Privacy Policy

Last updated: May 2026

1. Who We Are

LegalKeys is a sole trader business based in the United Kingdom, operating the website at legalkeys.co.uk (or similar). We are the data controller for the personal data you provide to us. For contact details, see our About page.

2. What Data We Collect

We collect the following personal data when you use our services:

  • Name and email address (when registering or purchasing)
  • Payment information (processed securely by our payment provider — we do not store card details)
  • Business details for sellers (company name, registration number, VAT number, proof of supply)
  • IP address and browser information (collected automatically for security and fraud prevention)

3. How We Use Your Data

We use your personal data to:

  • Process and fulfil your orders (deliver game keys by email)
  • Verify seller identity and legal compliance
  • Communicate with you about your account or orders
  • Comply with our legal obligations (including fraud prevention and tax record-keeping)

The lawful basis for processing is contract performance (for orders), legal obligation (for compliance), and legitimate interests (for fraud prevention).

4. Data Sharing

We do not sell your data. We share your data only with:

  • Our payment processor, for completing transactions
  • Our key distributor (Enaba), for fulfilling orders
  • Legal or regulatory authorities, if required by law

5. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Order records are kept for 6 years for tax purposes, in line with HMRC requirements.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data (where no legal obligation requires us to keep it)
  • Object to or restrict processing
  • Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us via the About page.

7. Cookies

This website uses only essential cookies required for the site to function (such as session management). We do not use tracking or advertising cookies.