Privacy Policy

Last Modified on MAY 18 2023

1. What’s in this Privacy Policy?

In this Privacy Policy, you’ll find:

  • What information we collect about you
  • How we might use that information
  • What information we might share with others
  • Your rights and choices about that information

2. What does this Privacy Policy cover?

We are Heavy Lunch Studio LLC. In this document, we will refer to ourselves as “Heavy Lunch Studio,” “we,” or “us.” We will refer to you and any other users as “you.” 

In this Privacy Policy, we will cover the products and services that we offer to you. These include: 

  • Our video game software products, including the “Hermit and Pig” video game.
  • Our websites, located at: hermitandpig.com and heavylunch.studio.

Together, we’ll refer to these as the “Service.”

By using the Service, you agree to the terms of this Privacy Policy. Please read our Terms of Use, as well, for general guidance about your use of the Service. Except as otherwise expressly agreed, this Privacy Policy and our Terms of Use are the complete agreement between you and Heavy Lunch Studio.

3. What types of personal data do we collect?

Below you’ll find details about the types of personal data we collect from you and how we use it. We call this “processing” your data. 

We’ll also tell you the reason for processing that data, which is known as our “legal basis.”

First, the personal data we collect from you: 

Type of data

Examples of the data 

How we use it

Our legal basis

Contact Information
  • Full name
  • Email address
  • Physical address

To contact you for technical support and customer support purposes, for marketing and promotional purposes, and to administer contests and sweepstakes.

Based on your explicit consent, under GDPR Art. 6 (1) (a). 

Purchase Information
  • Your purchase activity
  • Email address
  • Physical address

To enable the ability to make purchases on the Service to to fulfill those purchases.

To fulfill a contract with you, under GDPR Art. 6 (1) (b).

Technical Information
  • Device Type
  • Operating System
  • Other reasonably necessary device information


To analyze user activity, to aid in bug fixing and customer service, and to improve and operate the Service.

To fulfill a contract with you, under GDPR Art. 6 (1) (b). 

Analytic Information
  • User Access Times
  • User Activity on Service
  • Location where you accessed the Service
  • What pages you visited before and after visiting our websites
  • IP address

To analyze user activity and improve the Service.

The collection is necessary for our legitimate interests, under GDPR Art. 6 (1) (f).

 

Which of that personal data is shared to us by third parties?

What is the name of the third party sharing information with you?

What type of information is being shared?

What purpose do you use this information for? 

Third-Party Game Platforms (Steam, itch.io, etc.)

Technical Information 

To provide customer support and bug fixing to operate and improve the Service

Google Analytics

Analytic Information 

To analyze user activity and improve the Service

Stripe

Purchase Information 

To provide payment processing services and allow us to send purchased goods to users

 

Finally, we may share certain personal data with others:

Our reason for sharing

What data is being shared?

Who are we sharing it with?

Newsletters

Contact Information

Our third-party newsletter/mailing list service provider

Web Hosting

All information related to the website portions of the Service

DreamHost, or our other web hosting providers

Website Analytics

Analytic Information

Google Analytics

 

We may also need to share your personal data in a few other situations:

  • To follow the law, a court order, or orders from government agencies
  • To detect and combat fraud or security issues
  • To protect the Service, our employees, and our business’s rights or safety

Other than that, we will not share your personal data with anyone else.

4. How long do we keep your personal data?

We only keep your personal data as long as it’s required to provide you with the Service. Sometimes a longer period might be required by law. 

After that, we will delete your personal data within a reasonable time.

Please note that we may retain some data, if necessary to: 

  • resolve disputes, 
  • enforce our user agreements, 
  • follow any technical and legal requirements related to the Service.

5. Cookies, “Do Not Track” Signals, and Analytics

Cookies: “Cookies” are small bits of electronic information that a website sends to a visitor’s browser and are stored on the visitor’s hard drive. Like many services, we employ cookies in certain areas of the Service to allow us to provide information to make your online experience more convenient and to enhance your experience with the Service. 

For example, when you make a purchase on the Service, we use cookies to enable that purchase through our payment processor. Cookies are not spyware or adware, and can’t deliver viruses or run programs on your computer. 

