Privacy Policy

Effective Date: 1 May 2025
Last Modified: 18 September 2026

1. Who We Are

Motion Cypher is a UK-based creative project producing visual puzzles, physical books, downloadable images and interactive image-based games.

We do not require customers to create a website account. However, we process certain personal data when you purchase products, participate in games, request support, receive a reward, or otherwise interact with our services.

2. What Personal Data We Collect

Depending on how you interact with Motion Cypher, we may collect:

Order information: name, email address, billing and delivery address, order details and purchase history.
Digital purchases: information required to provide downloads, access codes or related services.
Game participation: answers, submissions, access codes and information relating to participation.
Social media information: Instagram or other social media handles where required to verify eligibility, contact winners or issue rewards.
Reward information: information required to issue vouchers or payments, including relevant PayPal details where applicable.
Technical information: IP address, browser/device information and other standard technical information generated when using our website.
Communications: information you provide when contacting us regarding an order, product, game or other enquiry.

For children’s products, our services are intended to be purchased and used under the supervision of a parent, guardian or responsible adult. We do not intentionally seek to collect personal information directly from children.

3. How We Use Your Data

We use personal data only where necessary for the operation of Motion Cypher. This may include:

Processing and fulfilling physical and digital orders.
Arranging delivery of physical products.
Providing download links, access codes and digital content.
Sending order confirmations, receipts and essential service communications.
Responding to customer enquiries and support requests.
Processing game submissions and determining eligibility for rewards.
Contacting winners and issuing prizes or vouchers.
Preventing fraud, abuse, cheating or misuse of our services.
Maintaining appropriate business, financial and accounting records.
Improving website functionality, security and performance.

Lawful Basis for Processing

Where applicable under the UK GDPR, we process personal data on the following lawful bases:

Performance of a Contract: where processing is necessary to process an order, provide a product or service, arrange delivery or fulfil an agreement with you.
Legal Obligation: where information must be retained to meet applicable tax, accounting or other legal requirements.
Legitimate Interests: where processing is reasonably necessary for purposes such as website security, fraud prevention, service improvement and administration, provided those interests do not override your rights and freedoms.

Where processing relies on consent, you may withdraw that consent at any time.

4. Payments and Financial Information

We do not intentionally collect or store your full payment card or bank account details on our website.

Payments are processed through relevant payment providers, such as Stripe or PayPal. These providers may process payment and transaction information in accordance with their own privacy policies.

We may retain information about the transaction itself, such as the purchaser, order, amount paid and transaction status, where necessary for order fulfilment, accounting, legal obligations and customer support.

5. Physical Book Orders

When purchasing a physical book, we require information necessary to fulfil the order. This may include your name, email address, billing information and delivery address.

Your delivery information may be provided to delivery or fulfilment providers where necessary to deliver your order.

Order information may also be retained for accounting, legal, returns, refunds, warranty or customer-service purposes.

6. Digital Products and Games

For digital purchases and Cypher games, we may process information necessary to provide access to the relevant content and administer gameplay.

This may include email addresses, order information, access codes, submissions and relevant social media handles.

Competition and gameplay information may also be retained for a limited period following the conclusion of a challenge for purposes such as verifying results, resolving disputes and administering rewards.

7. Instagram and Social Media Handles

Some Motion Cypher games require participants to have an active social media account and follow the relevant Motion Cypher account in order to be eligible for rewards.

Where necessary, we may collect or record a participant’s Instagram or other social media handle to:

Verify eligibility.
Contact winners.
Issue rewards.
Maintain records of participation.
Produce non-sensitive statistics such as most wins or most plays.

A social media handle may itself constitute personal data. We will not intentionally combine such statistics with unnecessary identifying information for publication.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, security and dispute-resolution requirements.

Examples include:

Order and transaction information: retained for the period necessary to fulfil orders and meet applicable legal and accounting obligations.
Competition information: normally retained only for a reasonable period following completion of the relevant game.
Customer communications: retained for as long as reasonably necessary to deal with the enquiry and any resulting matter.
Technical and analytics information: retained according to the relevant service and its configuration.

Where a specific retention period cannot reasonably be stated, we use appropriate criteria to determine how long information should be retained.

9. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

Personal data may be processed and stored within our website infrastructure and through third-party services used to operate Motion Cypher, including hosting, payment, email, analytics and other service providers.

Access to information is restricted where appropriate and we take reasonable steps to maintain the security of our systems and the services we use.

No internet-based system can be guaranteed to be completely secure.

10. Third-Party Services

Depending on the services currently in use, personal data may be processed by third-party providers including:

Payment processors such as Stripe and PayPal.
Website hosting and infrastructure providers.
Email and communication providers.
Analytics and website-performance services.
Delivery or fulfilment providers.
Other service providers necessary to operate Motion Cypher.

These providers may process information on our behalf or as independent data controllers, depending on the service involved.

Where personal data is transferred internationally, the applicable legal requirements and safeguards for such transfers will apply.

11. Cookies and Similar Technologies

Motion Cypher may use cookies and similar technologies required for website functionality, security, shopping-basket functionality, analytics or other purposes.

Where consent is legally required for non-essential cookies or similar technologies, we will request that consent through the relevant cookie controls.

You can find further information about the technologies used and your available choices through our cookie settings or Cookie Policy.

This is worth changing from your current wording. A privacy policy simply saying “You can disable cookies through your browser” isn’t enough where you use non-essential analytics/tracking cookies. The ICO says users generally need to be told about cookies and consent obtained where required.

12. Your Data Protection Rights

Subject to applicable legal conditions, you may have rights including:

The right to access your personal data.
The right to correct inaccurate information.
The right to request erasure.
The right to restrict certain processing.
The right to object to certain processing.
The right to data portability where applicable.
The right to withdraw consent where processing is based on consent.

You may contact us using the details below to exercise your rights.

You also have the right to complain to the UK’s data protection supervisory authority, the Information Commissioner’s Office (ICO), if you believe your personal data has been handled unlawfully.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The current version will always be made available on this website. Where appropriate, we may also publish a short notice through our official social media channels identifying the principal changes.

You should check this page periodically to ensure that you are aware of the current version.