1. Who controls your data
The operator of FLAGGED.CC is the controller of personal data collected through this store. Current operator/contact details are shown beside this policy.
2. Information we collect
Depending on how you use the site, we may process your Discord identifier, username, display name, email address returned by Discord, server roles, account/session data, purchases, payment references and status, product access/delivery records, support tickets and messages, reviews you submit, security/audit information and limited technical information such as network/security signals.
3. Why we use it
We use personal data to authenticate accounts, fulfil purchases, deliver digital access, provide support, prevent fraud and abuse, maintain security, keep transaction records, moderate reviews and meet legal/accounting obligations.
Our main legal bases are performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting the service. Where optional cookies or similar technologies require consent, we rely on consent.
4. Payments
Payment-card details are entered with the relevant payment provider rather than FLAGGED.CC. We receive transaction identifiers, amounts, currencies and payment status needed to fulfil and support an order. Cryptocurrency payments may similarly be processed by a third-party payment provider.
5. Discord sign-in and delivery
Discord is used for sign-in, role checks and product delivery. Information sent to or received from Discord is processed under Discord's own privacy terms as well as this policy where we determine the purpose of processing.
6. Service providers
We use infrastructure/security providers, payment processors, Discord and other suppliers necessary to operate the store. They may process data on our behalf or as independent controllers for their own services. Some providers may process information outside the UK using lawful transfer safeguards where required.
7. Retention
Session data is kept only as long as needed for sign-in and account security. Transaction and accounting records may be retained for the period required by tax, accounting, fraud-prevention and legal obligations, commonly up to six years where applicable. Support and security records are kept only for as long as reasonably necessary for those purposes.
8. Cookies and similar storage
We use strictly necessary cookies for authentication, security and checkout. Optional storage is not enabled unless permitted by your choice. See the Cookie Policy and use “Cookie settings” at any time.
9. Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to processing, receive certain data in portable form and withdraw consent where processing is based on consent. These rights can be subject to legal exceptions.
10. Complaints
Please contact us first through support so we can try to resolve the issue. You may also have the right to complain to the UK Information Commissioner's Office (ICO) or your local data-protection authority.
11. Changes to this policy
We may update this notice when the service, suppliers or legal requirements change. The latest version and update date will remain available here.