Cookies are also necessary for operating portions of the Service. You may configure your web browsers to accept or reject or delete the cookies, or notify yourself when a cookie is being set. If you do that, however, the Service may not function as expected or may not function at all.

For more information, read our Cookie Policy here.

“Do Not Track” Signals: Because there’s not yet a consensus on how companies should respond to web browser-based or other “do not track” mechanisms yet, we do not respond to web browser-based do not track signals.

Google Analytics: We use Google Analytics to gather and pool certain information with other users’ information, for the purposes of improving the Service, such as tracking the total number of users or visitors to the Service, their aggregate activities on the Service, and tracking the sites that refer visitors to the Service. Google anonymizes this information. You can view the Google privacy policy here. 

6. Children’s privacy rights

We don’t knowingly collect any personal data from children under the age of 13. We also don’t knowingly allow them to create accounts, sign up for newsletters, make purchases, or use the Service. 

We may also limit our personal data processing for EU users between 13 and 16.

We take children’s privacy seriously and encourage parents to play an active role in their children’s online experience. If you have any concerns about your child’s personal data, please contact us at support@heavylunch.studio.

7. Transfers of your personal data

Our headquarters is in the United States. 

No matter where you live, by using the Service you consent to the processing and transfer of your personal data in and to the United States and anywhere our service providers listed in Section 3 above are located. This processing will be under this Privacy Policy and the privacy policies of third parties that we share personal data with. 

The laws of the United States governing data collection and use may not be as comprehensive or protective as the laws of the country where you live. 

If you would like more information, please contact us (see “How to contact us” below).

8. Special terms based on where you live

Depending on where you live, you may be subject to certain laws related to our use of your personal data. 

For EU Residents:

We are regulated under the General Data Protection Regulation (GDPR), which applies across the European Union (including in the United Kingdom). We are responsible as a controller of personal data for GDPR purposes.

Your rights as an EU resident:

Under the GDPR, EU residents have several important rights: 

  • You can request a copy of your personal data
  • You can ask us to correct that personal data, delete it, or request that we use it only for certain purposes. 
  • If you’ve consented to our processing, you can change your mind and ask us to stop using your personal data. For example, you can unsubscribe from our mailing list at any time – just click the link in each marketing email. 
  • In some circumstances, you can ask us not to use automated processing or profiling about you.

If you would like to exercise any of those rights, please email us at support@heavylunch.studio. We may ask for additional info to verify that you’re the owner of that data. 

Also, in some cases where the law requires it, we may not be able to help with the above requests. 

California Residents:

We are regulated under the California Consumer Privacy Act (CCPA), which applies to California residents. 

Under the CCPA, California residents have several important rights: 

Right to Know: You can ask us what personal data we hold about you and request a copy. This includes:

  • The type and specific pieces of personal data we have collected
  • The types of sources we collect the data from
  • The purpose for collecting your personal data
  • The third parties we share that data with

Right to Delete: You can request that we erase your personal data. There are some exceptions to this right, if we:

  • Need to complete the transaction for which the personal data was collected or if there is an ongoing business relationship or contract with you 
  • Detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity
  • Need to identify and repair errors affecting Service functionality
  • Exercise free speech or ensure another consumer can exercise (or another lawful right)
  • Need to comply with the California Electronic Communications Privacy Act
  • Engage in research in the public interest
  • Enable solely internal uses that are in line with your expectations for using your personal data
  • Need to comply with a legal obligation
  • Otherwise use your personal data internally, in a way that’s compatible with the reason we collected it in the first place

Sale of your personal data: We don’t sell any of your personal data for any purposes.

Other Rights: California residents also have the right to request information about our disclosure of personal data to third parties for direct marketing purposes during the calendar year before your request. This request is free and may be made only once a year. 

We also won’t discriminate against you for exercising any of the rights listed above.

If you would like to exercise any of those rights, please email us at support@heavylunch.studio. We may ask for additional info to verify that you’re the owner of that data. 

Virginia Residents:

We are regulated under the Virginia Consumer Data Protection Act (VCDPA), which applies to Virginia residents. 

Under the VCDPA, Virginia residents have several important rights: 

  • The right to access their personal data that we have collected or processed.
  • The right to request that we delete their personal data.
  • The right to correct inaccurate personal data.
  • The right to opt-out of processing of personal data for targeted advertising, sale of personal data and profiling.

