Privacy Policy

Last updated: 18 August 2026

This Privacy Policy explains how VORTEXSKINS LTD (“VortexSkins”, “we”, “us”) collects and uses personal data when you visit vortexskins.com, create an account, or place an order. We are the data controller for that data under the UK GDPR and the Data Protection Act 2018.

1. What we collect

• Account and identification data — your Steam account identifier and public Steam profile name when you sign in through Steam, plus the email address you give us.
• Order data — the items you buy, prices, currency, order numbers, invoices, the trade destination for delivering an item, and correspondence about the order.
• Payment data — we do not store card numbers. Payments are handled by our payment providers, and we receive only the confirmation and reference needed to reconcile an order.
• Support data — the content of messages you send us through contact forms or email.
• Technical data — IP address, browser and device type, pages viewed, and cookie identifiers. See our Cookies Policy.

2. Why we use it, and our lawful basis

• To perform our contract with you — creating your account, processing and delivering orders, issuing invoices, handling refunds and complaints.
• Legitimate interests — keeping the store secure, preventing fraud and abusive trading, maintaining records, and improving the catalogue and site performance.
• Consent — optional marketing emails and non-essential cookies. You can withdraw consent at any time.
• Legal obligation — accounting, tax and record-keeping duties, and responding to lawful requests.

3. Who we share it with

We share personal data only with parties that help us run the store, and only as far as they need it:

• Payment providers, for processing your payment.
• Valve Corporation / Steam, to the extent required to identify your account and deliver a purchased item to it.
• Hosting, email and infrastructure providers that operate the website and send transactional messages.
• Professional advisers, and authorities where we are legally required to disclose.

We do not sell personal data, and we do not share it with data brokers.

4. International transfers

Some of our providers operate outside the United Kingdom. Where data is transferred abroad, we rely on UK adequacy regulations or on the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, together with appropriate security measures.

5. How long we keep it

• Account data — while your account is active, then up to 24 months after your last activity.
• Order, invoice and payment records — 6 years, to meet UK accounting and tax requirements.
• Support correspondence — up to 24 months after the case is closed.
• Technical logs — normally up to 12 months.

6. Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent. To exercise any of these rights, email privacy@vortexskins.com. We answer within one month and may ask you to confirm your identity first. Using these rights is free of charge.

7. Security

The site is served over HTTPS, access to administrative systems is restricted and logged, and payment details never reach our servers. No online service can be guaranteed absolutely secure, so please use a strong, unique password and keep your Steam account protected with Steam Guard.

8. Children

The store is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has used the store, contact us and we will remove the account and its data.

9. Complaints

If you are unhappy with how we handle your data, contact privacy@vortexskins.com first — we would like the chance to put it right. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. See also our Complaint Policy.

10. Changes to this policy

If we change this policy we will update the date at the top of the page, and for significant changes we will notify registered customers by email.