Legal
Privacy Policy
Who this notice covers
This notice explains how the PrimeKeys storefront handles personal information connected with browsing, purchases, account access and support. The operator trading as PrimeKeys is responsible for the information it determines how to use. Send privacy enquiries or complaints to [email protected], with “Privacy” in the subject.
Shoppex provides our storefront, checkout, order and account features. It processes buyer information for merchants and also handles some information for its own payment, security and service purposes. Its own privacy notice applies to those separate activities.
Information involved
Information involved in a purchase can include your email address, order reference, selected product and plan, transaction amount, payment status, delivery record and information needed for fraud checks. The checkout or payment provider may request billing or verification details. This storefront does not directly collect or store your full card number.
Support receives the email address, order details, message and attachments you choose to send. Browsing and checkout services may process IP addresses, device/browser information, request logs, security events, referral identifiers and cookie or storage identifiers. We do not need passwords or sensitive personal information in routine support requests.
Sources and what you need to provide
Information comes from you, your browser, and the order/payment services involved in your purchase. If someone contacts us about an order, we may receive information from that communication, but we will check their authority before disclosing another customer’s details.
An accessible email address and payment information required by the checkout are needed to complete and deliver an order. Without necessary information we may be unable to supply or locate the purchase. Additional support evidence should be limited to what is relevant; you can redact unrelated personal details.
Purposes and lawful bases
We use necessary order and contact information to perform the purchase contract: taking payment, delivering access, locating orders and dealing with order support. We use information where necessary to meet legal obligations, including relevant accounting and consumer-rights requirements.
Where appropriate, our legitimate interests include securing the service, investigating fraud, resolving disputes and improving reliability, balanced against your rights. Consent is used where legally required for optional communications or device storage/access. We do not treat a purchase as consent to unrelated marketing. You may withdraw consent without affecting earlier lawful processing.
Cart and support form
Your cart saves product, licence and quantity selections in this browser. It does not contain a payment card number or a delivered key. Cart data remains until you remove it or your browser clears it.
If you use the support form, the details you enter are passed to us through the store’s contact system, and we reply by email. You can also email us directly. Do not use public community channels to share order or licence details.
Who receives information
Relevant information is handled by Shoppex, payment providers, hosting/security services and the email or communication services used to respond to you. Access should be limited to people and providers who need it for the stated purpose. Authorities or professional advisers may receive information where legally required or necessary to establish or defend a legal claim.
This storefront has no feature for selling your information or sharing it with advertisers for their independent marketing. If you choose Discord or another external destination, that service also handles information under its own rules. See the providers’ own notices for their processing.
International processing
Providers may process information outside your country, including outside the UK or EEA. Shoppex and our other providers publish information about their processors and international transfer safeguards in their own privacy notices.
Where a restricted transfer is made by us, an appropriate lawful transfer mechanism is required, such as an adequacy decision or approved contractual safeguards. Contact us to ask about the safeguards relevant to your information. This notice does not promise that all data stays in the UK.
Retention and security
Order and transaction records are kept for the period needed to fulfil purchases, support licences, meet applicable record-keeping obligations and deal with claims. Support correspondence is retained according to the issue, continuing relationship and need to document its resolution. Relevant records may be kept longer during a dispute or legal hold; information should be removed or de-identified when no longer needed.
Provider records follow their applicable retention arrangements. Local cart storage follows the controls described in the Cookie Policy. We use reasonable protections appropriate to the information and rely on provider security for their services, but no online system can promise absolute security. Tell support promptly about suspected unauthorised access.
Your privacy rights
Depending on the law that applies, you may request access to your personal information, correction, deletion, restriction, portability, or object to certain processing, including processing based on legitimate interests. Direct-marketing objections must be respected. Rights can have exceptions, including information needed for legal obligations or claims.
Email support with the right you want to exercise and enough information to locate the record. We may request proportionate identity or authority checks. UK/EU rights requests are generally answered within one month, subject to lawful pauses or extensions; we will explain an applicable extension. Requests are normally free, subject to the limited exceptions allowed by law. Clearing your browser does not delete an order record.
Children and automated decisions
The storefront is not directed at children making purchases independently. A parent or guardian who believes a child has provided personal information should contact us so we can investigate and take appropriate action.
PrimeKeys does not operate an automated decision-making or profiling feature of its own that produces legal or similarly significant effects. Checkout and payment providers may use automated security or fraud checks under their own notices. Contact support if a payment or access problem needs review; do not send additional identity documents through public chat.
Complaints and updates
Contact [email protected] if you are unhappy with how your information is handled. For UK data-protection complaints, we will acknowledge receipt within 30 days, take appropriate steps to investigate and communicate the outcome without undue delay.
You can also complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or the relevant supervisory authority in your country, including your EU authority where applicable. We will date updates to this notice and explain material changes where required. New wording does not retrospectively authorise an incompatible use of your information.