What we do with personal data.

1. Who is responsible

X-Ample Studios (also trading as X-Ample Development) is the controller for the personal data described here. Contact info@x-ampledevelopment.co.uk.

Controller

X-Ample Studios, trading as X-Ample Development

Legal entity

[Legal entity name]

Company number

[Company registration number]

Registered office

[Registered office address]

ICO registration

[ICO registration number, if registered]

Email

info@x-ampledevelopment.co.uk

We have not appointed a statutory data protection officer. Use the email above for privacy requests.

2. What we collect

This marketing site has no accounts and no tracking cookies. The data we actually come across is:

• Contact form. Name, email address, subject, and message. Today the form does not send those fields to our server. It opens an email in your own email app, addressed to info@x-ampledevelopment.co.uk. We receive the message only if you send that email. The website does not store the draft.
• Email. Whatever you include when you write to info@x-ampledevelopment.co.uk or careers@x-ampledevelopment.co.uk, including speculative applications and attachments you choose to send.
• Discord. If you join https://discord.gg/e7f3JqM3Zf, Discord processes your account under its own policy. In the server we can see your username, what Discord shows on your profile there, and the messages you post.
• Purchases. If you buy a digital product — for example a script, or premium access to a Discord bot — Stripe takes the card payment. We typically receive your name, email, what you bought, the amount, and a payment reference. We do not store your full card number.
• Hosting logs. The host of this site may record IP address, browser type, the page requested, and the time, as ordinary server logs.

We do not ask for a phone number or a postal address through this site. Please do not send those unless we have asked for them for a specific contract.

3. Why we use it, and the lawful basis

• Enquiries. To read and reply. Lawful basis: legitimate interests in answering people who contact us, and, where you are asking about a purchase or a commission, steps toward a contract (UK GDPR Article 6(1)(b) and 6(1)(f)).
• Applications. To consider a speculative or advertised application. Lawful basis: legitimate interests, and steps toward a contract if we go further.
• Purchases and delivery. To take payment, provide the product, and keep a record of the sale. Lawful basis: contract (Article 6(1)(b)). Keeping tax records is a legal obligation (Article 6(1)(c)).
• Discord. To run the community server. Lawful basis: legitimate interests. Discord is a separate controller for the account data it holds.
• Logs and security. To keep the site available and to investigate abuse. Lawful basis: legitimate interests (Article 6(1)(f)).

We do not use your data to build advertising profiles, and we do not sell it. We do not rely on consent for the items above. If we ever need consent, we will ask separately, and you can withdraw it without affecting the lawfulness of what we did before.

4. How long we keep it

• Enquiries: 24 months after our last exchange, unless the enquiry becomes a contract.
• Speculative applications: 12 months, unless you ask us to delete them sooner.
• Contracts and project records: 6 years after the contract ends.
• Payment records: 6 years after the payment, for tax and accounting.
• Discord messages: for as long as the message remains on Discord, or until you delete it or leave.
• Hosting logs: only for the short period the host keeps operational logs.

We may keep a record longer if the law requires it, or if it is needed for a legal claim.

5. Who else sees it

We use a small set of providers. Each one is limited to what it needs for its job.

• Stripe. Card payments for digital products, including scripts and Discord bot premium. Stripe processes the card. We do not store the full card number.
• Discord. The studio Discord server. Discord holds the account. We see messages and the profile Discord shows in that server.
• Render. Hosts this website and may keep short operational logs (IP address, browser, page, time).
• The provider that hosts the mailboxes info@x-ampledevelopment.co.uk and careers@x-ampledevelopment.co.uk. We have not named that provider on this page. Ask us if you need the name.
• Your own email provider, when you send us a message from your mail app.

We may also disclose information if the law requires it, or to establish or defend a legal claim. A client project can involve sharing data the client has given us with people working on that project. We do not put client names on this marketing site.

6. Transfers outside the UK

Stripe, Discord, and Render may process data outside the United Kingdom. Where that happens we rely on the UK adequacy regulations if they cover the destination, or on the provider's International Data Transfer Agreement or standard contractual clauses. You can ask us which safeguard applies to a particular transfer.

7. Cookies and on-device storage

This site does not set tracking cookies, analytics cookies, or advertising cookies. There is no cookie banner because there are no non-essential cookies to accept.

If you use the theme switch, the choice is stored in your browser under the local storage key theme. That value stays on your device. It is not sent to our server. It is not a cookie. You can clear it in your browser; the site will return to the default dark theme.

If we add non-essential cookies later, we will update this notice first and ask before they are set.

8. Your rights

Under UK GDPR you can ask us to:

• confirm whether we hold your personal data, and for a copy of it (access);
• correct it (rectification);
• delete it (erasure);
• restrict how we use it;
• give you, or another controller, data you provided, in a portable form, where the basis is contract or consent;
• object to processing based on legitimate interests.

Email info@x-ampledevelopment.co.uk. We may need to confirm it is you. We aim to respond within one month. Some rights are limited: we can refuse a request that is manifestly unfounded, and we will keep records the law tells us to keep.

You can complain to the Information Commissioner's Office. The ICO is the UK regulator: ico.org.uk/make-a-complaint. You can also write to the ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would like the chance to put something right first, but you do not have to contact us before the ICO.

9. Children

This site and the products it describes are not aimed at children. GTA V is an 18-rated game. We do not knowingly collect personal data from anyone under 18. If you believe we have, email us and we will delete it.

10. Changes

We will post changes on this page and update the date. This version is dated 11 November 2026. The terms of service cover use of the site and purchases. The contact page is where the form lives.