Last updated: September 16, 2026
This Privacy Policy explains how PANDORA GAME ("we", "us") collects, uses, shares and protects personal information when you visit https://www.pandoragame.net (the "Site") or buy from us.
Data controller: Cherrycom Worldwide SL, trading as PANDORA GAME. VAT number: B01965813. Company address: 3 Resurrection Street, Getafe 28，Madrid, 28091, Spain. This company address is not a returns address. Privacy contact: [email protected]
1. Information We Collect
a. Information you give us
| Category | Examples | When |
|---|---|---|
| Identity & contact | name, email address, phone number | account creation, checkout, support |
| Order & delivery | shipping and billing address, order contents, order number | checkout |
| Payment | payment method, last four digits, transaction and authorisation reference | checkout |
| Communications | messages, photos or videos you send | support, returns, warranty claims |
| Marketing preferences | newsletter subscription, opt-in records | signup forms |
| Optional profile | date of birth, preferences | only if you choose to provide |
Payment card numbers are collected and processed directly by our payment providers (Wintopay and PayPal). We do not receive or store full card numbers.
b. Information collected automatically
- device and browser data (IP address, browser type, operating system, language, screen size);
- usage data (pages viewed, referring URL, time on page, search terms used on the Site);
- approximate location derived from IP address;
- cookie and similar-technology identifiers (see Section 6).
c. Information from third parties
Our payment providers return fraud and authorisation signals; carriers return delivery and tracking status; advertising and analytics platforms return aggregated campaign data.
2. Why We Use Your Information
| Purpose | Legal basis (EEA / UK) |
|---|---|
| Process and fulfil your order, arrange delivery, handle returns and warranty | Performance of a contract |
| Take payment, prevent fraud, verify identity | Performance of a contract; legitimate interests; legal obligation |
| Provide customer support | Performance of a contract |
| Keep accounting, tax and customs records | Legal obligation |
| Send marketing emails you opted into | Consent |
| Measure and improve the Site, run advertising | Consent (where required) or legitimate interests |
| Comply with legal requests, enforce our Terms | Legal obligation; legitimate interests |
We do not use your personal information for automated decision-making that produces legal effects.
3. Who We Share It With
We share personal information only where necessary, with:
- Payment providers — Wintopay and PayPal — to authorise and settle payments and screen for fraud;
- Shipping carriers and fulfilment partners — to deliver your order and process returns;
- Customs brokers and carriers — where required for customs clearance of your shipment;
- IT, hosting and email providers — to run the Site and send transactional email;
- Analytics and advertising providers — Google Analytics and Meta Pixel (where installed) — to measure traffic and campaigns;
- Professional advisers, auditors and insurers — where needed;
- Authorities and courts — where required by law, or to protect our rights, investigate fraud or enforce our Terms;
- A buyer or successor — if our business or part of it is transferred.
All service providers are contractually required to process personal information only on our instructions and to keep it secure.
4. International Transfers
Some of our service providers may process personal information outside your country. Where personal information is transferred outside the EEA or the UK, we use a lawful transfer mechanism, such as an applicable adequacy decision or Standard Contractual Clauses with supplementary safeguards. You may request information about the relevant safeguards at [email protected].
5. How Long We Keep It
| Data | Retention |
|---|---|
| Order, invoice, customs and tax records | 7 years (statutory bookkeeping and customs obligations) |
| Customer service tickets and warranty records | 24 months after closure |
| Marketing consent and suppression list | until you withdraw consent, plus a suppression record to honour your opt-out |
| Analytics data | 14 months, then deleted or aggregated |
| Fraud and chargeback evidence | as long as reasonably needed to defend a claim |
6. Cookies and Similar Technologies
We use strictly necessary cookies (cart, checkout, security, language, consent preferences) and, with your consent where required, analytics and advertising cookies (Google Analytics and Meta Pixel (where installed)).
You can change your choices at any time via the "Cookie Settings" link in the footer of every page, or block cookies in your browser — blocking strictly necessary cookies will prevent checkout from working. Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out of the sale or sharing of personal information for advertising purposes.
7. Your Rights
If you are in the EEA, the UK or Switzerland you have the right to: access your data; correct inaccurate data; delete your data; restrict or object to processing; receive your data in a portable format; withdraw consent at any time; and lodge a complaint with your national data protection authority.
If you are a California resident you have the right to: know what personal information we collect, use, disclose, sell or share; access and receive a copy; correct inaccurate information; delete your personal information; opt out of the sale or sharing of personal information for cross-context behavioural advertising; limit the use of sensitive personal information; and not be discriminated against for exercising these rights. We do not sell personal information for money. Where advertising or analytics cookies are enabled, this may be treated as "sharing" of personal information for cross-context behavioural advertising; you may opt out at any time via the Cookie Settings link or by emailing [email protected]. To exercise a right, email [email protected] with the subject line "Privacy Request" and we will verify your identity before responding.
Other regions. We will honour comparable rights requests on a best-efforts basis. Contact [email protected].
We respond within the period required by the applicable law (generally 30 days, extendable where permitted).
8. Security
We use TLS encryption in transit, access controls, and administrative and technical safeguards appropriate to the sensitivity of the data. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the relevant authority where the law requires it.
9. Children
The Site is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact [email protected] and we will delete it. Our products are electronic devices containing a lithium-ion battery and are not intended for use by young children without adult supervision.
10. Third-Party Links
The Site may link to third-party sites or embed third-party content. We are not responsible for their privacy practices. Please review their policies before providing personal information.
11. Changes
We may update this Policy. Material changes will be posted on this page with a revised "Last updated" date, and where required we will notify you by email.
12. Contact
Cherrycom Worldwide SL (trading as PANDORA GAME)
VAT number: B01965813
Company address: 3 Resurrection Street, Getafe 28，Madrid, 28091, Spain.
This company address is not a returns address. Please contact us before returning an item so we can provide the correct return instructions and destination.
Privacy: [email protected]
Customer support: [email protected]
