1. Introduction

This Privacy Policy describes how ULTRA LAND LIMITED (trading as “Keylixa”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when individuals use https://keylixa.com/ (the “Website”), purchase digital products or contact our team.

Keylixa is an online retailer of digital video game activation keys, downloadable-content codes and other electronically delivered gaming products. Personal data is processed to maintain the Website, administer customer accounts, take and verify orders, arrange electronic delivery, provide support, investigate problems and meet legal requirements.

We seek to handle personal data in a lawful, fair and transparent way, in accordance with applicable UK data protection law, including the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations. Where EU data protection law applies, we also take the relevant EU GDPR requirements into account.

This Policy should be read alongside our Terms and Conditions, Cookie Policy and Refund Policy. It does not replace the terms governing a third-party game publisher or activation platform.

2. Data Controller and Contact Details

ULTRA LAND LIMITED is the controller of personal data it determines how and why to process in connection with Keylixa.

Legal name: ULTRA LAND LIMITED
Company number: 16998166
Registered office: 72 Halliwick Road, London, England, N10 1AB
Website: https://keylixa.com/
Email: support@keylixa.com

Privacy questions and requests to exercise data protection rights may be sent to the contact email above. External payment providers or game activation services may act as independent controllers for their own processing.

3. Who This Policy Covers

This Policy applies to Website visitors, people who create or manage customer accounts, customers who attempt or complete purchases, individuals who contact support, and people who opt in to promotional communications.

It covers personal data processed by Keylixa through browsing, shopping-cart and checkout functions, order fulfilment, customer service, refunds, chargebacks, security checks and other interactions. It does not govern information collected independently by game publishers, console networks, storefronts, or external websites after you leave Keylixa.

4. Information We May Collect

Identity and contact information. Names, email addresses, telephone numbers, billing addresses, country or region, and other information you submit at checkout, through an account or in communications.

Account information. Usernames, account identifiers, password hashes or other authentication information, preferences and purchase history, where customer accounts are available.

Order and fulfilment information. Products ordered, digital key or code delivery records, order numbers, transaction dates, prices, currencies, regional or platform selections, order status, refunds, complaints and related correspondence.

Limited payment information. Payment status, transaction references, payment method type, masked card details if provided by a payment processor, authentication outcomes, chargeback and refund information. Complete card credentials should be entered only into an authorised payment interface, not sent to Keylixa by email.

Technical and usage information. IP address, browser and device details, operating system, approximate IP-derived location, referring pages, session identifiers, security events, pages visited and interactions with Website features.

Support and verification information. Messages, attachments, screenshots, error reports and, only when reasonably needed to investigate risks or disputes, additional identity or payment-method verification information.

Marketing and cookie preferences. Newsletter subscriptions, consent records, unsubscribe requests and choices made in a cookie preference interface, where these features are used.

5. How Information Is Obtained

We obtain information directly when you create an account, place an order, enter delivery or billing details, request support, submit a refund request or choose to receive marketing.

Some technical information is collected automatically through Website logs and cookies or comparable technologies. We may also receive limited information from payment processors, fulfilment suppliers, fraud-prevention providers, email delivery providers and other service providers involved in completing or investigating an order.

Where law permits, we may receive relevant data from public sources or competent authorities for lawful compliance, dispute resolution or security purposes.

6. Why We Process Information and Our Lawful Bases

Contract. To take steps you request before a purchase, administer an account, accept and fulfil orders, send digital products or instructions, answer order enquiries and provide remedies relating to a purchase.

Legal obligation. To keep appropriate accounting and tax records, comply with consumer-protection law, respond to lawful requests and meet other applicable legal obligations.

Legitimate interests. To protect checkout and accounts, prevent fraud, investigate payment disputes, maintain the Website, improve performance, maintain business records, and establish or defend legal claims, after considering the rights and interests of affected individuals.

Consent. To send promotional communications or place non-essential cookies where consent is required. Consent can be withdrawn without affecting earlier lawful processing.

We choose the lawful basis according to the specific activity. Not every purpose or technology described in this Policy will necessarily apply to every user.

7. Customer Accounts

If you register an account, we may process the information necessary to set it up, authenticate access, maintain purchase history, support password resets and provide customer service.

You should keep login details confidential and notify us if you suspect account misuse. Account records may be retained after closure where reasonably necessary to resolve outstanding orders, comply with law, investigate fraud or handle claims.

8. Checkout, Purchases and Digital Delivery

When an order is placed, Keylixa processes the contact, purchase and transaction information needed to confirm payment, identify the selected product, arrange fulfilment and deliver the purchased digital activation key or code through the indicated delivery method.

Order information may be shared with a digital product supplier or fulfilment service where reasonably necessary to obtain a code, confirm availability, investigate a delivery problem or provide support.

We may retain order confirmations, fulfilment timestamps, product references, and correspondence to resolve delivery disputes and verify the status of an order. Please ensure that the email address supplied for delivery is correct.

9. Payment Processing

Keylixa uses external payment service providers to authorise and process payments. Depending on the integration, customers may enter payment details in secure fields or a payment environment operated by the provider.

Payment providers may independently process payment card and billing data for authentication, transaction authorisation, fraud detection, legal compliance, refunds and chargebacks. Keylixa receives the limited payment-related information needed to administer orders and resolve disputes.

We do not ask customers to send complete payment card numbers or security codes to customer support. Where the payment integration is configured so that card credentials are handled by the payment provider, Keylixa does not retain full payment card numbers or CVV/CVC codes in its ordinary systems.

Please review the relevant payment provider’s privacy notice when presented during checkout.

