Privacy Policy
Last updated: May 2026
1. Who We Are
LegalKeys is a sole trader business based in the United Kingdom, operating the website at legalkeys.co.uk (or similar). We are the data controller for the personal data you provide to us. For contact details, see our About page.
2. What Data We Collect
We collect the following personal data when you use our services:
- Name and email address (when registering or purchasing)
- Payment information (processed securely by our payment provider — we do not store card details)
- Business details for sellers (company name, registration number, VAT number, proof of supply)
- IP address and browser information (collected automatically for security and fraud prevention)
3. How We Use Your Data
We use your personal data to:
- Process and fulfil your orders (deliver game keys by email)
- Verify seller identity and legal compliance
- Communicate with you about your account or orders
- Comply with our legal obligations (including fraud prevention and tax record-keeping)
The lawful basis for processing is contract performance (for orders), legal obligation (for compliance), and legitimate interests (for fraud prevention).
4. Data Sharing
We do not sell your data. We share your data only with:
- Our payment processor, for completing transactions
- Our key distributor (Enaba), for fulfilling orders
- Legal or regulatory authorities, if required by law
5. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Order records are kept for 6 years for tax purposes, in line with HMRC requirements.
6. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (where no legal obligation requires us to keep it)
- Object to or restrict processing
- Lodge a complaint with the ICO (ico.org.uk)
To exercise any of these rights, contact us via the About page.
7. Cookies
This website uses only essential cookies required for the site to function (such as session management). We do not use tracking or advertising cookies.
