Privacy Policy

Last Updated: 28 November 2025

World of Myths ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website worldofmyths.co.uk (the "Website").

Please read this Privacy Policy carefully. By using our Website, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Register for an account
  • Contact us through our contact form
  • Subscribe to our newsletter
  • Participate in quizzes or games
  • Submit content to our stories section

This information may include:

  • Name
  • Email address
  • Phone number
  • Postal address (if provided)
  • Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our Website, we automatically collect certain information about your device, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages you visit and time spent on pages
  • Referring website addresses
  • Device identifiers

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Website and store certain information. For more detailed information about our use of cookies, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our Website and services
  • To process your requests and transactions
  • To send you administrative information, such as updates to our terms and policies
  • To respond to your inquiries and provide customer support
  • To send you marketing communications (with your consent)
  • To personalise your experience on our Website
  • To track and analyse usage patterns and trends
  • To detect, prevent, and address technical issues and security threats
  • To comply with legal obligations

3. Legal Basis for Processing (GDPR)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your personal data based on the following legal grounds:

  • Consent: When you have given clear consent for us to process your personal data for specific purposes
  • Contract: When processing is necessary for the performance of a contract with you
  • Legal Obligation: When processing is necessary for compliance with a legal obligation
  • Legitimate Interests: When processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: We may share information with third-party service providers who perform services on our behalf, such as hosting, analytics, and email services
  • Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
  • With Your Consent: We may share your information with third parties when you have given us explicit consent to do so

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your personal information, we will securely delete or anonymise it.

6. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights:

  • Right of Access: You have the right to request copies of your personal data
  • Right to Rectification: You have the right to request correction of inaccurate or incomplete data
  • Right to Erasure: You have the right to request deletion of your personal data under certain circumstances
  • Right to Restrict Processing: You have the right to request restriction of processing of your personal data
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format
  • Right to Object: You have the right to object to processing of your personal data
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time

To exercise any of these rights, please contact us using the contact information provided below.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. We ensure that appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

Our Website is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority (the Information Commissioner's Office in the UK) without undue delay, and in any event within 72 hours of becoming aware of the breach, where feasible.

The notification will include:

  • The nature of the personal data breach
  • The name and contact details of our data protection officer or other contact point
  • The likely consequences of the personal data breach
  • The measures taken or proposed to be taken to address the breach

12. Third-Party Links

Our Website may contain links to third-party websites, plug-ins, or applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

When you leave our Website, we encourage you to read the privacy policy of every website you visit.

13. Marketing Communications

If you have opted in to receive marketing communications from us, we may use your personal information to send you newsletters, promotional materials, and other communications about our services.

You can opt out of receiving marketing communications at any time by:

  • Clicking the "unsubscribe" link in any marketing email we send you
  • Contacting us directly at [email protected]
  • Updating your account preferences on our Website

Please note that even if you opt out of marketing communications, we may still send you administrative messages related to your account or our services.

14. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. If this changes in the future, we will update this Privacy Policy and provide you with appropriate information about the logic involved and the significance and envisaged consequences of such processing.

15. Supervisory Authority

If you are located in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe that we have not complied with applicable data protection laws.

You can contact the ICO at:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Phone: 0303 123 1113

Website: https://ico.org.uk

16. California Privacy Rights (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect, use, disclose, and sell
  • The right to delete personal information we have collected from you
  • The right to opt-out of the sale of personal information (we do not sell personal information)
  • The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated Privacy Policy on this page with a new "Last Updated" date
  • Sending you an email notification (if you have provided us with your email address)
  • Displaying a prominent notice on our Website

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

World of Myths

Data Protection Officer:

Email: [email protected]

Phone: +44 20 7873 4515

Address: 123 Mythical Street, London, SW1A 1AA, United Kingdom

Business Hours: Monday - Friday, 9:00 AM - 6:00 PM GMT

We aim to respond to all inquiries within 30 days. For urgent matters, please call us during business hours.