PrefireSkins

Legal / 02 · Updated 22 September 2026

Privacy policy

What personal data prefireskins.com collects, why, who sees it, how long it stays and what you can do about it. Short version: we collect what an order needs, and nothing for advertising.

Terms of service Privacy policy Refund policy Complaints policy

In short

  • Controller: TORNIKE LTD, company number 17449192, Suite 6039 128 Aldersgate Street, Barbican, London, England, EC1A 4AE.
  • We collect order details, your Steam trade URL, your Steam ID if you sign in through Steam, and standard server logs.
  • Card and wallet details never reach our servers; the payment providers handle them.
  • Data is shared only with payment providers, Valve, the trading partner that delivers the offer, and our hosting and email providers.
  • No advertising trackers. Only the cookies the store needs, plus optional ones you can decline in the cookie banner.
  • You can access, correct, export or delete your data by writing to support@prefireskins.com, and complain to the ICO.

The summary helps you read; the numbered sections below are the binding text.

01Who is responsible

The data controller is TORNIKE LTD, company number 17449192, registered office Suite 6039 128 Aldersgate Street, Barbican, London, England, EC1A 4AE, trading as PrefireSkins. Questions about personal data: support@prefireskins.com.

We process personal data under the UK General Data Protection Regulation and the Data Protection Act 2018. If you are in the European Economic Area, the EU GDPR gives you the same rights and we honour them the same way.

02What we collect

  • Order details. Email address, name, billing address, phone number if you give one, the items you bought, prices, order status and history, and any note you leave at checkout.
  • Delivery details. Your Steam trade URL, which contains your Steam partner ID and a token. It is the only way to send you the trade offer.
  • Steam sign-in. If you sign in through Steam, Valve sends us your 64-bit Steam ID, your public persona name and avatar URL. We never see your Steam password.
  • Account data. Username, email address, password hash, the trade URL saved to your account, your newsletter choice.
  • Payment status. Whether a payment succeeded, the payment method type and a transaction reference from the provider. Card numbers, wallet credentials and bank details are entered on the provider's side and never stored by us.
  • Support messages. What you write to support@prefireskins.com, including screenshots you attach.
  • Technical data. IP address, browser and device type, the pages requested and the time, in server logs and security logs.
  • Cookies. See the Cookies section below.

03Why we use it and on what legal basis

  • To take and deliver your order (performance of a contract): processing the payment, buying the item, sending the trade offer, sending the confirmation email and the PDF invoice.
  • To answer support requests and handle refunds and complaints (performance of a contract and legitimate interest).
  • To keep accounting and tax records (legal obligation): invoices and order records are kept for as long as UK tax law requires.
  • To keep the site secure and prevent fraud (legitimate interest): rate limiting, blocking abusive traffic, checking suspicious orders.
  • To run your account (performance of a contract).
  • To email you about new lots and price drops (consent): only if you ticked the box, and you can withdraw at any time from the account page or by writing to us.

We do not use automated decision-making that produces legal effects on you. Fraud checks may flag an order for a human review.

04Who receives your data

  • Payment providers listed at checkout, to process the payment. They act as independent controllers for the payment itself.
  • Valve Corporation, when you sign in through Steam and when you accept a trade offer, under Valve's own privacy policy.
  • The trading partner that sends the trade offer receives your trade URL and the item to deliver.
  • Hosting, email and storage providers that run the site and send our emails, acting as processors under contract.
  • Authorities or courts when the law requires it, and professional advisers where needed to defend a claim.

We do not sell personal data and we do not share it with advertisers or data brokers.

05International transfers

Some providers process data outside the United Kingdom, for example Valve in the United States. Where that happens we rely on an adequacy decision, on the UK International Data Transfer Agreement or on standard contractual clauses, and on the provider's own safeguards. You can ask us which safeguard applies to a given provider.

06Cookies

Cookies are small files a website stores in your browser. prefireskins.com uses:

  • Essential cookies that make the store work: the shopping session and cart, your login, the checkout, a token that protects forms against forgery, and your cookie choice itself. These are set without consent because the site cannot run without them.
  • Optional cookies, only with your permission from the cookie banner. Today this category is empty: we run no analytics and no advertising trackers. If we add an analytics tool, it will appear here first and stay off until you allow it.

You can change your choice at any time in the browser settings or by clearing the site's storage; the banner then appears again. Blocking essential cookies stops the cart and the checkout from working.

07How long we keep it

  • Order records and invoices: 6 years after the end of the financial year of the order, as UK tax and company law require.
  • Account data: until you delete the account or ask us to, subject to the order records above.
  • Support messages: 2 years after the case is closed, so we can answer a follow-up or a dispute.
  • Server and security logs: 30 days, then they are rotated. Logs tied to a security incident may be kept longer.
  • Newsletter consent: until you withdraw it. We keep a record of the withdrawal.

08Your rights

You can ask us to:

  • Access the personal data we hold about you and receive a copy.
  • Correct data that is wrong or incomplete.
  • Delete data we no longer need to keep for a legal reason.
  • Restrict or object to processing based on legitimate interest.
  • Receive the data you gave us in a machine-readable format.
  • Withdraw consent to the newsletter or to optional cookies at any time.

Write to support@prefireskins.com. We answer within one month, and we may ask you to confirm your identity first. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, telephone 0303 123 1113) or, if you live in the EEA, to your local data protection authority.

09Security

Connections to the site are encrypted (HTTPS). Passwords are stored as salted hashes. Access to order data is limited to the people who handle orders and support, and the servers are protected by access controls, rate limiting and monitoring. No system is perfectly secure; if a breach affects your data we will tell you and the ICO as the law requires.

10Children

The store is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us data, write to support@prefireskins.com and we will delete it.

11Changes to this policy

When this policy changes, the new version is published on this page with a new date at the top. If a change affects how we use data you already gave us, we tell you by email before it applies.

12Contact

TORNIKE LTD, company number 17449192
Suite 6039 128 Aldersgate Street, Barbican, London, England, EC1A 4AE
support@prefireskins.com