Privacy Policy

This Privacy Policy explains how ALDERROCK LTD collects, uses, shares, retains and protects personal data when individuals use Cartridge Club, create an Account, place an order, fund Balance, request a withdrawal or contact support.

Controller and contact details

ALDERROCK LTD is the controller of personal data described in this Policy. Company number: 17381132. Registered office: Dept 6984, 196 High Road, Wood Green, London, N22 8HH, United Kingdom.

Privacy questions and data rights requests may be sent to info@cartridge-club.com. The website is https://cartridge-club.com/.

Where a payment provider, card network, bank, Platform or publisher processes data for its own purposes, that organisation may act as a separate controller under its own privacy notice.

Scope

This Policy applies to website visitors, Account holders, customers, Balance users, newsletter subscribers and individuals who contact support.

It does not govern a third-party Platform or website reached through a link. Review the relevant third party’s privacy information before providing data to it.

Cartridge Club is intended only for persons aged 18 or older and is not directed to children.

Data we collect

Account and identity data may include name, email address, login identifier, age confirmation, country, Account status and verification information.

Order data may include products, Keys or entitlement status, order number, price, currency, payment status, delivery time, refund history and support records.

Balance data may include top-up amount, designated currency, conversions, purchases, refunds, withdrawals, reversals and available amount.

Technical data may include IP address, device and browser information, session identifiers, cookie choices, security logs, timestamps, approximate location and website interactions.

Communications data includes messages, attachments and information supplied to customer support, privacy teams or complaint handlers.

Marketing data includes newsletter subscription, consent or opt-out status, campaign interaction and product interests inferred from lawful interactions.

Payment information

Card payments and Balance top-ups are processed through payment service providers. Card information may be entered directly into a provider-controlled payment form.

We may receive limited payment identifiers, card type, last digits, billing country, authentication result, transaction status, fraud indicators and chargeback information.

Do not send complete card numbers, card security codes, passwords or authentication codes to Cartridge Club by email. We do not require that information for customer support.

Sources of data

We collect data directly from you when you browse, register, order, fund or use Balance, request withdrawal, subscribe or contact us.

We receive transaction, authentication and risk data from payment providers, card networks and banks.

We may receive product activation status, fraud signals or dispute information from suppliers, Platforms, security providers and service partners where necessary to fulfil an order or investigate a claim.

We may derive approximate country, device risk or Account security information from technical data.

Purposes and lawful bases

We process Account, order, delivery and Balance data as necessary to enter into and perform contracts with customers, including authentication, fulfilment, support, refunds and withdrawals.

We process records where necessary to comply with legal obligations relating to accounting, tax, consumer rights, sanctions, law enforcement requests and regulatory compliance.

We rely on legitimate interests to secure the service, prevent fraud, enforce fair terms, improve operations, maintain evidence, understand service performance and protect customers, provided those interests are not overridden by individual rights.

We use consent where required for non-essential cookies and certain electronic marketing. Consent may be withdrawn at any time without affecting earlier lawful processing.

We may process data to establish, exercise or defend legal claims and to protect vital interests in exceptional circumstances.

Orders, delivery and support

We use contact and order data to confirm a purchase, send the Key, communicate changes, provide activation support and resolve delivery or refund issues.

We may share the minimum required order or activation information with a supplier, publisher or Platform when necessary to validate a Key or investigate a fault.

Support communications may be retained with the relevant Account or order to maintain consistent service and evidence the resolution.

Balance and withdrawals

We use Balance transaction data to record top-ups, conversions, purchases, refunds, withdrawals and reversals and to display an accurate available amount.

A withdrawal may require identity, Account ownership and funding-source verification to prevent unauthorised payments, fraud or transfers to third parties.

We may temporarily restrict processing of information connected to disputed or suspicious funds while completing proportionate checks.

Fraud prevention and security

We analyse transaction, device, network, Account and behavioural signals to detect payment fraud, Account takeover, abuse, sanctions evasion and automated attacks.

