Ndemic Creations takes steps to ensure it is not storing personal data without reason, and will review and remove any data that it is not necessary to adequately provide its services. You can contact us at firstname.lastname@example.org or send a message at
Profiling and automated decision making
Ndemic Creations does not engage in any profiling or machine decision making practices. Any decisions made regarding users’ personal data will involve human contact and decision making.
We collect personal data which can identify you as an individual only as and when it is necessary in order to provide our services.
We may occasionally collect non-personal information from users, which is not tied specifically to you as an individual. For example this could be in the form of analytical data regarding the use of our apps or website, or aggregate data detailing the number or types of devices used to do so.
How we use information
Ndemic Creations may gather personal data for some of the following purposes:
Customer services - To respond to user queries, feedback or issues
Ndemic Creations website, forums and Ndemic Nexus accounts - To enable users to engage with our products online
Aggregated analytics - To allow us to develop and improve our products
Newsletters - To send periodic emails, such as updates on new products release dates.
What information do we collect?
The following types of personal data may be collected:
Name (if you give it to us)
Email address (if you send us an email)
IP address (if you use our website)
Location (If you want us to ship you physical goods)
Correspondence (if you contact us)
Online pseudonyms/identifiers (if you make an account with us)
Expiration of personal information
For customer services, Names and IP addresses will be removed after three months to minimise the amount of data we hold.
For other services, personal information is stored unless you decide to close your user accounts.
We do not automatically remove/expire data in other instances so we can respond better to user feedback and issues. We perform annual data reviews to ensure we are not holding data without good reason.
How we handle requests for data access, rectification, erasure, and data portability
Anyone who has personal data held by Ndemic Creations is entitled to:
Ask what information the company holds about them and why, request access to it and/or remove it, via email@example.com
We will respond promptly. We will always need to verify the identity of anyone making an access request before handing over any information.
Ndemic Creations actively ensures that any personal data gathered is done so with clear and actioned consent of the individual that the data pertains to.
Ndemic Creations also logs and stores records of this consent as required by law.
Where applicable, data will not be collected or stored pertaining to individuals under the age of 16 without consent from a parent or guardian.
Compliance with children's online privacy protection act
None of our products are aimed at anyone aged under 13 years of age.
We do not knowingly collect personal information from users deemed to be children under their respective national laws. If we learn that we have collected personal information of any child we will take steps to delete such information from our files as soon as possible. Should you wish to have your child’s personal information deleted from our records, please contact us at firstname.lastname@example.org or . We will be happy to remove your child’s information as appropriate.
Sharing your data
We do not sell, trade, or rent your personal identification information to others. We may use third party service providers to help us operate our business and the Site or administer activities on our behalf, such as sending out newsletters or surveys. We may share your information with these third parties for those limited purposes provided that you have given us your permission.
Where appropriate Ndemic Creations uses certain trusted sub-processors in order to better understand, gather and organise the data collected, and to help us improve our products or respond to your feedback. We always make sure that only information needed to deliver our services are collected via these sub-processors.
If you make a purchase, your card information is not held by us, it is collected by the store, who specialise in the secure online capture and processing of credit/debit card transactions. Purchases from third-parties may also be subject to additional policies.
We use the following advertising networks to serve ads in our Plague Inc. app on android.. Restricted versions are used to ensure that only contextual ads are shown and personal data processing is limited.
We adopt appropriate data collection, storage and processing practices and security measures
to protect against unauthorised access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored by our services. In the event of data breach that is likely to result in a high risk to the rights and freedoms of individuals, we will notify all parties involved as well as any supervisory authorities within a reasonable timeframe. We have procedures in place to effectively detect, report and investigate these personal data breaches.
Links to other websites
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Last updated: December 2023