Privacy Notice
In effect from 5 October 2026
1. What this notice is for
This notice explains what we do with information about you when you use snagkeyz.com (the "Store"), buy from us, or get in touch.
We are SNAGKEY LTD, a company registered in England and Wales under number 17494415, with our registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are the controller of the personal data described here.
Because we sell to customers in the United Kingdom and across Europe, we handle personal data in line with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where it applies to what we do.
We update this notice when our practices change. The date at the top shows when we last did. The version published on the Store is always the current one.
Questions about anything below go to support@snagkeyz.com.
2. What we collect
When you set up an account: your name or username, email address, password (stored scrambled, never in readable form), and any preferences you set.
When you buy: what you ordered, when, how much you paid, the currency, the delivery status of your key, and payment information passed back to us by our payment provider - whether the payment succeeded, whether it was authorised, and any fraud signals. We never see or store your full card number; your card details go directly to our payment provider.
When you contact us: your message, your email address, your order number, and whatever else you choose to tell us.
While you browse: your IP address, the type of browser and device you use, your language and time zone, which pages you looked at, what you clicked, how long you stayed, where you arrived from, and technical error reports. Some of this comes through cookies - see section 5.
We do not ask for, and do not want, special category data: anything about your health, beliefs, politics, ethnicity or sex life has no place in an order for a game key.
3. Where it comes from
Most of it comes from you, when you register, order or write to us.
Some is collected automatically as you use the Store, through our servers and through cookies.
The rest comes from the companies that help us run things: our payment provider tells us whether a payment went through and flags transactions that look risky; our email provider tells us whether a message reached you; our analytics provider tells us how the Store is being used overall.
4. Why we use it, and what allows us to
| What we do | Why we are allowed to |
|---|---|
| Set up and run your account; process your order; send you your key; handle refunds and support | We need to, in order to do what you paid us for (performance of a contract) |
| Keep records of sales, tax and VAT; answer lawful requests from authorities | The law requires it (legal obligation) |
| Check orders for fraud; protect accounts from takeover; keep the Store secure; investigate abuse; defend ourselves if a dispute arises | We have a legitimate interest in not being defrauded and in keeping the Store working safely for everyone, and we have weighed that against your privacy |
| Measure how the Store performs; fix faults; improve how it works | Legitimate interest - and, where analytics cookies are involved, your consent |
| Send you marketing emails | Your consent, or - if you have bought from us before and we are telling you about similar products - our legitimate interest, always with a way out |
We ask for no more than we need for each of these, and we do not use your data for unrelated purposes without telling you first.
5. Cookies
We use cookies to keep you signed in, hold your basket together, protect checkout, remember your preferences, and - if you agree - to measure how the Store is used.
Only the cookies that are strictly necessary are set without asking you. Everything else waits for your consent, and you can change your mind at any time. Our Cookie Notice explains each type and how to control them.
6. Who else sees your data
We share only what is needed, and only with companies that work for us under contract:
- Payment providers, to take your payment and screen it for fraud;
- Hosting and infrastructure providers, to run the Store;
- Email delivery providers, to send your key, your receipt and our replies;
- Analytics providers, to tell us how the Store is performing;
- Key suppliers, where an order reference is needed to issue or verify a key.
Each of them is bound to keep your data confidential, to use it only for the job we hired them for, and to protect it properly.
We also share data where the law requires it, where a court or authority orders it, or where we need to protect ourselves or others against fraud.
If our business is ever sold, merged or restructured, customer data may transfer to the new owner. We would require them to protect it to the same standard, and we would tell you where the law says we must. Your rights over your data would carry across unchanged.
We do not sell your personal data to anyone.
7. Sending data outside the UK
Our suppliers are mostly in the United Kingdom and the European Economic Area.
Where one of them handles your data elsewhere, we only allow it if the destination has been formally recognised as providing adequate protection, or if we have the appropriate safeguards in place - usually the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, with extra technical measures where they are needed.
Ask us at support@snagkeyz.com and we will tell you what protects a particular transfer.
8. How long we keep it
Order and payment records: six years from the end of the relevant tax year, because UK tax law requires it.
Account data: while your account is open, and for a limited period after you close it, so we can deal with disputes and prevent fraud.
Support emails: long enough to resolve your issue and keep a record of what was agreed.
Technical logs: a short period for security and troubleshooting, then deleted or stripped of anything identifying.
When a period ends, we delete the data or anonymise it so it can no longer be traced back to you.
9. Keeping it safe
We encrypt data in transit, restrict who can access what, separate our live systems from our test ones, log and monitor access, and keep our software patched. Our suppliers are held to similar standards. Card details never touch our systems.
No system is perfectly secure, and we do not pretend otherwise. If something goes wrong and there is a real risk to you, we will investigate, contain it, tell the Information Commissioner's Office within 72 hours where we are required to, and tell you directly where the risk to you is high.
You can help: use a password you use nowhere else, keep your email account secure, and tell us at once if something about your account looks wrong.
10. Your rights
You can ask us to:
- show you what we hold about you, and give you a copy;
- correct anything that is wrong or incomplete;
- delete your data, where we have no continuing reason or legal duty to keep it;
- restrict what we do with it while a dispute is sorted out;
- hand it over to you or to another provider in a portable format;
- stop processing based on our legitimate interests, where your circumstances justify it;
- withdraw consent at any time, where consent is what we relied on.
Marketing is always your choice. Every marketing email has an unsubscribe link, and you can also just email us. Unsubscribing does not stop the emails we have to send about your order - your receipt, your key, a security alert - because those are part of the purchase, not advertising.
Email support@snagkeyz.com to exercise any of this. We may ask you to confirm who you are before we act, which protects you as much as us. We answer within one month, and tell you if we cannot do something and why. None of this costs you anything.
If you are not happy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live if that is in the EU. We would rather you came to us first, so we can put it right.
11. Children
The Store is for adults. We do not knowingly collect data from anyone under 18, and we do not market to children.
If you believe a child has created an account or given us their details, tell us at support@snagkeyz.com and we will delete it.
12. Other people's websites
The Store links to other places - Steam, publishers, and the platforms where you redeem your key. Once you are there, their privacy notice applies, not ours, and what they do with your data is their responsibility.
The same goes for anything embedded in our pages that comes from elsewhere: it may register your IP address when you interact with it, under its own provider's terms. We suggest reading the notice of any service before handing it your details.
SNAGKEY LTD · Company number 17494415 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom support@snagkeyz.com