For purposes of applicable data protection law, the entity responsible for determining how and why personal information collected through this website is processed is:

QUARNESK, LLC
Address: 1041 Tremont St, Ste 1039, Boston, MA 02120, US
Email: [email protected]
Phone: +1(617)442-4631
Website: quarnesk.com

You may contact us using the information above if you have questions about this Privacy Policy or about how your personal information is handled.

The personal information we collect depends on how you interact with our website and which products or services you use. Information may include:

• Name and account username;
• Email address and telephone number;
• Billing address and country or region;
• Account login and authentication information;
• Order numbers and transaction history;
• Products purchased and purchase value;
• Payment status and payment method information;
• Game, platform, server or region information required for fulfillment;
• Player ID, account ID, character ID or similar identifier where required for a top-up;
• Digital product delivery and redemption records;
• IP address, browser, operating system and device information;
• Website activity and security logs;
• Customer service messages and support history;
• Fraud-prevention and transaction-risk information;
• Cookie, analytics and preference information;
• Any information you voluntarily provide when contacting us.

Because our store sells virtual and digital products, certain purchases may require information that is different from information normally collected by a physical-goods retailer.

For example, a game currency or top-up order may require a player ID, game account identifier, server, platform or region so that the product can be applied to the correct destination. An activation key, gift card or digital code purchase may create records showing when a code was issued, delivered or otherwise made available to the customer.

We use this information only where reasonably necessary to process, verify, fulfill, support or investigate the applicable digital order. Customers should provide only the information specifically requested for fulfillment and should not send passwords or other unnecessary account credentials.

We may collect personal information directly from you when you create an account, place an order, complete checkout, submit a form, contact customer support or otherwise interact with our website.

Certain technical information is collected automatically when you use our website, including IP address, browser information, device information, cookies and security logs.

We may also receive limited information from service providers involved in transactions, such as payment processors, fraud-prevention providers, digital fulfillment providers and other service providers used to operate our online store.

Personal information may be used for the following purposes:

• Creating and administering customer accounts;
• Processing and confirming orders;
• Providing digital products purchased through our store;
• Sending order confirmations and service communications;
• Delivering activation keys, gift cards or other digital content;
• Processing game currency and top-up requests;
• Providing customer support;
• Managing cancellations and refunds where applicable;
• Preventing fraud, abuse and unauthorized transactions;
• Protecting our website, customers and systems;
• Maintaining transaction and accounting records;
• Complying with legal, tax and regulatory requirements;
• Improving website functionality and user experience;
• Measuring website performance;
• Managing communications and marketing preferences;
• Establishing, exercising or defending legal claims.

Where the GDPR applies, we rely on one or more lawful bases depending on the purpose for which personal information is processed.

Performance of a contract: We process information necessary to accept an order, receive payment confirmation, provide purchased digital products, administer customer accounts and provide order-related support.

Legal obligations: Certain transaction, accounting, tax, compliance or regulatory information may need to be processed or retained to satisfy applicable laws.

Legitimate interests: We may process information where reasonably necessary for fraud prevention, network security, customer service, business administration, website improvement and the establishment or defense of legal claims, provided those interests are not overridden by your applicable rights and interests.

Consent: Where required, we rely on your consent for certain cookies, marketing communications or other optional processing. Where processing is based on consent, you may withdraw that consent in accordance with applicable law.

Payments may be processed through third-party payment service providers. Depending on the payment method selected, payment providers may collect payment card information, billing details, authentication information and transaction-related data directly from you.

When payment information is entered directly into a payment provider's secure payment environment, we generally receive transaction information such as payment status, payment method, amount, currency and a transaction reference rather than full payment card credentials.

Payment providers process personal information under their own privacy notices and security procedures. Customers should review the applicable provider's privacy information where appropriate.

Digital goods can be delivered or redeemed rapidly and may therefore be subject to fraud, payment abuse or unauthorized purchasing attempts. We may process transaction, account, IP address, device, payment-status and order-pattern information to help identify suspicious activity and protect customers and our business.

An order may be temporarily reviewed where unusual transaction activity is detected. In appropriate circumstances, we may request additional information reasonably necessary to confirm an order or protect against unauthorized transactions.

Any verification information requested should be limited to what is necessary for the relevant purpose and handled in accordance with applicable data protection requirements.

Our website may use cookies and similar technologies to maintain essential website functions, remember customer preferences, maintain shopping sessions, protect accounts, analyze website performance and, where permitted, support marketing activities.