Risk tools may produce scores or alerts. We may use automated signals to delay or decline a transaction, with human review available where appropriate and legally required.

You may contact support if you believe a decision was based on inaccurate information or wish to provide additional context.

Marketing communications

We may send marketing email where you have consented or where a lawful existing-customer exception applies.

A marketing subscription is separate from service messages needed for an order, Account, security event, Balance transaction or policy change.

Every marketing email will provide an unsubscribe method. You may also opt out by contacting us. We may retain a suppression record to respect the opt-out.

We do not treat an email supplied solely for delivery of a Key or receipt as blanket consent to unrelated marketing.

Cookies and similar technologies

We use necessary cookies for security, sessions, Account access, cart functions, currency and consent preferences.

With required consent, we may use analytics, advertising or similar technologies to understand performance and measure campaigns.

Details and controls are provided in the Cookie Policy and the website’s cookie settings tool.

Recipients and service providers

We may disclose relevant data to payment processors, acquiring banks, card networks, fraud and identity verification providers, hosting and infrastructure providers, email delivery services, customer support tools, analytics providers and professional advisers.

We may disclose limited information to publishers, suppliers or Platforms where necessary to fulfil an order, validate a Key, resolve an activation problem or investigate misuse.

We may share data with regulators, courts, law enforcement, tax authorities or other public bodies where required by law or necessary to protect legal rights.

If the business or relevant assets are reorganised, sold or transferred, data may be disclosed under appropriate confidentiality and legal safeguards.

International transfers

Some service providers or recipients may process personal data outside the United Kingdom.

Where transfer restrictions apply, we use an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another lawful safeguard.

You may contact us for information about the safeguard relevant to a restricted transfer, subject to protection of confidential and security-sensitive information.

Retention

We retain Account and order information for as long as necessary to provide the service and to meet legal, accounting, tax, fraud prevention, dispute and enforcement requirements.

Uploaded data and provided information are stored temporarily to provide services, comply with legal obligations, resolve disputes, and enforce our agreements (maximum retention period: 24 months from the last interaction, unless a longer period is required by law) and are automatically deleted thereafter. Backup retention does not exceed 35 days.

If you are an enterprise client, we will provide a Data Processing Agreement (DPA) upon request. Requests may be sent to info@cartridge-club.com.

Balance transaction and withdrawal records may be retained after Account closure where necessary to evidence ownership, payments, refunds and compliance.

Support records are retained for a period appropriate to the issue and any related limitation period. Security logs are retained for a proportionate period based on risk.

Marketing data is retained until opt-out or until it is no longer needed, while suppression records may be kept longer to ensure that marketing does not resume.

When data is no longer required, we delete, anonymise or securely isolate it unless continued retention is required by law.

Security

We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration and disclosure.

Measures may include access controls, authentication, encryption in transit, monitoring, backups, supplier due diligence and incident response procedures.

No online system is completely secure. You must use a unique password, protect the email Account used for delivery and notify us promptly of suspected compromise.

Your rights

Depending on applicable law and the processing, you may request access, correction, deletion, restriction, portability or objection and may withdraw consent.

The right to object to direct marketing applies at any time. Other rights may be limited where processing is required by law, contract, compelling legitimate grounds or legal claims.

We may request information reasonably necessary to confirm identity and prevent disclosure to an unauthorised person.

We respond within the period required by applicable law and will explain if a request is restricted or refused.

Complaints

Contact us first at info@cartridge-club.com so we can investigate a privacy concern.

You may complain to the UK Information Commissioner’s Office at https://ico.org.uk/ or to another competent data protection authority where applicable.

Raising a complaint does not affect any other legal remedy available to you.

Changes to this Policy

We may update this Policy to reflect legal, technical, supplier or business changes.

The current version and effective date will be published on Cartridge Club. Material changes will be brought to users’ attention where required.