Privacy policy
1.Who is responsible for your data
HIGHER MARGINS LTD, trading as Patinaskins, is the controller of the personal data described in this policy. This policy applies to customers in the United Kingdom under the UK GDPR and the Data Protection Act 2018, and to customers in the European Union under the EU General Data Protection Regulation.
- Seller
- HIGHER MARGINS LTD, trading as Patinaskins
- Company number
- 15605091
- Registered office
- 20 Wenlock Road, London, England, N1 7GU
- info@patinaskins.com
- Support hours
- Mon–Fri, 09:00–18:00 (GMT)
For any question about your data or to use your rights, email info@patinaskins.com.
2.What we collect
- Account details: first and last name, email, phone number, date of birth, street, city, postcode and country, and your password, which we store only as a one-way hash.
- Steam details: your Steam ID (SteamID64), and from your public Steam profile your display name, avatar and profile link. If you sign in with Steam, Steam confirms your Steam ID to us; we never see your Steam password.
- Trade URL: the Steam trade URL you save, which contains your Steam account number and a trade token. We use it only to send trade offers for items you bought.
- Order details: the items you buy, billing address, contact details, your request for immediate delivery, the status of each trade offer, and the payment result and transaction reference sent to us by our payment provider.
- Messages: what you send through the contact form or by email, including any order number, and for the contact form the IP address it was sent from.
- Saved items: products you save to your account.
- Newsletter: your email address, if you sign up.
- Technical data: IP address, browser and device type, and the pages requested, recorded in server logs. Browser storage is described in our Cookie policy.
3.Card payments
We do not store or process full payment card data. All card payments are processed by our PCI DSS compliant payment provider.
You enter your card details on the provider’s hosted payment page, not on our website. Payments are protected by 3-D Secure and Strong Customer Authentication (SCA), so your bank may ask you to confirm a payment, for example in your banking app. We receive only the result of the payment and a transaction reference.
4.Why we use it and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Taking your order and delivering items to your Steam account | Name, email, phone (optional), billing address, items ordered, Steam ID, trade URL and the trade token it contains | Contract |
| Signing you in with Steam and linking your Steam account | Steam ID, public Steam profile name, avatar and profile link | Contract |
| Running your account | Name, email, phone, date of birth, address, password (stored as a hash), order history, saved items | Contract |
| Recording your request for immediate delivery | The time you ticked the checkbox and the wording you agreed to | Legal obligation |
| Checking you are 18 or over | Date of birth | Contract and legitimate interests |
| Answering messages and complaints | Name, email, order number, the content of your message, the IP address it was sent from | Contract and legitimate interests |
| Refunds, chargebacks and fraud prevention | Order details, payment result and transaction reference, IP address | Legal obligation and legitimate interests |
| Not selling to restricted countries and territories | Billing country and address | Legal obligation |
| Accounting and tax records | Order and refund records | Legal obligation |
| Newsletter, only if you sign up | Email address | Consent |
| Keeping the website secure and working | IP address, browser and device type, pages requested, error logs | Legitimate interests |
6.International transfers
Steam is operated by Valve Corporation in the United States, and Steam sign-in and trade offers are processed there under Valve’s own privacy policy. Our item delivery partner receives your Steam ID and trade token to send the offer. Where a service provider processes data outside the UK or the European Economic Area, we use an adequacy decision or standard contractual clauses (with the UK International Data Transfer Addendum for UK data).
7.How long we keep it
- Order, payment and refund records: 6 years after the order, for accounting and tax law.
- Your account: until you ask us to close it, or after 3 years without a sign-in or order. Order records are then kept as above.
- Messages and complaints: 24 months after the conversation ends.
- Newsletter: until you unsubscribe.
8.Your rights
You have the right to:
- get a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have data deleted where we no longer need it or have no lawful basis to keep it;
- restrict or object to our use of it, including where we rely on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent at any time, for example by unsubscribing from the newsletter or changing your cookie settings.
Email info@patinaskins.com to use any of these rights. We reply within one month. We may ask you to confirm your identity before we act on a request.
You can complain to a supervisory authority: in the United Kingdom, the Information Commissioner’s Office (ico.org.uk); in the European Union, the data protection authority of the country where you live or work. We would appreciate the chance to deal with your concern first.
9.Security
The website is served only over HTTPS. Passwords are stored as one-way hashes. Access to customer data is limited to the people who need it to fulfil orders and answer messages. Card details, Steam passwords and Steam Guard codes never reach our systems.
10.Automated decisions
We do not make decisions with legal or similarly significant effects about you by automated means alone. Your card issuer and our payment provider run their own automated fraud checks and may decline a payment. If that happens, contact us and we will look at the order.
11.Age
Our store is for adults. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has created an account, email info@patinaskins.com and we will delete it.
12.Changes to this policy
We update this policy when the way we use personal data changes. The date at the top of the page shows the latest version.