Privacy Policy
Effective date: 15/08/2026
Controller: CONFIANSES LTD — Company Number 17343733, incorporated under the Companies Act 2006, registered office 167-169 Great Portland Street, London, England, W1W 5PF.
Website: https://gamers-inventory.com/
Support: support@gamers-inventory.com
§1. WHO WE ARE AND WHICH LAW APPLIES
CONFIANSES LTD (Company Number 17343733), registered office 167-169 Great Portland Street, London, England, W1W 5PF, is the controller of the personal data processed through Gamers Inventory (https://gamers-inventory.com/).
We are established in the United Kingdom and process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Privacy enquiries: support@gamers-inventory.com.
§2. THE PERSONAL DATA WE COLLECT
We collect only what we need to run the Site and supply what you have bought. We group the data we hold into the following categories.
Identity data — the name or username you give us, and your date of birth or age confirmation where we need to check you are 18 or over.
Contact data — your email address and any other contact details you give us.
Account data — your account status, securely stored authentication data relating to your password, and your store credit balance.
Order data — the items you have bought, order references, prices, timestamps, order status, refund history and your store credit purchases and spending.
Payment data — payment status, the masked card number, card brand, issuing country, the result of Strong Customer Authentication and transaction references, received from our payment gateway. We never receive or hold your full card number.
Steam and delivery data — the Steam trade link you supply, the associated Steam account identifier, trade offer identifiers, dispatch timestamps and records of acceptance and arrival.
Communications data — your support requests, emails, attachments and our replies.
Fraud and risk data — device identifiers, risk indicators and scores, velocity counters, the results of screening against sanctions lists, and links we identify to other accounts, devices or payment instruments.
Verification data — where we ask you to verify your identity or the source of your funds under the Terms & Conditions: identity document images and the data they contain, proof of address and supporting documentation.
Technical data — your IP address and the geolocation derived from it, device and browser details, logs and security events.
Usage data — how you move through and use the Site.
Marketing data — your preferences for receiving marketing from us.
We do not seek or knowingly collect special category data, and we ask you not to send it to us.
§3. HOW WE COLLECT IT
Most of this data comes directly from you — when you register, place an order, supply a trade link, contact support or respond to a verification request. Payment data reaches us from our payment gateway rather than from you. Technical and usage data is collected automatically as you use the Site, through cookies and similar technologies as described in clause 14 and in the Cookie Policy. Fraud and risk data is generated by our own systems and by our payment provider when an order is screened.
§4. HOW WE USE YOUR PERSONAL DATA, AND OUR LAWFUL BASES
Under the UK GDPR we must have a lawful basis for each purpose for which we use your personal data. The table below sets out each purpose, the data involved and the basis we rely on.
Opening and running your account
Data used: Identity, contact, account, technical
Lawful basis (UK GDPR Article 6): Contract — Art. 6(1)(b): necessary to take steps at your request and to perform our contract with you
Accepting your order and forming the contract of sale
Data used: Identity, contact, order, payment
Lawful basis (UK GDPR Article 6): Contract — Art. 6(1)(b)
Sourcing the item you ordered and arranging its delivery to your Steam account
Data used: Order, Steam and delivery
Lawful basis (UK GDPR Article 6): Contract — Art. 6(1)(b)
Taking payment and handling refunds, cancellations and chargebacks
Data used: Payment, order, contact
Lawful basis (UK GDPR Article 6): Contract — Art. 6(1)(b); Legal obligation — Art. 6(1)(c) where consumer law requires a refund
Answering your enquiries and providing support
Data used: Contact, communications, order
Lawful basis (UK GDPR Article 6): Contract — Art. 6(1)(b) where it concerns an order; otherwise Legitimate interests — Art. 6(1)(f): responding to people who contact us
Handling complaints and disputes, including alternative dispute resolution
Data used: Communications, order, identity
Lawful basis (UK GDPR Article 6): Legal obligation — Art. 6(1)(c) under the ADR for Consumer Disputes (Competent Authorities and Information) Regulations 2015; Legitimate interests — Art. 6(1)(f): resolving disputes fairly and defending claims
Preventing, detecting and investigating fraud, including payment fraud, stolen accounts and chargeback abuse
Data used: Fraud and risk, payment, technical, Steam and delivery
Lawful basis (UK GDPR Article 6): Legitimate interests — Art. 6(1)(f): protecting our business, our customers and our payment providers from fraud and financial crime
