Privacy Policy

This Privacy Policy sets out the principles governing the collection, handling, storage, and protection of information associated with Velocity Kick Surge, a mobile game, including its integrated functions and related services (collectively, the “Application”). The Application is managed by SHIMMY GROUP LTD, referred to in this document as the “Service Provider,” “we,” or “us.”

By accessing or using the Application, you acknowledge the information practices described below. We encourage all users to review this document to understand how their information may be handled and what privacy options may be available to them.

Information We Collect and Process

When you install or use Velocity Kick Surge, certain technical information and details about your interaction with the game may be processed. Depending on the features you access and the technologies integrated into the Application, this information may include:

• Your device's Internet Protocol (IP) address.
• Information about the pages, screens, menus, and functions accessed within the Application.
• Dates and times of activity, including the approximate duration of individual sessions.
• The total amount of time spent interacting with the game.
• Details about your device's operating system.
• Information obtained through cookies, software identifiers, and comparable tracking technologies.

Velocity Kick Surge and its integrated third-party software development kits (SDKs) may rely on cookies, pixels, SDKs, and similar tools to support application functionality, evaluate usage patterns, and improve service performance. Where applicable legislation requires permission for non-essential tracking technologies, the Service Provider will request consent before activating them.

Privacy Rights

Depending on your country or region of residence, applicable privacy laws may grant you certain rights concerning your personal information. These may include requesting access to information held about you, correcting inaccurate details, requesting the deletion of eligible information, and withdrawing consent when processing relies on your permission.

For questions about your rights or to submit a privacy-related request, contact the Service Provider at [email protected].

California Privacy Rights (CCPA/CPRA)

California residents may have specific privacy rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Subject to applicable requirements and exceptions, these rights may include:

• Requesting information about the categories and specific pieces of personal information collected.
• Learning how personal information is used and, where applicable, disclosed.
• Requesting the deletion of eligible personal information.
• Opting out of the sale or sharing of personal information where applicable.
• Exercising applicable privacy rights without unlawful discrimination.

California residents who wish to make a request or obtain further information can contact SHIMMY GROUP LTD at [email protected].

Where permitted by law, the Service Provider may use information submitted by users to provide service-related updates, important announcements, legally required communications, or promotional messages.

Some functions within Velocity Kick Surge may require information that can be linked to an individual user. Any information processed for these purposes will be handled in accordance with this Privacy Policy and the data protection laws that apply.

Disclosure to Third Parties

Information that has been aggregated, anonymized, or otherwise modified so that it cannot reasonably identify a specific individual may be shared with external partners for statistical analysis, maintenance, development, and improvement of the Application.

Personal information may also be disclosed when permitted or required by law, provided that the disclosure is consistent with applicable legal requirements and the practices outlined in this document.

International Processing and Data Transfers

Information associated with the use of Velocity Kick Surge may be processed or stored in countries other than your country of residence. Such processing may be performed by the Service Provider or by third-party companies that assist in operating the Application. These locations may include countries outside the European Economic Area (EEA).

When applicable data protection laws require safeguards for international transfers, the Service Provider will use an appropriate legal mechanism. Depending on the circumstances, this may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• An applicable adequacy decision or another transfer mechanism recognized under relevant legislation.
• Your consent, where consent is legally appropriate and sufficient for the transfer concerned.

Because privacy requirements vary between jurisdictions, international transfers will be handled in accordance with the legal obligations applicable to the information and the relevant parties. Any necessary authorizations will be obtained where required.

Third-Party Services

Velocity Kick Surge may incorporate services supplied by external providers to support functionality, analytics, advertising, attribution, or other operational requirements. Depending on the configuration of the Application, these services may include:

• Google Play Services
• AdMob
• Firebase
• AppsFlyer

These providers may process certain technical or usage-related information in accordance with their own privacy policies and the services they supply.

