Privacy Policy

GameGiftCard Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

1.1 Information You Provide

When you create an account or make a purchase, we collect:

• Identity Data: Full name, username
• Contact Data: Email address, phone number (optional)
• Account Data: Password (encrypted), account preferences
• Transaction Data: Purchase history, order details

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Technical Data: IP address, browser type, operating system, device information
• Usage Data: Pages visited, time spent, click patterns, referring site
• Cookie Data: As described in our Cookie section below

1.3 Information from Third Parties

• Payment Providers: NOWPayments provides transaction confirmation (not full payment details)
• Analytics Partners: Aggregated website usage data

2. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to fulfil your orders and provide our services
• Legal Obligation: Compliance with legal requirements (e.g., tax records, fraud prevention)
• Legitimate Interests: Improving our services, preventing fraud, marketing (where appropriate)
• Consent: Marketing communications (where you have opted in)

3. How We Use Your Information

4. Data Sharing

We do not sell your personal data. We may share information with:

• Payment Processors: NOWPayments processes payments securely; we do not store full payment details or private keys
• Email Service Providers: To send transactional and marketing emails
• Hosting Providers: Secure cloud infrastructure (data stored in EU/UK)
• Analytics Providers: Aggregated, anonymised data for website improvement
• Legal Authorities: When required by law or to protect our legal rights

All third-party processors are contractually bound to process data only as instructed by us and to implement appropriate security measures.

5. International Data Transfers

Where we transfer personal data outside the UK, we ensure adequate protection through:

• UK adequacy regulations for approved countries
• Standard Contractual Clauses (SCCs) approved by the ICO
• Other appropriate safeguards as required by UK GDPR

6. Data Retention

We retain your personal data for:

• Account Data: Duration of your account plus 2 years
• Transaction Records: 7 years (legal requirement for tax purposes)
• Marketing Preferences: Until you withdraw consent
• Support Communications: 3 years from last contact
• Technical Logs: 12 months

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time (where consent is the basis)

To exercise these rights, contact us at privacy@gamegiftcard.co. We will respond within one month. We may need to verify your identity before processing requests.

8. Cookies and Tracking

8.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (authentication, shopping cart)
• Functional Cookies: Remember your preferences (language, theme)
• Analytics Cookies: Help us understand how visitors use our site (with your consent)
• Marketing Cookies: Track effectiveness of advertising (with your consent)

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality. On first visit, you will be asked to accept or customise cookie preferences.

9. Data Security

We implement appropriate technical and organisational measures including:

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive data
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing through PCI-compliant providers

While we take all reasonable precautions, no internet transmission is completely secure. We cannot guarantee absolute security but will notify you and the ICO of any significant data breach as required by law.

10. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Marketing Communications

We will only send marketing communications if you have opted in. You can unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating preferences in your account settings
• Contacting us at privacy@gamegiftcard.co

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or website notice. The "Last updated" date indicates when changes were last made.

13. Complaints

If you have concerns about how we handle your data, please contact us first at privacy@gamegiftcard.co. You also have the right to lodge a complaint with the UK supervisory authority:

14. Contact Us

For privacy-related enquiries:

• Email: privacy@gamegiftcard.co
• General Support: support@gamegiftcard.co

Last updated: December 2024