Privacy Policy PrimeKeys — Updated 6 October 2026 1. Who this notice covers This notice explains how the PrimeKeys storefront handles personal information connected with browsing, purchases, account access and support. The operator trading as PrimeKeys is responsible for the information it determines how to use. Send privacy enquiries or complaints to support@primekeys.store, with “Privacy” in the subject. Komerza provides our checkout, order and account features. It processes buyer information for merchants and also handles some information for its own payment, security and service purposes. Its own privacy notice applies to those separate activities. 2. Information involved Information involved in a purchase can include your email address, order reference, selected product and plan, transaction amount, payment status, delivery record and information needed for fraud checks. The checkout or payment provider may request billing or verification details. This storefront does not directly collect or store your full card number. Support receives the email address, order details, message and attachments you choose to send. Browsing and checkout services may process IP addresses, device/browser information, request logs, security events, referral identifiers and cookie or storage identifiers. We do not need passwords or sensitive personal information in routine support requests. 3. Sources and what you need to provide Information comes from you, your browser, and the order/payment services involved in your purchase. If someone contacts us about an order, we may receive information from that communication, but we will check their authority before disclosing another customer's details. An accessible email address and payment information required by the checkout are needed to complete and deliver an order. Without necessary information we may be unable to supply or locate the purchase. Additional support evidence should be limited to what is relevant; you can redact unrelated personal details. 4. Purposes and lawful bases We use necessary order and contact information to perform the purchase contract: taking payment, delivering access, locating orders and dealing with order support. We use information where necessary to meet legal obligations, including relevant accounting and consumer-rights requirements. Where appropriate, our legitimate interests include securing the service, investigating fraud, resolving disputes and improving reliability, balanced against your rights. Consent is used where legally required for optional communications or device storage/access. We do not treat a purchase as consent to unrelated marketing. You may withdraw consent without affecting earlier lawful processing. 5. Cart and support form Your cart saves product, licence and quantity selections in this browser under primekeys-cart-v1. It does not contain a payment card number or a delivered key. Cart data remains until you remove it or your browser clears it; there is no automatic expiry set by this storefront. The support form prepares an email on your device. Preparing or copying the message does not send it to PrimeKeys. The team receives it when you send it through your email service. Do not use public community channels to share order or licence details. 6. Who receives information Relevant information is handled by Komerza, payment providers, hosting/security services and the email or communication services used to respond to you. Access should be limited to people and providers who need it for the stated purpose. Authorities or professional advisers may receive information where legally required or necessary to establish or defend a legal claim. This storefront has no feature for selling your information or sharing it with advertisers for their independent marketing. If you choose Discord or another external destination, that service also handles information under its own rules. See the linked provider notices for their processing. 7. International processing Providers may process information outside your country, including outside the UK or EEA. Komerza publishes information about its processors and international transfer safeguards at https://komerza.com/legal/privacy and https://komerza.com/legal/dpa. Where a restricted transfer is made by us, an appropriate lawful transfer mechanism is required, such as an adequacy decision or approved contractual safeguards. Contact us to ask about the safeguards relevant to your information. This notice does not promise that all data stays in the UK. 8. Retention and security Order and transaction records are kept for the period needed to fulfil purchases, support licences, meet applicable record-keeping obligations and deal with claims. Support correspondence is retained according to the issue, continuing relationship and need to document its resolution. Relevant records may be kept longer during a dispute or legal hold; information should be removed or de-identified when no longer needed. Provider records follow their applicable retention arrangements. Local cart storage follows the controls described in the Cookie Policy. We use reasonable protections appropriate to the information and rely on provider security for their services, but no online system can promise absolute security. Tell support promptly about suspected unauthorised access. 9. Your privacy rights Depending on the law that applies, you may request access to your personal information, correction, deletion, restriction, portability, or object to certain processing, including processing based on legitimate interests. Direct-marketing objections must be respected. Rights can have exceptions, including information needed for legal obligations or claims. Email support with the right you want to exercise and enough information to locate the record. We may request proportionate identity or authority checks. UK/EU rights requests are generally answered within one month, subject to lawful pauses or extensions; we will explain an applicable extension. Requests are normally free, subject to the limited exceptions allowed by law. Clearing your browser does not delete an order record. 10. Children and automated decisions The storefront is not directed at children making purchases independently. A parent or guardian who believes a child has provided personal information should contact us so we can investigate and take appropriate action. PrimeKeys does not operate an automated decision-making or profiling feature of its own that produces legal or similarly significant effects. Checkout and payment providers may use automated security or fraud checks under their own notices. Contact support if a payment or access problem needs review; do not send additional identity documents through public chat. 11. Complaints and updates Contact support@primekeys.store if you are unhappy with how your information is handled. For UK data-protection complaints, we will acknowledge receipt within 30 days, take appropriate steps to investigate and communicate the outcome without undue delay. You can also complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or the relevant supervisory authority in your country, including your EU authority where applicable. We will date updates to this notice and explain material changes where required. New wording does not retrospectively authorise an incompatible use of your information. Contact: support@primekeys.store