Privacy Policy
At Aetherix Limited (“we”, “us”, “our”), your privacy is a priority. We handle personal data lawfully, fairly, and transparently.
This Privacy Policy explains:
- what personal data we collect,
- how we use, store, and protect it,
- your rights under the UK GDPR / EU GDPR and other applicable laws.
By using keygiftzone.com and our services (the “Platform”), you consent to the collection and processing of your personal data as described here. You can withdraw consent at any time by contacting reachout@keygiftzone.com (this does not affect processing prior to withdrawal).
We may collect the following categories of personal data when you visit the Platform, create an account, make a purchase of digital keys and gift cards (“Digital Products”), or communicate with us:
- Identity & Contact Data: name, email, billing country, optional phone (if provided), account identifiers.
- Account & Order Data: login credentials (hashed), order history, product type, region/platform chosen, amount, currency, payment status, delivery method, redemption/claim logs (whether a key was displayed or delivered).
- Payment & Anti-Fraud Data: payment method tokenization details from payment processors (we do not store full card numbers), transaction risk signals (e.g., IP/BIN country match, device fingerprint, velocity checks), KYC/AML screening outcomes where required.
- Technical & Usage Data: IP address, device type, browser, OS, referral URLs, session IDs, log files, actions taken on pages (e.g., clicks, errors), region-lock checks to prevent incompatible purchases.
- Location Data: approximate geolocation from IP/BIN for tax, fraud prevention, and region-compatibility enforcement.
- Support & Communications: messages, attachments, tickets, satisfaction surveys.
- Cookies & Similar Technologies: identifiers that help us remember preferences, measure performance, secure accounts, and personalize content (see Cookie Policy).
We may collect data directly from you, automatically via your device, and from third-party providers (e.g., payment processors, anti-fraud and hosting partners).
We process personal data for the following purposes:
- Provide the Service: create and manage accounts, deliver Digital Products, display purchased keys, and ensure region/platform compatibility.
- Payments & Invoicing: process transactions, handle refunds/chargebacks, detect and prevent fraud/abuse.
- Security & Integrity: protect accounts, enforce sanctions/region restrictions, investigate suspicious activity, maintain platform uptime.
- Customer Support: respond to requests, troubleshoot issues, and improve service quality.
- Service Improvement: analytics, performance monitoring, feature development, and UX enhancements (using aggregated or pseudonymized data where possible).
- Compliance: tax and accounting, sanctions/export control, KYC/AML (where applicable), legal obligations, regulatory reporting.
- Communications: service notices (e.g., transactional emails). Marketing messages are sent only if you opt in; you can opt out anytime.
- Contract (Art. 6(1)(b)): to provide and support your purchases and account.
- Legal Obligation (Art. 6(1)(c)): tax, accounting, AML/sanctions screening where required.
- Legitimate Interests (Art. 6(1)(f)): fraud prevention, network security, service improvement, enforcing region locks and acceptable use—balanced against your rights.
- Consent (Art. 6(1)(a)): optional marketing, certain cookies. You may withdraw consent at any time.
We use automated fraud checks and region-compatibility screening. We do not make decisions producing legal or similarly significant effects solely by automated means. Where automated checks materially affect an order (e.g., temporary hold), you may request human review via reachout@keygiftzone.com.
We do not sell or rent personal data. We may share it with:
- Service Providers (Processors): payment processors, anti-fraud tools, hosting/CDN, email and ticketing systems, analytics providers—bound by contracts to protect data and act only on our instructions.
- Compliance & Legal: courts, regulators, law enforcement, or advisers where required by law or to protect our rights, users, or the public.
- Corporate Transactions: in a merger, acquisition, or asset transfer, data may be shared under appropriate confidentiality and data protection safeguards.
Under the UK GDPR / EU GDPR (and subject to conditions/exemptions), you have the right to:
- Access – obtain a copy of your personal data.
- Rectification – correct inaccurate or incomplete data.
- Erasure – request deletion (e.g., where data is no longer needed and no legal basis remains).
- Restriction – limit processing in certain cases.
- Portability – receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Object – to processing based on legitimate interests and to direct marketing.
- Withdraw Consent – where processing relies on consent.
To exercise your rights, contact reachout@keygiftzone.com. We will respond within one month (may extend by two months for complex requests). We may need to verify your identity.
If you are unsatisfied, you can lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).
We use necessary, performance, and (if you consent) analytics/advertising cookies. You can manage preferences via our cookie banner or your browser settings. For details (types, purposes, retention), see our Cookie Policy.
We implement appropriate technical and organizational measures, including:
- TLS encryption in transit; encryption at rest where appropriate;
- access controls, least-privilege permissions, MFA for admin access;
- logging, monitoring, and regular security reviews;
- vendor due-diligence and contractual safeguards;
- incident response and breach notification procedures.
No method of transmission is 100% secure. You should use strong, unique passwords and be vigilant against phishing.
Where data is transferred outside the UK/EEA (e.g., to service providers), we use appropriate safeguards such as:
- UK IDTA / EU Standard Contractual Clauses (SCCs), and
- supplementary measures where necessary.
You can request more information about safeguards at reachout@keygiftzone.com.
We keep personal data only as long as necessary for the purposes set out above or as required by law. Typical periods include:
- Account & Orders: lifetime of account + up to 6 years (tax/accounting).
- Payment & Anti-Fraud Records: up to 5 years (or longer if legally required).
- Support Tickets: up to 24 months after closure.
- Marketing Preferences: until you opt out; suppression lists retained to honor opt-outs.
- Logs & Analytics: typically 12 months in aggregated/pseudonymized form.
We may retain limited information to comply with legal obligations, resolve disputes, and enforce agreements.
The Platform is intended for users 18+. We do not knowingly collect data from children. If you believe a minor provided data, contact us and we will delete it promptly.
Our Platform may contain links to third-party sites. Those sites have their own privacy policies; we are not responsible for their content or practices. Please review their policies before providing data.
We may update this Privacy Policy from time to time. Changes will be posted here with an updated Version date and take effect upon publication unless stated otherwise. For material changes, we may also notify you by email and/or via your account.
Controller: Aetherix Limited
Website: https://keygiftzone.com
Email: reachout@keygiftzone.com
Address: 167–169 Great Portland Street, Fifth Floor, London, England W1W 5PF
