Privacy Policy
This Privacy Policy explains how ACC2BUY collects, uses and protects your personal data when you visit our website or purchase our digital products. We operate in compliance with the General Data Protection Regulation (GDPR). Please read this page carefully before using our services.
Who We Are
ACC2BUY is an online marketplace for digital products, including game keys, software licences, streaming subscriptions and marketing services.
For the purposes of GDPR, ACC2BUY acts as the Data Controller for personal data collected through this website.
For any privacy-related enquiries, please contact us at: [email protected]
Data We Collect
We collect only the minimum data necessary to provide our services. This falls into two categories:
Data you provide directly:
- Account data — your name, email address and password when you register
- Order data — products purchased, order amounts, order history and transaction references
- Communication data — messages you send us via email or contact forms
Data collected automatically:
- Technical data — IP address, browser type, operating system and device type
- Usage data — pages visited, time spent on site, referring URLs
- Cookie data — session identifiers and preference cookies (see Section 7)
We do not collect or store payment card details. All payment processing is handled directly by our payment providers (PayPal, Stripe, Skrill, Wise). We only receive a transaction confirmation reference.
How We Use Your Data
We use your personal data only for the following purposes:
| Purpose | Data Used |
|---|---|
| Process and fulfil your order | Name, email, order details |
| Deliver your digital product via email | Email address, order details |
| Manage your customer account | Name, email, password (hashed) |
| Respond to support requests | Email, order reference, message content |
| Prevent fraud and abuse | IP address, order patterns, technical data |
| Comply with legal obligations | Order and transaction records |
| Improve website performance | Anonymised usage data, cookies |
We do not use your data for automated decision-making or profiling that produces legal effects.
Legal Basis for Processing (GDPR)
Under GDPR Article 6, we process your personal data on the following legal bases:
- Contract performance (Art. 6(1)(b)) — processing your order, delivering your product and managing your account
- Legal obligation (Art. 6(1)(c)) — retaining transaction records as required by applicable tax and accounting law
- Legitimate interests (Art. 6(1)(f)) — fraud prevention, website security and service improvement — where our interests do not override your rights
- Consent (Art. 6(1)(a)) — for non-essential cookies and any optional marketing communications, where you have opted in
Who We Share Your Data With
We share your data only with trusted third parties who help us operate our service. We do not sell, rent or trade your personal data to any third party for marketing purposes.
| Third Party | Purpose |
|---|---|
| PayPal | Payment processing |
| Stripe | Payment processing |
| Skrill | Payment processing |
| Wise | Payment processing |
| Hosting provider | Website and data hosting |
| Email service provider | Transactional order emails |
All third parties are contractually required to process your data only as instructed by us and in compliance with GDPR. Where data is transferred internationally, appropriate safeguards such as Standard Contractual Clauses or an adequacy decision are applied.
We may also disclose your data if required by law, court order or to protect the rights and safety of ACC2BUY or others.
How Long We Keep Your Data
- Order and transaction records — retained for 5 years to comply with applicable accounting and tax obligations
- Customer account data — retained for as long as your account is active; deleted within 30 days of account deletion request
- Support communications — retained for 2 years from the date of last contact
- Technical/log data — retained for 90 days for security purposes then deleted
- Cookie data — session cookies expire when you close your browser; preference cookies expire after 12 months
After retention periods expire, data is securely deleted or anonymised.
Cookies
We use cookies to make our website function correctly and to understand how visitors use it. A cookie is a small text file placed on your device.
| Cookie Type | Purpose | Required? |
|---|---|---|
| Essential cookies | Shopping cart, login session, CSRF security tokens (WooCommerce) | Yes — cannot be disabled |
| Functional cookies | Remember your preferences and language settings | Optional |
| Analytics cookies | Understand traffic and improve the site (e.g. Google Analytics, anonymised) | Optional — requires consent |
You can control and manage cookies through your browser settings. Disabling cookies may affect the functionality of our website, including your ability to complete purchases.
Where required by law, you are presented with a cookie consent notice on your first visit. You may withdraw consent at any time by contacting us at [email protected].
Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request, as required by GDPR.
We may need to verify your identity before processing certain requests. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection supervisory authority.
Children’s Privacy
Our services are intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.
If you believe a minor has provided us with personal data, please contact us immediately at [email protected] and we will delete the data without delay.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make significant changes, we will:
- Update the Last Updated date at the top of this page
- Notify registered users by email where the changes materially affect their rights
We encourage you to review this page periodically. Continued use of our services after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please reach out to our team:
For all privacy-related requests and enquiries:
[email protected]We aim to respond to all privacy-related enquiries within 5 business days and to all formal GDPR requests within 30 calendar days.