Privacy Policy

Last updated: 15 September 2026

We value your privacy. Protecting the personal data of our users and customers is important to us.

This Privacy Policy (“Policy”) explains how and why MAELYTH ENTERTAINMENT LTD (“we”, “us”, “our”, or the “Company”) collects, uses, stores, shares, and otherwise processes your personal data when you visit or use keyofburdens.com (the “Website”), create an Account, place an Order, purchase a Product, contact us, or otherwise use our Services.

This Policy also explains your rights under applicable data protection laws.

Certain terms used in this Privacy Policy have the same meaning as defined in our Terms and Conditions.

We process personal data lawfully, fairly, and transparently in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for processing your personal data is:

MAELYTH ENTERTAINMENT LTD Company Number: 17417195

Registered Address: 50 Princes Street Ipswich, IP1 1RJ United Kingdom

Email: info@keyofburdens.com

Website: keyofburdens.com

2. What Personal Data We Process

Depending on how you use the Website and Services, we may collect and process the following categories of personal data:

first name and last name;
email address;
phone number, where provided or required;
billing information;
payment and transaction information;
Order history and purchased Product information;
Account information and preferences;
communications with customer support;
IP address;
browser type and version;
device information and identifiers;
operating system;
Website activity and usage information;
approximate location derived from technical information such as IP address;
cookie and consent preferences;
fraud prevention and security information;
information relating to payment verification;
User-generated content, including reviews, messages, support requests, and uploads;
marketing preferences;
social media information where you voluntarily interact with or connect through supported social media services.

We may also process additional personal data that you voluntarily provide to us when communicating with us or using the Services.

We generally do not receive or store full payment card details where payments are processed directly by third-party payment service providers. Such providers process payment information in accordance with their own terms and privacy policies.

3. How We Collect Your Personal Data

We may collect personal data:

3.1 Directly from You

We collect information directly from you when you:

create or manage an Account;
place an Order;
purchase a Product;
provide billing or contact information;
contact customer support;
submit a refund or complaint request;
participate in promotions;
subscribe to marketing communications;
submit reviews, messages, or other content;
otherwise communicate with us.

3.2 Automatically

Certain information may be collected automatically when you visit or use the Website, including:

IP address;
browser and device information;
pages visited;
Website interactions;
session information;
security events;
cookie identifiers;
referral information;
technical logs.

This information may be collected through cookies, server logs, analytics technologies, and similar tools.

For further information, please see our Cookies Usage Policy.

3.3 From Third Parties

Where appropriate, we may receive personal data from third parties, including:

payment service providers;
fraud prevention and verification providers;
analytics providers;
hosting and technical service providers;
advertising and marketing partners, where permitted;
suppliers and service providers involved in fulfilling an Order.

4. Personal Data of Minors

Our Website, Products, and Services are intended only for individuals who are 18 years of age or older.

Individuals under the age of 18 are not permitted to create an Account or purchase Products or Services through the Website.

We do not knowingly collect personal data from individuals under the age of 18.

If we become aware that personal data has been collected from an individual under 18 in circumstances where such processing is not permitted, we will take reasonable steps to delete or otherwise appropriately handle that information.

If you believe that an individual under the age of 18 has provided personal data to us, please contact us at info@keyofburdens.com.

5. Why We Process Personal Data

We process personal data only where we have an appropriate legal basis.

Depending on the circumstances, these legal bases may include:

performance of a contract;
compliance with a legal obligation;
our legitimate interests or those of a third party, where those interests are not overridden by your rights and freedoms;
your consent.

We may process your personal data for the following purposes:

creating and managing your Account;
processing and fulfilling Orders;
processing payments and transaction information;
delivering digital Products and activation keys;
maintaining Order and transaction records;
providing customer support;
processing complaints and refund requests;
verifying payments;
preventing and detecting fraud, abuse, chargeback misuse, and unauthorised activity;
protecting the security and integrity of the Website;
communicating with you about Orders, Accounts, Products, or Services;
complying with tax, accounting, legal, and regulatory obligations;
establishing, exercising, or defending legal claims;
improving the Website, Products, Services, and customer experience;
analysing Website performance and usage;
sending marketing communications where permitted by law;
personalising Website content where appropriate and permitted;
maintaining records of your cookie and marketing preferences.

6. Legal Bases for Processing

Depending on the purpose, we may rely on the following legal bases:

6.1 Performance of a Contract

We process information necessary to:

create and manage your Account;
process your Order;
process payments;
deliver Products;
provide customer support relating to purchases;
administer refunds and cancellations.

6.2 Legal Obligations

We may process personal data where necessary to comply with applicable legal obligations, including tax, accounting, regulatory, fraud-prevention, and law-enforcement requirements.

6.3 Legitimate Interests

We may process personal data where necessary for legitimate business interests, including:

preventing fraud and abuse;
securing the Website and Accounts;
improving our Services;
maintaining business records;
handling disputes and legal claims;
understanding Website performance.

Where we rely on legitimate interests, we consider whether those interests are appropriately balanced against your rights and freedoms.

Where required, we rely on your consent for activities such as:

certain marketing communications;
non-essential cookies;
certain analytics technologies;
advertising and targeting technologies.

Where processing is based on consent, you may withdraw your consent at any time.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, security, fraud-prevention, and regulatory requirements.

Retention periods may vary depending on the type of information and purpose of processing.

