PRIVACY NOTICE

trade-core.net is operated by LOUBERA LTD • Last revised: 10/09/2026

LOUBERA LTD (company number 17423917, "we"/"us") takes data protection seriously across every part of trade-core.net. This notice sets out, in plain terms, what personal data we touch, why we touch it, and what control you keep over it. It's written to satisfy the UK GDPR and the Data Protection Act 2018, and it should be read alongside our Terms of Service.

SECTION 1 — DATA WE COME INTO CONTACT WITH

Depending on how deeply you use the platform, this can include:

(a) Basic contact details — name, email address, billing address.

(b) Steam-linked information — your Steam ID, username, trade URL, and the trading history tied to your account.

(c) Transaction data — what you bought or sold, for how much, and whether delivery succeeded.

(d) Payment metadata — confirmation that a payment succeeded, never the underlying card number, which our payment processor holds instead.

(e) Verification records — ID documents, date of birth, or proof of address, but only where a compliance check has actually been triggered.

(f) Device and browsing data — IP address, browser type, referring page, and cookie identifiers, gathered automatically.

(g) Anything you send our support team directly.

SECTION 2 — HOW IT REACHES US

(a) Straight from you — signing up, checking out, listing an item, or messaging support.

(b) Automatically — cookies and analytics scripts running as you browse.

(c) Through Steam — when you authenticate using your Steam credentials.

(d) Via our partners — payment processors, fraud-screening providers, and sanctions-list checkers.

SECTION 3 — OUR LEGAL GROUNDS FOR USING IT

UK GDPR requires a lawful basis for every use of personal data. Here's how ours breaks down:

(a) Performance of a contract — fulfilling your order, verifying your Steam login, handling support.

(b) Legitimate interests — catching fraud, improving the platform, running analytics.

(c) Legal obligation — AML/CTF screening, tax and accounting records.

(d) Consent — marketing communications you've explicitly opted into.

SECTION 4 — WHERE IT GOES FROM THERE

(a) Payment processors and banks, so payments clear and fraud gets caught.

(b) Valve/Steam, purely as a mechanical step in delivering your item.

(c) Hosting, analytics, and support-tooling vendors bound by contract not to use your data for their own purposes.

(d) Regulators or law enforcement, if we're legally compelled to disclose something.

(e) We don't sell personal data — full stop — and we're never in possession of your full card details.

SECTION 5 — PAYMENT PROCESSING & 3D SECURE

All payments on trade-core.net are handled exclusively by our authorised, PCI DSS-certified payment provider. We never receive or store raw cardholder data — that stays entirely within the provider's own secure systems. Card payments may be subject to 3D Secure (3DS) authentication, depending on your card issuer or network; this step confirms your identity with your bank before a payment is approved. Where a transaction is flagged by automated risk screening, you can request a manual review by contacting info@trade-core.net.

SECTION 6 — SENDING DATA ABROAD

Most processing stays inside the UK. Where an international partner is involved, transfers rely on recognised safeguards — UK adequacy decisions, International Data Transfer Agreements, or Standard Contractual Clauses, depending on the destination. Email info@trade-core.net if you'd like specifics for a particular transfer.

SECTION 7 — HOW LONG WE HOLD ONTO IT

(a) Compliance records (KYC/AML): a minimum of 5 years, sometimes longer if regulation demands it.

(b) Financial and order records: up to 6 years, to satisfy tax law.

(c) Support correspondence: kept only as long as it's useful, typically up to 3 years.

(d) Analytics and cookie data: for whatever period the specific tool defaults to, or until you clear it yourself.

SECTION 8 — KEEPING IT SAFE

We rely on a mix of encryption, access controls, and routine security review to protect what we hold. No online system is completely bulletproof, though, so keeping your own Steam and account credentials secure matters too.

SECTION 9 — WHAT YOU CAN ASK OF US

Under UK GDPR, you're entitled to:

(a) See a copy of what we hold on you.

(b) Have inaccurate data corrected.

(c) Ask for data to be deleted where we no longer need it.

(d) Restrict certain processing.

(e) Receive your data in a portable format.

(f) Object to processing based on our legitimate interests.

(g) Withdraw consent for anything consent-based, without undoing what already happened lawfully.

(h) Lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you think we've got something wrong.

Send any of the above to info@trade-core.net — we aim to respond within a month.

SECTION 10 — A NOTE ON AGE & AUTOMATED DECISIONS

(a) The platform is built for adults — 18 and over. We don't knowingly collect data from anyone younger, and we'll delete it promptly if we discover otherwise.

(b) Our payment partners run automated risk checks that can approve or decline a transaction without human input. You're entitled to ask for that decision to be reviewed by a person.

SECTION 11 — COOKIES & CHANGES TO THIS NOTICE

Our cookie practices are documented separately in our Cookie Policy. We revisit this Privacy Notice periodically, and any meaningful update will carry a new revision date at the top. Staying on the platform after a change means you've accepted it.

SECTION 12 — GETTING IN TOUCH

LOUBERA LTD, 321-323 High Road, Office 10324, Chadwell Heath, Romford, England, RM6 6AX • info@trade-core.net