Privacy and Data Protection Policy

WWW.LOOTSHED.NET

Effective Date: June 4, 2026

Last Updated: June 4, 2026

1. Legal Entity & General Provisions

1.1. Data Controller

This Privacy Policy governs the processing of personal data by NOVENTRA TECH LTD, a company incorporated under the laws of England and Wales with Registered Company Number 17256413 (hereinafter referred to as the "Company", "We", "Us", or "Our"). The Company acts as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.2. Scope of Application

This document outlines our practices regarding the collection, utilization, disclosure, and protection of information obtained from users (hereinafter referred to as "User", "You", or "Your") interacting with the website lootshed.net (the "Platform") and utilizing our commercial services, including but not limited to the acquisition of in-game assets and skins.

1.3. User Consent

By accessing the Platform, registering an account, or conducting any commercial transaction, you explicitly acknowledge and agree to the data practices described in this Policy.

2. Categories of Data We Process

We collect several types of information to provide a secure and efficient trading environment. This data is categorized as follows:

• Personal Identification Information: Full name, valid email address, and verified billing address.
• Commercial & Transactional History: Records of items purchased, order histories, generation of invoices, and payment status/confirmations.
• Gaming & Technical Ecosystem Data: Your Steam platform username, unique Steam Trade URL, Internet Protocol (IP) address, hardware device specifications, and operating system attributes.
• Financial Processing Data: All payment transactions are routed via secure, PCI-DSS compliant third-party merchant processors. The Company does not store or have access to full credit/debit card numbers.
• Regulatory Compliance & Verification Records: Documented proof of identity (e.g., passports, ID cards) and verification of residence, strictly processed in compliance with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.

3. Methodology and Legal Bases for Processing

3.1. How Data is Obtained

We collect information through three primary channels:

• Direct Submission: Information you manually enter during account setup, checkout, or support queries.
• Automated Telemetry: Technical and behavioral logs captured via functional cookies and tracking pixels during site interaction.
• Third-Party Integrations: Verification status and transaction statuses received from payment gateways and Valve/Steam API protocols.

3.2. Core Objectives of Data Processing

Your data is utilized strictly for the following operational reasons:

• To execute purchase agreements and successfully transfer virtual assets to your Steam account.
• To manage customer support channels and resolve technical or transactional disputes.
• To prevent fraudulent activity, mitigate systematic risks, and guarantee Platform stability.
• To fulfill mandatory statutory duties, including corporate tax filings and Anti-Money Laundering/Counter-Terrorism Financing (AML/CTF) obligations.

3.3. Legal Grounds

Under the UK GDPR, our legal bases for processing your information are: Contractual Necessity (to deliver products), Legal Obligation (compliance with tax and financial laws), and Legitimate Interest (preventing fraud and securing the network).

4. Data Distribution and Retention Protocols

4.1. Authorized Information Sharing

The Company does not sell your personal data. Data is shared exclusively with necessary infrastructure partners, including:

• Banking institutions and localized payment processors.
• Valve Corporation (owners of the Steam platform) to facilitate peer-to-peer item delivery.
• Judicial, regulatory, or law enforcement bodies when mandated by applicable statutory laws.

4.2. Mandatory Retention Windows

Important Note on Data Lifespans:

• Regulatory KYC/AML Records: Maintained for a strict minimum period of 5 years following the termination of the business relationship to comply with anti-financial crime statutes.
• Accounting & Financial Transactions: Retained for up to 6 years in accordance with corporate tax reporting regulations.

4.3. Customer Support Records

All transcripts of support tickets and communication logs are retained for as long as necessary to fully resolve the underlying inquiries and maintain a high-quality audit trail for platform service evaluations.

5. Security Architecture and User Rights

5.1. Statutory Rights under UK GDPR

As a data subject, you possess comprehensive legal rights regarding your information. You may exercise these at any time:

• Right of Access & Portability: Request a copy of all personal records we hold.
• Right to Rectification: Request immediate correction of outdated or erroneous records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of data, provided it does not conflict with our statutory retention periods (such as the 5-year AML lock).
• Regulatory Recourse: You retain the absolute right to lodge a formal complaint regarding our data handling with the Information Commissioner’s Office (ICO) in the UK.

5.2. Technical Protective Measures

We employ rigorous administrative, physical, and technical safeguards (including SSL/TLS data encryption) to insulate your data from unauthorized exploitation. However, security is a shared responsibility: you are strictly obligated to maintain the absolute confidentiality of your Platform credentials and Steam access details.

5.3. Automated Profiling and Fraud Mitigation

To protect our ecosystem, certain risk profiles and transactions are evaluated via automated fraud-detection systems. If a transaction is restricted or flagged automatically, you possess the explicit right to contest the decision and request an exhaustive human review by our compliance desk.

6. Contact and Inquiries

For any matters, data access requests, or questions regarding this Privacy Policy, please contact our Compliance Officer directly through the official support channels provided on lootshed.net.