LOUBERA LTD (company number 17423917, "we"/"us") explains in this Policy how personal data is handled across lootport.org. It's written to meet the requirements of the UK GDPR and the Data Protection Act 2018, and should be read together with our Terms of Use.
1. WHAT WE COLLECT
Depending on how you use the Site, this can include:
a) Contact details — your name, email address, billing address.
b) Steam-linked data — your Steam ID, username, trade URL, and trading history.
c) Order and sale records — items bought or sold, prices, and delivery outcomes.
d) Payment confirmations — never the underlying card details, which our payment processor holds instead.
e) Verification records — ID documents, date of birth, or proof of address, but only when a compliance check is actually triggered.
f) Technical data — IP address, browser type, referring page, and cookie identifiers, gathered automatically.
g) Anything you send our support team directly.
2. WHERE IT COMES FROM
a) Directly from you — registering, checking out, listing an item, or messaging support.
b) Automatically — cookies and analytics running as you browse.
c) Through Steam — when you sign in with your Steam credentials.
d) Via our partners — payment processors, fraud-screening tools, and sanctions-list checkers.
3. OUR LEGAL BASIS
UK GDPR requires a lawful basis for each use of your data:
a) Performance of a contract — fulfilling orders, verifying your Steam login, handling support.
b) Legitimate interests — fraud prevention, platform improvement, analytics.
c) Legal obligation — AML/CTF screening, tax and accounting records.
d) Consent — marketing messages you've opted into.
4. PAYMENT PROCESSING & 3D SECURE
Every payment on lootport.org is handled by our authorised, PCI DSS-certified payment provider. We never receive or store raw cardholder data. Card payments may require 3D Secure (3DS) authentication depending on your card issuer or network, confirming your identity with your bank before a payment is approved. If a transaction is flagged by automated risk screening, you can request a manual review at info@lootport.org.
5. WHO WE SHARE IT WITH
a) Payment processors and banks — to clear payments and catch fraud.
b) Valve/Steam — as a mechanical step in delivering your item.
c) Hosting, analytics, and support-tool vendors, bound by contract not to use your data independently.
d) Regulators or law enforcement, where we're legally compelled to disclose something.
e) We don't sell personal data, and we're never in possession of your full card details.
6. SENDING DATA ABROAD
Most processing stays inside the UK. Where an international partner is involved, transfers rely on recognised safeguards — UK adequacy decisions, International Data Transfer Agreements, or Standard Contractual Clauses. Email info@lootport.org for specifics on a particular transfer.
7. HOW LONG WE KEEP IT
a) Compliance records (KYC/AML): a minimum of 5 years, sometimes longer if regulation requires it.
b) Financial and order records: up to 6 years, to satisfy tax law.
c) Support correspondence: kept only as long as it's useful, typically up to 3 years.
d) Analytics and cookie data: for whatever period the specific tool defaults to, or until you clear it yourself.
8. KEEPING IT SAFE
We rely on encryption, access controls, and routine security review to protect what we hold. No online system is entirely risk-free, so keeping your own Steam and account credentials secure matters too.
9. YOUR RIGHTS
Under UK GDPR, you're entitled to:
a) See a copy of what we hold on you.
b) Have inaccurate data corrected.
c) Ask for data to be deleted where we no longer need it.
d) Restrict certain processing.
e) Receive your data in a portable format.
f) Object to processing based on our legitimate interests.
g) Withdraw consent for anything consent-based, without undoing what already happened lawfully.
h) Lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.
Send any of the above to info@lootport.org — we aim to respond within a month.
10. AGE & AUTOMATED DECISIONS
a) The Site is built for adults — 18 and over. We don't knowingly collect data from anyone younger, and we'll delete it promptly if we discover otherwise.
b) Our payment partners run automated risk checks that can approve or decline a transaction without human input. You're entitled to ask for that decision to be reviewed by a person.
11. COOKIES & CHANGES TO THIS POLICY
Our cookie practices are set out separately in our Cookie Policy. We revisit this Privacy Policy periodically, and any meaningful update carries a new effective date. Staying on the Site after a change means you've accepted it.
12. GETTING IN TOUCH
LOUBERA LTD, 321-323 High Road, Office 10324, Chadwell Heath, Romford, England, RM6 6AX • info@lootport.org