This policy explains how BYRVOX LTD, operator of byrvox.com, handles personal data. We act as the controller of the data described here. We follow the UK GDPR, the EU General Data Protection Regulation and applicable national data protection law. Contact for any privacy question: [email protected].
Data we collect
- Account data: name, e-mail address, password (stored only as a one-way hash), the date you accepted our terms.
- Order data: what you bought, prices, order numbers, the codes delivered to you (stored encrypted) and when you revealed them.
- Balance data: top-ups, their method and status, and the ledger of credits and debits on your balance.
- Billing data for card top-ups: cardholder name, billing address and phone number, which your bank uses to verify the payment. Card numbers are entered on the payment provider's page; we never see or store them.
- Technical data: IP address, the country derived from it, browser user agent, and server logs, used for security and fraud prevention.
- Messages you send us through the contact form or by e-mail.
Why we use it, and on what legal basis
- To create your account, settle orders, deliver codes and keep your balance: performance of a contract.
- To keep invoices and accounting records: legal obligation.
- To prevent fraud, chargebacks and account abuse, and to secure the Shop: legitimate interests in running a safe store.
- To answer your messages: legitimate interests, or contract where the message concerns an order.
We do not send marketing e-mails without your consent, we do not sell personal data, and we do not use advertising or analytics cookies.
Who receives it
Only processors needed to run the Shop, each under a data processing agreement: our hosting and infrastructure provider, our e-mail delivery provider, the payment provider that processes top-ups, the content delivery and security network in front of the site (which also runs the anti-bot check on our forms), and the supplier that issues the codes you order (which receives the order details it needs, not your account profile). We disclose data to authorities only where the law requires it.
International transfers
Some processors may handle data outside the UK or the European Economic Area. Where they do, the transfer is covered by an adequacy decision or by standard contractual clauses with appropriate safeguards.
How long we keep it
- Account data: while your account is open, and up to 12 months after closure to deal with disputes.
- Orders, top-ups and invoices: as long as accounting and tax law requires, typically six to ten years.
- Server and security logs: up to 90 days unless needed for an investigation.
- Contact messages: up to 24 months after the conversation ends.
Your rights
You may ask for access to your data, correction, deletion, restriction of processing, a portable copy, or object to processing based on legitimate interests. Write to [email protected] from the address on your account; we answer within one month. You may also complain to a data protection supervisory authority, such as the UK Information Commissioner's Office or the authority in the EU country where you live.
Security
Traffic to the Shop is encrypted, passwords are hashed, delivered codes are stored encrypted and are only shown when you reveal them in your account. Access to customer data is limited to staff who need it to support you.
Children
The Shop is not directed at children under 16, and we do not knowingly collect their data.
Changes
We will publish any update on this page and, for significant changes, tell account holders by e-mail.