Last updated: 22 October 2026
1. Controller
EXAMPLE COMPANY LTD (Company No. 00000000), 1 Example Street, London, United Kingdom, EC1A 1AA, is the controller of your personal data. Contact: support@xpbound.com.
2. What we collect
- Account data: name, email address, password (stored hashed), sign-in activity.
- Order data: products, prices, currency, order and delivery status, keys issued to you, invoices.
- Payment data: processed by our payment provider. We receive confirmation of payment and limited card details (such as the last four digits), never the full card number.
- Support data: messages you send through the contact form or email.
- Technical data: IP address, browser, device and cookie identifiers.
3. Why we use it
- to create and run your account and deliver your orders (contract);
- to process payments and prevent fraud (contract and legitimate interest);
- to answer support requests (legitimate interest);
- to keep accounting and tax records (legal obligation);
- to measure and improve the site, only if you agree to optional cookies (consent).
4. Who we share it with
Our payment provider, the key distributor (only what is needed to fulfil the order), hosting and email providers, and authorities when the law requires it. Some providers may process data outside the UK/EEA under appropriate safeguards.
5. Cookies
Necessary cookies keep you signed in, remember your currency and your cookie choice. Functional, performance and marketing cookies are used only with your consent, which you can change at any time from the cookie banner.
6. How long we keep it
Account data for as long as your account is open; order and invoice records for the period required by tax law; support messages for up to 2 years.
7. Your rights
You can ask for access to, correction, deletion or portability of your data, object to or restrict processing, and withdraw consent at any time. Write to support@xpbound.com. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.