This Privacy Policy describes how rustgear.org (“we,” “our,” “us,” or the “Platform”) collects, uses, stores, and protects your personal information when you interact with our website or services, including purchasing or receiving digital gaming items. By accessing the Platform, you agree to the data practices outlined in this Policy.
1. Data Controller
The party responsible for managing your information is:
TRANSFORTUNALT LTD Registered in England and Wales Company No. 16568666 Email: info@rustgear.org
2. Information We Collect
We may gather the following categories of personal data:
Identity & Contact Details
Name, email address, billing details, and any other information you voluntarily provide.
Transaction Information
Order history, receipts, delivery confirmations, and related purchase data.
Payment Data
Payment details are processed solely by certified third-party processors.
We do not store full card numbers, CVV codes, or other sensitive payment credentials.
Steam & Trade Information
Steam username, trade URL, inventory status, and metadata necessary to complete digital item transfers. (Transferred items originate from games developed by Facepunch Studiosand distributed via Steam.)
Technical Data
IP address, device details, browser information, operating system, cookies, and diagnostic logs.
Communication Records
Emails, support messages, and other correspondence exchanged with our team.
Verification & Compliance Data
KYC/AML data, including identity documents, proof of address, and date of birth, when required by regulations or payment partners.
3. How We Collect Data
We obtain information through:
Direct interactions: when you place orders, submit forms, or communicate with support.
Automated technologies: cookies, tracking tools, analytics, and server logs.
Third-party services: payment gateways (e.g., Stripe, PayPal) that provide transaction and fraud-prevention data.
4. How We Use Your Information
Personal data is processed for purposes such as:
Completing and managing purchases, including delivering in-game items through Steam trade offers.
Providing order updates, trade confirmations, and support responses.
Meeting legal and regulatory obligations (tax, accounting, AML/CTF, chargeback handling).
Enforcing Platform Terms and preventing misuse.
We process data under legal bases including contract necessity, compliance obligations, legitimate interests (e.g., fraud prevention), and consent where required.
5. Data Sharing & Third-Party Disclosure
We may share information with trusted partners, including:
Payment processors and financial institutions for verification, billing, and fraud assessments.
Hosting, analytics, monitoring, and support providers that assist in running the Platform.
Steam and Facepunch Studios, where necessary, to complete digital item transfers for games they develop and maintain.
Regulatory bodies or law enforcement, if legally required or needed to defend our legal interests.
We never sell personal information. Sensitive payment data is handled exclusively by authorized processors, not by TRANSFORTUNALT LTD.
6. Communications
You may receive messages relating to:
order confirmations and trade notifications
important account or service updates
security alerts or compliance communications
promotional messages (only if you have opted in, and with the ability to unsubscribe at any time)
Mandatory transactional messages cannot be disabled.
7. Cookies & Tracking Technology
Cookies and similar tools are used to:
enable essential Platform features
store preferences
analyze usage and website performance
support advertising or marketing functions
You may adjust cookie preferences through your browser or our cookie settings panel. Disabling certain cookies may affect functionality.
8. Data Retention
We retain data only as long as needed:
Customer support records may be kept for reference and quality assurance.
KYC/AML documents are stored for at least five years, or longer if required by law.
Transaction and accounting records may be kept for up to six years for regulatory compliance.
Cookies persist according to their designed lifespan unless manually deleted.
9. Your Rights Under UK GDPR
You have the right to:
Access the personal data we hold
Correct inaccurate information
Request deletion where legally applicable
Restrict or object to specific types of processing
Receive your data in a portable format
Withdraw consent (where processing relies on consent)
File a complaint with theInformation Commissioner’s Office (ICO)at www.ico.org.uk
We do not intentionally collect data from users under the age of 18. If such data is identified, it will be removed promptly.
10. Updates to This Policy
This Privacy Policy may be modified to reflect regulatory changes, operational updates, or technological improvements. Revisions will be published on this page with an updated effective date. Continued use of the Platform constitutes acceptance of any changes.
11. International Data Transfers
Your data may be transferred outside the UK or EEA when necessary to engage with payment processors, infrastructure providers, or other partners.
Where transfers occur, we apply safeguards such as:
Adequacy regulations
Standard Contractual Clauses (SCCs)
Other lawful transfer mechanisms
12. Data Security Measures
We use a variety of organizational and technical safeguards, including encryption, access controls, monitoring systems, and secure storage practices. However, no technology is entirely risk-free. You are responsible for maintaining secure access to your account and Steam profile.
Payment providers may conduct automated fraud or risk checks. You may request manual review of decisions made solely by automated systems.
