How EX Store handles your information.
This policy explains how personal data is collected, used, stored and protected.
PRIVACY POLICY
SEMBOLINIO LTD
This Privacy Policy ("Policy") sets out the practices of SEMBOLINIO LTD ("we", "us", "the Company") regarding the collection, use, storage, and protection of personal data in connection with ex-store.com (the "Platform"). We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using the Platform you confirm your understanding of and agreement to these practices.
01 WHO CONTROLS YOUR DATA
The Data Controller responsible for personal information processed through the Platform is:
Legal Entity: SEMBOLINIO LTD
Registered Address: 60 Tottenham Court Road, London, United Kingdom, W1T 2EW
Company Number: 17347727
Privacy Enquiries: info@ex-store.com
02 DATA WE COLLECT
We collect only the personal information necessary to provide our services. Depending on how you use the Platform, this may include:
2.1 Identity and Contact Details: your full name, email address, and billing information.
2.2 Transaction Records: order history, purchase confirmations, and transaction receipts.
2.3 Payment Information: handled exclusively by certified third-party processors. We do not retain or access complete card details.
2.4 Gaming Account Data: your Steam username, trade link, and item delivery status.
2.5 Technical Data: IP address, browser type, device identifiers, and session information collected automatically upon Platform access.
2.6 Support Records: any correspondence or enquiries submitted through our support channels.
2.7 Verification Data: documentation collected to satisfy KYC and AML compliance requirements when applicable.
03 HOW WE COLLECT YOUR INFORMATION
3.1 Directly from you when you register, place an order, or contact our support team.
3.2 Automatically through cookies and tracking tools as you navigate the Platform. Please refer to our Cookie Policy for further details.
3.3 From authorised third parties, including payment providers, fraud prevention specialists, and analytics partners.
04 WHY WE PROCESS YOUR DATA
We process personal data only where a lawful basis applies. Our processing purposes are:
4.1 To fulfil orders and deliver digital items via Steam trade offers.
4.2 To communicate with you about transactions, account activity, and support requests.
4.3 To maintain, secure, and improve the technical performance of the Platform.
4.4 To detect, investigate, and prevent fraud, abuse, and unauthorised activity.
4.5 To comply with AML regulations, tax obligations, accounting rules, and other applicable legal requirements.
4.6 To enforce our Terms and Conditions and protect the rights of the Company and our users.
05 HOW WE SHARE YOUR DATA
We do not sell, rent, or trade your personal data. Disclosure occurs only in the following circumstances:
5.1 Payment processors, acquiring banks, and card networks for transaction authorisation and fraud screening.
5.2 Technology and infrastructure providers engaged for hosting, analytics, support, and communications, under contractual data processing agreements.
5.3 External platforms such as Steam (Valve Corporation), to the extent required to complete item delivery.
5.4 Regulatory authorities, law enforcement agencies, or legal advisers when required by applicable law or court order.
06 SECURITY MEASURES
6.1 All sensitive data is transmitted and stored using industry-standard encryption protocols.
6.2 Access to personal data is limited to authorised personnel on a strict need-to-know basis.
6.3 Continuous monitoring and fraud detection systems are maintained to identify and respond to security incidents.
6.4 No digital system can guarantee absolute security. You are responsible for keeping your account credentials confidential.
6.5 Certain transactions may be subject to automated decision-making by external payment systems. You may request human review of any such decision by contacting info@ex-store.com
07 COOKIES AND TRACKING
The Platform uses cookies and similar technologies for session management, preference storage, performance analytics, and where you have consented, marketing activities. You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. For full details, refer to our Cookie Policy.
08 COMMUNICATIONS
8.1 Order confirmations, transaction receipts, and delivery notifications.
8.2 Service alerts, security notices, and operational updates.
8.3 Promotional messages, only where you have given explicit opt-in consent.
Marketing consent may be withdrawn at any time through the unsubscribe link in any marketing email. Essential service communications will continue regardless of marketing preferences.
09 HOW LONG WE RETAIN YOUR DATA
9.1 Support and communication records: retained for as long as necessary to resolve the relevant matter.
9.2 KYC and AML records: held for a minimum of five (5) years, or longer where required by applicable law.
9.3 Transaction and financial records: retained for up to six (6) years for accounting and regulatory compliance.
9.4 Cookie and analytics data: retained in line with each cookie’s defined lifecycle or until removed by you.
10 INTERNATIONAL DATA TRANSFERS
10.1 In certain circumstances, personal data may be transferred to and processed in countries outside the United Kingdom or EEA.
10.2 This may occur where payment providers, fraud prevention systems, or analytics partners are based in other jurisdictions.
10.3 All such transfers are conducted under appropriate safeguards including Standard Contractual Clauses or equivalent legally recognised mechanisms.
11 YOUR RIGHTS
Under UK GDPR you hold the following rights. To exercise any of them, please contact info@ex-store.com. We will respond within one calendar month.
11.1 Right of Access: to confirm whether we hold your data and to receive a copy.
11.2 Right to Rectification: to request correction of inaccurate or incomplete records.
11.3 Right to Erasure: to request deletion where no lawful basis for retention remains.
11.4 Right to Restriction: to limit processing in defined circumstances.
11.5 Right to Object: to object to processing based on legitimate interests.
11.6 Right to Data Portability: to receive data in a structured, machine-readable format.
11.7 Right to Withdraw Consent: where processing is consent-based, to withdraw at any time without affecting prior processing.
11.8 Right to Complain: to raise a concern with the Information Commissioner’s Office (ICO) at www.ico.org.uk.
Our services are intended for users aged 18 and over. We do not knowingly collect data from minors.
12 POLICY UPDATES
12.1 This Policy may be revised periodically to reflect changes in law, business practices, or technology.
12.2 Any revisions will be published on the Platform with an updated effective date.
12.3 Continued use of the Platform following publication of an updated Policy constitutes your acceptance.