PRIVACY POLICY
This Privacy Policy ("Policy") describes how Noventra Tech LTD ("we", "us", or "the Company") collects, uses, stores, and protects personal information in connection with your use of our platform and services at lootnex.com (the "Platform"). We are committed to handling your personal data responsibly, transparently, and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, please discontinue use of the Platform.
1. DATA CONTROLLER
The Data Controller responsible for your personal information is:
Company Name: Noventra Tech LTD
Registered Address: 61 Bridge Street, Kington, United Kingdom, HR5 3DJ Company Number: 17256413
Privacy Contact: info@lootnex.com
For any questions, concerns, or requests relating to your personal data, please contact us at the email address above.
2. PERSONAL DATA WE COLLECT
Depending on how you interact with the Platform, we may collect and process the following categories of personal data:
- Identity & Contact Data: Your name, email address, and any other details you provide when contacting us or placing an order.
- Steam Account Data: Your Steam username, Steam ID, trade URL, and trade or delivery status information obtained through Steam authentication.
- Transaction & Order Records: Details of purchases made on the Platform, order history, receipts, and payment confirmations.
- Payment Data: Payment transactions are processed entirely by our PCI DSS compliant third-party payment provider. We do not collect, store, or process raw cardholder data, including card numbers, CVV codes, or expiry dates.
- Technical & Device Data: IP address, browser type and version, operating system, device identifiers, referral source, and session data collected automatically when you use the Platform.
- Communications Data: Records of correspondence submitted via support requests, contact forms, or other communications with the Company.
- Verification Data: Where required for AML/KYC compliance purposes, identity documents, proof of address, date of birth, and other verification information.
- Cookie & Tracking Data: Information collected through cookies and similar technologies as described in our Cookie Policy.
3. HOW WE COLLECT YOUR DATA
We collect personal data through the following means:
- Directly from you when you place an order, contact our support team, or submit any form on the Platform.
- Automatically through the Platform’s technical infrastructure, including server logs, cookies, and analytics tools, when you browse or interact with the site.
- Through Steam authentication when you log in to the Platform using your Steam account.
- From authorised third parties, including our payment processing provider, fraud prevention services, and sanctions screening tools, in connection with transaction processing and compliance obligations.
4. LEGAL BASIS FOR PROCESSING
We process your personal data on the following legal grounds under UK GDPR:
- Contract Performance: Processing necessary to fulfil your order, deliver purchased items via Steam, and manage your account.
- Legal Obligation: Processing required to comply with applicable law, including AML/CTF regulations, tax obligations, and regulatory reporting requirements.
- Legitimate Interests: Processing carried out for fraud prevention, platform security, abuse detection, and service improvement, where these interests are not overridden by your rights.
- Consent: Where we rely on your consent for specific processing activities, such as marketing communications or non-essential cookies, you may withdraw consent at any time without affecting the lawfulness of prior processing.
5. HOW WE USE YOUR PERSONAL DATA
We process your personal data for the following purposes:
- To process and fulfil orders, including procuring items from our authorised supplier and arranging delivery to your Steam account.
- To communicate with you regarding your orders, account activity, support requests, and service notifications.
- To detect, investigate, and prevent fraud, account takeover, money laundering, and other unlawful or prohibited activity on the Platform.
- To comply with our legal and regulatory obligations, including AML/CTF requirements, sanctions screening, and applicable tax and accounting rules.
- To maintain, improve, and secure the Platform through analytics, performance monitoring, and technical maintenance.
- To send marketing communications where you have opted in to receive them. You may unsubscribe at any time; mandatory service communications are unaffected.
- To enforce our Terms of Service and other applicable Platform policies.
6. PAYMENT PROCESSING AND SECURITY
All payment transactions on the Platform are processed exclusively by our authorised third-party payment service provider, which is certified as compliant with the Payment Card Industry Data Security Standard (PCI DSS). Noventra Tech LTD does not store, process, or transmit raw cardholder data at any point. Card numbers, CVV codes, expiry dates, and other sensitive payment credentials are handled entirely within the payment provider’s secure, PCI DSS compliant environment.
