This Privacy Policy explains how Steamveilrest (“we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from www.steamveilrest.com (the “Website”). We are committed to protecting your privacy and ensuring your personal data is handled in accordance with applicable European data protection regulations, including the General Data Protection Regulation (GDPR).

  1. Data Controller
    For the purposes of applicable data protection laws, the Data Controller is Steamveilrest.

Company Name: Steamveilrest

Address: XXXXXX

Phone: XXXXX

Email: steam@steamveilrest.com

  1. Information We Collect
    When you engage with our Website, we collect specific information necessary to process your transactions and fulfil your orders. This includes:

Contact Information: Your name, billing address, shipping address, email address, and phone number.

Transaction Information: Details regarding the items you purchase and the date of the transaction.

Financial Information: Payment details necessary to process your order.

  1. Payment Processing
    We utilise Stripe as our official payment processor to handle all financial transactions on the Website. When you make a purchase, your payment details are transmitted directly to Stripe. Steamveilrest does not store, process, or retain your full credit card numbers or raw financial details on our internal servers. Stripe processes your payment information in accordance with their established privacy and compliance frameworks.
  2. How We Use Your Information
    We rely on the following lawful bases to process your personal data:

Contractual Necessity: To process your payment, arrange for shipping, and provide you with invoices and order confirmations.

Legal Obligation: To maintain accurate financial records for tax and accounting purposes.

Legitimate Interests: To communicate with you regarding your order status and provide necessary customer support.

  1. Data Retention
    We retain your personal data only for as long as is strictly necessary to fulfil the purposes outlined in this Privacy Policy and to comply with legal obligations.

Order and Financial Records: Information related to completed purchases is retained for a period of up to 2190 calendar days (approximately 6 years) to comply with standard European tax, accounting, and legal requirements.

Customer Support Enquiries: Correspondence regarding order status or general enquiries is retained for 90 calendar days following the resolution of the matter before being systematically removed from our active databases.

Once the applicable retention period expires, your personal data is securely deleted or anonymised.

  1. Sharing Your Personal Information
    We share your personal information exclusively with third parties that facilitate the operation of our business and the fulfilment of your orders. These include:

Payment Processors: Stripe, as detailed in Section 3, for the purpose of executing transactions.

Logistics Providers: Shipping carriers and delivery personnel strictly for the purpose of delivering your purchased items to your designated address.

We do not sell, rent, or trade your personal data to external marketing agencies or unrelated third parties.

  1. Data Security Measures
    We implement robust organisational and technical measures designed to protect your personal information against unauthorised access, alteration, disclosure, or destruction. While we employ these measures to protect your data during transmission and storage, no method of electronic transmission or electronic storage is entirely immune to external factors. We continuously monitor and update our procedures to maintain the integrity of your information.
  2. Your Rights Under European Law
    If you are a resident of Europe, you possess the following rights concerning your personal data:

The Right of Access: You have the right to request a copy of the personal data we hold about you.

The Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data.

The Right to Erasure: You have the right to request the deletion of your personal data, subject to specific legal and accounting retention obligations.

The Right to Restrict Processing: You have the right to request the restriction of how we process your data.

The Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format.

The Right to Object: You have the right to object to our processing of your personal data.

To exercise any of these rights, please contact us directly at steam@steamveilrest.com. We will respond to your request within 30 calendar days.

  1. International Data Transfers
    Your personal information may be transferred to, and processed in, locations outside of your country of residence. When we transfer your data internationally, we ensure that appropriate legal safeguards are in place to afford your data the same level of protection it receives within Europe.
  2. Changes to This Privacy Policy
    We reserve the right to update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. The most current version will always be posted on this Website with the revised effective date.