Privacy Policy

We collect the minimum needed to sell you a code: your email, the order, and what you bought. Payment card numbers never touch our servers — they are entered on our payment provider's page.

We do not sell personal data. We do not share it with the brands whose cards we resell.

Account data — if you register, we store your name, email address and a hashed password. We never store the password itself.

Order data — the products, denominations, quantities, prices, coupon used, delivery address you provide and the email the code is sent to.

Technical data — IP address, user agent and session token, used for security, fraud prevention and keeping you signed in.

Communications — if you contact support we keep the message so the next agent has context.

To take payment and deliver your code, to keep an order record so we can honour a refund, to prevent fraud and abuse, and to comply with tax and accounting obligations.

We use your email for order notifications. Marketing email is separate, opt-in only, and unsubscribable with one click.

Card details are entered directly on the hosted page of our payment provider. We receive a payment result and, where needed, a token — never a full card number.

This is why we can offer card payments without holding payment card data ourselves.

We use a session cookie to keep you signed in and essential storage to remember your cart between visits.

Your cart is stored in your own browser. Clearing site data empties it, and we never receive its contents unless you check out.

We share only what is necessary: with our payment processor to take payment, with our email provider to send the code, and with hosting infrastructure to run the site.

We do not sell or rent personal data, and we do not disclose it for marketing purposes.

Order records are retained for as long as needed to provide support, honour refunds and meet legal obligations. Support messages are deleted once resolved and no longer needed.

Data in transit is encrypted with TLS. Secrets at rest are encrypted. Access to order data is limited to staff who need it to help you.

You can request a copy of the personal data we hold, ask us to correct it, or ask us to delete it where we are not legally required to keep it.

Send the request through our contact page with enough detail for us to find your orders. We respond to every request.

If this policy changes materially we will say so on this page. Continued use of the service after a change means you accept the updated policy.