PRIVACY POLICY

What personal data we collect, how we use it, and your rights

Last updated: 13.10.2026

1. Who we are

www.poshskins.com is operated by MOXIE SKINS LTD (Company number 16553071), registered office: Academy House, 11 Dunraven Place, Bridgend CF31 1JF, United Kingdom. MOXIE SKINS LTD is the controller of your personal data. This Privacy Policy explains what we collect when you use the shop, why, who we share it with and the rights you have. Questions go to support@poshskins.com.

2. What we collect

This is everything the site collects, where it is collected and why:

What we collect: Steam ID, Steam display name, avatar and Steam profile country
When: Steam sign‑in
Why: Creating your account and signing you in

What we collect: Email address
When: Checkout (required: every order needs it for the order confirmation); you can also add or change it in Settings → Purchase security
Why: Order confirmations, receipts and messages about your orders; if you turn on Purchase security, the 6‑digit purchase codes

What we collect: Steam trade URL
When: Checkout and account settings
Why: Delivering items to your Steam account

What we collect: Card number, expiry date, CVV and cardholder name
When: Card payment form
Why: Authorising the payment. Passed through our server to the payment processor and not stored; we keep the last 4 digits and a transaction reference

What we collect: Billing address
When: Card payment form (saved only if you choose to save it)
Why: Card verification and checking the billing country

What we collect: IP address and the country it resolves to; browser and device type
When: Automatically, at sign‑in and at payment
Why: Refusing new accounts from sanctioned countries, fraud prevention and security

What we collect: Wallet balance, top‑ups, orders and refunds
When: Using the shop
Why: Running your wallet, delivering orders, handling refunds and keeping accounting records

What we collect: Your Favorites and the target prices on your Price Watchlist
When: When you save them; kept in your browser, and Price Watchlist targets also in your account when you are signed in
Why: Showing them back to you; we send no emails or notifications about them

What we collect: Proof of identity, proof of address and, if asked, a card photo showing only the last 4 digits
When: Identity verification, only if we put your account under review
Why: Fraud and anti‑money‑laundering checks. Stored privately; only our reviewers can open it

What we collect: Name, email address, subject and message
When: Contact form
Why: Answering your message

What we collect: Pages viewed and clicks
When: Only if you switch Analytics on in the cookie banner
Why: Improving the site

What we collect	When	Why
Steam ID, Steam display name, avatar and Steam profile country	Steam sign‑in	Creating your account and signing you in
Email address	Checkout (required: every order needs it for the order confirmation); you can also add or change it in Settings → Purchase security	Order confirmations, receipts and messages about your orders; if you turn on Purchase security, the 6‑digit purchase codes
Steam trade URL	Checkout and account settings	Delivering items to your Steam account
Card number, expiry date, CVV and cardholder name	Card payment form	Authorising the payment. Passed through our server to the payment processor and not stored; we keep the last 4 digits and a transaction reference
Billing address	Card payment form (saved only if you choose to save it)	Card verification and checking the billing country
IP address and the country it resolves to; browser and device type	Automatically, at sign‑in and at payment	Refusing new accounts from sanctioned countries, fraud prevention and security
Wallet balance, top‑ups, orders and refunds	Using the shop	Running your wallet, delivering orders, handling refunds and keeping accounting records
Your Favorites and the target prices on your Price Watchlist	When you save them; kept in your browser, and Price Watchlist targets also in your account when you are signed in	Showing them back to you; we send no emails or notifications about them
Proof of identity, proof of address and, if asked, a card photo showing only the last 4 digits	Identity verification, only if we put your account under review	Fraud and anti‑money‑laundering checks. Stored privately; only our reviewers can open it
Name, email address, subject and message	Contact form	Answering your message
Pages viewed and clicks	Only if you switch Analytics on in the cookie banner	Improving the site

We do not collect your Steam password: you sign in on Steam's own page. We do not ask for a postal address or a phone number except the billing address for a card payment and the documents of an identity check.

3. Legal bases

Contract: running your account, wallet and orders, delivering items and answering support requests.
Legal obligation: accounting records, sanctions screening and anti-money-laundering checks.
Legitimate interests: preventing fraud and keeping the site secure.
Consent: analytics cookies, which load only if you switch Analytics on in the cookie banner.

4. Who we share it with

We share personal data only with the service providers we need to run the shop, each for its own task:

our hosting provider, which runs the site and its database;
our payment processor, which authorises card payments and top-ups;
our email delivery provider, which sends order confirmations and receipts;
our product analytics provider, only if you switch Analytics on;
an IP-location service, which tells us the country of your IP address at sign-in and payment;
the skin suppliers we buy your item from, which receive your Steam trade URL so they can send the trade offer;
Steam (Valve), for sign-in and the trade itself;
authorities, when the law requires it.

We do not sell your personal data and do not use it for advertising.

5. International transfers

Some of these providers process data outside the UK and the European Economic Area. Where they do, the transfer is covered by an adequacy decision or by standard contractual clauses.

6. How long we keep it

We keep account, order, payment and identity-verification records for 7 years after your last transaction, to meet accounting and anti-money-laundering record-keeping rules, and then delete them. Contact form messages are kept for 3 years.

7. Your rights

Under the UK GDPR, and the EU GDPR where it applies, you can ask for a copy of your data, its correction or deletion, a restriction of its use, a portable copy, and you can object to processing or withdraw consent at any time (for analytics: Manage Cookies in the footer). Write to support@poshskins.com from the email address you gave at checkout, or tell us your Steam ID. We reply within one month; for complex requests we can take up to two more months, and if so we tell you within the first month. You can also complain to the UK Information Commissioner's Office (ICO) or, if you live in the EU, to the data protection authority in your country.

Deleting your account: in Settings → Privacy & Data → Delete account you close your account at once. We then remove your email address, username, avatar, Steam sign-in link and trade URL, and the Favorites, Price Watchlist and cart saved in that browser. Records of your orders, payments and identity checks are kept, no longer linked to those details, for the period in Section 6, and then deleted. Your wallet balance must be zero first: if you have an unspent top-up, write to us so we can refund it under our Refund Policy. If you cannot sign in, email support@poshskins.com with your Steam ID and we close the account within one month. To download a copy of the data we hold on your account, use Settings → Privacy & Data → Export data.

8. Security

The site is served over encrypted (HTTPS) connections, card details are not stored, identity documents are kept in private storage that only our reviewers can open, and staff access to customer data is limited to the people who need it. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the regulator as the law requires.

9. Children

The shop is for adults. We do not knowingly collect data from anyone under 18 and close accounts we learn belong to a minor.

10. Cookies

Which cookies and storage keys the site uses is listed in our Cookie Policy.

11. Changes to this policy

We may update this document. The "Last updated" date at the top shows the current version. We announce a material change on this site, and by email if you have given us an address, at least 30 days before it takes effect. Orders and top-ups made before a change keep the terms that applied when you made them.

12. Contact

MOXIE SKINS LTD, Company number 16553071, Academy House, 11 Dunraven Place, Bridgend CF31 1JF, United Kingdom. Email: support@poshskins.com.