request deletion of your personal data in certain circumstances.
• Right to restriction of processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Right not to be subject to automated decision-making, including profiling, where it produces legal or similarly significant effects.

Where we rely on consent as a legal basis, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

You have the right to lodge a complaint with your local Data Protection Authority. A full list of EU DPAs is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en

11. United Kingdom — UK GDPR

If you are in the United Kingdom, you have rights under UK data protection law equivalent to those under the EU GDPR, including the right to access, rectify, erase, restrict, object to, and port your personal information, where applicable.

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at: https://ico.org.uk/make-a-complaint

12. United States — California (CCPA / CPRA)

If you are a California resident, you have additional rights under California law, including the right to know, delete, correct, and opt out of the sale or sharing of personal information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide any required opt-out options.

California residents also have the right not to receive discriminatory treatment for exercising their privacy rights.

13. Canada — PIPEDA & Quebec Law 25

If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level, and under provincial laws where applicable, including Quebec's Act respecting the protection of personal information in the private sector (Law 25), which is among the strictest in North America.

Under Canadian privacy law, you have the right to:

• Know why your personal information is being collected, used, or disclosed.
• Expect that your information is collected with your knowledge and consent, and used only for the purpose stated.
• Access your personal information and challenge its accuracy.
• Withdraw consent for certain uses of your information, subject to legal or contractual restrictions.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC).

Quebec residents have additional rights under Law 25, including the right to data portability, the right to be forgotten (in limited circumstances), and the right to be informed of any automated decision-making that significantly affects them.

To submit a privacy inquiry or complaint, contact the OPC at: https://www.priv.gc.ca

14. Australia — Privacy Act 1988

If you are located in Australia, your personal information is protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Under Australian privacy law, you have the right to:

• Know what personal information we hold about you and how it is used.
• Request access to your personal information.
• Request correction of inaccurate, incomplete, or out-of-date personal information.
• Make a complaint to us in the first instance, and if unresolved, escalate to the OAIC.

We will handle any cross-border transfers of your personal information in accordance with Australian Privacy Principle 8 and will take reasonable steps to ensure overseas recipients handle your data in a manner consistent with the APPs.

To make a privacy complaint or inquiry, contact the OAIC at: https://www.oaic.gov.au

15. Brazil — LGPD

If you are located in Brazil, your personal data is protected under the Lei Geral de Proteção de Dados (LGPD). The LGPD establishes rules for the collection, use, processing, and storage of personal data in Brazil and closely mirrors the framework of the EU GDPR.

Under the LGPD, you have the right to:

• Confirm the existence of processing activities involving your personal data.
• Access your personal data.
• Correct incomplete, inaccurate, or outdated personal data.
• Anonymize, block, or delete unnecessary or excessive personal data.
• Port your personal data to another service or product provider.
• Delete personal data processed with your consent.
• Obtain information about public or private entities with which we share your data.
• Be informed about the possibility of refusing consent and the consequences of doing so.
• Withdraw consent at any time.

To lodge a complaint with Brazil's national data protection authority, contact the ANPD at: https://www.gov.br/anpd

16. Changes to This Policy

We may revise this Privacy Policy from time to time. When we make updates, we will post the revised policy on this page and update the effective date. You are responsible for periodically reviewing this policy to stay informed about how we protect your information.

17. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact: