Privacy
Policy

This global Privacy Notice covers personal data when We act as the data controller.

For the purposes of this Privacy Notice, We set up the following terms and definitions:

Personal data includes data that identifies or could be used to identify a specific person, and any data about that person. For example, a person's name, address, and payment details are personal data.

We act as a controller when We process personal data for Our own use. For example, We act as a controller when You provide Your personal data to open an account.

This Privacy Notice does not apply when Our Customers or another person processes personal data for their own benefit. For example, when a Customer sends email for their own business purposes that includes personal data, the Customer is acting as the “controller”. When the Customer acts as the controller, We act as the “processor” and process personal data only in accordance with Our Customer's instructions or as required by law.

This Privacy Notice does not apply to third-party applications offered through Our Services or linked through Our Website. For information about the privacy practices of any third-party offerings, please review any privacy policies applicable to that offering before using it.

We recognize several core privacy rights for all individuals:

• the right to know what personal data We hold about You
• the right to access, correct, or delete Your personal data
• the right to transfer Your personal data (data portability)
• the right to set Your individual marketing and advertising preferences

Where technically feasible and appropriate, We provide self-service and automated mechanisms to allow individuals to exercise their privacy rights.

We also manually review requests to exercise privacy rights where self-service is not possible or appropriate. We promptly review such requests to exercise privacy rights. If We need more information to process a request, We will contact the requestor by email or, if We do not have an email address on file for the requestor, by the same method the request was made.

If We do not honor a request for legal or other reasons, We will explain why We did not honor the request, the right to appeal, and any right to file a complaint (if available where the requestor lives).

TO PERFORM OUR COMMITMENTS TO YOU UNDER EXISTING REGULATION WE INFORM YOU THAT THE FOLLOWING PERSONAL DATA WILL BE COLLECTED DURING THE USE OF OUR WEBSITE AND OUR SERVICES:

• Your name and surname
• Your date of birth
• Your email
• Your password
• Your IP address
• your Steam account data
• Your device information¹
• Your location data²
• Question History³
• Billing details⁴
• Payment method⁵
• User patterns⁶

WE INFORM YOU THAT WE WILL COLLECT YOUR PERSONAL INFORMATION FOR THE FOLLOWING PURPOSES:

• For creation and managing Your account.
• For customization of Our Website.
• For modification of Our Services and Our Website.⁷
• For processing purchase requests and transactions.
• For providing Customer support.
• For Website traffic measurement.
• For detecting DNS abuse, fraud and other illegal activity.
• For ensuring proper technical and legal functioning of trade of digital items (skins etc.) according to Company and Steam platform rules (https://store.steampowered.com/).
• For managing token balance, token conversions, commissions, deposits, withdrawals, and purchases made via the platform.

BY USING OUR WEBSITE AND OUR SERVICES YOU ACKNOWLEDGE AND AGREE THAT WE RESERVE THE RIGHT TO COLLECT INFORMATION FOR OTHER PURPOSES, WHICH ARE NOT SPECIFIED ABOVE, ON AD-HOC BASIS, IN EACH SUCH CASE, YOU WILL BE INDIVIDUALLY AND EXPLICITLY NOTIFIED BY EMAIL ABOUT SUCH COLLECTION AND ITS PURPOSE AS WELL AS YOU WILL BE OFFERED A POSSIBILITY TO WAIVE SUCH COLLECTION OF DATA

BY USING OUR SERVICES, YOU ACKNOWLEDGE THAT ALL DIGITAL ITEM (SKINS ETC.) TRANSFERS, TRADE HOLDS, DELIVERY TIMES, AND TRADING LIMITATIONS ARE STRICTLY GOVERNED BY STEAM PLATFORM RULES. WE COLLECT AND PROCESS DATA NECESSARY TO COMPLY WITH THOSE RULES, INCLUDING INFORMATION CONFIRMING TRANSFERS TO OR FROM OUR TRADE BOTS.

We do not sell, lease, rent, or transfer personal data to third parties for monetary or other consideration.

