01Who We Are

The controller of your personal data is GOLDEN CRATE LTD, a company registered in England and Wales under company number 17435500, with its registered office at Suite 7049, 128 Aldersgate Street, Barbican, London, England, EC1A 4AE. GorillaSkins is our trading name.

For any privacy question or request, e-mail info@gorillaskins.store or write to us at the address above.

02Personal Data We Collect

• Account details: your username, e-mail address and password (stored only as a secure hash).
• Steam details: your SteamID, public profile name, avatar and profile link if you sign in with Steam, and the Steam trade URL you give us for delivery.
• Billing details: the name, address, e-mail and phone number you enter at checkout.
• Orders: the items you bought, prices, dates, delivery and refund status.
• Payment information: the payment status, the transaction reference and, where the provider shares it, the card type and last four digits. We never receive your full card number.
• Messages: anything you send us by e-mail or through our forms, including the page and IP address the form was sent from.
• Consent records: when you accepted our Terms of Service, Refund Policy and Privacy Policy, and from which IP address.
• Technical data: your IP address, browser, device and the pages you request, recorded in server logs for security.

03Where We Get It

• From you, when you register, check out, sign in or contact us.
• From Steam (Valve Corporation), when you choose to sign in with Steam.
• From our payment providers, when you pay or receive a refund.
• Automatically from your device, when you use the website.

04How We Use It And Why

We only use your data when the law gives us a reason (a "lawful basis"):

Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details of that assessment.

05Sign In With Steam

If you choose "Continue With Steam", you sign in on Steam's own website. We never see or store your Steam password. Steam tells us your SteamID, and we fetch your public profile name, avatar and profile link through the Steam Web API. We use them to create or link your account and show your avatar in your account area. You can unlink Steam from your profile at any time.

06Payments

Payments by Visa, Mastercard, Apple Pay and Google Pay are processed by third-party payment providers. You enter your card details with them, not with us. They may run their own fraud checks and act as independent controllers of the payment data under their own privacy policies.

07Who We Share It With

We share personal data only where needed, with:

• payment providers, to take payments and send refunds;
• Valve Corporation (Steam), because every delivery is a Steam trade offer;
• our hosting and e-mail providers, who run the servers and mailboxes behind the website;
• professional advisers, such as accountants, auditors and lawyers;
• fraud prevention partners, the police, courts and regulators, where the law requires it or to prevent crime;
• a buyer of our business, if the business is ever sold, under the same privacy protections.

Our service providers may only use your data to provide their services to us. We do not sell your personal data.

08International Transfers

Some providers, including Valve, are based outside the UK and the European Economic Area. When your data is transferred abroad, we make sure it is protected, for example by relying on UK adequacy regulations or by using the International Data Transfer Agreement or standard contractual clauses approved for this purpose.

09How Long We Keep It

10Your Rights

You have the right to:

• access the personal data we hold about you and get a copy;
• rectify data that is wrong or incomplete;
• erase your data in certain cases;
• restrict how we use your data in certain cases;
• port your data, meaning receive it in a common format or have it sent to another organisation;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw consent at any time where we rely on it.

To use any of these rights, e-mail info@gorillaskins.store. It is free. We may ask you to confirm your identity first. We reply within one month, or tell you within that month if we need up to two more months because your request is complex.

11Complaints To The Regulator

If you are unhappy with how we handle your data, please tell us first so we can try to fix it. You also have the right to complain to the UK data protection regulator:

If you live in the EU, you can also complain to the data protection authority in your country.

12Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords and restricted access to our systems. No website can be completely secure, so please keep your account and Steam login details safe too.

13Automated Checks

Some fraud checks run automatically, for example to flag unusual payment patterns. We do not make decisions that have a legal or similarly significant effect on you based only on automated processing. A member of our team reviews any flagged order, and you can ask for a human review of any decision.

14Marketing

We only send you news and offers if you ask for them. Every marketing e-mail has an unsubscribe link. Service e-mails about your orders and account are not marketing and are sent as part of our service.

15Age Requirement

Our website is intended for people aged 18 or over, or those who have permission from a parent or guardian. We do not knowingly collect data from children under 13. If you believe a child has given us personal data without permission, please contact us and we will delete it.

16Cookies

We use cookies to keep you signed in, keep your cart working and protect the website. Full details are in our Cookies Policy.

17Changes To This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last changed. If we make important changes, we will tell you by e-mail or with a notice on the website.

18Contact Us

For any question about your personal data, e-mail info@gorillaskins.store, use our contact form or write to GOLDEN CRATE LTD, Suite 7049, 128 Aldersgate Street, Barbican, London, England, EC1A 4AE.