Privacy Policy

Data Privacy Framework Compliance

BIT Studios, LLC complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as set forth by the U.S. Department of Commerce.

BIT Studios has certified that it adheres to the Data Privacy Framework Principles with regard to the processing of personal data received from the European Union, United Kingdom, and Switzerland.

If there is any conflict between the terms in this privacy policy and the DPF Principles,
the Principles shall govern.

To learn more about the Data Privacy Framework program, and to view our certification,
please visit: https://www.dataprivacyframework.gov/

BIT Studios is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Your privacy is important to us. It is BIT Studios’ policy to respect your privacy regarding any information we may collect from you across our website, https://www.bitstudios.com, and other sites we own and operate.

1. Information We Collect

Log Data
When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your computer’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details.

Device Data
We may also collect data about the device you’re using to access our website. This data may include the device type, operating system, unique device identifiers, device settings, and geo-location data. What we collect can depend on the individual settings of your device and software. We recommend checking the policies of your device manufacturer or software provider to learn what information they make available to us.

We may collect the following types of personal information:

• Contact information: names, emails, phone numbers, business titles
• Business information: company names, roles
• Technical data: IP addresses, cookies, device identifiers
• Health information: where required for healthcare-related projects
• Human resources data: employee information (when processing HR data on behalf of clients)

How We Use Personal Data

BIT Studios processes personal data primarily to deliver contracted software development, web and mobile application development, and software maintenance services.

Where you have provided your consent, we may also use your personal information to send you promotional or marketing communications about our services. You may withdraw your consent and opt out of such communications at any time by using the unsubscribe link in our emails or by contacting us at [email protected].

2. Legal Bases for Processing

We will process your personal information lawfully, fairly, and in a transparent manner.
We collect and process information about you only where we have legal bases for doing so.
These legal bases depend on the services you use and how you use them, meaning we collect
and use your information only where:

• it’s necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (for example, when we provide a service you request from us)
• it satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, and to protect our legal rights and interests
• you give us consent to do so for a specific purpose (for example, you might consent to us sending you our newsletter)
• we need to process your data to comply with a legal obligation.

Where we rely on your consent to process personal information for a specific purpose (such as receiving marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

Security Measures

We implement technical, organizational, and physical measures to safeguard personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest (AES-256)
• Multi-factor authentication for system access
• Role-based access controls (least privilege principle)
• Firewalls and intrusion detection systems
• Regular security updates and patch management
• Secure backup and disaster recovery
• Employee confidentiality obligations and security training

Data Integrity and Retention

We process personal data only for purposes compatible with those for which it was collected or subsequently authorized by the individual. We maintain personal data only for as long as necessary to fulfill service obligations or as required by law, after which we securely delete or anonymize the data.

3. Collection and Use of Information

We may collect, hold, use, and disclose personal information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:

• To enable you to customize or personalize your experience of our website
• To enable you to access and use our website, associated applications, and social media platforms
• To contact and communicate with you
• For internal record keeping and administrative purposes
• For analytics, market research, and business development, including to operate and improve our website,
• associated applications, and social media platforms
• To comply with our legal obligations and resolve any disputes that we may have
• To consider your employment application
• Where you have provided consent, to send you promotional or marketing communications about our services

You may withdraw your consent and opt out of receiving promotional communications at any time by using the unsubscribe link in our emails or by contacting us at [email protected].

4. Disclosure of Personal Information to Third Parties

We may disclose personal information to:

• Third-party service providers for the purpose of enabling them to provide their services, including (without limitation) IT service providers, data storage, hosting and server providers, analytics, error loggers, debt collectors, maintenance or problem-solving providers, professional advisors, payment systems operators, and marketing or advertising service providers who assist us in delivering permitted communications
• Our employees, contractors, and/or related entities
• Sponsors or promoters of any competition we run
• Credit reporting agencies, courts, tribunals, and regulatory authorities, in the event you fail to pay for goods or services we have provided to you
• Courts, tribunals, regulatory authorities, and law enforcement officers, as required by law, in connection with any actual or prospective legal proceedings, in order to establish, exercise, or defend our legal rights or to meet national security or law enforcement requirements
• Third parties, including agents or subcontractors, who assist us in providing information, products, services, or communications to you
• Third parties engaged to provide data collection or processing services on our behalf

5. International Transfers of Personal Information

The personal information we collect is stored and processed in the United States, or where we or our partners, affiliates, and third-party providers maintain facilities. By providing us with your personal information, you consent to the disclosure to these overseas third parties.

