This Privacy Policy explains which personal data 069 RESELLING ("we", "us") collects when you visit 069reselling.cc or buy from 069 RESELLING, why we do it and which rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR).
1. Controller
069 RESELLING Email: our support email
2. Data we collect
- Order data: first and last name, email address, country, optional Discord username, ordered products, prices, coupon codes and order status.
- Payment data: payment method, payment status and transaction references. Card and PayPal details are entered directly with Stripe and are never stored by us. paysafecard PINs are stored only as long as needed to check and process the payment.
- Account data: if you create a customer account, your email address, your encrypted password (handled by our login provider) and the date your account was created.
- Technical data: IP address, browser type, device information and time of access, which our hosting provider processes automatically to deliver the website securely.
- Support data: messages you send us by email or Discord.
3. Why we use your data (legal basis)
- To process and deliver your order and to provide support (Art. 6(1)(b) GDPR – contract).
- To prevent fraud, chargebacks and abuse, and to keep our website secure (Art. 6(1)(f) GDPR – legitimate interest).
- To meet legal obligations such as tax and accounting retention rules (Art. 6(1)(c) GDPR).
- We do not sell your data and we do not use it for advertising profiles.
4. Service providers
We only share data with providers that help us run the shop:
- Netlify (hosting, database, file storage and customer login)
- Stripe (card, PayPal and other payment methods)
- paysafecard / Paysafe (prepaid payments)
- NOWPayments (cryptocurrency payments)
- Resend (sending order and key emails)
- Discord (support and internal order notifications – these never contain payment PINs)
Some of these providers are located outside the EU/EEA (e.g. in the USA). In that case the transfer is based on an adequacy decision or EU Standard Contractual Clauses.
5. Cookies and local storage
- We do not use tracking or advertising cookies.
- Your browser's local storage is used to remember your shopping cart and your login session. This is necessary for the shop to work.
- Fonts are loaded from Google Fonts, which means your IP address is transmitted to Google when the page loads.
6. How long we keep data
- Order and invoice data: as long as required by tax and commercial law (usually up to 10 years).
- Account data: until you delete your account or ask us to delete it.
- Server logs: a few days, unless needed to investigate a security incident.
7. Your rights
You have the right to access, correct, delete or restrict the processing of your data, the right to data portability and the right to object to processing based on legitimate interest. To exercise your rights, contact us at our support email. You also have the right to lodge a complaint with a data protection supervisory authority.
8. Security
All connections to our website are encrypted (HTTPS). Access to order data is limited to authorised staff.
9. Changes
We may update this Privacy Policy when our services or legal requirements change. The current version is always available on this page.