cat privacy-policy.md
Privacy Policy
Last updated: 23 October 2026
This policy explains what personal data we collect when you use noclipsi.com, why we collect it, who we share it with and what rights you have. We only collect what we need to run the store and support you.
1. Who is responsible for your data
The controller of your personal data is EXAMPLE COMPANY LTD, Company No. 00000000, 1 Example Street, London, United Kingdom, EC1A 1AA ("NOCLIPSI", "we", "us").
For any privacy question or request, write to support@noclipsi.com, call +440000000000 (10:00 AM - 6:00 PM, GMT+0) or use the contact form.
2. The data we collect
Data you give us
- Account data: your name, email address and password. Passwords are stored only in hashed form, so we cannot read them.
- Order data: the products in your cart and orders, prices, the display currency you chose, order status, the keys delivered to you and your invoices.
- Support data: the messages, order numbers and screenshots you send us by email or through the contact form.
Data from payments
Card payments are handled on our payment provider's secure hosted page. We never see or store your full card number or security code. The provider tells us whether the payment succeeded and may share limited details such as the card type and the last four digits.
Data collected automatically
- Technical data: IP address, browser type, device type, language, and the date and time of your visits.
- Cookie data: identifiers stored by cookies and similar technologies (see section 6).
- Favorites: if you are not signed in, the products you mark as favorites are stored in your browser. When you sign in, they are moved to your account.
3. Why we use your data and our legal bases
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Contract |
| Processing orders, buying keys from our supplier and delivering them to your account | Contract |
| Sending service emails (invoice, "your keys are ready", password reset) | Contract |
| Taking payments and preventing fraud and chargeback abuse | Contract and legitimate interest |
| Answering support requests and handling refunds | Contract and legitimate interest |
| Keeping accounting, tax and order records | Legal obligation |
| Keeping the site secure and working | Legitimate interest |
| Measuring and improving the site with optional cookies | Consent |
We do not sell your personal data. We do not send marketing emails unless you have agreed to receive them, and you can unsubscribe at any time.
4. Who we share data with
We share personal data only when it is needed for the purposes above:
- Our key supplier, Kinguin: only the order details needed to obtain your keys.
- Our payment provider: to process your card payment and run fraud checks.
- Hosting, email and IT service providers: who store data and send emails on our behalf.
- Professional advisers: such as accountants and lawyers, where needed.
- Authorities: when the law requires it, or to protect our rights and prevent fraud.
All service providers act on our instructions and must keep your data secure.
5. International transfers
Some of our providers may process data outside the UK or the European Economic Area. When this happens, we make sure appropriate safeguards are in place, such as an adequacy decision or standard contractual clauses approved by the relevant authorities.
6. Cookies
We use a small number of necessary cookies to make the site work. They keep you signed in, remember your chosen display currency and store your cookie choices.
Other cookies (functional, performance and marketing) are used only if you agree to them in the cookie banner. You can change your choice at any time from the cookie settings on the site. You can also block or delete cookies in your browser, but some parts of the site may then stop working, for example staying signed in.
7. How long we keep data
- Account data: for as long as your account is open. If you close it, we delete or anonymise it within a reasonable time, except where we must keep it for the reasons below.
- Orders and invoices: for as long as tax and accounting law requires (usually up to 6 years in the UK).
- Support messages: up to 2 years after the conversation ends.
- Technical and security logs: for a limited period, usually no longer than 12 months.
8. How we protect your data
We use encryption in transit (HTTPS), hashed passwords, access controls and regular updates to protect your data. No system is completely secure, so please use a strong, unique password and keep it private. If a security incident affects your data, we will tell you and the authorities where the law requires.
9. Your rights
Under UK and EU data protection law you have the right to:
- access the personal data we hold about you;
- correct data that is wrong or incomplete;
- ask us to delete your data;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- ask us to restrict processing;
- withdraw your consent at any time, without affecting processing that happened before.
To use any of these rights, write to support@noclipsi.com. We may ask you to confirm your identity. We reply within one month.
If you are not happy with how we handled your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in your country. We would appreciate the chance to sort it out with you first.
10. Children
The site is not intended for children who are too young to give valid consent under the law of their country. We do not knowingly collect data from them. If you believe a child has given us personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy when our service or the law changes. The date at the top shows the latest version. If a change is significant, we will let you know by email or on the site.