We will ensure that any transfer of personal information from countries in the European Economic Area (EEA), the United Kingdom, or Switzerland to countries outside those regions is protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, the UK Information Commissioner’s Office, or the Swiss Federal Data Protection and Information Commissioner, or the use of binding corporate rules or other legally accepted means.

BIT Studios also participates in the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, which provide an adequacy mechanism for transfers of personal data from the EU, UK, and Switzerland to the United States.

Where we transfer personal information from a non-EEA country to another country, you acknowledge that hird parties in other jurisdictions may not be subject to similar data protection laws as those in your jurisdiction. There are risks if any such third party engages in any act or practice that would contravene the data privacy laws in your jurisdiction, and this might mean that you will not be able to seek redress under your jurisdiction’s privacy laws.

6. Onward Transfers

BIT Studios may transfer personal data to development personnel and subcontractors located within the European Economic Area (EEA) to assist in delivering our services.

All subcontractors are bound by contracts requiring them to provide the same level of protection as required by he Data Privacy Framework Principles.

BIT Studios remains liable for their processing of personal data on our behalf.

7. Your Rights and Controlling Your Personal Information

Choice and consent: By providing personal information to us, you consent to us collecting, holding, using, and disclosing your personal information in accordance with this privacy policy. We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a request to [email protected]. If you are under 16 years of age, you must have and warrant to the extent permitted by law to us, that you have your parent or legal guardian’s permission to access and use the website and they (your parents or guardian) have consented to you providing us with your personal information. You do not have to provide personal information to us, however, if you do not, it may affect your use of this website or the products and/or services offered on or through it.

Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such a person’s consent to provide the personal information to us.

Restrict: You may choose to restrict the collection or use of your personal information. If you ask us to restrict or limit how we process your personal information, we will let you know how the restriction affects your use of our website or products and services.

Access, Correction, and Deletion: Individuals in the European Union, United Kingdom, and Switzerland have the right to access, correct, amend, or delete their personal data processed under the Data Privacy Framework. Requests should be sent to [email protected]. We will respond to all verified requests within 45 days, unless doing so would impose a disproportionate burden or adversely affect the rights of others. Where possible, we will provide access in a portable format (such as CSV or another commonly used machine-readable format).

Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.

Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.

For individuals in the European Union, United Kingdom, and Switzerland, please also see Section 8 (Dispute Resolution) for information on independent recourse mechanisms available at no cost to you.

Unsubscribe: You may opt out of receiving marketing or promotional communications from us at any time by using the unsubscribe link in our emails or by contacting us at [email protected]. Even if you unsubscribe from marketing, you may still receive administrative or service-related messages (such as billing or support notices) that are necessary to deliver our contracted services.

8. Dispute Resolution for EU/UK/Swiss Individuals

BIT Studios commits to resolve complaints about our collection or use of your personal data. EU, UK, and Swiss individuals with inquiries or complaints should first contact us at: [email protected]

BIT Studios has committed to refer unresolved privacy complaints under the DPF Principles to BBB National Programs, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit: https://bbbprograms.org/programs/all-programs/dpf-consumers/ProcessForConsumers

This service is provided at no cost to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration. See: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

9. Cookies

We use cookies to collect information about you and your activity across our site. A cookie is a small piece of data that our website stores on your computer, and accesses each time you visit, so we can understand how you use our site. This helps us serve you content based on the preferences you have specified. Please refer to our Cookie Policy for more information.

10. Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur and that any parties who acquire us may continue to use your personal information according to this policy.

11. Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

12. Changes to This Policy

At our discretion, we may change our privacy policy to reflect current acceptable practices. We will take reasonable steps to let users know about changes via our website. Your continued use of this site after any changes to this policy will be regarded as acceptance of our practices around privacy and personal information.
If we make a significant change to this privacy policy, for example changing a lawful basis on which we process your personal information, we will ask you to re-consent to the amended privacy policy.

13. Contact Details

Privacy Officer
BIT Studios, LLC
[email protected]

This Privacy Policy is effective as of November 18, 2025.