This Privacy Policy outlines how ruststation.org (“we”, “us”, or “our”) collects, processes, shares, and protects personal information when you access the Website or use our services, including the purchase and delivery of gaming skins and in-game digital items. By using our services, you agree to the practices described below.
Data Controller
Ruststation.org acts as the Data Controller for the purposes of UK data protection law. Contact email:info@ruststation.org
Categories of Information Collected
We may collect and process the following types of data:
Personal Identification and Contact Details – including name, email address, billing address, and similar information.
Transaction Records – such as purchase history, receipts, and payment confirmations.
Payment Information – processed securely by authorised third-party payment providers; full card details are not stored by us.
Steam and Trade Data – including Steam username, trade URL, delivery confirmations, and trade status.
Technical Data – IP address, device identifiers, browser type, operating system, referral sources, and cookie identifiers.
Communications – messages sent through customer support, forms, or direct correspondence.
Verification and Compliance Data – identity documents, proof of address, date of birth, and related information required for AML/KYC purposes by regulators or payment partners.
Methods of Data Collection
Data is collected through:
Information you provide directly during checkout, account interaction, or support requests.
Automated technologies such as cookies and analytics tools when you browse the Website.
Third-party sources including payment service providers and e-commerce platforms.
Purposes of Processing
Your information is used to:
Process and complete orders, including delivery of digital items via Steam trade offers.
Communicate regarding transactions, support inquiries, or service updates.
Maintain security, improve performance, and detect fraud or technical issues.
Comply with legal, regulatory, accounting, tax, AML/CTF, and payment network obligations.
Enforce our contractual terms and policies.
We process personal data only where necessary for legitimate business, legal, or security purposes.
Data Sharing
Personal data may be shared with:
Acquiring banks, payment processors, and card schemes for transaction handling, fraud checks, AML screening, and chargeback management.
Service providers supporting hosting, analytics, communications, and customer support.
Steam / Valve where required to complete digital item delivery.
Regulators, authorities, or professional advisers where legally required or necessary to protect our rights.
We do not sell personal data. Payment details are handled exclusively by authorised payment providers, and we do not store full payment card information.
Email Communications
We may use your email address to send:
Order confirmations and trade notifications.
Service-related or security communications.
Promotional messages where you have explicitly opted in (you may unsubscribe at any time, though essential service messages will still be sent).
Cookies and Similar Technologies
Cookies and similar technologies are used to operate the Website, store preferences, conduct analytics, and support marketing. Cookie settings can be managed via browser controls or our cookie preference tools. Certain Website features may not function properly if cookies are disabled.
Data Retention
Support communications are retained as necessary to resolve inquiries and maintain records.
AML/KYC documentation is stored for a minimum of five years or longer where legally required.
Cookie and analytics data are retained for their defined lifespan or until deleted.
Transaction and order records are generally retained for up to six years for legal and accounting purposes.
Your Rights
Under the UK GDPR, you may:
Access, correct, or request deletion of your personal data.
Restrict or object to specific processing activities.
Request data portability.
Withdraw consent where processing is consent-based.
Lodge a complaint with the appropriate supervisory authority.
Our services are intended for individuals aged 18 and over. We do not knowingly process data relating to children.
You may also contact the Information Commissioner’s Office (ICO) via its official website.
Policy Amendments
This Privacy Policy may be updated periodically. Any changes will be published with a revised effective date. Continued use of the Website constitutes acceptance of the updated terms.
International Transfers
Personal data may be transferred outside the UK or EEA where payment partners or service providers operate internationally. In such cases, appropriate safeguards, including adequacy decisions or Standard Contractual Clauses, are applied.
Data Security and Automated Decisions
We implement organisational and technical measures such as encryption and access controls to protect personal data. While we strive for security, users are responsible for maintaining confidentiality of login credentials.
Some transactions may be subject to automated risk or fraud assessments conducted by banks or payment providers. You may request a manual review of any automated decision that significantly affects you.
