1. Who We Are
BadgerPanel is a game server management platform operated by The Badgers Enterprise Limited, a company registered in England and Wales under company number 15670037. Our registered office is located at Unit 8 Harcourt Way, Meridian Business Park, Leicester, United Kingdom, LE19 1WP.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, The Badgers Enterprise Limited is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, you can contact us at contact@badgerpanel.com.
We have assessed our processing activities and determined that appointment of a Data Protection Officer (DPO) is not mandatory under current UK GDPR thresholds. All privacy-related queries are handled by our designated privacy lead, who can be reached at contact@badgerpanel.com.
Throughout this policy, “we”, “us”, and “our” refer to The Badgers Enterprise Limited, and “you” and “your” refer to you as the user of our services.
2. What Data We Collect
We collect and process the following categories of personal data when you use BadgerPanel:
2.1 Account Information
When you create an account, we collect your name, email address, username, and a securely hashed version of your password. If you register or sign in using a third-party OAuth provider (such as Google, Discord, GitHub, or Microsoft), we receive your basic profile information from that provider, which may include your display name, email address, and profile identifier.
2.2 Billing Information
If you purchase a subscription or any paid service, we collect your billing address and maintain records of your transactions. All payment card processing is handled entirely by our third-party payment processors, Stripe and PayPal. We do not store, process, or have access to your full credit or debit card numbers. We retain only the transaction identifiers, amounts, dates, and billing addresses necessary for our records.
2.3 Usage Data
We automatically collect certain technical information when you use our platform, including server access logs, your IP address, browser type and version, operating system, referring URLs, pages visited, actions taken within the platform, and timestamps of your interactions. This data helps us maintain the security and performance of our services.
2.4 Cookies and Similar Technologies
We use cookies and similar technologies to facilitate your use of BadgerPanel. The only cookies we currently use are essential session cookies required for authentication and platform functionality. If we introduce preference cookies that remember your settings and display choices, or optional analytics cookies that help us understand how our platform is used, we will do so only with your prior consent. Further details are provided in Section 9 of this policy.
3. How We Use Your Data
We process your personal data for the following purposes:
Account management
To create, maintain, and administer your account, verify your identity, and manage your access to the platform.
Billing and payments
To process transactions, issue invoices, manage subscriptions, and handle refunds or disputes in conjunction with our payment processors.
Service delivery
To provide, operate, and maintain the BadgerPanel platform, including provisioning and managing game servers, delivering updates, and ensuring service availability.
Security monitoring
To detect, prevent, and respond to fraud, abuse, security incidents, and technical issues, including monitoring for unauthorised access or violations of our terms of service.
Support
To respond to your enquiries, provide technical support, and resolve issues you report to us.
Communications
To send you service-related notifications, such as account confirmations, billing receipts, security alerts, maintenance updates, and, where you have consented, promotional communications about new features or services. You may opt out of promotional communications at any time.
Service improvement and analytics
To analyse how the platform is used in order to identify errors, improve existing features, and develop new functionality. If this comes to involve optional analytics cookies, that processing will be carried out on the basis of your consent. Aggregated, non-identifiable usage data may also be used for internal reporting purposes.
4. Legal Basis for Processing
Under the UK GDPR, we must have a valid legal basis for processing your personal data. We rely on the following bases depending on the purpose of processing:
Performance of a contract (Article 6(1)(b))
Processing your account information, billing data, and usage data is necessary for us to perform our contractual obligations to you under our terms of service, including providing the BadgerPanel platform and managing your account and subscriptions.
Legitimate interests (Article 6(1)(f))
We process certain data, such as usage logs, IP addresses, and security monitoring data, on the basis of our legitimate interests in maintaining the security, stability, and performance of our platform, preventing fraud and abuse, and improving our services. We have conducted balancing assessments to ensure these interests do not override your fundamental rights and freedoms. You may request a summary of our Legitimate Interests Assessments by contacting us at contact@badgerpanel.com.
Consent (Article 6(1)(a))
Where we send you promotional communications, we do so on the basis of your explicit consent. If we introduce optional analytics cookies in the future, they will likewise be set on the basis of your explicit consent. You have the right to withdraw your consent at any time, and doing so will not affect the lawfulness of any processing carried out before withdrawal.
