Privacy Policy – nexusskins.org
Effective Date: May 29, 2026
1. Controller Designation & Scope
1.1. Policy Application: This document delineates how nexusskins.org collects, protects, and utilizes personal information when you access our ecosystem to acquire or trade in-game skins. Continued engagement with our services constitutes an agreement to these data practices.
1.2. Data Controller: BO ART TECH LTD, registered in England and Wales under Company No. 17229924, holds the legal designation of Data Controller for your information.
1.3. Primary Contact: All privacy-related inquiries should be forwarded to info@nexusskins.org
2. Categories of Collected Data
2.1. Core Identity Metrics: Information such as your full name, electronic mail address, and physical billing location.
2.2. Financial Artifacts: Documentation of your purchase history, receipts, and successful payment confirmations.
2.3. Payment Security: Sensitive payment data is handled exclusively by secure third-party vendors; we categorically do not store complete card numbers.
2.4. Trading Metadata: Contextual data regarding your digital inventory, including your Steam moniker, active trade URL, and item delivery outcomes.
2.5. Regulatory Compliance Files: Identity proofs, date of birth, and residency verification documents required to satisfy Anti-Money Laundering (AML) and KYC mandates.
2.6. Technical Footprint: Data passively captured during navigation, encompassing IP addresses, referring URLs, operating system metadata, device classifications, and cookie signatures.
2.7. Support Interactions: Written correspondence and inquiries submitted to our customer service desk.
3. Data Acquisition Methods
3.1. Direct Provision: Data you intentionally supply while creating an account, finalizing a checkout, or engaging with support.
3.2. Automated Tracking: Information gathered seamlessly via analytics instruments and cookies as you traverse the platform.
3.3. External Integrations: Data relayed back to us by integrated payment processors such as Stripe, WooCommerce, or PayPal.
4. Purpose of Processing
4.1. Operational Fulfillment: Executing your requests by ensuring CS2 assets are accurately delivered via Steam trade mechanisms.
4.2. Client Communication: Dispatching vital updates regarding transactions, deliveries, and support tickets.
4.3. System Integrity: Deploying data to debug infrastructure, run performance analytics, and proactively neutralize fraud risks.
4.4. Statutory Adherence: Processing data to satisfy tax laws, accounting rules, payment scheme protocols, and stringent AML/CTF legal requirements.
4.5. Policy Enforcement: Utilizing data to uphold our internal Terms of Service. All processing is strictly confined to what is necessary for order fulfillment, fraud deterrence, and legal compliance.
5. Data Retention Timeframes
5.1. Financial Archives: In adherence to accounting and tax legislation, transactional histories and order data are preserved for up to 6 years.
5.2. Regulatory Archives: To satisfy financial regulators, KYC and AML evidence is archived for an absolute minimum of five years, and potentially longer if legally required.
5.3. Customer Service Logs: Correspondence is retained only for the duration necessary to address queries and preserve historical context.
5.4. Digital Footprints: Analytics metrics and cookies survive only for their programmed lifecycle or until manually purged by the user.
6. Information Disclosure & Global Transfers
6.1. Financial Intermediaries: Data may be transmitted to acquiring banks, payment gateways, and card networks to manage chargebacks, screen for fraud, and enforce AML laws.
6.2. Operational Vendors: Details are shared with technical partners responsible for hosting, support interfaces, analytics, and specifically with Valve/Steam to execute trades.
6.3. Legal Authorities: Information will be surrendered to regulators or professional advisers if legally compelled or if necessary to defend our corporate rights.
6.4. Commercial Safeguards: We strictly prohibit the sale of any personal data. Furthermore, we never retain full card details, as authorized external providers manage these securely.
6.5. Cross-Border Transmission: Information may occasionally cross outside the UK/EEA to reach our banking or payment partners. In such instances, we implement rigorous safeguards like Standard Contractual Clauses or rely on adequacy regulations to protect the data.
7. User Rights & Protections
7.1. UK GDPR Entitlements: Under statutory law, you hold the right to access, rectify, or entirely erase your personal files. You may also restrict processing, extract your data in a portable structure, or revoke previously granted consent.
7.2. Execution of Rights: To initiate a data request, please correspond with info@nexusskins.org
7.3. Regulatory Escalation: Should you feel your data is mishandled, you maintain the right to file a formal grievance with the Information Commissioner’s Office (www.ico.org.uk) or another supervisory authority.
7.4. Age Restrictions: Our ecosystem is explicitly built for adults 18 and older, and we actively avoid gathering data from minors. If child data is inadvertently collected, please alert us immediately for its deletion.
8. Security Measures & Automated Decisions
8.1. Cybersecurity: We combine organizational protocols with technical barriers, including access controls and encryption, to fortify your data. Nonetheless, absolute security cannot be guaranteed, placing the onus on you to protect your login credentials.
8.2. Algorithmic Profiling: Payment gateways and banks frequently utilize automated screening tools to evaluate transaction risk, which can result in an automatic approval or decline. You reserve the right to demand a manual human review of any automated rejection.
9. Communication Protocols
9.1. Mandatory Updates: Your email is utilized to deliver essential trade confirmations, order receipts, and critical security alerts.
9.2. Promotional Content: Marketing materials are distributed solely to users who have opted in; while you may unsubscribe from marketing at any juncture, core service emails will persist.
10. Cookie Integration
10.1. Purpose: Tracking technologies are deployed to memorize preferences, conduct marketing, run analytics, and facilitate general website operations.
10.2. User Impact: Disabling particular cookies via your browser or our preference center may trigger functional failures across the platform.
11. Policy Modifications & Corporate Contact
11.1. Revisions: This Privacy Policy is subject to periodic updates, with the latest effective date published online. Continued interactions with the Website confirm your acceptance of any new terms.
11.2. Corporate Identity: BO ART TECH LTD, 82a James Carter Road, Mildenhall, United Kingdom, IP28 7DE.
11.3. Email: info@nexusskins.org