Privacy Policy

This policy explains what personal data AVRYKO LTD collects when you use avryko.com, why, and what you can do about it. AVRYKO LTD is the controller of that data. If anything here is unclear, write to [email protected] — a person reads it.

What we collect

• Account details: your name, e-mail address and a scrambled (hashed) version of your password. We never see or store the password itself.
• Orders and balance: what you bought, when, the price, the codes delivered to you, and every top-up and deduction on your balance.
• Billing details for card top-ups: cardholder name, phone number and billing address. Your bank uses these to check that the payment is really yours. Card numbers are entered on our payment provider’s secure page and never reach our servers.
• Messages: what you send us through the contact form or by e-mail.
• Technical data: IP address, browser type and the time of each request, kept in server and security logs.

Why we use it, and on what legal basis

• To run your account, deliver codes and keep your balance correct — because it is necessary to perform our contract with you (UK GDPR / EU GDPR Article 6(1)(b)).
• To take card payments and prevent fraud — necessary for the contract, and in our legitimate interest in not losing money to stolen cards (Article 6(1)(f)).
• To keep invoices and accounting records — because the law requires it (Article 6(1)(c)).
• To answer your messages and handle complaints — necessary for the contract or in our legitimate interest in helping you.
• To keep the site secure (for example blocking automated sign-ups) — our legitimate interest.

We do not send marketing e-mail, we do not sell personal data and we do not use it for profiling or automated decisions with legal effect.

Who else sees it

Only service providers who need it to do their job for us, each bound by a contract to protect it: our hosting and content-delivery providers, our card payment provider and the banks involved in a payment, the service that sends our e-mails, and our accountants. Product suppliers receive order references, not your personal details. We share data with authorities only where the law obliges us to.

International transfers

Some providers process data outside the UK or the European Economic Area. Where that happens we rely on an adequacy decision or on standard contractual clauses, so your data keeps an equivalent level of protection.

How long we keep it

• Account data: while your account is open, and deleted within 30 days after you ask us to close it.
• Orders, top-ups and invoices: as long as tax and accounting law requires (usually six years), then deleted.
• Support messages: up to two years after the conversation ends.
• Server and security logs: up to 90 days.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Write to [email protected] from the address on your account; we answer within one month. If you are unhappy with our answer you can complain to a data protection authority — in the UK the Information Commissioner’s Office (ico.org.uk), in the EU the authority of the country where you live.

Cookies

We only use the cookies the shop needs to work. Details are in the Cookie Policy.

Changes

If we change how we use your data, we update this page and, for anything significant, tell you by e-mail before it takes effect.