Draft notice. This document is draft content, version 0.1.0-draft, pending review by legal counsel. It applies as written until a revised, counsel-reviewed version is published and supersedes it. We do not claim that this draft has been approved by counsel.
1. Scope
This policy explains what personal data EloBoosters collects, why, and what rights you have. It applies to the public storefront, customer accounts, partner (booster/coach/seller) accounts, and support channels.
EloBoosters is an independent marketplace. We are not affiliated with, endorsed by, or sponsored by any game publisher or developer, including but not limited to Valve, Riot Games, Epic Games, Ubisoft, or Blizzard Entertainment. All game titles, trademarks, and artwork belong to their respective owners. Nothing on this platform implies publisher approval of the services offered.
2. Data we collect
- Account data — email address, display name, password hash, locale.
- Order data — what you bought, configuration, price, order events.
- Payment data — handled by our payment providers; we store payment references and status, not card numbers.
- Identity verification data — where KYC applies, the verification outcome and level. Verification documents are processed under strict access control.
- Technical data — IP address, user agent, and timestamps recorded for security-relevant events such as registration, login, and legal acceptances.
- Communications — messages you exchange with support or within order chat.
3. Why we process it
- To operate the marketplace: accounts, orders, delivery, payouts.
- To meet legal obligations: fraud prevention, financial record-keeping, identity verification.
- To protect users: dispute evidence, abuse detection, security monitoring.
- To communicate: transactional email such as order updates and receipts.
4. Legal bases
Where EU/UK data-protection law applies, we rely on: performance of contract (operating your orders), legal obligation (KYC, accounting), and legitimate interest (fraud prevention, platform security). Where consent is required — for example for non-essential cookies — we ask for it separately.
5. Sharing
We share data only with: payment providers (to process payments), identity verification providers (where KYC applies), infrastructure providers under data processing agreements, and authorities where the law requires it. We do not sell personal data.
6. Retention
Order and financial records are retained for as long as tax and accounting law requires. Sensitive delivery content (for example, one-time account credentials) is purged on a short schedule after delivery. Support and dispute records are retained while relevant to open matters and for a limited period afterwards.
7. Your rights
Depending on your jurisdiction you may have rights to access, correct, delete, or export your personal data, and to object to certain processing. Contact support to exercise them; we may need to verify your identity first.
8. Security
Data is encrypted in transit; credentials for sold accounts are additionally protected with one-time reveal semantics. Access to personal data inside the company is role-restricted and audited.
9. Changes
A revised policy supersedes this version from its effective date.