The Service Provider may also disclose information collected through the Application or provided by users in the following circumstances:

• Legal obligations: When disclosure is necessary to comply with applicable legislation, a valid judicial order, a subpoena, or another legally enforceable request.
• Protection and security: When reasonably necessary to protect legal rights, maintain the safety of users or other individuals, investigate suspected fraudulent activity, or respond to a lawful request from a public authority.
• Authorized service providers: When information must be shared with contractors or partners performing services on the Service Provider's behalf, provided appropriate confidentiality and data protection obligations apply and their use of the information is appropriately restricted.

Stopping Data Collection

If you do not wish to allow further information to be collected through your installation of Velocity Kick Surge, you may discontinue using the game and uninstall it from your device.

Uninstalling the Application generally stops additional collection through that installation. However, information already transmitted to the Service Provider or third-party providers may remain in their systems in accordance with applicable retention requirements and their respective policies.

You may also contact [email protected] to request the deletion of eligible personal information, withdraw consent where applicable, or exercise other privacy rights available under relevant law.

Data Retention

The Service Provider retains information only for the period reasonably necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

The following general retention guidelines may apply:

• Information submitted by users: Typically retained while the user continues to use the Application and for up to 12 months after use ends, unless legal or other applicable requirements justify a longer period.
• Automatically collected technical information: Generally retained for up to 24 months from collection, unless a different period is necessary to meet legal, regulatory, or operational requirements.
• Aggregated or anonymized records: May be kept for an extended or indefinite period when they can no longer reasonably be associated with an identifiable individual.
• Records retained for legal purposes: Stored for the period required by the relevant laws, regulations, or legal proceedings.

You may submit a request to have your personal information deleted. Certain information may nevertheless need to be retained to comply with legal obligations or establish, exercise, or defend legal claims where permitted by law.

To request the removal of information previously submitted through Velocity Kick Surge, email [email protected]. Please be aware that deleting certain information may affect the availability or operation of specific game features.

Children's Privacy

Velocity Kick Surge is not designed for children under 13 years of age or individuals below a higher minimum age established by the laws applicable to them.

The Service Provider does not knowingly request personal information from children or intentionally target the Application toward this age group. Where parental or guardian authorization is required by law, the Application should not be used by a child without the necessary permission.

The Service Provider does not knowingly collect personally identifiable information from children under 13 where such collection is prohibited. If we discover that information has been collected from a child in circumstances that violate applicable requirements, we will take reasonable steps to remove that information as soon as practicable.

Parents or legal guardians who believe that a child has provided personal information may contact [email protected]. We will review the concern and take appropriate action in accordance with applicable law.

Information Security

SHIMMY GROUP LTD applies reasonable organizational, technical, and administrative measures intended to protect information associated with Velocity Kick Surge from unauthorized access, disclosure, alteration, destruction, or misuse.

The safeguards used may include access restrictions, security procedures, and other protective measures appropriate to the type of information processed and the potential risks involved.

Although we make reasonable efforts to protect information, no electronic storage system or method of transferring data over the internet can be guaranteed to be entirely secure. Accordingly, we cannot promise absolute security.

Security Incident Notifications

If a security incident affects personal information, the Service Provider will notify affected individuals and relevant authorities when such notification is required by applicable law.

Where appropriate or legally necessary, the notification may describe the general nature of the incident and the measures taken, or intended to be taken, to investigate the event, reduce potential harm, and address its consequences.

Updates to This Privacy Policy

This Privacy Policy may be revised periodically to reflect changes in Velocity Kick Surge, updates to integrated technologies, adjustments to information-handling practices, or amendments to applicable legal requirements.

When a revised version is published, its effective date will be updated accordingly. If a material change requires renewed user consent under applicable law, the Service Provider will obtain that consent before implementing the change where required.

Previous versions may be requested by contacting [email protected].

Effective Date: 2026-10-17

Consent and Withdrawal

Where consent is the appropriate legal basis for processing, it may be provided by granting a requested permission, enabling a relevant feature, or taking another clear affirmative action indicating agreement.

You may withdraw your consent at any time where applicable law allows. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. Information that may lawfully be processed on another legal basis can continue to be handled in accordance with this Privacy Policy.

Contact Information

For questions about this Privacy Policy, requests concerning your personal information, or clarification about how data is handled through Velocity Kick Surge, please contact the Service Provider:

Email: [email protected]