Privacy Policy

Last updated: 29 May 2025

1. Introduction

Welcome to GloveGuild.

This Privacy Policy explains how BELGRAVIA STUDIO LIMITED ("Company", "GloveGuild", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you access or use the GloveGuild platform, website, and related services available through gloveguild.com (the "Website" or the "Services").

We are committed to protecting your privacy and processing personal data in a lawful, fair, and transparent manner. This Privacy Policy has been prepared in accordance with applicable data protection laws, including the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy legislation.

The Website operates as an online platform that enables users to buy, sell, exchange, and manage virtual in-game items, including digital items associated with Steam accounts. In order to provide these Services, we may collect and process certain information relating to users, transactions, devices, and interactions with the Website.

By accessing or using the Website and Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision of this Privacy Policy, you should discontinue use of the Website and Services.

2. Scope of This Privacy Policy

This Privacy Policy applies to all personal data processed by BELGRAVIA STUDIO LIMITED in connection with the operation of the Website and the provision of the Services. It governs the collection, use, storage, disclosure, transfer, and protection of personal data obtained through your use of the Website, your interaction with the Services, communications with our support team, participation in transactions conducted through the platform, and any other interactions with us related to the Services.

This Privacy Policy applies solely to information processed by the Company in connection with the Website and Services. It does not apply to third-party websites, services, applications, payment providers, Steam, Valve Corporation, social media platforms, or other external services that may be linked to or integrated with the Website. Such third parties operate under their own privacy policies and terms, and we encourage users to review those documents before providing personal information.

3. Data Controller Information

For the purposes of applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018, the controller responsible for the processing of personal data collected through the Website and Services is BELGRAVIA STUDIO LIMITED, with a registered address at 66 Lavender Hill, London, England, SW11 5RQ.

If you have any questions regarding this Privacy Policy, the processing of your personal data, the exercise of your privacy rights, or any privacy-related matter, you may contact the Company at support@gloveguild.com.

4. Personal Data We Collect

In connection with the operation of the Website and the provision of the Services, we may collect and process various categories of personal data depending on how you interact with the platform.

Account Information may include your Steam account identifier, SteamID, Steam Trade URL, username, profile information made available through Steam authentication, account preferences, and other information associated with your use of the Services.

Transaction Information may include records of purchases, sales, exchanges, transfers, deposits, withdrawals, virtual items involved in transactions, transaction values, timestamps, account balances, order history, and other information necessary to facilitate and document activity on the platform.

Payment Information may include payment-related data required to process transactions. Payment card information is processed by authorised third-party payment service providers. We do not intentionally store complete payment card numbers, CVV codes, or other sensitive payment credentials.

Communication Information may include correspondence with customer support, dispute submissions, reports, complaints, feedback, enquiries, survey responses, and other communications exchanged with the Company.

Technical Information may include IP address, device identifiers, browser type, operating system, language settings, access times, referral URLs, session information, security logs, and other technical data generated through your interaction with the Website.

Usage Information may include information regarding your activity on the Website, pages visited, features used, transaction behaviour, interactions with platform functionality, and other information related to the use of the Services.

Verification and Compliance Information may include information provided for identity verification, fraud prevention, account security, dispute resolution, compliance reviews, sanctions screening, or other risk-management purposes where such verification is required.

We do not intentionally collect special categories of personal data, including information relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data processed for identification purposes, health information, or information concerning a person's sex life or sexual orientation, unless required by law or voluntarily provided by the user in connection with a specific request.

5. How We Collect Personal Data

We collect personal data from a variety of sources depending on how users interact with the Website and Services.

We collect information directly from users when they access the Website, register an account, authenticate through Steam, complete transactions, communicate with customer support, submit requests, participate in platform activities, or otherwise provide information to us.

We receive certain information from Steam and related services when users choose to authenticate or connect their Steam accounts to the Website. The information received is limited to the data made available through Steam and authorised by the user during the authentication process.

We automatically collect certain technical and usage information when users access the Website through server logs, cookies, analytics technologies, security tools, and similar technologies that support the operation, security, and improvement of the Services.

We may receive information from payment service providers, fraud prevention providers, identity verification providers, analytics providers, hosting providers, customer support providers, and other service providers that support the operation of the Website.

In certain circumstances, we may obtain information from publicly available sources, regulatory databases, sanctions lists, fraud prevention databases, or other legitimate sources where necessary to protect the Website, comply with legal obligations, prevent fraud, investigate misuse of the Services, or enforce our contractual rights.

6. Purposes of Processing Personal Data

We process personal data only where it is necessary for the operation of the Website, the provision of the Services, compliance with legal obligations, protection of legitimate business interests, or other lawful purposes.

Personal data may be processed to create and manage user accounts, authenticate users, connect Steam accounts, maintain account security, and provide access to the functionality of the Website.

We process personal data to facilitate the purchase, sale, exchange, transfer, deposit, withdrawal, and management of virtual items and other transactions conducted through the platform, to process payments, verify transactions, maintain transaction records, prevent payment-related abuse, investigate suspicious activity, and support financial reconciliation processes.

