Season’s Treatings

About

By Phantom Studios

From the deliciously sweet to the devilishly indulgent, these festive dudes are good enough to eat. No for real, you can recreate your generations in the kitchen... if you dare. We use Google's latest Gemini 3 Pro Image model (Nano Banana Pro) for all gingerbread generations. During high traffic, we may switch to the Gemini 2.5 Flash Image model (Nano Banana) as a fallback. All prompts are crafted by Phantom Studio.

Privacy Policy

  • What is this privacy policy for?

    This privacy policy is for the Phantom Festive Gingerbread Experience, operated by Phantom Studios Limited. It governs the privacy of users who choose to interact with this web-based experience. This policy outlines the areas where user privacy is a concern and details the obligations and requirements of users, the experience, and its owners. Additionally, it explains how this experience processes, stores, and protects user data and information, ensuring compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  • Data collection

    We may collect the following types of personal data:

    • Technical Data: IP addresses, browser type, operating system, and other similar information.
    • Cookies & Tracking Data: Information collected through cookies and similar tracking technologies (see our Cookie Policy for details).
    • Usage Data: Pages visited, time spent on pages, interaction data, and navigation paths.

  • How we use your data

    The data we may collect is used for the following purposes:

    • To provide and improve our services. (Consent)
    • To enhance functionality and user experience. (Consent)
    • To analyze experience performance and usage patterns through tools like Google Analytics. (Consent)
    • To comply with legal obligations and protect against fraud or misuse. (Legal Obligation & Legitimate Interest)

  • Data Retention

    • Cookies, analytics and tracking data: Retention periods are set by Google (policy here)
    • Legal and regulatory compliance: Certain records may be retained for extended periods where required by law.

  • User Rights Under UK GDPR

    Users have the following rights regarding their personal data:

    • Right to Access: Request access to personal data we hold about you.
    • Right to Rectification: Request correction of inaccurate or incomplete data.
    • Right to Erasure: Request deletion of personal data where no longer necessary.
    • Right to Restrict Processing: Limit how your data is used in certain circumstances.
    • Right to Data Portability: Request a copy of your data in a structured format.
    • Right to Object: Object to processing based on legitimate interests.
    • Right to Withdraw Consent: If data processing relies on consent, you may withdraw it at any time.
    • To exercise any of these rights, please contact us via the details provided at the end of this policy.

  • Data Security & Breach Management

    We implement appropriate technical and organisational measures to safeguard user data. In the event of a data breach:

    • We will assess and mitigate risks immediately.
    • Where applicable, affected users will be notified promptly.
    • If required, we will report the breach to the UK Information Commissioner's Office (ICO) within 72 hours.

  • Data Transfers Outside of the UK

    Some collected data may be processed outside the UK, including:

    • Google Analytics data, which may be stored on US-based servers.
    • Email and cloud storage services that operate internationally.

    We ensure that appropriate safeguards are in place for international transfers, including:

    • Using services that comply with UK GDPR adequacy decisions.
    • Implementing Standard Contractual Clauses (SCCs) where necessary.

  • Google Analytics

    • This experience may use third-party web analytics services such as Google Analytics. Google Analytics uses cookies to help analyse how users engage with this experience. Information generated by these cookies (including IP addresses and browsing data) may be transmitted to and stored on Google servers in the United States.
    • Google processes this data to compile reports on experience activity and improve user experiences. Information may also be disclosed to third parties where required by law or where third parties process information on Google’s behalf.
    • For more details, refer to Google’s Privacy Policy. Users may opt out of Google Analytics here.

  • External links

    Although this experience only includes quality, safe, and relevant external links, users are advised to exercise caution before clicking external links. The owners of this experience cannot guarantee the content of any external site despite their best efforts.Users should be aware that they click on external links at their own risk. This experience and its owners cannot be held liable for any damages or consequences resulting from visiting external sites.

  • Social media platforms

    Interactions on social media platforms associated with this experience are subject to the privacy policies and terms of the respective platforms. Users should exercise discretion when engaging on social media and avoid sharing personal or sensitive details through these channels.This experience has social sharing buttons that enable users to share content directly from the experience to their social media accounts. Users should be aware that social media platforms may track and store these interactions.

  • Shortened links in social media

    This experience and its owners may share web links on social media. Some social media platforms automatically shorten URLs. Users are advised to be cautious when clicking on shortened URLs, as malicious links can exist. This experience and its owners cannot be held responsible for any damages or consequences resulting from clicking on such links.

  • Contact details

    [email protected]

  • Resources