Privacy Policy

This policy explains how KeyQuay LTD ("we") uses your personal data when you visit https://keyquay.com or buy from us. Last updated: 2 November 2026.

1. Controller

KeyQuay LTD, [REGISTERED OFFICE ADDRESS], company number [COMPANY NUMBER]. Contact for data protection questions: support@keyquay.com.

2. Data we collect

Order data: name, e-mail address, country, optional company name and VAT number, products bought, amounts, order history and your checkout confirmations (agreement to the terms, request for immediate delivery) with date and time.
Payment data: processed by Stripe or PayPal. We receive a payment reference and status, not your full card number.
Account data: if you create an account, your password is stored only as a secure hash.
Newsletter / welcome offer: if you sign up in the welcome pop-up: e-mail address, optional first name, language, country (from IP), the page you signed up on, the referring site, IP address, browser, date and the consent text you agreed to, and whether you confirmed your subscription.
Reviews: your rating, review text and the display name you choose (shown publicly in shortened form, e.g. “Anna K.”), linked to your order.
Support, withdrawal and contact requests: what you send us through our support and contact forms or by e-mail, linked to your order where you give its number, and our replies.
Technical data: IP address, browser type and approximate country, used for security and fraud prevention.
Visit statistics: we count visits without cookies and keep only daily totals (for example visitors per country, device type and language, pages and products viewed, and the website or campaign that referred the visit). To count each visitor only once per day we use a one-way code made from your IP address and browser with a key that is replaced every day; the IP address itself is not stored and you cannot be recognised on a later day.
Proof of delivery: for each order we record when the order page showing your licence key is opened, when a key is copied with the copy button and when the invoice is opened, together with the IP address, approximate country and browser type, so that we can prove delivery if a payment is disputed.
Remote assistance: if you ask for it, the order it relates to, your consent (time and IP address), the agreed time and our short notes on what was done. The session runs in a tool you open yourself and can end at any time; we do not record your screen.

3. Why we use it and our lawful bases

To process your order, deliver your licence and provide support — performance of a contract.
To keep invoices, accounting records and proof of your checkout confirmations — legal obligation (normally 6 years under UK law).
To prevent fraud and misuse of payment cards, and to keep the site secure — legitimate interests.
To send you offers by e-mail — consent, given in the welcome pop-up and confirmed by clicking the link in our e-mail. You can unsubscribe at any time with the link in every e-mail.
To publish your review — consent; you can ask us to remove it at any time.
To remember products you viewed and show recommendations, and for analytics or advertising cookies if enabled — consent via the cookie banner, which you can withdraw at any time.
To measure our advertising: if you accepted all cookies, we report shopping events — product viewed, added to cart, checkout started and completed purchase — (order value, products, and your e-mail address in hashed form, IP address and browser) to Meta Platforms Ireland Ltd through its Conversions API and to Google through Google Ads — consent. Without your consent nothing is sent.
To understand how our website is used and improve it (visit statistics) — legitimate interests; no cookies are used and only aggregated totals are kept.
To send offers to customers who tick the newsletter box at checkout — consent, confirmed by clicking the link in our e-mail. You can unsubscribe at any time.
To prove delivery and defend against unjustified payment disputes (chargebacks) — legitimate interests.
To help customers who run into a problem while shopping and to fix errors on our website: the pages you open in our shop, your basket contents, and any errors shown during checkout or payment (for example a declined card) are recorded with your browsing session — legitimate interests. The record also contains your IP address and approximate location (country and city), and it is deleted after 30 days.
To remind you before a time-limited licence expires and send you a renewal offer, if you ticked the box for this at checkout — consent; every reminder has a one-click link to stop them.

4. Who receives your data

Payment providers (Stripe Payments Europe Ltd / Stripe, Inc.; PayPal (Europe) S.à r.l. et Cie, S.C.A.); Cloudflare, Inc., which protects our website against attacks and speeds it up, and processes IP addresses and technical request data for this; our web hosting provider (servers in the European Union); our e-mail delivery provider; analytics/advertising providers only if you consent; and professional advisers where needed. Some providers process data outside the UK/EEA; transfers are protected by adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses.

5. How long we keep it

Order and invoice records: 6 years after the end of the financial year. Account data: until you delete your account. Newsletter data: until you unsubscribe (proof of consent for 3 years afterwards). Reviews: while the product is listed or until you ask us to remove them. Support requests: up to 3 years after the last message. Security and administration logs: up to 12 months, longer only where needed to investigate an incident. Database backups: up to 14 days.

6. Your rights

You can ask for access to, correction or deletion of your data, restriction of or objection to processing, data portability, and you can withdraw consent at any time. Write to support@keyquay.com. You may also complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority in your EU country.

7. Automated decisions

Our fraud checks may hold an order for manual review; they never cancel an order without a person looking at it.

8. Cookies and similar technologies

See our Cookie Policy.