To protect against unauthorised card use and fraudulent transactions, all card payments are subject to 3D Secure (3DS) authentication. 3DS is an additional security layer that verifies the cardholder’s identity with their card issuer before a transaction is authorised. In certain cases, transactions may be subject to automated risk assessment, which may affect whether a payment is accepted. You may request a manual review of any automated decision by contacting us at info@lootnex.com.
7. SHARING AND DISCLOSURE OF PERSONAL DATA
We do not sell, rent, or trade your personal data. We may share your information with the following categories of recipients, strictly on a need-to-know basis:
- Payment Service Providers: Our authorised payment processor receives transaction data necessary to process payments, apply fraud prevention controls, and comply with card scheme rules.
- Technology & Infrastructure Providers: Hosting, analytics, customer support, and other service providers who process data on our behalf under contractual data processing agreements.
- Steam / Valve Corporation: Steam account data and trade information are shared with Valve’s systems as necessary to facilitate item delivery via the Steam trade offer mechanism.
- Regulatory & Law Enforcement Authorities: We may disclose personal data to competent authorities, government bodies, or legal advisors where required by law, court order, or regulatory obligation, including in connection with AML/CTF reporting obligations.
- Sanctions & Fraud Screening Services: Transaction and identity data may be processed by third-party screening providers for the purposes of sanctions compliance and fraud detection.
8. INTERNATIONAL DATA TRANSFERS
Your personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area (EEA) in connection with the services provided by our third-party partners, including payment processors, technology providers, and screening services.
Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements. These safeguards may include:
- Adequacy decisions issued by the UK Secretary of State confirming that the destination country provides an equivalent level of data protection.
- Standard Contractual Clauses (SCCs) approved for use under UK data protection law.
- Other lawful transfer mechanisms recognised under applicable UK data protection legislation.
You may request further information about the specific safeguards applied to international transfers by contacting us at info@lootnex.com.
9. COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar tracking technologies on the Platform to support core functionality, analyse usage patterns, and deliver a personalised experience. Cookies are small text files stored on your device when you visit the Platform.
For detailed information on the specific cookies we use, their purposes, retention periods, and how to manage your cookie preferences, please refer to our Cookie Policy, available at
You can manage or withdraw your consent to non-essential cookies at any time through our cookie preferences centre or your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.
10. DATA RETENTION
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any applicable legal retention obligations. Our standard retention periods are as follows:
- KYC & AML Records: Retained for a minimum of five (5) years from the end of the business relationship, in accordance with the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLRs 2017) and the Proceeds of Crime Act 2002.
- Order & Transaction Records: Retained for up to six (6) years for accounting, tax, and legal compliance purposes.
- Support Correspondence: Retained for as long as necessary to resolve the relevant matter and for a reasonable period thereafter.
- Technical & Analytics Data: Retained in accordance with the applicable data lifecycle or until deleted.
Upon expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in accordance with our internal data disposal procedures.
11. YOUR DATA PROTECTION RIGHTS
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate or incomplete personal data.
- Right to Erasure: To request deletion of your personal data where there is no longer a lawful basis for processing.
- Right to Restriction: To request that we limit the processing of your personal data in certain circumstances.
- Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting prior lawful processing.
To exercise any of the above rights, please contact us at info@lootnex.com. We will respond to your request within one (1) calendar month. Please note that certain rights are subject to exceptions under applicable law.
If you are dissatisfied with how we handle your personal data or your rights request, you have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at www.ico.org.uk.
12. DATA SECURITY
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication requirements, regular security assessments, and staff awareness procedures.
While we take reasonable steps to protect your information, no data transmission over the internet or electronic storage system is entirely secure. You are responsible for maintaining the confidentiality of your login credentials and for any activity conducted through your account.
13. AGE RESTRICTION
The Platform and its services are intended exclusively for users aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a person under 18 has provided personal information to us, please contact us at info@lootnex.com and we will take prompt steps to delete the relevant data.
14. UPDATES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform functionality. Any material changes will be communicated by posting the revised Policy on this page with an updated effective date. Where required by law, we will provide more prominent notice of significant changes.
Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.
Noventra Tech LTD | lootnex.com | info@lootnex.com
Registered in England and Wales | Company No: 17256413