Legal obligation (Article 6(1)(c))
We process and retain certain data, particularly billing and transaction records, where this is necessary to comply with our legal obligations, including tax, accounting, and regulatory requirements under United Kingdom law.
5. Third-Party Processors
We share personal data with the following categories of third-party service providers, each of whom acts as a data processor on our behalf or as an independent controller where applicable. We have entered into appropriate data processing agreements with each provider.
Stripe
We use Stripe to process credit and debit card payments. When you make a payment, your payment card details are transmitted directly to Stripe and are not stored on our systems. Stripe’s processing of your data is governed by the Stripe Privacy Policy. Stripe acts as a data processor for payment processing on our behalf, and as an independent data controller for its own fraud prevention and regulatory compliance purposes.
PayPal
We offer PayPal as an alternative payment method. When you pay via PayPal, your payment information is handled by PayPal in accordance with the PayPal Privacy Statement. PayPal acts as a data processor for payment processing on our behalf, and as an independent data controller for its own fraud prevention and compliance obligations.
Cloudflare
We use Cloudflare for content delivery, DDoS protection, and web application security. Cloudflare may process your IP address and request metadata in the course of providing these services. Cloudflare’s data handling is described in the Cloudflare Privacy Policy. Cloudflare acts as a data processor on our behalf for the purposes of content delivery and security.
OAuth providers (Google, Discord, GitHub, Microsoft)
If you choose to sign in using a third-party account, the relevant OAuth provider will share limited profile information with us as described in Section 2.1. Each provider processes your data in accordance with their own privacy policy, and your use of their sign-in service is subject to their terms. Each OAuth provider acts as an independent data controller for the authentication service they provide.
Hosting infrastructure (OVH, IONOS, Hetzner, AWS)
We use a combination of OVH, IONOS, Hetzner, and Amazon Web Services (AWS) to host our platform infrastructure. These providers process personal data as part of hosting our servers and delivering the Service. Their data handling is governed by their respective privacy policies: OVH Privacy Policy, IONOS Privacy Policy, Hetzner Privacy Policy, and AWS Privacy Notice.
Email delivery (Microsoft 365)
We use Microsoft 365 for transactional and service-related email delivery. Microsoft processes email addresses and message content as a data processor on our behalf. Microsoft’s data handling is described in the Microsoft Privacy Statement.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our specific retention periods are as follows:
Account data
Your account information (name, email, username, and associated profile data) is retained for the duration of your active account.
Where you request erasure of your personal data, we will action that request without undue delay and in any event within one month of receiving it, except where retention is required by law. Where a request is complex, we may extend that period by a further two months, and we will inform you of the extension and the reasons for it within one month of receiving your request.
Where you simply close your account without making a request for erasure, we will delete or anonymise your account data within 6 months of account closure, except where retention is required by law. This 6-month period is a retention period applying to a closed account. It is not the time within which we respond to a request to exercise your rights.
Billing and transaction records
We retain billing addresses, invoices, and transaction records for a period of 7 years from the date of the transaction in order to comply with our tax and accounting obligations under United Kingdom law.
Usage logs
Server access logs, IP address records, and other technical usage data are retained for 90 days from the date of collection, after which they are automatically deleted or anonymised.
Backups
Following the deletion of your account or your data, residual copies may persist in our encrypted backup systems for up to 30 days before being permanently purged.
7. International Transfers
Some of our third-party processors, as described in Section 5, are based outside the United Kingdom. Where we transfer personal data to countries that have not been deemed to provide an adequate level of data protection by the UK Secretary of State, we ensure that appropriate safeguards are in place to protect your data. These safeguards include reliance on UK adequacy decisions where available, or the use of the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as approved by the Information Commissioner’s Office (ICO).
Specifically, the following transfers occur: Stripe, PayPal, Google, Discord, GitHub, Microsoft, and Cloudflare are based in the United States. We rely on the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses for these transfers. OVH and Hetzner process data within the European Economic Area, which benefits from a UK adequacy decision. IONOS processes data in Germany within the EEA. Amazon Web Services may process data in the EU or US regions depending on configuration; where US processing occurs, we rely on the IDTA.
