// buycheapkeys legal
Privacy Policy
Effective date: April 2026 · Arga Digital Group LLC
This policy explains what personal data BuyCheapKeys.com collects, why we collect it, who we share it with, and the rights you have over it under the GDPR.
The short version
Jump to a section
01Personal Data We Collect
Mandatory information
- Email address — for order confirmation and digital product delivery
- First and last name — for billing and identification
Optional information
- Phone number — for enhanced customer support
- Billing address — for tax and compliance purposes
Automatically collected
- IP address and device information
- Browser type and version
- Pages visited and time spent on site
- Referral sources and navigation patterns
02How We Use Your Information
Service delivery
- Process and fulfill your orders
- Deliver digital products to your registered email
- Provide customer support and technical assistance
- Manage your account and preferences
Communication
- Send order confirmations and delivery notifications
- Share updates about our services and policies
- Send promotional offers (only if you opt in)
- Respond to inquiries and support requests
Website improvement
- Analyze behavior and preferences using analytics tools
- Improve performance and user experience
- Identify and fix technical issues
- Develop new features based on feedback
Security & fraud prevention
- Verify identity and prevent unauthorized access
- Detect and prevent fraudulent transactions
- Protect the site using reCAPTCHA and similar tools
- Comply with legal and regulatory obligations
Marketing & advertising
- Show personalized ads via Google Ads/AdSense, Meta Ads, and X Ads
- Run retargeting campaigns based on browsing behavior
- Measure and optimize advertising performance
03Data Storage & Security
Cloud infrastructure
All personal data is stored on Amazon Web Services (AWS), using their enterprise-grade cloud security measures.
Encryption & protection
We use Cloudflare for end-to-end encryption, DDoS protection, a Web Application Firewall, and secure data transmission.
Access controls
Only authorized personnel can access personal data, and only when necessary for legitimate business purposes.
04Data Retention
We keep your personal data for 24 months from your last interaction with us. After that, it is automatically deleted unless you ask us to remove it sooner.
You can request immediate deletion of your data and account at any time by contacting support.
05Third-Party Data Sharing
Advertising partners
- Google LLC — Google Ads and AdSense, data shared in hashed format per Google's privacy protocols
- Meta Platforms, Inc. — Facebook and Instagram advertising, hashed data per Meta's processing agreements
- X Corp. — targeted advertising on X
Service providers
- Amazon Web Services — hosting and cloud infrastructure
- Cloudflare — security and performance
- PayPal, Stripe and other processors — they handle payment data under their own privacy policies
Legal requirements
We may disclose your information if required by law or in response to a valid request from a public authority.
06Cookies & Tracking
What we use
- Google Analytics — traffic and behavior insights
- Meta Pixel — ad effectiveness and audience building
- Essential cookies — cart and session functionality
- Preference cookies — remembering your settings
Your choices
Your browser lets you block or delete cookies, get notified before they're placed, or browse in private mode. Disabling some cookies may affect site functionality.
07Your Rights Under GDPR
- Access — request a copy of the personal data we hold, in a structured, machine-readable format
- Rectification — update or correct your information via My Account or support
- Erasure — request full deletion of your data and account
- Restriction — ask us to limit how we process your data
- Portability — request a transfer of your data to another provider
- Objection — object to processing for direct marketing at any time
- Withdraw consent — withdraw consent at any time, without affecting prior processing
How to exercise these rights
Email [email protected] or use our contact page. We respond within 30 days — complex cases may take up to two additional months, and we'll let you know if that happens.
08Children's Privacy
Our services are not directed to anyone under 18. We do not knowingly collect data from children. If you believe we've inadvertently collected data from a minor, contact us and we'll delete it.
09International Data Transfers
As a global service, your data may be processed in countries outside your country of residence. We keep appropriate safeguards in place to protect it wherever it's processed.
10Changes to This Policy
We may update this policy as our practices, technology, or legal obligations change. When we do, we update the effective date above, notify you by email for significant changes, and the update takes effect as soon as it's posted. We recommend checking back periodically.
11Contact Us
Questions, concerns, or complaints about this policy or our data practices? Reach out any time:
- Arga Digital Group LLC
- EIN: 61-2277171
- Registered address: Ashmawi, Marbella, Spain
- Email: [email protected]
- Contact page
12Supervisory Authority
If you feel we haven't addressed your concerns adequately, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.