Privacy Policy
Last updated: October 28, 2026
1. Controller
Test Company Ltd, Test Street 1, Test City, Test Country, registration number 00000000 (“we”) is the controller of your personal data for testdomen.site. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR. Contact for privacy questions: info@example.com.
2. What we collect
- Account data: name, email address, password (stored only as a secure hash), country.
- Order data: products, amounts, currency, phone numbers entered for top-ups, delivered codes, invoices, and the consents you gave at checkout.
- Payment data: payment method, status and transaction reference. Card details are entered on the payment provider’s secure page.
- Technical data: IP address and the country derived from it, browser type, security and fraud-prevention logs.
- Messages: what you send us by email, the contact form or the live chat.
3. Card data and payment security
We do not collect, see or store raw cardholder data (full card number, CVC/CVV or PIN). All card payments are handled by our payment service provider, which is certified as compliant with the Payment Card Industry Data Security Standard (PCI DSS). Card payments are authenticated with 3-D Secure (Visa Secure and Mastercard Identity Check), which may ask you to confirm the payment in your banking app. Our website uses encrypted HTTPS connections.
4. Why we use your data and the legal basis
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Creating your account, processing and delivering orders, invoices, customer support | Performance of a contract, Art. 6(1)(b) |
| Fraud prevention, payment security, country restrictions | Legitimate interests, Art. 6(1)(f) |
| Accounting, tax and anti-money-laundering obligations | Legal obligation, Art. 6(1)(c) |
| Identity verification where required | Legal obligation and legitimate interests |
| Optional analytics or marketing cookies (only if we introduce them) | Your consent, Art. 6(1)(a), which you can withdraw at any time |
5. Who we share data with
We disclose personal data only where needed: to payment service providers and card schemes (to process and secure payments), voucher suppliers and mobile operators (only what is needed to deliver your order, for example the phone number for a top-up), identity verification providers where a check is required, our hosting, email and IT providers, our accountants and auditors, and public authorities or courts where the law requires it, for example in fraud or money-laundering investigations. All processors act on our instructions under data processing agreements. We do not sell your data.
6. Transfers outside the EEA
We mainly process data in the EEA. Where a provider processes data outside the EEA or the UK, we only do so if the country has an adequacy decision of the European Commission (or UK equivalent) or the transfer is covered by Standard Contractual Clauses with additional safeguards where needed. You can ask us for a copy of these safeguards.
7. How long we keep it
Account data while your account is open and up to 12 months after it is closed. Order, invoice and payment records for the period required by accounting and anti-money-laundering law (usually 5 to 10 years). Security logs for up to 12 months. Chat and contact messages for up to 24 months.
8. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing based on legitimate interests, to data portability, and to withdraw consent at any time. Write to info@example.com; we answer within one month. You may also complain to the data protection authority where you live or to the authority in Test Country.
9. Cookies
We use cookies in three categories: strictly necessary (always on: sign-in, cart, checkout, security, your country, currency and cookie choice), analytics and marketing (only with your consent; we currently use none). The full table of cookies, their purposes and expiry is in our Cookie Policy. You can change your choice at any time with the Cookie settings link at the bottom of every page.
10. Changes
We may update this policy and will show the date of the latest version at the top of this page.