This Privacy Statement explains what personal data LOOTDROP collects, why, and the choices you have. It applies to the Platform and to the accounts you hold with us.
Who is responsible for your data?
The operator of the Platform, [OPERATOR] ([ADDRESS], registration no. [REG_NO]), decides how your personal data is used and is the contact point for everything in this Statement. You can reach our privacy team at [PRIVACY_EMAIL].
What information do we collect?
Information you give us
Registration and contact details (such as your email address), the shipping details you enter for deliveries, payment references shown by our payment providers, and the messages you send to support.
Information collected automatically
Device and browser characteristics, log data, pages viewed, and security signals such as IP address and a fraud-prevention fingerprint. We use these to keep accounts safe and to understand how the Platform is used.
Information from other sources
Payment providers (transaction status), identity verification providers (verification outcomes) and anti-fraud partners (risk signals) — each only where it is needed to run the Platform.
How do we use your information?
We use personal data to operate your account, process purchases and deliveries, prevent fraud and abuse, comply with legal duties (including AML obligations), provide support, and improve the Platform. We do not sell your personal data.
Legal bases for processing
Where the GDPR applies we rely on: performance of our contract with you (running your account and deliveries); legitimate interests (security, fraud prevention, product improvement); compliance with legal obligations (AML and tax); and consent where we ask for it. You can withdraw consent at any time.
Will your information be shared?
Personal data is shared only with the parties that help us run the Platform: payment providers, shipping partners, identity verification and anti-fraud services, hosting and infrastructure providers, and professional advisers. Each receives only what it needs. We may also disclose data where the law requires it.
Cookies and tracking technologies
We use the cookies described in our Cookie Policy: strictly necessary cookies to run the Platform and, subject to your consent, analytics and preference cookies. You can change your choices at any time.
Social logins
If you sign in through a third-party provider, that provider shares the profile details you approve, and its own privacy terms apply to its processing. You can unlink a provider from your account at any time.
International transfers
Our service providers may process data outside your country. Where personal data leaves the EEA or the UK we rely on recognized transfer mechanisms, such as adequacy decisions or standard contractual clauses, together with additional safeguards where needed.
How long do we keep your information?
We keep personal data only as long as we need it for the purposes in this Statement: account data for the life of your account, transaction and AML records for the period required by law, and support correspondence for a reasonable period afterwards.
Your rights
You can ask for a copy of your data, have it corrected or erased, restrict or object to its use, and ask for it in a portable format — subject to legal exceptions such as AML record-keeping. Use [PRIVACY_EMAIL] or the tools in your account; we answer within one month.
Children's data
The Platform is not directed at anyone under 18 and we do not knowingly collect their personal data. If you believe a minor has given us personal data, contact us and we will delete it.
Changes and contact
We post any changes to this Statement on this page with a new "last updated" date. Questions go to [PRIVACY_EMAIL].