Sale of your personal data: We do not sell personal data as the VCDPA defines the term “sale.”

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

If you would like to exercise any of those rights, please email us at support@heavylunch.studio. We may ask for additional info to verify that you’re the owner of that data. 

Colorado Residents:

Beginning on July 1, 2023, we are regulated under the Colorado Privacy Act (CPA), which applies to Colorado residents. 

Under the CPA, Colorado residents have several important rights: 

  • The right to access their personal data that we have collected or processed. 
  • The right to request a copy of their personal data that we have collected or processed. 
  • The right to request that we delete their personal data.
  • The right to correct inaccurate personal data.
  • The right to opt-out of processing of personal data for targeted advertising, sale of personal data and profiling.

Sale of your personal data: We don’t sell any of your personal data for any purposes.

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers. 

If you would like to exercise any of those rights, please email us at support@heavylunch.studio. We may ask for additional info to verify that you’re the owner of that data. 

Connecticut Residents:

Beginning on July 1, 2023, we are regulated under the Connecticut Data Privacy Act (CTDPA), which applies to Connecticut residents. Under the CTDPA, Connecticut residents have several important rights: 

Under the CTDPA, Connecticut residents have several important rights: 

  • The right to access their personal data that we have collected or processed.
  • The right to request a copy of their personal data that we have collected or processed. 
  • The right to request that we delete their personal data.
  • The right to correct inaccurate personal data.

Sale of your personal data: We don’t sell any of your personal data for any purposes.

Right to Opt Out: The CTDPA allows Connecticut residents to “opt out” of the processing of personal data for targeted advertising, the sale of personal data and profiling. If you are under the age of 16, you have the right to “opt in” to the processing of personal data for targeted advertising, the sale of personal data and profiling.

Other Rights: We do not process personal data for the purpose of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

If you would like to exercise any of those rights, please email us at support@heavylunch.studio. We may ask for additional info to verify that you’re the owner of that data. 

Brazilian Residents:

We are regulated under the Lei Geral de Proteção de Dados (“LGPD”), which applies to Brazilian residents. 

Under the LGPD, Brazilian residents have several important rights: 

  • Know when we use your personal data
  • Access your personal data, correct any errors, or delete your personal data
  • Anonymize, block, or delete data that we don’t need or are not processing in compliance with the LGPD
  • Request we transfer your data to another provider
  • Be informed about who we share your data with
  • Be informed about your ability to deny consent and any consequences 
  • To revoke your consent

These rights apply to any personal data collected or processed in Brazil, as well as any personal data processed for the purpose of providing goods or services in Brazil.

If you would like to exercise any of those rights, please email us at support@heavylunch.studio. We may ask for additional info to verify that you’re the owner of that data. 

9. How do we protect personal data?

We have taken steps and put security measures in place to prevent the accidental loss or misuse of personal data. 

For example, we limit access to those who have a genuine business need. Those processing your information will do so only in an authorized manner.

We use other security measures, as well:

  • Anti-virus software
  • Encryption in transit
  • Firewall
  • Intrusion detection system
  • Multi-factor authentication
  • Regular backups
  • Role-based access controls
  • Vulnerability scanning

We also have procedures in place to deal with any suspected data security breach. We’ll notify you and any applicable regulator of a suspected data security breach when legally required.

10. Resolving Disputes

We hope that we can resolve any questions or concerns you raise about our use of your personal data. 

Please contact us at support@heavylunch.studio to let us know if you have questions or concerns. We will do our best to resolve the issue.

For EU residents, the GDPR also gives you right to lodge a complaint with a supervisory authority. You may do this in the EEA state where you live, work, or where any alleged infringement occurred. 

11. How will we notify you of changes?

We last updated this Privacy Policy on MAY 18 2023.

We may make further updates from time to time. If we have your email address on file, we will inform you via email. Otherwise, we will post a message on the Service about the change.

12. How to contact us

Please contact us if you have any questions about this Privacy Policy or your personal data.

You can do so using the following contact info:

  • Email: support@heavylunch.studio
  • Postal Mail: 301 S McDowell Street, Suite 125, Mailbox 1797, Charlotte, NC 28204