Privacy Policy

playworldhub.com | UK GDPR & Data Protection Act 2018

Last updated: May 2026

1. Who We Are

MONTALTO SOLUTIONS LTD, registered in England and Wales (No. 15769151). Registered office: 20 Wenlock Road, London, N1 7GU. We operate playworldhub.com, a reseller of digital game activation keys.

Data protection contact: [email protected]

2. What Data We Collect

Data you give us:

• Name and email address — when you register or place an order.
• Billing address and order history.
• Messages you send to our support team.

We do not store your card number. Payment details are processed directly by our PCI-DSS compliant payment provider.

Data collected automatically:

• Technical data: IP address, browser type, device type, operating system, and referring URL.
• Usage data: pages visited, products viewed, and time and date of access.
• Cookies — see our Cookie Policy for full details.

3. How and Why We Use Your Data

We process your personal data on the following legal bases:

• Process your order and deliver your Key: Contract — Art. 6(1)(b) UK GDPR
• Manage your account: Contract — Art. 6(1)(b) UK GDPR
• Process payment and prevent fraud: Legitimate interests + Legal obligation — Art. 6(1)(f) + (c) UK GDPR
• Comply with AML and sanctions obligations: Legal obligation — Art. 6(1)(c) UK GDPR
• Send order confirmation and Key delivery emails: Contract — Art. 6(1)(b) UK GDPR
• Send marketing emails: Consent (opt-in only) — Art. 6(1)(a) UK GDPR
• Improve the website and analyse usage: Legitimate interests — Art. 6(1)(f) UK GDPR
• Respond to support requests: Contract — Art. 6(1)(b) UK GDPR

4. Who We Share Your Data With

• Payment providers — to process payments and run fraud checks. Their own privacy policies apply.
• Key suppliers — order data shared only to the extent needed to fulfil your order.
• IT and analytics providers — hosting, transactional email, and site analytics, all under UK GDPR Art. 28 processing agreements.
• Law enforcement and regulators — where required by law or to prevent fraud or sanctions violations.
• Business successors — in a merger or acquisition, data may transfer to the new entity.

We do not sell your personal data to third parties.

5. How Long We Keep Your Data

• Account data — while your account is active, plus 3 years after closure.
• Order and transaction records — 6 years, as required by UK tax and anti-money laundering law.
• Support communications — 2 years from resolution.
• Marketing consent records — until you withdraw consent, plus 1 year.

When data is no longer needed we delete or anonymise it securely.

6. Your Rights Under UK GDPR

You have the right to access, correct, delete, restrict, or object to processing of your data, to receive it in a portable format, and to withdraw consent at any time where processing is based on consent.

To exercise any right, email [email protected]. We will respond within one calendar month.

You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

7. Cookies

We use cookies on this website. You can manage your preferences via the banner when you first visit. For full details see our Cookie Policy.

8. International Transfers

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the UK International Data Transfer Agreement (IDTA).

9. Security

We use TLS/HTTPS encryption, access controls, and regular security reviews to protect your data. If a breach poses a risk to your rights, we will notify the ICO within 72 hours and inform you directly where required.

10. Children

This website is for users aged 18 and over. We do not knowingly collect data from children under 18. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

11. Updates

We may update this Policy from time to time. Material changes will be notified by email or via a notice on the website. The current version is always available on this page.