JAH AND CO
Effective Date: September 10, 2026
Jah and Co ("Jah and Co," "Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use and share it, and the choices and rights available to you when you use our entertainment titles and consumer hub, apparel and merchandise storefront, and related websites and services (collectively, the "Services").
This Policy is intended to satisfy applicable disclosure requirements under the EU/UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), in addition to describing our general privacy practices. Terms such as "personal data," "processing," "controller," and "processor" have the meanings given under the GDPR; "personal information," "sale," and "share" have the meanings given under the CCPA, where applicable.
Account information: name, email address, username, password, and account preferences.
Order and shipping information: billing and shipping address, phone number, and order details for apparel and merchandise purchases.
Payment information: processed by our third-party payment processors; we do not store full payment card numbers.
Communications: messages you send us, including support requests and survey responses.
Device and usage data: IP address, browser type, operating system, pages viewed, referring URLs, and timestamps.
Gameplay and telemetry data: in-game actions, session activity, performance/crash diagnostics, and matchmaking data, for titles available through our entertainment hub.
Cookies and similar technologies: used for authentication, preferences, analytics, and (where applicable) advertising, as described in Section 6.
Identity and authentication providers, if you log in via a third-party account;
Payment processors, confirming transaction status;
Analytics and infrastructure providers that support the Services.
We use personal data to:
Provide, operate, and maintain the Services, including processing orders and fulfilling shipments;
Create and manage accounts;
Process payments and prevent fraud;
Provide customer support and respond to inquiries;
Operate multiplayer, matchmaking, and other gameplay features;
Monitor, secure, and improve the performance and reliability of our infrastructure;
Communicate with you about updates, security notices, and (where you have consented or as otherwise permitted by law) marketing;
Comply with legal obligations and enforce our Terms of Service.
Where the GDPR applies, we rely on the following legal bases to process personal data: performance of a contract (e.g., providing an account or fulfilling an order); legitimate interests (e.g., securing our Services, preventing fraud, and improving performance), balanced against your rights and interests; consent (e.g., certain cookies or marketing communications), which you may withdraw at any time; and compliance with a legal obligation.
We do not sell personal data for money. We may share personal data with:
Service providers and processors who perform services on our behalf (e.g., payment processing, cloud hosting, shipping/fulfillment, analytics, customer support tooling), under contractual confidentiality and data protection obligations;
Professional advisors and authorities, where necessary to comply with law, respond to legal process, or protect our rights, users, or the public;
A successor entity, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a materially similar one.
For purposes of the CCPA, disclosures to service providers for a business purpose as described above do not constitute a "sale" or "share." If this changes, we will update this Policy and provide the required notice and opt-out mechanism.
We may transfer, store, and process personal data in countries other than your own, including the United States. Where we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to a country not deemed to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, or another valid transfer mechanism.
We use cookies and similar technologies to authenticate users, remember preferences, understand usage patterns, and, where applicable, measure advertising performance. You can control cookies through your browser settings; disabling certain cookies may affect the functionality of the Services. Where required by law, we will request your consent before placing non-essential cookies and provide a mechanism to withdraw that consent.
We retain personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it was collected; account data is generally retained for the life of the account plus a limited period thereafter, and transaction records are retained as required by applicable tax and accounting law.
Subject to applicable conditions and exceptions, you have the right to: access the personal data we hold about you; request rectification of inaccurate data; request erasure of your data; restrict or object to certain processing, including processing based on legitimate interests and direct marketing; request data portability; and lodge a complaint with your local data protection authority. You may exercise these rights by contacting us using the details in Section 12.
Subject to applicable conditions and exceptions, California residents have the right to: know the categories and specific pieces of personal information we have collected, used, disclosed, and (if applicable) sold or shared, and the categories of sources and third parties involved; request deletion of personal information we have collected; request correction of inaccurate personal information; opt out of the sale or sharing of personal information and out of certain profiling used for behavioral advertising, to the extent applicable; and not receive discriminatory treatment for exercising any of these rights. You may submit a request by contacting us using the details in Section 12; we will verify your identity before fulfilling access, deletion, or correction requests.
The Services are not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal data from children under that age without appropriate parental consent. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as appropriate, such as by posting the updated Policy with a new effective date or through other reasonable means. Your continued use of the Services after changes become effective constitutes acknowledgment of the revised Policy.
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: [email protected]
Last Updated: 09/13/2026