OFF BOX Studios
Legal / Personal data
Privacy
Policy.
OFF BOX Studios (“OFF BOX,” “we,” “us,” or “our”), based in Riyadh, Saudi Arabia, is responsible for personal data processed through offboxstudio.com. This policy explains what we collect, why we use it, how it is handled, and the choices available to you.
This policy currently covers the OFF BOX website and its contact forms. A separate or supplemental notice will be provided if an OFF BOX game begins collecting additional account, gameplay, or telemetry data directly from players.
1. Personal data we collect
When you use a website contact form, we collect the information you choose to provide:
- your name and email address;
- your company or organization, if provided;
- your message and the page from which it was sent;
- a submission reference number and the date and time of submission; and
- a record that you accepted the privacy notice.
Our hosting and security providers may also process limited technical information such as IP address, browser type, device information, request time, and security logs when you visit the website. We do not ask you to include sensitive personal data in a message.
2. Why we process it
We use personal data to receive and respond to messages, discuss publishing, investment, press, employment, partnerships, community matters, or other requests, maintain reliable contact references, prevent abuse, secure the website, and comply with legal obligations.
Our legal basis is your consent when you submit the form and, where applicable, our legitimate interest in responding to a request you initiated, operating a secure website, and maintaining necessary business correspondence. You may withdraw consent, but this does not affect processing already carried out lawfully.
3. How data is collected and used
The information is collected directly from the fields you complete. The website creates a reference number, stores a website-database copy, and sends the message to OFF BOX’s email inbox so the team can respond. We do not sell contact-form data or use it for advertising or unrelated mailing lists.
4. Service providers and disclosure
We disclose personal data only as needed to operate the website and deliver your message:
- our website hosting, database, security, and infrastructure providers;
- FormSubmit, which transmits form content to our inbox and may retain submission data temporarily;
- Google’s Gmail service, where OFF BOX receives and manages correspondence; and
- professional advisers, authorities, or other parties where required by law or reasonably necessary to protect rights, safety, or the integrity of our services.
We do not permit these providers to use your message for their own advertising purposes.
5. International processing
Some providers may process or store personal data outside Saudi Arabia, including in countries where they or their infrastructure operate. Where the Saudi Personal Data Protection Law applies, OFF BOX will use service-provider arrangements and other safeguards required for lawful transfers.
6. Retention and destruction
- Website-database copies of contact submissions are scheduled for deletion after 12 months during routine database maintenance.
- FormSubmit states that submission archives may be retained for up to 30 days.
- Email correspondence is normally retained for up to 24 months after the last substantive interaction, unless an ongoing relationship, dispute, security need, or legal obligation requires a longer period.
When retention is no longer necessary, we delete or anonymize the information using reasonable operational measures.
7. Your rights
Subject to applicable law, you may ask to be informed about our processing, access your personal data, obtain a copy, correct inaccurate or incomplete information, request deletion when applicable, withdraw consent, or object to certain processing. You may also make a complaint to the competent data-protection authority.
To exercise a right, email offbox.team@gmail.com with the subject Privacy request. We may need to verify your identity before acting. We will respond within the period required by applicable law.
8. Security
We use reasonable technical and organizational safeguards intended to protect personal data against unauthorized access, loss, alteration, or disclosure. No online transmission or storage method is completely secure, so we cannot promise absolute security.
9. Cookies and analytics
The current website does not use non-essential analytics cookies, advertising pixels, or behavioral profiling. Essential infrastructure may use strictly necessary technologies for security and delivery. If we add non-essential tracking, we will update this policy and provide choices where required.
10. External services
The website links to Steam, YouTube, Google Drive, Discord, LinkedIn, X, and other third-party services. Their privacy practices apply when you visit or interact with them. Embedded or linked media may send technical information to those providers when loaded or opened.
11. Children
The website contact form is not intended to collect personal data from children who cannot lawfully provide consent. A parent or legal guardian should contact us on a child’s behalf where required.
12. Policy changes
We may update this policy when our website, providers, or legal obligations change. The latest version will remain available here and will show the date of the most recent update. Material changes will receive additional notice where required.
13. Contact
Privacy questions and requests may be sent to offbox.team@gmail.com. OFF BOX Studios is based in Riyadh, Saudi Arabia.