Personal data may be processed to detect, prevent, investigate, and mitigate fraud, unauthorised access, account misuse, market manipulation, security incidents, violations of our Terms of Service, and other activities that may threaten the integrity of the Website or its users.

We may use personal data to improve the functionality, performance, reliability, and security of the Website, develop new features, conduct internal analytics, monitor platform activity, and better understand how users interact with the Services.

We may process personal data to comply with legal obligations, regulatory requirements, court orders, lawful requests from public authorities, sanctions requirements, fraud prevention obligations, and other applicable legal or regulatory obligations.

We do not sell personal data to third parties and do not use personal data for unrelated purposes that are incompatible with the purposes described in this Privacy Policy.

7. Legal Bases for Processing

We process personal data only where we have a lawful basis to do so under applicable data protection legislation.

We process personal data where it is necessary for the performance of a contract with you or in order to take steps at your request before entering into a contract. This includes creating and managing your account, providing access to the Website, enabling transactions, supporting Steam account authentication, processing orders, maintaining transaction history, and providing customer support.

We process personal data where it is necessary to comply with legal obligations applicable to the Company, which may include obligations relating to accounting, tax records, fraud prevention, sanctions compliance, consumer protection, dispute handling, regulatory requests, court orders, and lawful requests from public authorities.

We process personal data where it is necessary for our legitimate interests or the legitimate interests of third parties, provided that such interests are not overridden by your rights and freedoms. These interests may include protecting the Website from fraud and abuse, maintaining security, preventing unauthorised access, resolving disputes, enforcing our Terms of Service, improving the Services, and protecting the rights and property of the Company, users, and business partners.

Where required by law, we may process personal data on the basis of your consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

8. Steam Account and Trading Data

The Website integrates with Steam and related services to facilitate the operation of the marketplace and enable users to participate in transactions involving virtual items.

When a user chooses to authenticate through Steam, we may receive and process information made available through Steam, including SteamID, Steam profile name, profile URL, avatar, Steam Trade URL, account status information, and other data necessary for the operation of the Services.

The Company does not control the information made available by Steam and is not responsible for the privacy practices of Steam or Valve Corporation. Users should review the applicable privacy documentation provided by Steam and Valve Corporation before using Steam-related functionality.

We process Steam-related information to authenticate users, connect Steam accounts to the Website, facilitate item transfers, verify transaction eligibility, maintain transaction records, prevent fraud, detect suspicious activity, resolve disputes, and ensure the secure operation of the marketplace.

Users remain responsible for maintaining the security of their Steam accounts, login credentials, authentication methods, and Steam Trade URLs. The Company is not responsible for losses resulting from unauthorised access to a user's Steam account, compromised credentials, actions performed through the user's Steam account, or failures within Steam-controlled systems.

9. Payment Information

The Company may process certain payment-related information in connection with transactions conducted through the Website. Payments made through the Website are processed by authorised third-party payment service providers. The Company does not operate as a bank, payment institution, electronic money institution, money remittance provider, custodian, or financial institution.

The Company does not intentionally store complete payment card numbers, card verification values (CVV), PIN codes, or other sensitive payment authentication data. Payment card information is processed directly by the relevant payment service providers in accordance with their own privacy policies, security standards, and regulatory obligations.

The Company may receive limited transaction-related information from payment service providers, including transaction identifiers, payment status updates, payment amounts, currencies, timestamps, chargeback notifications, refund information, fraud alerts, and other information necessary to administer the Services and maintain transaction records.

10. Sharing of Personal Data

The Company may share personal data with third parties only where necessary for the operation of the Website, the provision of the Services, compliance with legal obligations, protection of legitimate interests, or other lawful purposes.

Personal data may be shared with service providers that support the operation of the Website, including hosting providers, cloud infrastructure providers, payment service providers, fraud prevention providers, analytics providers, customer support providers, security service providers, identity verification providers, and other technology partners engaged by the Company.

Personal data may be shared with Steam, Valve Corporation, or other third-party platforms where necessary to facilitate authentication, item transfers, account verification, transaction execution, dispute resolution, fraud prevention, or other functionality associated with the Services.

The Company may disclose personal data where required to comply with applicable laws, regulations, court orders, legal proceedings, regulatory requests, law enforcement requests, sanctions obligations, or other lawful requirements imposed by competent authorities.

In connection with a merger, acquisition, restructuring, asset sale, financing transaction, corporate reorganisation, or similar business transaction, personal data may be transferred to the relevant parties involved, subject to appropriate confidentiality and data protection safeguards.

The Company does not sell personal data to third parties and does not disclose personal data to third parties for their independent marketing purposes.

11. International Data Transfers

The Company may transfer, store, access, or process personal data in countries outside the United Kingdom and the European Economic Area where such transfers are necessary for the operation of the Website, the provision of the Services, the use of third-party service providers, or other legitimate business purposes.

Where personal data is transferred to a country that does not provide an equivalent level of data protection under applicable law, the Company will take reasonable steps to ensure that appropriate safeguards are implemented to protect personal data. Such safeguards may include contractual protections, standard contractual clauses, adequacy decisions, binding corporate rules, or other transfer mechanisms recognised under applicable data protection legislation.