Some cookies are necessary for the website and checkout process to operate correctly. Other cookies, including certain analytics or advertising technologies, may be subject to consent requirements depending on applicable law.

Where a cookie preference tool is provided, you may use it to manage applicable optional cookie categories. Additional information may also be provided in our Cookie Policy.

We do not disclose personal information to third parties simply because it may be commercially useful to them. We may, however, share information with service providers where necessary to operate our store or fulfill legitimate business and legal purposes.

These recipients may include:

• Website hosting and infrastructure providers;
• Content delivery and cybersecurity providers;
• Payment processors and payment gateways;
• Fraud-prevention and transaction-security providers;
• Digital product and fulfillment providers;
• Email and transactional communication services;
• Customer support systems;
• Website analytics providers;
• Accounting and professional advisers;
• Government, regulatory or law-enforcement authorities where legally required.

We seek to limit information shared with service providers to what is reasonably necessary for the relevant service.

Some digital products may require interaction with a digital fulfillment provider or other service provider to complete the requested transaction.

Where necessary, we may provide limited order information such as the product purchased, platform, server, region, player or account identifier and order reference to the relevant provider for fulfillment, verification or troubleshooting.

We do not intend to provide fulfillment partners with unrelated personal information that is not reasonably necessary for the applicable order.

Our website, service providers or technical infrastructure may operate in more than one country. As a result, personal information may in certain circumstances be processed outside the country in which you reside.

Where GDPR requirements apply to a transfer of personal data outside the European Economic Area, we use an applicable lawful transfer mechanism where required. Depending on the circumstances, this may include a European Commission adequacy decision, approved Standard Contractual Clauses or another legally recognized safeguard or permitted transfer mechanism.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

Retention periods may differ depending on the type of information. For example, order and transaction records may be retained for accounting, tax, fraud-prevention, dispute and legal compliance purposes. Account information may be retained while the account remains active and for an appropriate period afterward where necessary for legitimate or legal purposes.

Customer service records may be retained for an appropriate period to maintain support history and resolve disputes. Marketing information is retained until consent is withdrawn, an objection is made or the information is otherwise no longer required, subject to any limited suppression record necessary to respect the request.

When information is no longer required, we take reasonable steps to delete, anonymize or otherwise securely dispose of it.

We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss or misuse.

Measures may include access controls, account authentication, secure communications, limited administrative access, monitoring, security procedures and the use of service providers that maintain appropriate safeguards.

No website, network or electronic storage method can be guaranteed to be completely secure. Customers should also protect their own account credentials and should not share passwords or authentication information with others.

Where the GDPR applies to the processing of your personal data, and subject to the conditions and exceptions provided by law, you may have rights including:

• Right of access – to request confirmation of whether we process your personal data and obtain access to applicable data.
• Right to rectification – to request correction of inaccurate or incomplete personal data.
• Right to erasure – to request deletion of personal data in circumstances provided by law.
• Right to restriction – to request restriction of processing in applicable circumstances.
• Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, transmit it to another controller.
• Right to object – to object to certain processing, including certain processing based on legitimate interests and direct marketing.
• Right to withdraw consent – where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Rights relating to automated decision-making – where applicable, rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

You may submit a privacy request by contacting us at [email protected]. Please describe your request clearly enough for us to understand which right you wish to exercise and which information the request concerns.

Before acting on certain requests, we may need to take reasonable steps to verify that the request relates to the correct individual. We will only request information reasonably necessary for verification.

Some rights are subject to legal conditions and exceptions. For example, certain information may need to be retained where required for tax records, transaction records, fraud prevention, dispute resolution or the establishment or defense of legal claims.

If you are located in the European Economic Area and believe that the processing of your personal data violates applicable data protection law, you may have the right to lodge a complaint with the competent data protection supervisory authority.

We encourage you to contact us first if you have concerns about our handling of your personal information so that we have an opportunity to review and address the matter.

Our website and digital commerce services are not designed for persons who are unable to enter into online transactions or provide valid data protection consent under applicable law without the involvement of a parent or legal guardian.

Where consent is used as the legal basis for processing information relating to a child, applicable age and parental-consent requirements will be determined according to the law applicable to that individual.

If we become aware that personal information relating to a child has been collected in circumstances where legally required authorization was not obtained, we may take appropriate steps to delete or otherwise address that information.

We may update this Privacy Policy from time to time to reflect changes to our website, digital products, business practices, service providers or applicable legal requirements.

When this Privacy Policy is updated, the revised version will be posted on this page and the "Last Updated" date will be changed accordingly. Where required by applicable law, additional notice or consent may be provided before material changes take effect.