Last updated: October 17, 2026

1. Who We Are

Nexkey operates an online store selling digital gaming products.

Data controller: Nexkey
Privacy contact: [email protected]

2. Personal Data We Collect

Depending on how you use our store, we may collect:

• Contact details, such as your name and email address.
• Order details, including products purchased, order numbers, and delivery status.
• Billing information required to process an order.
• Customer support messages and related correspondence.
• Technical information, such as IP address, browser type, device information, and website activity, where lawfully collected.
• Payment status and transaction references supplied by our payment provider.

We do not intend to collect more personal data than is necessary for the purposes described in this policy.

3. How We Use Your Data

We may process personal data to:

• Process payments and fulfil orders.
• Deliver digital products and provide order confirmations.
• Respond to customer support requests.
• Prevent fraud and protect the security of our store.
• Meet accounting, tax, and other legal obligations.
• Maintain and improve our website.
• Send marketing communications where we have an appropriate legal basis.

4. Legal Bases for Processing

Under the GDPR, depending on the activity, we rely on:

• Contract: to process purchases and deliver products.
• Legal obligation: to comply with applicable accounting, tax, and regulatory requirements.
• Legitimate interests: to protect our store, prevent fraud, and maintain security, where those interests do not override your rights.
• Consent: where required, including certain marketing and non-essential cookies.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing carried out lawfully before it was withdrawn.

5. Payments and Third-Party Providers

Payments may be handled by third-party payment providers. Their identity and applicable privacy information will be presented where relevant during checkout.

We do not intentionally store full payment-card numbers or security codes on our own systems unless our payment arrangements specifically and lawfully support such processing.

We may also use hosting, email, customer support, security, analytics, or other service providers. The providers actually used by Nexkey will be identified or described here before publication.

6. Sharing of Personal Data

We share personal data only where reasonably necessary, such as with payment providers, hosting providers, delivery systems, professional advisers, or public authorities where legally required.

We do not sell personal data to third parties.

7. International Transfers

If personal data is transferred outside the European Economic Area, we will ensure that an appropriate transfer mechanism and any required safeguards are in place in accordance with applicable data-protection law.

8. Data Retention

We retain personal data only for as long as necessary for the relevant purpose, including order fulfilment, customer support, legal compliance, dispute resolution, and security.

The retention period depends on the type of data and the legal obligations that apply.

9. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent data-protection supervisory authority.

To exercise your rights, contact [email protected]. We may need to verify your identity before responding.

If you are in Spain, you may also contact the Spanish Data Protection Agency (AEPD) at https://www.aepd.es.

10. Cookies and Similar Technologies

Our website may use essential cookies needed for functions such as checkout and security. Non-essential analytics or advertising cookies will be used only in accordance with applicable consent requirements.

A separate Cookie Policy or cookie notice should identify the cookies and technologies actually used by the website.

11. Children's Privacy

Our store is not intended to collect personal data from children in breach of applicable law. Where parental authorization is required for a particular activity, we will follow the applicable legal requirements.

12. Security

We apply appropriate technical and organizational measures designed to protect personal data. However, no online system can guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy when our data practices or legal obligations change. The latest version will be published on our website.

14. Contact

For privacy-related questions or requests, contact [email protected].