We disclose personal data:

• to processors to operate Our business and provide Services, including but not limited to providing security Services, payment processing and Customer support; conducting contests and surveys; generating data insights; and performing other activities related to Our business and Services.
• to business partners including payment institutions and Steam-integrated services, or to offer some Services, such as email and payment processing.
• to comply with law enforcement and other legal requests, protect Our legal rights, prevent harm to Us or others, and enforce Our policies and contracts.

In addition, if We sell some or all of Our assets or merge with a third-party We may transfer relevant personal data to the buyer or new company.

We use optional and mandatory identifiers. Optional identifiers are used for support, Website performance, and advertising. Mandatory identifiers are used for account, verification, service continuity, security, and other essential functions necessary to provide Our Website and Services.

On our website You cannot manage identifiers.

Some web browsers provide a “Do Not Track” feature. There are no generally accepted standards for this feature, and We do not respond to “Do Not Track” signals.

We recognize universal opt-out mechanisms, such as the Global Privacy Control, where required by applicable law.

We store personal data on Our own systems and with trusted service providers, including Amazon Web Services.

Typically, Your personal data will be stored and proceed in the UK, however, in some cases We may transfer Your personal data to Our third-party providers, which may be located across the EEA. In exceptional cases Your personal data may be transferred to Our third-party providers located outside the EEA, in this case We will take additional measures to comply with data protections standards existing in the UK.

We will retain Your personal data as long as it is necessary for the use of Our Website and Our Services and have an account with Us. Additionally, We will hold some data to comply with the applicable legislation, in particular with AML/CTF legislation. Finally, We will hold Your personal data for the purposes of giving adequate response to Your or any third party's legitimate claims, including but not limited to litigation.

For security, fraud prevention, dispute resolution, payment verification, compliance, chargeback defense, and lawful operation of the Services, the Company may collect, generate, store, and retain transaction records, activity logs, and audit trail information related to user accounts and transactions.

Such information may include, without limitation:

• user account identifiers;
• account email addresses;
• IP addresses;
• device and browser information;
• device identifiers or device fingerprinting information;
• Steam account identifiers;
• transaction identifiers;
• payment identifiers and authorization responses;
• 3D Secure (3DS) authentication results;
• item identifiers and item delivery timestamps;
• withdrawal and payout records;
• applicable Terms and Conditions or Refund Policy versions accepted by the user;
• checkbox acknowledgements and consent records;
• customer support communications and dispute history;
• fraud prevention and security review records.

The Company retains such information for the purposes of fraud prevention, compliance, security monitoring, payment verification, dispute handling, chargeback defense, enforcement of contractual rights, and compliance with applicable legal and regulatory obligations.

We use risk-based measures to protect personal data, including appropriate security controls and employee training. We also require that Our service providers, business partners, and advertisers use appropriate risk-based controls to protect personal data. In case of transfer of Your data outside EEA, We will enter into a specific agreement and will implement adequate measures of Your personal data protection, which will comply with the existing UK standards.

Payment card transactions are processed through secure encrypted payment infrastructure operated by third-party payment service providers that are represented as PCI DSS compliant.

The Company does not store full payment card numbers, card verification values (CVV/CVC), or other sensitive authentication data on its servers.

Payment information is processed directly by authorized third-party payment providers in accordance with their applicable security and compliance standards.

We do not knowingly collect personal data about anyone under 18 without permission from their parents or legal guardian. Please contact Us support@storeskin.vip if You believe We have collected information from a child without permission from their parents or legal guardian.

We process personal data upon a person's request, with a person's consent, to fulfill Our contracts, based on Our legitimate interest, or other lawful bases. The specific basis of processing depends on the Services You are using, the data being processed, the place where the processing occurs, and the place where You live. If You have questions about Our basis for processing Your personal data, please contact Us at support@storeskin.vip.

We will not discriminate against You for exercising Your privacy rights.

We do not provide any financial incentives for providing personal data to Us.

We may revise this Privacy Notice by posting a revised statement at the same location as this Privacy Notice, on another location on Our Website, or by contacting Customers directly. If We change this global Privacy Notice, it will apply to personal data collected prior to adoption of the new statement only to the extent as the new statement does not reduce the rights of affected data subjects.

If You have any questions, You can contact Us at support@storeskin.vip

We respond to all questions or concerns within 30 days.