10. Security, Fraud Prevention and Verification

Digital keys can be transferred or redeemed quickly after delivery. To protect customers and prevent unauthorised purchases, we may evaluate payment outcomes, transaction patterns, device information, IP addresses, billing information, order histories and relevant fraud-risk indicators.

We may refer unusual transactions for manual review or ask for limited evidence needed to confirm a customer’s identity or authorisation to use a payment method. We will seek to avoid unnecessary or excessive collection.

Orders may be delayed or declined when required by law, by a payment provider or where a genuine and proportionate security concern exists. More information about relevant processing and rights may be requested using our contact details.

11. Cookies and Similar Technologies

Keylixa may use strictly necessary cookies and similar technologies to maintain shopping-cart contents, customer sessions, account access, checkout security and Website functionality.

Optional analytics, functional, personalisation or advertising technologies may be used if implemented. Where applicable law requires consent for these technologies, they must not be activated before valid consent is obtained.

Further information about the technologies actually in use, their providers, durations and available preferences should be set out in our separate Cookie Policy and any Website cookie preference controls.

12. Marketing Communications

Where optional marketing is offered, we may use an email address and relevant preference information to send product updates, offers and other promotions when permitted by applicable electronic marketing rules.

You can object to direct marketing or withdraw consent at any time by using an unsubscribe mechanism where provided or contacting support@keylixa.com.

Unsubscribing from marketing does not stop necessary messages concerning purchases, refunds, account security or customer support.

13. Who May Receive Personal Data

We may share information with payment service providers and financial institutions; digital game key distributors and fulfilment suppliers; hosting, security, email and customer support providers; fraud-prevention and verification services; and professional advisers where necessary for the purposes explained in this Policy.

We may disclose information to authorities, regulators, courts or law enforcement where legally required or permitted. Limited information may also be disclosed in connection with a legitimate business restructuring or sale, subject to applicable safeguards.

Where a recipient processes information on our behalf, we seek to put appropriate contractual and security controls in place. Certain recipients, such as banks or game platforms, may be independent controllers. We do not sell personal data as a standalone commercial product.

14. Game Publishers and External Platforms

Products sold by Keylixa may be activated on third-party services such as a games publisher’s website, a console account or a digital gaming platform. Those organisations may require their own accounts and may collect information directly from users.

Keylixa does not control the independent privacy practices of those organisations. You should check their privacy policies before providing information or redeeming a purchased product.

15. International Transfers

Some of our hosting, technical, payment or supply-chain providers may operate outside the United Kingdom. International access to, storage of or transfer of personal data will be subject to applicable data protection law.

Where required, we will use a valid transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved Standard Contractual Clauses, or another legally recognised safeguard. Where EU GDPR requirements apply, appropriate EU transfer mechanisms will also be considered.

You may contact us for information about safeguards relating to relevant international transfers.

16. How Long We Retain Information

We retain data only for as long as needed for the purposes for which it was collected, subject to legal recordkeeping requirements, payment disputes, security investigations and legal claims.

Order, invoice and accounting records may be kept for the period required by applicable tax and company law. Account information may be retained while the account remains active and for a further justified period. Support and security information is reviewed according to the nature of the issue and relevant limitation periods.

When information is no longer required and no lawful reason for retention remains, we will delete or anonymise it using appropriate procedures. Backups may be subject to a separate protected deletion cycle.

The precise retention schedule should reflect our actual operational records and systems; no universal deletion period applies to every category.

17. Information Security

We aim to use technical and organisational security measures appropriate to the types of information and risks involved. Depending on the system, such measures may include encrypted transmission, appropriate access controls, secure hosting, authentication, logging, backups and supplier oversight.

Access to personal information is restricted to authorised persons and providers with a legitimate need. No electronic service can guarantee absolute security.

Where a personal data breach occurs, we will investigate and take the steps required by applicable law, including notifying regulators or affected individuals where legally necessary.

18. Your Data Protection Rights

Subject to the relevant legal conditions and exceptions, you may request access to your personal data, correction of inaccurate information, erasure, restriction of processing, portability of certain data, and objection to processing based on legitimate interests.

You have an unconditional right to object to processing of your personal data for direct marketing. Where we rely on consent, you may withdraw it at any time.

You may also have rights concerning solely automated decisions that produce legal or similarly significant effects. Requests can be sent to support@keylixa.com. We may require reasonable verification before disclosing or altering personal information.

We will respond within the time required by law, ordinarily one month for requests under the UK GDPR, subject to permitted extensions and exceptions.

19. Children’s Privacy

Keylixa is an online retail service and is not directed at young children. Users must satisfy the age and contractual capacity requirements set out in our Terms and Conditions and any applicable product or platform restrictions.

We do not knowingly seek personal data from children for unrelated marketing purposes. If you believe a child has provided information unlawfully, please contact us so that we can review the situation and take appropriate steps.

20. Complaints and the ICO

If you have a concern about how personal information is handled, please contact us first so that we can investigate and respond.

You may also complain to the UK Information Commissioner’s Office (ICO), whose website is https://ico.org.uk/. Where another supervisory authority has jurisdiction, you may also have the right to contact that authority.

Contacting us does not remove your right to complain to a regulator or seek any other legal remedy.

21. Changes to This Policy

We may update this Privacy Policy to reflect changes to our Website, the categories of products sold, operational processes, technology providers or legal requirements. The current version will be published on the Website with an updated date.

Where changes materially affect personal data processing, we will provide additional information or seek fresh consent where the law requires it. Changes will not retrospectively make unlawful processing lawful.

22. Contact Us

For access requests, corrections, complaints or questions about personal data, contact:

ULTRA LAND LIMITED
Company number: 16998166
Registered office: 72 Halliwick Road, London, England, N10 1AB
Website: https://keylixa.com/
Email: support@keylixa.com