Privacy Policy
Last Updated: September 11, 2026
This Privacy Policy outlines how MsKeyDeals Ltd (operating cdkeydeals.com, referred to as “CDKeyDeals”, “we”, “us”, or “our”) collects, processes, stores, and protects personal data obtained from visitors and customers of our digital software and video game key marketplace.
We are dedicated to safeguarding your privacy in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR), and relevant US privacy frameworks (including the California Consumer Privacy Act / CCPA).
1. Data Controller Information
The legal entity responsible for the collection and processing of your personal data is:
-
Company Name: MsKeyDeals Ltd
-
Company Registration Number: 14328558 (Registered in England and Wales)
-
Registered Corporate Address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
-
Privacy & Data Inquiries: privacy@cdkeydeals.com
-
General Support: support@cdkeydeals.com
2. Information We Collect
A. Information You Provide Directly
-
Identification & Contact Details: Full name, billing address, country, and email address.
-
Account Credentials: Username, encrypted password, and related profile settings if you register an account.
-
Transaction & Order Records: Details of purchased digital game keys, software licenses, transaction reference numbers, order timestamps, and activation/redelivery history.
-
Customer Support Records: Correspondence submitted through contact forms, emails, or live chat, including screenshots of error messages submitted for activation support.
B. Automatically Collected Technical Data
When you navigate CDKeyDeals.com, our servers log technical data via your browser or device:
-
(Pseudonymized) IP address, device type, hardware model, and unique device identifiers.
-
Browser version, operating system, language preferences, and time zone.
-
Referral URLs, page views, clickstream data, browsing duration, and interaction paths.
C. Payment Information
All financial transactions are conducted through secure, PCI-DSS-compliant payment processors. We do not store complete credit card or debit card numbers on our servers. The gateway processes your payment credentials securely and returns only authorization status and tokenized transaction IDs to us.
3. Purpose and Legal Grounds for Data Processing
We process your data only when permitted under established statutory legal bases:
-
Performance of a Contract (Art. 6(1)(b) GDPR): To process orders, deliver activation keys and download links to your email, display order records in your dashboard, and provide activation assistance.
-
Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax, statutory accounting, corporate record-keeping, and legal compliance obligations.
-
Legitimate Interests (Art. 6(1)(f) GDPR): To monitor store security, prevent fraud and unauthorized key exploitation, evaluate site stability, and improve our digital catalog.
-
Consent (Art. 6(1)(a) GDPR): To send promotional newsletters, discount notifications, or personalized deal alerts where you have actively opted in. You can withdraw your consent at any time.
4. Cookies and Tracking Technologies
CDKeyDeals.com uses cookies, web beacons, and related technologies to provide a smooth shopping experience:
-
Strictly Necessary Cookies: Essential for website navigation, cart management, checkout security, and session maintenance.
-
Analytics & Performance Cookies: Track aggregate traffic flow and user navigation to improve site speed and usability.
-
Marketing & Targeting Cookies: Used (with your explicit consent) to assess promotional campaign efficiency and present relevant gaming offers.
-
Managing Cookies: You can adjust cookie preferences through our on-site cookie banner or via your web browser settings. Note that disabling essential cookies may impact store functionality and order verification.
5. Third-Party Data Sharing
We do not sell, rent, or trade your personal information. We disclose data strictly to vetted service providers necessary for operating our platform:
-
Payment Gateways & Anti-Fraud Providers: To authorize payments and protect against fraudulent card usage.
-
Hosting & Cloud Infrastructure: Scalable hosting networks and transaction-mail providers that enable instant 24/7 key delivery.
-
Analytics Providers: Services such as Google Analytics to assess store performance on an aggregated basis.
-
Legal and Regulatory Authorities: Where mandated by law, court order, or official investigation to protect customer security or legal rights.
6. International Data Transfers
CDKeyDeals.com serves a worldwide customer base. Personal data may be processed on secure infrastructure located outside the United Kingdom or the European Economic Area (EEA). Whenever international transfers occur, we implement valid statutory safeguards, such as:
-
UK International Data Transfer Agreements (IDTAs).
-
European Commission Standard Contractual Clauses (SCCs).
-
Recognized adequacy decisions (including the EU-U.S. Data Privacy Framework and its UK Extension).
7. Data Retention Policy
We keep your personal information only for as long as required to satisfy the purposes for which it was gathered:
-
Order & Transaction Data: Kept for up to 6 to 7 years in compliance with UK statutory accounting, corporate, and tax regulations.
-
Customer Support Records: Retained during the product warranty and support review lifecycle to resolve key verification issues, after which records are archived or deleted.
-
Marketing Records: Retained until you unsubscribe or request data removal.
-
Aggregated Analytics: Anonymized or purged on a scheduled rolling cycle.
8. Your Data Protection Rights
Depending on your jurisdiction (including rights under the UK GDPR, EU GDPR, and applicable US state privacy laws), you have the right to:
-
Access: Request a copy of the personal data we hold about you.
-
Rectification: Request correction of inaccurate or incomplete records.
-
Erasure (“Right to Be Forgotten”): Request deletion of your personal data where retention is no longer required by law.
-
Restriction: Request temporary suspension of data processing under certain conditions.
-
Data Portability: Request delivery of your data in a structured, commonly used, and machine-readable format.
-
Object: Object to data processing carried out under legitimate interests or for direct marketing purposes.
-
Withdraw Consent: Revoke any previously granted consent at any time without retroactive impact.
To exercise any of these rights, contact privacy@cdkeydeals.com. We respond to all verified requests within 30 days.
9. California Privacy Rights (CCPA / CPRA)
For California residents:
-
No Sale of Personal Information: We do not sell or share personal information for monetary or other valuable consideration.
-
Right to Know & Access: You may request details regarding the categories and specific pieces of personal information collected over the preceding 12 months.
-
Right to Delete: You have the right to request deletion of your personal data, subject to legal exceptions.
-
Non-Discrimination: We will not discriminate against you in pricing, service quality, or access for exercising your statutory privacy rights.
To submit a request, contact privacy@cdkeydeals.com with the subject line “CCPA Request”.
10. Children’s Privacy Protection
Our store is not designed for or directed at children under the age of 13 (or under 16 in the European Union). We do not knowingly collect personal data from minors. If we discover that personal information of a minor was inadvertently collected without verified parental consent, we will promptly delete that data. Contact privacy@cdkeydeals.com if you believe a minor has provided us with personal information.
11. Security Measures
We implement industry-standard technical and organizational security protocols, including TLS/SSL encryption across all pages, firewall protection, routine vulnerability scans, and strict internal access controls to protect your data against unauthorized access, loss, or misuse.
12. Contact Details & Supervisory Authorities
If you have questions, concerns, or requests regarding this Privacy Policy:
-
Entity: MsKeyDeals Ltd (Operating cdkeydeals.com)
-
Company Registration Number: 14328558
-
Registered Address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
-
Privacy Office: privacy@cdkeydeals.com
-
Support Desk: support@cdkeydeals.com
If you are not satisfied with how we address a data protection inquiry, you have the right to lodge a complaint with your competent supervisory authority:
-
United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk
-
European Union: Your national or regional Data Protection Authority (DPA).
