Privacy Policy

<TODO: legal entity name>, operating as next ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or make purchases through our platform.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy and the EU General Data Protection Regulation (GDPR). If you do not agree with our policies and practices, please do not use our Service.

Information You Provide

We collect information you voluntarily provide when using our Service:

• Account information: name, email address, password
• Profile information: username, avatar, preferences
• Payment information: billing address, payment method details (processed securely by our payment providers)
• Communication data: messages sent to our support team
• Transaction history: purchases, orders, and account balance activity

Information Collected Automatically

When you access our Service, we automatically collect certain information:

• Device information: browser type, operating system, device identifiers
• Log data: IP address, access times, pages viewed, referring URL
• Usage data: features used, actions taken, time spent on pages
• Location data: country and region based on IP address
• Cookies and similar technologies: session data, preferences

We use the information we collect for the following purposes:

• To provide and maintain our Service
• To process transactions and deliver purchased game keys
• To manage your account and provide customer support
• To send transactional communications (order confirmations, receipts)
• To send promotional communications (with your consent)
• To detect and prevent fraud, abuse, and security incidents
• To analyze usage patterns and improve our Service
• To comply with legal obligations

We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, including payment processing, email delivery, analytics, and customer support. These providers are contractually obligated to protect your information.

Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We use cookies and similar tracking technologies to collect and store information about your interactions with our Service.

Types of Cookies We Use

• Essential cookies: Required for the Service to function (authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how visitors use our Service
• Marketing cookies: Used to deliver relevant advertisements (with consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

• Encryption of data in transit using TLS/SSL
• Secure storage of sensitive information
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

• Account data: Retained while your account is active and for a reasonable period after deletion
• Transaction records: Retained for 7 years for legal and tax compliance
• Communication logs: Retained for 2 years for customer support purposes
• Analytics data: Aggregated and anonymized data may be retained indefinitely

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your information
• Withdrawal of consent: Withdraw consent for optional processing

To exercise these rights, please contact us at support@next.example. We will respond to your request within 30 days, in accordance with GDPR requirements.

Marketing Communications

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or updating your preferences in your account settings.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer your information internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable laws.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

Our Service may contain links to third-party websites and services, including gaming platforms (Steam, PlayStation Network, Xbox Live, etc.). We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party services you access through our platform.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

<TODO: legal entity name> (Data Controller)

• Registration Number: <TODO: legal entity registration>
• Address: <TODO: legal entity address>
• Email: support@next.example
• Support Portal: Available through your account dashboard

We aim to respond to all privacy-related inquiries within 30 days, in accordance with GDPR requirements.