Meeting anti-money-laundering and sanctions obligations, and verifying identity and source of funds where required
Data used: Verification, identity, payment
Lawful basis (UK GDPR Article 6): Legal obligation — Art. 6(1)(c); Legitimate interests — Art. 6(1)(f): preventing financial crime
Keeping the Site secure, diagnosing faults and preventing abuse and automated scraping
Data used: Technical, usage
Lawful basis (UK GDPR Article 6): Legitimate interests — Art. 6(1)(f): network and information security
Keeping accounting and tax records
Data used: Order, payment, identity, contact
Lawful basis (UK GDPR Article 6): Legal obligation — Art. 6(1)(c) under the Companies Act 2006 and UK tax legislation
Checking that customers are 18 or over
Data used: Identity, account
Lawful basis (UK GDPR Article 6): Legal obligation — Art. 6(1)(c) where applicable; Legitimate interests — Art. 6(1)(f): operating an age-restricted service responsibly
Sending order-related messages such as confirmations and delivery notices
Data used: Contact, order
Lawful basis (UK GDPR Article 6): Contract — Art. 6(1)(b)
Sending marketing emails about our products and offers
Data used: Contact, marketing
Lawful basis (UK GDPR Article 6): Consent — Art. 6(1)(a); or Legitimate interests — Art. 6(1)(f) where the soft opt-in in regulation 22 of PECR applies (see clause 9)
Analytics and understanding how the Site is used
Data used: Technical, usage
Lawful basis (UK GDPR Article 6): Consent — Art. 6(1)(a), obtained through our cookie banner before any non-essential technology is set
Establishing, exercising or defending legal claims
Data used: Any relevant category
Lawful basis (UK GDPR Article 6): Legitimate interests — Art. 6(1)(f): protecting our legal position; Legal obligation — Art. 6(1)(c) where we must comply with a court order or lawful request
§5. LEGITIMATE INTERESTS AND CHANGE OF PURPOSE
Legitimate interests assessments. Where we rely on legitimate interests, we have considered whether our interests are overridden by your interests, rights and freedoms, and concluded that they are not. You have the right to object to processing based on legitimate interests, and you may ask us for a summary of our assessment for any particular purpose.
Change of purpose. We will use your personal data only for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use it for an unrelated purpose, we will tell you and explain the lawful basis for doing so.
§6. AUTOMATED DECISION-MAKING AND PROFILING
6.1 We do not take decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing within the meaning of Article 22 of the UK GDPR, other than as described in clause 6.2.
6.2 Orders are screened for fraud and payment risk. The screening combines automated checks carried out by us with checks carried out by our payment provider, and may take into account: the payment method used; discrepancies between your billing details and technical data; how long your account has existed and how it has been used; the value and pattern of your orders; any chargebacks or disputes previously recorded; and characteristics of the Steam account nominated for delivery. Screening may result in an order being declined automatically, held for review by a member of our team, or flagged for further verification.
6.3 A decision to decline or hold an order concern that single transaction. It does not create a legal status, a credit record or a lasting bar, and we do not build a general profile of you for any wider purpose. So that you are treated fairly:
(1) you may write to us at support@gamers-inventory.com to ask why an order was declined or held;
(2) you may ask for the decision to be reviewed by a member of our team;
(3) you may put your point of view to us and contest the decision; and
(4) any payment already taken for a declined order will be refunded, or the authorization released.
6.4 We cannot always disclose the detailed rules used to detect fraud, because doing so would undermine their effectiveness and prejudice the prevention and detection of crime. We will nonetheless give you as much information as we reasonably can.
6.5 We do not use your personal data to build automated advertising profiles, and we do not allow third parties to use it for behavioral advertising, without your consent.
§7. PAYMENT CARD DATA
Full card details are never collected or stored on our systems. They are handled solely by a PCI DSS-compliant third-party payment gateway. We do not sell card data, and we do not disclose it except where strictly necessary to process a payment or where the law requires it.
§8. WHO WE SHARE YOUR DATA WITH
We share personal data only where it is necessary, and only with: our payment gateway; hosting and IT providers; security and anti-fraud services; sanctions-screening and identity-verification providers; the sourcing platforms and the Steam platform, to the extent needed to deliver your purchase; customer-support tools; our professional and regulatory advisers; and public authorities or courts where the law requires.
