Privacy Policy

Ascendant Loot Ltd ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Ascendant Loot Ltd is a company registered in England and Wales. Our registered office is at 27 Old Gloucester Street, London, WC1N 3AX, United Kingdom. If you have any questions about this policy or how we handle your data, please contact us at [email protected].

2. What Data We Collect

We collect the following categories of personal data:

• Account & Contact Information — name, email address, and optionally a username when you register or place an order.
• Order & Transaction Data — details of purchases you make, billing address, order history, and payment method type (we do not store card numbers — these are handled by our PCI-DSS-compliant payment processors).
• Delivery Information — for physical goods, your shipping address and contact phone number.
• Communication Data — records of emails, support tickets, and live chat messages you send us.
• Technical & Usage Data — IP address, browser type, device identifiers, pages visited, time spent on pages, and referral source. Collected via cookies and server logs.
• Marketing Preferences — whether you have opted in to our newsletter or promotional emails.

3. How We Collect Your Data

We collect data when you:

• Create an account or place an order on our website.
• Contact our customer support team.
• Subscribe to our newsletter.
• Browse our website (via cookies and analytics tools).
• Leave a review or submit a support enquiry.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — to fulfil your order and deliver products or digital codes.
• Legitimate interests — to improve our services, prevent fraud, and ensure website security.
• Legal obligation — to comply with applicable laws, including tax and financial regulations.
• Consent — for marketing emails and cookies that are not strictly necessary. You may withdraw consent at any time.

5. How We Use Your Data

We use the data we collect to:

• Process and fulfil your orders, including sending digital codes and shipping physical items.
• Communicate order confirmations, shipping updates, and support responses.
• Send you promotional emails and offers if you have opted in.
• Improve our website, products, and user experience through analytics.
• Detect and prevent fraudulent transactions and abuse.
• Comply with legal and regulatory obligations.

6. Cookies

We use the following types of cookies:

• Essential cookies — required for the website to function (e.g. cart, session). Cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the site (e.g. page views, traffic sources). We use aggregate, anonymised data only.
• Marketing cookies — used to display relevant advertising. Only set with your consent.

You can manage cookie preferences at any time via your browser settings.

7. Data Sharing

We do not sell your personal data. We may share it with trusted third parties solely where necessary:

• Payment processors (Stripe, PayPal, Klarna) — to handle transactions securely.
• Shipping partners (DHL, Royal Mail, etc.) — to deliver physical orders.
• Email service providers — to send transactional and marketing emails.
• Analytics providers — to analyse aggregated, anonymised site usage.
• Legal authorities — where required by law, court order, or to protect our legal rights.

All third parties are required to respect the security of your data and process it in accordance with applicable law.

8. International Transfers

Some of our service providers are based outside the UK. Where we transfer personal data internationally, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses or adequacy decisions — in accordance with UK GDPR requirements.

9. Data Retention

We retain your personal data only as long as necessary for the purposes it was collected or as required by law. Order records are kept for 7 years for tax and accounting purposes. Account data is retained while your account is active; you may request deletion at any time.

10. Your Rights

Under UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — ask us to limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted HTTPS connections. Passwords are hashed and never stored in plain text. Access to personal data is restricted to authorised personnel only.

12. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, where material changes are made, notify registered users by email. We encourage you to review this page periodically.

14. Contact

For any privacy-related enquiries:

Ascendant Loot Ltd
27 Old Gloucester Street
London, WC1N 3AX
United Kingdom
[email protected]