PRIVACY POLICY

WWW.rust-depot.org

Effective Date: September 1, 2026
Last Updated: September 1, 2026

1. IDENTITY OF THE DATA CONTROLLER

1.1 Who We Are

This Privacy Policy explains how KILROPOD LTD, a company registered in England and Wales under company number 17417936 (the “Company”, “we”, “us”, “our”), collects, uses, stores, and protects personal data. We act as the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1.2 Who This Applies To

This Policy describes our data practices with respect to individuals (“User”, “you”, “your”) who visit or use the website rust-depot.org (the “Platform”), including those who purchase in-game virtual items and skins through our services.

1.3 Acceptance

By visiting the Platform, opening an account, or completing a purchase, you confirm your acknowledgement of the data-handling practices set out in this Policy.

2. WHAT DATA WE COLLECT

We collect the following categories of information in order to operate a secure trading service:

Identity Data: full name, email address, and confirmed billing address.
Transaction Data: purchase records, order history, generated invoices, and payment confirmations.
Platform & Technical Data: your Steam username and Trade URL, IP address, device type, and operating system information.
Payment Data: transactions are processed through PCI-DSS certified third-party payment providers; we do not store complete card numbers.
Compliance Data: identity documents (e.g., passport or national ID) and proof of address, collected solely to satisfy Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations.

3. HOW AND WHY WE PROCESS YOUR DATA

3.1 Sources of Data

Directly from you: information entered when registering, checking out, or contacting support.
Automatically: technical and usage data gathered via cookies and similar tracking tools.
From third parties: verification and transaction status data received from payment providers and the Steam/Valve API.

3.2 Purposes of Processing

Fulfilling purchase orders and delivering virtual items to your Steam account.
Operating customer support and resolving disputes.
Detecting and preventing fraud, and maintaining platform security.
Complying with tax reporting duties and AML/CTF obligations.

3.3 Legal Bases

Under UK GDPR, we rely on the following legal bases: Contractual Necessity (to provide the service you requested), Legal Obligation (to meet tax and financial-crime laws), and Legitimate Interest (to prevent fraud and protect our systems).

4. SHARING AND RETENTION OF DATA

4.1 Who We Share Data With

We do not sell personal data. Limited disclosures are made to:

Payment processors and banking partners.
Valve Corporation, to enable delivery of items to Steam accounts.
Regulators, courts, or law enforcement bodies where legally required.

4.2 Retention Periods

KYC/AML records: retained for a minimum of 5 years after the end of the business relationship, as required by financial crime regulations.
Financial and accounting records: retained for up to 6 years to meet tax reporting requirements.

4.3 Support Records

Support ticket transcripts and correspondence are kept for as long as reasonably necessary to resolve the matter and maintain internal quality records.

5. YOUR RIGHTS AND OUR SECURITY MEASURES

5.1 Your Rights Under UK GDPR

Access & Portability: request a copy of the personal data we hold about you.
Rectification: ask us to correct inaccurate or outdated information.
Erasure: request deletion of your data, subject to our statutory retention obligations (such as the 5-year AML requirement).
Complaints: you may lodge a complaint with the Information Commissioner’s Office (ICO) at any time.

5.2 Security Measures

We apply appropriate technical and organizational safeguards, including SSL/TLS encryption, to protect your data. You are responsible for keeping your account credentials and Steam access details confidential.

5.3 Automated Decision-Making

Certain transactions are screened by automated fraud-detection tools. If your transaction is restricted as a result, you have the right to request a manual review by our compliance team.

6. CONTACT US

For questions, data requests, or concerns about this Privacy Policy, please contact us via the official support channels available on rust-depot.org.