Privacy Policy

1. Who We Are

My Legit Keys (“we,” “us,” or “our”) operates mylegitkeys.com (the “Site”), an authorized reseller of genuine Microsoft digital software license keys.

For any privacy-related questions or requests, contact us at: [email protected]

2. What Information We Collect

We do not collect payment card details, bank account numbers, or government ID numbers. All payment information is entered directly into our payment processor’s secure, encrypted environment and is never seen or stored by us.

3. How We Collect Information

• Directly from you — when you place an order, create an account, or contact support.
• Automatically — via cookies, server logs, and analytics tools when you browse the Site.
• From our payment processor — a transaction confirmation (order ID, purchase status, and email address) is shared with us to allow delivery of your digital product.

4. Cookies

We use cookies and similar technologies to operate and improve the Site. Cookies are small text files stored on your device by your browser.

• Essential cookies — required for the Site to function (e.g. session management). These cannot be disabled.
• Analytics cookies — help us understand visitor behaviour (e.g. Google Analytics). Data is aggregated and anonymised.
• Advertising cookies — used to show relevant ads. You can manage Google ad preferences at adssettings.google.com.

You can control or disable non-essential cookies through your browser settings. Disabling certain cookies may affect Site functionality.

5. Payment Processing

All payments on this Site are handled by a third-party payment processor operating under a secure, PCI-compliant environment. When you make a purchase:

• You enter your payment details directly into the processor’s secure checkout — we never see or store your card information.
• The processor collects your billing details and payment data as needed to complete the transaction and issue a receipt.
• A transaction confirmation is shared with us (including your email address and order reference) solely to enable delivery of your license key.

6. How We Use Your Information

• Order fulfillment — to deliver your license key(s) by email.
• Customer support — to respond to queries, complaints, and refund requests.
• Account management — to manage your login and order history if you have an account.
• Site improvement — to analyse usage and fix issues.
• Legal compliance — to comply with applicable laws and regulations.
• Marketing — to send promotional emails, but only if you have opted in. You may unsubscribe at any time via the link in any marketing email.

7. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to fulfill your order.
• Legitimate interests — to operate the Site, prevent fraud, and maintain security.
• Consent — for marketing communications and non-essential cookies. Withdrawable at any time.
• Legal obligation — where required by applicable law.

8. Who We Share Your Data With

We do not sell, rent, or trade your personal information. We may share data only with:

• Payment processors — to handle your transaction securely.
• Email service providers — to send transactional and marketing emails on our behalf, under data processing agreements.
• Analytics providers — such as Google Analytics, which processes anonymised usage data.
• Law enforcement or regulators — where required by law or to protect our legal rights.

9. Data Retention

• Order records — retained for 7 years for tax and accounting compliance.
• Account data — retained while your account is active, plus 12 months after closure.
• Marketing data — retained until you unsubscribe or withdraw consent.
• Support correspondence — retained for 2 years after resolution.
• Analytics data — retained in anonymised form for up to 26 months.

10. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request corrections to inaccurate or incomplete data.
• Deletion — request deletion of your personal data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Restriction — request we limit how we process your data in certain circumstances.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any right, email [email protected]. We will respond within 30 days and may need to verify your identity before processing the request.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information (subject to exceptions).
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right not to be discriminated against for exercising your CCPA rights.

To submit a CCPA request, contact us at [email protected].

12. International Data Transfers

We are based in the United States. If you access the Site from the EEA, UK, or other regions with data protection laws, your data may be transferred to and processed in the US. Where required by law, we ensure appropriate safeguards are in place for such transfers.

13. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including encrypted connections (HTTPS), access controls, and regular security reviews. No internet transmission is completely secure, but we take all reasonable steps to protect your information.

14. Children’s Privacy

This Site is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have done so inadvertently, contact us at [email protected] and we will delete it promptly.

15. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies before submitting any personal information.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top of this page and, for significant changes, notify you by email or prominent notice on the Site.

17. Contact Us

My Legit Keys
Email: [email protected]
Website: mylegitkeys.com