1. Who we are
ITEMIX TECH LTD is the data controller responsible for your personal data.
- Company name: ITEMIX TECH LTD
- Company registration number: 17235915
- Registered address: 128 City Road, London, EC1V 2NX, United Kingdom
- Contact email: support@itemix.co
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. The personal data we collect
We collect and process the following categories of personal data:
Account data. When you create an account, we collect your email address, username, and password (stored in encrypted form).
Order and gameplay data. To fulfil an order, we collect details necessary to deliver digital goods, such as your Roblox nickname, in-game username, Gamepass or game-server details, and the products you have purchased.
Transaction and payment data. When you make a purchase, our payment providers process your payment details. We receive confirmation of payment, the amount, currency, the last digits of a card or wallet identifier, and transaction references. We do not store full card numbers on our own systems.
Communications data. Records of your correspondence with our support team, including support tickets, emails and chat messages.
Technical and usage data. Your IP address, device and browser type, operating system, referral source, the pages you view, and how you interact with the Platform. Some of this is collected through cookies and similar technologies (see our Cookies Policy).
We do not intentionally collect special category data (such as data about health, race, religion or political opinions). Please do not send us such information.
3. How we collect your data
We collect personal data when you:
- create an account or log in;
- place or attempt to place an order;
- enter your Roblox nickname or other game details in a checkout;
- contact our support team;
- browse the Platform (via cookies and analytics tools); and
- subscribe to updates or marketing (where offered).
4. How we use your data and our lawful bases
Under UK GDPR we must have a lawful basis for processing your personal data. We rely on the following:
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Processing and delivering your orders | Performance of a contract |
| Taking payment and preventing fraud | Performance of a contract; legitimate interests; legal obligation |
| Providing customer support | Performance of a contract; legitimate interests |
| Sending service messages (e.g. order status) | Performance of a contract |
| Sending marketing (where you have opted in) | Consent |
| Improving and securing the Platform | Legitimate interests |
| Complying with legal, tax and accounting duties | Legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights and concluded that our processing does not override them. You may object to this processing at any time (see Section 9).
5. Sharing your data
We do not sell your personal data. We share it only with:
- Payment processors who handle transactions securely on our behalf;
- Suppliers and digital goods providers who fulfil parts of an order, where delivery requires sharing limited details (such as a game nickname);
- IT, hosting, analytics and security providers who help us operate the Platform;
- Professional advisers such as accountants and lawyers, where necessary; and
- Regulators, law enforcement or other authorities where we are legally required to disclose information, or to prevent fraud or protect our rights.
We require all third parties to respect the security of your personal data and to process it only on our instructions and in line with applicable law.
6. International transfers
Some of our service providers may be located outside the United Kingdom. Where we transfer personal data outside the UK, we ensure an appropriate safeguard is in place, such as an adequacy decision recognised by the UK or the International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses).
7. Data retention
We keep your personal data only for as long as necessary for the purposes set out in this policy:
- Account data is kept while your account remains active and for a reasonable period afterwards.
- Order and transaction records are kept for at least six years to comply with UK tax and accounting requirements.
- Support communications are kept for as long as needed to resolve your query and for our records.
When data is no longer needed, we securely delete or anonymise it.
8. Children and age requirements
The Platform is intended for adults. Many of the games and items we deal with (such as Roblox products) are popular with children, but our service is not directed at children.
You must be at least 18 years old to create an account or make a purchase. If you are under 18, you may only use the Platform with the involvement and consent of a parent or guardian who agrees to our Terms and Conditions on your behalf.
If we become aware that we have collected personal data from a child without appropriate consent, we will delete it. If you believe a child has provided us with personal data, please contact us at support@itemix.co.
9. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data in certain circumstances;
- restrict or object to our processing in certain circumstances;
- request portability of your data;
- withdraw consent at any time where we rely on consent; and
- not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, contact us at support@itemix.co. We will respond within one month. We do not usually charge a fee, and we may need to verify your identity before acting on a request.
10. Cookies
We use cookies and similar technologies. Please see our separate Cookies Policy for full details and information on how to manage your preferences.
11. Security
We use appropriate technical and organisational measures to protect your personal data, including encryption of passwords, secure hosting, access controls and the use of trusted payment processors. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we work to protect your data and respond promptly to any suspected breach.
12. Marketing
Where you have opted in, we may send you marketing about our products and offers. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not stop us sending you essential service messages (such as order confirmations).
13. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Where changes are significant, we will take reasonable steps to notify you.
14. How to complain
If you have a concern about how we handle your personal data, please contact us first at support@itemix.co so we can try to resolve it.
You also have the right to complain to the UK’s data protection regulator:
- Information Commissioner’s Office (ICO) — Website: ico.org.uk — Helpline: 0303 123 1113