01 / CONTROLLER
Who is responsible.
This notice explains how personal information is handled when you visit rawdesirevault.com, contact us, buy Engineering Attraction through Payhip, or join the private Raw Desire Vault Discord community.
02 / INFORMATION
What we collect.
WHEN YOU BROWSE THIS SITE
We do not currently install advertising pixels, third-party analytics or marketing cookies on this site. The hosting provider may process standard technical information needed to deliver and secure the site, such as IP address, browser and device information, request time and security logs.
WHEN YOU PURCHASE THROUGH PAYHIP
Payhip runs the checkout. We may receive information made available to sellers, including your name, email address, country or billing location, product, order number, transaction time, amount, tax status, payment status and download or access status. We do not receive or store your full payment-card details.
WHEN YOU CONTACT US
We receive the contact details and contents you provide, together with relevant order information needed to answer your request.
WHEN YOU JOIN RAW DESIRE VAULT
Discord processes your account and platform activity under its own privacy notice. Community administrators may see your Discord username, profile information, messages, moderation history and the information you choose to post.
Keep sensitive information private. Do not post another person’s personal information. Avoid sharing health, sex-life, sexual-orientation or other sensitive information about yourself. If you voluntarily include optional sensitive information in a message to us, we will use it only as needed to handle that message or moderate the community and will remove it when it is no longer needed.
03 / PURPOSE AND LAWFUL BASIS
How and why we use it.
- Contract: to confirm purchases, provide product and Discord access, authenticate customers, deliver support and administer the licence you bought.
- Legal obligation: to keep tax and accounting records, respond to lawful requests and meet consumer and data-protection duties.
- Legitimate interests: to secure the site and community, prevent fraud or unauthorised sharing, maintain records, resolve disputes, understand operational problems and enforce proportionate community rules.
- Consent: where you choose to provide optional information or expressly ask to receive marketing. You may withdraw consent at any time.
We do not currently operate an email-marketing list from this site. Purchase or support emails will be used for service communications, not silently converted into marketing consent.
05 / RETENTION
How long we keep it.
- Order, licence, tax and accounting records: normally up to six years after the relevant transaction or accounting period, unless a longer period is required.
- Support correspondence: normally up to 24 months after the enquiry is resolved, or longer where needed for an active dispute.
- Community access and routine administration records: while membership is active; essential moderation, security or dispute records may be kept for up to 24 months after access ends.
- Technical hosting logs: according to the hosting provider’s security and retention controls.
We may keep minimal information longer where necessary to establish, exercise or defend legal claims, comply with law or record a request not to be contacted.
06 / STORAGE AND TRANSFERS
Where information may go.
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires it, we rely on an adequacy regulation or approved contractual safeguards and any additional measures reasonably needed. You may contact us for information about the safeguard relevant to your data.
No internet service is risk-free. We take reasonable organisational and technical steps appropriate to the information we control, and we expect our providers to protect information processed for their services.
07 / YOUR CHOICES
Your data rights.
Depending on the circumstances, UK data-protection law may give you rights to:
- ask for access to and a copy of your personal information;
- correct inaccurate or incomplete information;
- ask for deletion or restriction of processing;
- object to processing based on legitimate interests or to direct marketing;
- receive certain information in a portable format; and
- withdraw consent where processing relies on consent.
These rights are not absolute. We may need to verify your identity and may retain information where the law permits or requires it. Send a request to Shefan@rawdesirevault.com.
08 / QUESTIONS AND COMPLAINTS
Raise a concern.
To make a data-protection complaint, email Shefan@rawdesirevault.com with the subject “Data protection complaint”, or write to the postal address above. Include what happened, the information involved and the outcome you want.
We will acknowledge a data-protection complaint within 30 days, take appropriate steps to investigate without undue delay, keep you informed where appropriate and tell you the outcome.
You may also complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint. We would appreciate the chance to address the issue first, but you do not have to contact us before exercising your right to complain to the ICO.
CHANGES TO THIS NOTICE
We may update this notice when our services, providers or legal duties change. The date at the top shows the latest revision. Material changes will be highlighted where reasonably practicable.