This Privacy Policy explains how rust-skins.org (“we,” “us,” or “our”) collects, uses, stores, and protects the personal information of visitors and users of the Website, including when purchasing or receiving gaming skins and other digital items.
By accessing or using our services, you consent to the practices described below.
1. Data Controller
MIKHPETECH LTD (Company No. 16774228) acts as the Data Controller responsible for managing personal data.
Identity & Contact Information – Name, email address, billing address, and other details you provide.
Transactional Information – Purchase history, receipts, and payment confirmations.
Payment Information – Payments are securely handled by authorized third-party providers; full card numbers are never stored by us.
Gaming & Trade Data – Steam username, trade URL, and status of digital item deliveries.
Technical Information – IP address, device type, browser, operating system, referral data, and cookies.
Communication Data – Messages sent via support tickets, contact forms, or emails.
Verification Information – ID documents, proof of address, date of birth, or other data required for KYC/AML purposes.
3. How We Collect Information
Information is obtained through:
Directly from you – When creating an account, placing an order, or contacting support.
Automatically – Using cookies, analytics, and other tracking technologies while browsing the Website.
Third-party sources – Such as payment processors and service providers (e.g., WooCommerce, PayPal, Stripe).
4. How We Use Your Data
Your personal information is used to:
Complete orders, including delivering digital items via Steam or similar platforms.
Communicate regarding orders, updates, or support inquiries.
Maintain and improve the Website, perform analytics, ensure security, and prevent fraud.
Comply with legal obligations, taxation, AML/CTF regulations, and payment network rules.
Enforce our Terms and Conditions.
Data is only used for operational purposes, legal compliance, and fraud prevention.
5. Sharing & Disclosure
Personal information may be shared with:
Payment and financial institutions – For fraud prevention, AML compliance, and dispute resolution.
Technical service providers – Including hosting, analytics, and support providers.
Gaming platforms (e.g., Steam/Valve) – To complete trade offers.
Authorities or legal advisors – When required by law or to protect our rights.
We do not sell personal data. Payment details are handled exclusively by authorized providers; full card information is never stored by rust-skins.org.
6. Communications
We may contact you to:
Confirm purchases and trade completions.
Provide service updates, security notifications, or support messages.
Send promotional messages if you have opted in (you may unsubscribe at any time; essential service communications will continue).
7. Cookies & Tracking
Cookies and similar tools are used to:
Operate the Website and remember your preferences.
Perform analytics to improve performance.
Support marketing initiatives.
You can manage cookies through your browser settings or our cookie preferences center. Disabling some cookies may affect Website functionality.
8. Data Retention
Information is retained for the following periods:
Support correspondence – As long as necessary to resolve issues and maintain records.
KYC/AML records – Minimum of 5 years, or longer if required by law.
Cookies/analytics data – For the duration of their lifespan or until deleted.
Orders and transactions – Up to 6 years for accounting and legal purposes.
9. Your Rights
Under UK GDPR, you have the right to:
Access, correct, or request deletion of your personal data.
Restrict or object to certain processing activities.
Our services are intended for users aged 18+. We do not knowingly collect information from minors. If a child provides data, contact us to request deletion.
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date.
Continued use of our services indicates acceptance of the updated policy.
11. International Data Transfers
Your personal data may be transferred outside the UK/EEA, for example when using payment providers or banks.
Appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, are applied to protect your information.
12. Data Security
We use technical and organizational measures to protect personal data, including encryption and restricted access.
While we strive to protect information, no system is completely secure. Users are responsible for keeping account credentials confidential.
Certain transactions may be automatically reviewed by banks or fraud-monitoring tools, which may impact acceptance or rejection. Manual review can be requested for such decisions.
