Privacy Policy

This policy explains what personal data Keyzora collects, why, who we share it with and the rights you have. It applies to keyzora.com in every language and to the support we provide. We have tried to write it plainly and to list what actually happens on this site, not a generic template.

1Who is responsible for your data

The controller of your personal data is:

Company

Void Digital Ltd

Address

ul. "Ranni List" 10, 4000 Plovdiv, Bulgaria

Company number (EIK)

206832212

VAT number

BG206832212

Privacy contact

[email protected]

We are not required to appoint a data protection officer. Write to the address above with any question about this policy or your data.

2What we collect

When you buy

• Contact and billing details: name, email address, billing address and country, and phone number if you give one.
• Business details if you buy as a company: company name and VAT number, which we check against the EU VIES register.
• Order details: what you bought, the licence keys delivered to you, prices, VAT, currency and invoices.
• Payment: handled by Stripe. We receive the payment status, card brand, the last four digits and the expiry date, never the full card number.

Your account

We create an account automatically with your first order, so your keys remain available. It holds your name, email, password (stored only as a one-way hash), addresses, orders, keys and invoices.

When you contact us

Messages, chat conversations and tickets you send us, with the email address and name you use. If you are logged in when you open the chat, the assistant is given your name and email so it can recognise you and look up your orders.

Reviews

If you review a product we publish your first name, rating and text. Your email address is never shown. We may translate the review text automatically so shoppers in other languages can read it.

Automatically

• Technical data: IP address, browser and device type, pages requested and the approximate country derived from your IP address. We use the country to show prices in the right currency and to decide whether to ask for cookie consent.
• Checkout progress: if you enter your email at checkout and don’t finish, we keep that email and your basket as an unfinished checkout.
• Traffic source: how you reached us (for example a search engine, a link or an ad campaign) is stored with your order.
• Usage and advertising measurement, only as described in section 5 and our Cookie Policy.

3Why we use it, and our legal basis

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (section 8). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4Who we share it with

We never sell your personal data. We share it only with service providers who process it on our behalf under a data processing agreement, and only as far as they need it:

We also disclose data where the law requires it — for example to tax authorities, or to a court or the police with a valid legal request — and to software publishers or our key suppliers only where needed to resolve a problem with a key you bought. If our business is sold or reorganised, your data may transfer to the new owner under this policy.

5Analytics and advertising

We use Google Analytics, Microsoft Clarity, Google Ads and Meta to understand how the shop is used and whether our adverts work. Most of this runs through our own measurement server, which lets us control and strip what is sent on.

• In the EU, the UK, Switzerland, Brazil, Canada and similar regions, none of these run unless you accept them in the cookie banner. You can choose analytics and marketing separately.
• Elsewhere, they run by default and you can switch them off at any time under Cookie settings. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of advertising.
• When you buy with marketing consent, we send Google and Meta your email, phone, name, city and country in hashed form (turned into an irreversible code), so they can match the purchase to an advert you saw without us revealing who you are.
• Microsoft Clarity records how pages are used — clicks, scrolling and mouse movement — to find broken or confusing pages. It masks text you type in forms.

6International transfers

Some of the providers above are based in, or access data from, the United States. Where that happens, the transfer is protected by the EU–US Data Privacy Framework, where the provider is certified, or by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.

7How long we keep it

8Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• correct data that is wrong or incomplete — most of it you can edit yourself in your account;
• delete your data, except what we must keep by law;
• restrict how we use your data while a complaint is resolved;
• data portability — receive your data in a machine-readable format;
• object to processing based on legitimate interests, and to direct marketing at any time;
• withdraw consent at any time, without affecting what was done before — use Cookie settings for analytics and advertising.

To use any of these rights, email [email protected] or write from your account. We answer within one month and may ask you to confirm your identity first.

You can also complain to a data protection authority. Ours is the Commission for Personal Data Protection of Bulgaria, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia — cpdp.bg. You may instead complain to the authority in the EU country where you live or work.

9Security

The site is served only over HTTPS. Passwords are stored as one-way hashes, card payments never touch our servers, access to customer data is limited to staff who need it, and login attempts are rate-limited. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the authority as the law requires.

10Children

Our shop is not directed at children. You must be at least 16, or have the consent of a parent or guardian, to create an account or buy from us. If you believe a child has given us personal data, contact us and we will delete it.

11Changes to this policy

We update this policy when our services or the law change. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by email or on the site before it takes effect.