For example:

Account data: generally retained while your Account remains active and for an appropriate period afterwards where required for legal, security, fraud-prevention, or dispute purposes;
Order and transaction records: may be retained for up to 6-10 years where required or appropriate for tax, accounting, contractual, fraud-prevention, or legal purposes;
Customer support communications: retained for as long as reasonably necessary to resolve the matter and maintain appropriate business records;
Marketing information: retained until you withdraw consent, unsubscribe, object to processing, or until it is no longer necessary;
Cookie and analytics information: retained according to the applicable cookie or service configuration and our Cookies Usage Policy;
Security and fraud-prevention records: retained for a reasonable period where necessary to protect the Company, Website, Users, and payment systems.

When personal data is no longer required, we will delete, anonymise, or otherwise securely dispose of it where appropriate.

8. Your Data Protection Rights

Subject to applicable law and relevant exemptions, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive certain personal data in a structured, commonly used, machine-readable format;
request transfer of eligible personal data to another controller where applicable;
withdraw consent at any time where processing is based on consent;
object to direct marketing at any time;
lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at:

info@keyofburdens.com

We may need to verify your identity before responding to certain requests.

Some rights are not absolute and may be subject to legal exemptions or retention requirements.

9. Complaints to the ICO

If you are located in the United Kingdom and believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

We encourage you to contact us first so that we have an opportunity to address your concerns.

Your right to complain to the relevant supervisory authority is not affected by contacting us first.

We may share personal data where reasonably necessary with:

payment processors and payment service providers;
fraud prevention, security, and identity verification providers;
hosting and cloud infrastructure providers;
IT and technical service providers;
customer support providers;
suppliers involved in Order fulfilment;
analytics providers;
advertising and marketing providers, where permitted and subject to applicable consent requirements;
professional advisers, including lawyers, accountants, auditors, and insurers;
banks and financial institutions where necessary;
courts, regulators, law enforcement agencies, tax authorities, and other competent authorities where required by law;
potential buyers, investors, or advisers in connection with a merger, acquisition, restructuring, financing, or sale of all or part of our business.

Service providers acting on our behalf are expected to process personal data only as necessary to provide the relevant services and subject to appropriate contractual and legal obligations.

We do not sell your personal data.

11. Payment Information

Payments made through the Website may be processed by third-party payment service providers.

Depending on the payment method used, payment providers may collect information such as:

cardholder name;
billing address;
payment card information;
bank or payment account information;
transaction details;
IP address and device information;
fraud-prevention information.

Where payment information is submitted directly to a third-party payment provider, that provider may act as an independent controller or processor in accordance with its own privacy policy and applicable law.

We may receive transaction identifiers, payment status, limited payment method information, fraud indicators, and other information necessary to process and administer your Order.

12. Fraud Prevention and Security

Because we sell digital Products that may be delivered shortly after payment, we may process certain information to detect and prevent fraud, payment abuse, unauthorised transactions, Account compromise, and chargeback misuse.

This may include analysing:

IP addresses;
device information;
transaction history;
Account activity;
payment verification results;
Order patterns;
security logs;
fraud indicators provided by payment or security providers.

Where appropriate, an Order may be delayed, restricted, or subject to additional verification where fraud or security concerns are identified.

13. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer complies with applicable data protection law.

Depending on the destination and circumstances, safeguards may include:

UK adequacy regulations;
recognised adequacy decisions;
the UK International Data Transfer Agreement (IDTA);
the UK Addendum to the EU Standard Contractual Clauses;
Standard Contractual Clauses where applicable;
another lawful transfer mechanism recognised under applicable data protection law.

Where required, we also assess whether additional safeguards are necessary.

14. Automated Processing and Profiling

We may use automated systems to assist with:

fraud detection;
payment risk assessment;
Website security;
personalisation;
analytics;
marketing, where permitted.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects on you unless permitted by applicable law and appropriate safeguards are in place.

Where applicable, you may have rights relating to certain automated decision-making.

15. Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Website.

These may include:

strictly necessary cookies;
functional cookies;
analytics and performance cookies;
advertising and targeting cookies, where applicable.

Non-essential cookies are used subject to applicable consent requirements.

You can manage your preferences through the cookie consent functionality available on the Website and through your browser settings.

For more information, please see our Cookies Usage Policy.

16. Marketing Communications

Where permitted by applicable law, we may use your contact information to send you information about Products, promotions, discounts, offers, and Website updates.

Where consent is required, we will send such communications only after obtaining the appropriate consent.

You may unsubscribe from marketing emails at any time using the unsubscribe link included in the communication or by contacting:

info@keyofburdens.com

Unsubscribing from marketing communications does not prevent us from sending necessary transactional or service-related communications regarding your Account, Orders, payments, security, or legal matters.

17. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration, disclosure, or access.

Depending on the circumstances, these measures may include:

encrypted connections, including HTTPS/SSL;
access controls;
authentication measures;
firewalls and security monitoring;
secure hosting infrastructure;
fraud-prevention systems;
restricted employee and service-provider access;
backup and recovery procedures.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

18. Third-Party Websites and Services

The Website may contain links to or integrate with third-party websites, payment providers, gaming platforms, publishers, social networks, or other external services.

We are not responsible for the privacy practices of independent third parties.

We recommend reviewing their privacy policies before providing personal data to them.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Services, technology, legal requirements, or data processing practices.

When we update this Policy, we will publish the revised version on the Website and update the “Last updated” date.

Where required by applicable law, we may provide additional notice of material changes.

20. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns regarding the processing of your personal data, please contact us:

MAELYTH ENTERTAINMENT LTD Company Number: 17417195

50 Princes Street Ipswich, IP1 1RJ United Kingdom

Email: info@keyofburdens.com

Website: keyofburdens.com