Draft — pending your review. This is a starting-point template, not legal advice. Replace every [BRACKETED] placeholder and review it with a qualified professional before launch.

Privacy Policy

This policy explains what personal data [BUSINESS NAME] collects, why, and your rights over it.

Last updated: [DATE]. This document is a working draft provided to help you launch. Review it with a qualified professional and replace every [BRACKETED] placeholder before relying on it with real customers.

1. Data we collect

Account data: your email address and, if you use social login, your provider account id and email.
Order data: the services you buy, your configuration choices, and messages you send us about an order.
Fulfilment information: details a service needs, such as a gamer tag or temporary account access. Sensitive access details are stored encrypted and shown only to the staff working your order.
Payment data: handled by our payment providers. We receive confirmation of payment, not your full card number.
Technical data: standard server logs and the functional cookies described below.

2. Why we use it

To create your account, take payment, complete and support your orders, prevent fraud, and meet legal obligations. We do not sell your personal data.

3. Cookies

We use only functional cookies required to run the store — for example to remember your cart and keep you signed in. We do not currently run third-party advertising or analytics trackers. If you add analytics or marketing tools later, disclose them here and add a consent banner where required.

4. Sharing

We share data only with providers who help us run the service — our hosting, payment and email providers, and the staff who fulfil your order — and only as needed. If you use social login, your chosen provider (Google or Discord) shares your basic profile with us so you can sign in.

5. Retention

We keep order records for as long as needed for support, accounting and legal reasons. Temporary account-access details are removed once they are no longer needed to complete your order.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete or export your data, or to object to certain processing. To exercise them, contact [SUPPORT EMAIL]. [ADD ANY GDPR / UK GDPR / CCPA WORDING REQUIRED FOR YOUR CUSTOMERS.]

7. Contact

Data controller: [BUSINESS NAME], [BUSINESS ADDRESS]. Contact: [SUPPORT EMAIL].