Where a payment dispute is raised, we may disclose the relevant transaction and delivery records to the acquiring bank, the payment gateway and the card scheme in order to respond to it.
We do not sell your personal data, and we do not share it for unrelated third-party marketing.
§9. MARKETING AND ELECTRONIC COMMUNICATIONS
We send transactional messages — order confirmations, delivery notices, refund confirmations and service announcements — as part of performing our contract with you. These are not marketing and cannot be switched off while you hold an account with an open order, because you need them.
We send marketing emails only where you have consented, or where the soft opt-in in regulation 22 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 applies — that is, where we obtained your details in the course of a sale, the marketing concerns our own similar products, and you were given a simple means of refusing both when we collected your details and in every message since.
Every marketing message carries an unsubscribe link, and you may withdraw consent at any time by writing to support@gamers-inventory.com. Withdrawing consent does not affect the lawfulness of anything done before you withdrew it, and does not stop transactional messages.
§10. INTERNATIONAL TRANSFERS
Some of the providers we rely on, and the Steam platform itself, operate outside the United Kingdom, including within the European Economic Area. Where personal data is transferred outside the UK, we make sure an appropriate level of protection is in place by relying on one of the following safeguards:
(1) UK adequacy regulations — the receiving country, territory or sector is covered by adequacy regulations made by the Secretary of State under section 17A of the Data Protection Act 2018, which includes transfers to EEA countries;
(2) the International Data Transfer Agreement issued by the Information Commissioner, or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, in each case together with a transfer risk assessment; or
(3) another lawful transfer mechanism or derogation permitted by Chapter V of the UK GDPR, including where the transfer is necessary for the performance of a contract with you under Article 49(1)(b) — which is the position where a trade offer must be routed through the Steam platform in order to deliver your purchase.
You may request further information about the safeguards applied to a particular transfer, and a copy of the relevant clauses with commercially confidential terms redacted, by contacting us at support@gamers-inventory.com.
§11. SECURITY
We use TLS/SSL encryption to protect personal data in transit, and apply access controls, secure transmission practices, logging, monitoring and data minimization. Payment security is reinforced by our use of a PCI DSS-compliant payment gateway.
§12. HOW LONG WE KEEP IT
Order and transaction records are kept for six (6) years, for accounting and tax purposes and to defend legal claims. Identity verification and source-of-funds records are kept for five (5) years from the end of our relationship with you, in line with anti-money-laundering record-keeping requirements. Fraud and risk records are kept for six (6) years, for the prevention and detection of fraud and the defense of payment disputes. Technical and usage data is kept for up to twelve (12) months. Support correspondence is kept for 5 years from the closure of the matter. Where you withdraw marketing consent or object to marketing, we keep a minimal suppression record indefinitely so that we do not contact you again in error. Data we no longer need is securely deleted or anonymized.
§13. YOUR RIGHTS
Subject to applicable law, you may ask us for access to your personal data, for its rectification or erasure, to restrict or object to certain processing, and for portability; and you may withdraw consent where our processing relies on it. Where we rely on legitimate interests, you may object; we will stop unless we can demonstrate compelling legitimate grounds that override your interests, which will ordinarily be the case for fraud prevention, security and the defense of legal claims. Your rights in relation to automated decisions are set out in clause 6.
Requests may be sent to support@gamers-inventory.com. We may ask you to verify your identity before we act.
Complaints. If you are unhappy with how we have handled your personal data, write to us at support@gamers-inventory.com marking your message “Data protection complaint”. We will acknowledge it within 3 working days and respond substantively within 5 days. You may also complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.
§14. COOKIES
Cookies that are strictly necessary for the Site to work are set without consent. Every other cookie or similar technology — including those used for analytics and for remembering preferences — is set only after you have given consent through our cookie banner, and you can change or withdraw that consent at any time using the banner controls. Full details appear in the Cookie Policy, which forms part of the Policies.
§15. CHANGES TO THIS POLICY
We may revise this Privacy Policy from time to time. Revisions take effect when the updated version is published on the Site bearing a new effective date; where a change is significant, we will additionally signal it on the Site or by email.
§16. CONTACT
Privacy enquiries may be addressed to support@gamers-inventory.com.