Where required by law, users may request additional information regarding the safeguards used in connection with international transfers of personal data by contacting the Company through the contact details provided in this Privacy Policy.

12. Data Retention

The Company retains personal data only for as long as necessary to fulfil the purposes for which it was collected, provide the Services, comply with legal obligations, resolve disputes, enforce contractual rights, prevent fraud, and protect the legitimate interests of the Company and its users.

Account information may be retained for as long as a user maintains an active account and for a reasonable period thereafter where necessary for security, fraud prevention, dispute resolution, legal compliance, or record-keeping purposes. Transaction records, payment-related information, trading activity records, communications, and other business records may be retained for longer periods where required by applicable accounting, tax, regulatory, anti-fraud, legal, or contractual obligations.

Where personal data is no longer required for the purposes for which it was collected, the Company will take reasonable steps to securely delete, anonymise, or otherwise render the information incapable of identifying an individual, unless continued retention is required or permitted by applicable law.

13. Cookies and Tracking Technologies

The Website uses cookies, similar tracking technologies, and related tools to support functionality, improve performance, enhance security, analyse usage patterns, and provide a better user experience.

Strictly Necessary Cookies are essential for the operation of the Website and enable core functionality such as user authentication, account access, security controls, session management, fraud prevention, and the proper functioning of marketplace features. These cookies cannot generally be disabled because the Website may not function correctly without them.

Performance and Analytics Cookies help us understand how visitors interact with the Website by collecting information about page visits, navigation patterns, user interactions, technical performance, and system errors.

Functionality Cookies allow the Website to remember user preferences and settings, including language preferences, interface customisation, account settings, and other user-selected options that improve the browsing experience.

Security and Fraud Prevention Cookies help identify suspicious activity, prevent unauthorised access, detect abuse, support risk management processes, and protect the security and integrity of the Website and its users.

Users can manage, restrict, or disable cookies through their browser settings. However, disabling certain cookies may affect the availability, functionality, performance, or security of the Website and may prevent certain Services from operating correctly.

14. Security Measures

The Company is committed to protecting personal data and maintaining appropriate security measures designed to safeguard information against unauthorised access, disclosure, alteration, loss, misuse, destruction, or other unlawful processing activities.

We implement reasonable technical, organisational, and administrative safeguards appropriate to the nature of the personal data processed, the risks associated with such processing, and the operational requirements of the Website. Security measures may include access controls, authentication procedures, encryption technologies, network protection mechanisms, security monitoring systems, logging and audit controls, vulnerability management processes, backup procedures, and other measures designed to protect the confidentiality, integrity, and availability of information.

Despite the safeguards implemented by the Company, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials, protecting access to their devices, safeguarding Steam account credentials, and taking reasonable measures to prevent unauthorised access to their accounts.

15. Your Rights Under GDPR

Subject to applicable data protection laws, you may have certain rights regarding the personal data processed by the Company.

You have the right to request access to the personal data that the Company holds about you, to request correction of inaccurate or incomplete personal data, to request deletion of your personal data where there is no lawful reason for continued processing, and to request restriction of processing in certain circumstances.

You have the right to receive personal data that you have provided to the Company in a structured, commonly used, and machine-readable format where required by applicable law and technically feasible.

You have the right to object to the processing of personal data where processing is based on legitimate interests and where your particular circumstances justify such an objection. Where processing is based on your consent, you have the right to withdraw that consent at any time.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your personal data has been processed in violation of applicable data protection laws.

Requests relating to privacy rights may be submitted using the contact details provided in this Privacy Policy. The Company will respond within the timeframes required by applicable law.

16. Children's Privacy

The Website and Services are intended solely for individuals who are at least eighteen (18) years of age or who have otherwise reached the age of legal majority in their jurisdiction. The Company does not knowingly collect, solicit, process, or store personal data from children or individuals who are not legally permitted to use the Services under applicable law.

If the Company becomes aware that personal data has been collected from an individual who does not meet the applicable age requirements, the Company may take appropriate measures, including restricting access to the Services, suspending or terminating the relevant account, and deleting the associated personal data where required by applicable law.

Parents, guardians, or other individuals who believe that a child has provided personal data to the Company may contact us using the contact details provided in this Privacy Policy.

17. Changes to This Privacy Policy

The Company may amend, update, modify, or replace this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, business operations, technologies, security practices, services, or other operational developments.

Any updated version of this Privacy Policy will become effective upon publication on the Website unless a different effective date is expressly stated. Users are encouraged to review this Privacy Policy periodically to remain informed about how personal data is collected, used, shared, protected, and otherwise processed.

Continued access to or use of the Website following the publication of an updated Privacy Policy constitutes acknowledgement of the revised version to the extent permitted by applicable law.

Contact Information

If you have any questions regarding this Privacy Policy, the processing of your personal data, your privacy rights, or any other privacy-related matter, you may contact the Company using the details below.

Operator: BELGRAVIA STUDIO LIMITED

Address: 66 Lavender Hill, London, England, SW11 5RQ

Email: support@gloveguild.com

Phone: +447771918711