GDPR COMPLIANCE

Your data protection rights and how to use them

Last updated: 13.10.2026

1. Data controller

www.poshskins.com is operated by MOXIE SKINS LTD (Company number 16553071), registered office: Academy House, 11 Dunraven Place, Bridgend CF31 1JF, United Kingdom. MOXIE SKINS LTD is the controller of your personal data. Data protection enquiries: support@poshskins.com. This page summarises your rights under the UK GDPR and the EU GDPR; the full detail is in our Privacy Policy.

2. Your rights

Access: a copy of the personal data we hold about you.
Rectification: correction of inaccurate data.
Erasure: deletion of your data, except records the law requires us to keep.
Restriction: limiting how we use your data.
Portability: your data in a structured, machine-readable format.
Objection: to processing based on our legitimate interests.
Withdrawing consent: at any time, for example switching Analytics off with Manage Cookies in the footer.
Complaint: to the UK Information Commissioner's Office (ICO) or the data protection authority where you live.

3. Data we collect

What we collect: Steam ID, Steam display name, avatar and Steam profile country
When: Steam sign‑in
Why: Creating your account and signing you in

What we collect: Email address
When: Checkout (required: every order needs it for the order confirmation); you can also add or change it in Settings → Purchase security
Why: Order confirmations, receipts and messages about your orders; if you turn on Purchase security, the 6‑digit purchase codes

What we collect: Steam trade URL
When: Checkout and account settings
Why: Delivering items to your Steam account

What we collect: Card number, expiry date, CVV and cardholder name
When: Card payment form
Why: Authorising the payment. Passed through our server to the payment processor and not stored; we keep the last 4 digits and a transaction reference

What we collect: Billing address
When: Card payment form (saved only if you choose to save it)
Why: Card verification and checking the billing country

What we collect: IP address and the country it resolves to; browser and device type
When: Automatically, at sign‑in and at payment
Why: Refusing new accounts from sanctioned countries, fraud prevention and security

What we collect: Wallet balance, top‑ups, orders and refunds
When: Using the shop
Why: Running your wallet, delivering orders, handling refunds and keeping accounting records

What we collect: Your Favorites and the target prices on your Price Watchlist
When: When you save them; kept in your browser, and Price Watchlist targets also in your account when you are signed in
Why: Showing them back to you; we send no emails or notifications about them

What we collect: Proof of identity, proof of address and, if asked, a card photo showing only the last 4 digits
When: Identity verification, only if we put your account under review
Why: Fraud and anti‑money‑laundering checks. Stored privately; only our reviewers can open it

What we collect: Name, email address, subject and message
When: Contact form
Why: Answering your message

What we collect: Pages viewed and clicks
When: Only if you switch Analytics on in the cookie banner
Why: Improving the site

What we collect	When	Why
Steam ID, Steam display name, avatar and Steam profile country	Steam sign‑in	Creating your account and signing you in
Email address	Checkout (required: every order needs it for the order confirmation); you can also add or change it in Settings → Purchase security	Order confirmations, receipts and messages about your orders; if you turn on Purchase security, the 6‑digit purchase codes
Steam trade URL	Checkout and account settings	Delivering items to your Steam account
Card number, expiry date, CVV and cardholder name	Card payment form	Authorising the payment. Passed through our server to the payment processor and not stored; we keep the last 4 digits and a transaction reference
Billing address	Card payment form (saved only if you choose to save it)	Card verification and checking the billing country
IP address and the country it resolves to; browser and device type	Automatically, at sign‑in and at payment	Refusing new accounts from sanctioned countries, fraud prevention and security
Wallet balance, top‑ups, orders and refunds	Using the shop	Running your wallet, delivering orders, handling refunds and keeping accounting records
Your Favorites and the target prices on your Price Watchlist	When you save them; kept in your browser, and Price Watchlist targets also in your account when you are signed in	Showing them back to you; we send no emails or notifications about them
Proof of identity, proof of address and, if asked, a card photo showing only the last 4 digits	Identity verification, only if we put your account under review	Fraud and anti‑money‑laundering checks. Stored privately; only our reviewers can open it
Name, email address, subject and message	Contact form	Answering your message
Pages viewed and clicks	Only if you switch Analytics on in the cookie banner	Improving the site

4. Legal bases, recipients and transfers

Why we may use each kind of data, which service providers receive it and how international transfers are protected are set out in Sections 3 to 5 of our Privacy Policy.

5. How long we keep data

We keep account, order, payment and identity-verification records for 7 years after your last transaction, to meet accounting and anti-money-laundering record-keeping rules, and then delete them. Contact form messages are kept for 3 years.

6. Automated decisions

New sign-ups from sanctioned countries are refused automatically, based on the country of the IP address, and payments are screened for fraud. If an automated decision affects you, you can ask for a person to review it.

7. Data breaches

If a breach puts your data at risk, we notify the UK Information Commissioner's Office (ICO) within 72 hours where the law requires it and tell you without undue delay.

8. Children

The shop is for adults. We do not knowingly collect data from anyone under 18.

9. Using your rights

Email support@poshskins.com and say which right you want to use.
Write from the email address you gave at checkout, or tell us your Steam ID, so we can find your account.
We reply within one month; for complex requests we can take up to two more months, and if so we tell you within the first month.
There is no fee.

10. Complaints

Please contact us first at support@poshskins.com. Under the UK GDPR you can complain to the UK Information Commissioner's Office (ICO): ico.org.uk, helpline 0303 123 1113. If you live in the EU, the EU GDPR also lets you complain to the data protection authority in your country.

11. Changes to this page

We may update this document. The "Last updated" date at the top shows the current version. We announce a material change on this site, and by email if you have given us an address, at least 30 days before it takes effect. Orders and top-ups made before a change keep the terms that applied when you made them.

12. Contact

MOXIE SKINS LTD, Company number 16553071, Academy House, 11 Dunraven Place, Bridgend CF31 1JF, United Kingdom. Email: support@poshskins.com.