GDPR Compliance

ARCANUM is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

• Right to Access (Art. 15)

  Request a complete copy of all personal data we hold about you. We will provide it in a structured, machine-readable format within 30 days.

• Right to Rectification (Art. 16)

  If any of your data is inaccurate or incomplete, you can update it through your Account Settings or request correction via email.

• Right to Erasure (Art. 17)

  Request deletion of your account and all associated data. We will erase everything except what we are legally required to retain (e.g., transaction records for legal record-keeping).

• Right to Data Portability (Art. 20)

  Export your data in JSON format including your profile, order history, watchlist, and favorites.

• Right to Object (Art. 21)

  Object to processing of your data for non-essential purposes. We will cease processing unless we have compelling legitimate grounds.

• Right to Restrict Processing (Art. 18)

  Request that we temporarily stop processing your data while we verify its accuracy or assess a legitimate interest claim.

• ▸Contract — processing necessary to deliver purchased items/services
• ▸Consent — optional marketing communications (you can unsubscribe any time)
• ▸Legal obligation — fraud-prevention and legal record-keeping
• ▸Legitimate interest — fraud prevention, platform security

Our servers are hosted in the EU (Frankfurt region). Our payment provider operates under EU-US DPF adequacy.

We do not transfer data to countries without adequate protection unless covered by Standard Contractual Clauses.

Email privacy@arcanum.boutique with your request and Steam ID. We verify identity via Steam OpenID before processing. Response within 30 days guaranteed.

You also have the right to lodge a complaint with the ICO (UK) or your local supervisory authority.

See also: Privacy Policy · Cookie Policy.