You may request further details about the safeguards we have put in place for international transfers by contacting us at contact@badgerpanel.com.
8. Your Rights Under UK GDPR
Under the UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:
Right of access
You have the right to request a copy of the personal data we hold about you, together with information about how and why we process it.
Right to rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure
You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it, subject to certain legal exceptions (for example, where we are required to retain billing records for tax purposes).
Right to restriction of processing
You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify the accuracy of data you have challenged.
Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
Right to object
You have the right to object to processing based on our legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to withdraw consent
Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Right regarding automated decision-making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning you. We do not currently engage in solely automated decision-making that meets this threshold. If this changes, we will notify you and provide appropriate safeguards.
Right to lodge a complaint
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), whose contact details are set out in Section 13 of this policy.
To exercise any of these rights, please contact us at contact@badgerpanel.com. We will respond to your request within one month, as required by law. In exceptional circumstances, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.
9. Cookies
Cookies are small text files placed on your device when you visit a website or use an online platform. This section describes the following types of cookies:
9.1 Essential Cookies
These cookies are strictly necessary for the operation of our platform. They enable core functionality such as user authentication, session management, and security features. Because these cookies are essential, they cannot be disabled without significantly impairing your ability to use BadgerPanel. No consent is required for essential cookies under applicable law.
9.2 Preference Cookies
We do not currently set preference cookies. Our marketing website sets no cookies at all, and for that reason it does not present a cookie consent banner. The only cookies currently in use are the strictly necessary cookies described in Section 9.1, which are set by the BadgerPanel panel application when you are signed in, for session management and authentication, and which are exempt from the consent requirement under the Privacy and Electronic Communications Regulations 2003 (PECR).
9.3 Analytics Cookies
We do not currently use analytics cookies. If we introduce analytics cookies or any other non-essential cookies in the future, they will be set only with your prior consent, obtained through a consent mechanism presented to you before those cookies are placed on your device. We will update this policy to describe them before any such cookies are used.
9.4 Managing Cookies
You can manage cookies at any time through your browser settings. Most browsers allow you to refuse or delete cookies. If we introduce non-essential cookies in the future, you will also be able to manage your preferences through the consent mechanism described in Section 9.3. Please note that disabling essential cookies may prevent you from using certain features of our platform. For more information on how to manage cookies in your browser, visit www.allaboutcookies.org.
10. Children’s Privacy
BadgerPanel is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information as promptly as possible. If you believe that someone under 18 has provided us with personal data, please contact us immediately at contact@badgerpanel.com so that we can take appropriate action.
11. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:
Encryption in transit
All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS).
Password hashing
User passwords are hashed using a modern, memory-hard password hashing function that is currently regarded as among the most secure available. We never store passwords in plain text.
Access controls
Access to personal data within our organisation is restricted to personnel who require it to perform their duties, and is subject to strict confidentiality obligations.
Regular security reviews
We conduct regular reviews of our security practices, infrastructure, and code to identify and address potential vulnerabilities.
While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data, but we are committed to maintaining and improving our security measures in line with industry best practices.
12. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. Where we make material changes, we will give you at least 30 days’ prior notice by email to the address associated with your account or by displaying a prominent notice within the BadgerPanel platform before the changes take effect.
The “Last updated” date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically to stay informed about how we are protecting your data.
Where changes to this policy materially affect the legal basis or purposes for which we process your personal data, or introduce new categories of processing, we will seek fresh consent or otherwise ensure compliance with our obligations under UK GDPR before such changes take effect. Continued use of the Service does not constitute valid consent to material changes in data processing.
13. Contact Us
If you have any questions, concerns, or requests regarding this privacy policy or our handling of your personal data, please contact us using the details below:
Postal address
The Badgers Enterprise Limited, Unit 8 Harcourt Way, Meridian Business Park, Leicester, United Kingdom, LE19 1WP
If you are not satisfied with our response or believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website
https://ico.org.uk/make-a-complaint/
Telephone
0303 123 1113