PrivacyPolicy.

01WHO WE ARE

Blacklist RP is a community-run FiveM roleplay server. The Blacklist RP website and store are operated under the trading name Gh0stUK, by the sole trader responsible for operating Blacklist RP.

For the purposes of UK data protection law, the sole trader operating under the Gh0stUK trading name is responsible for the processing of personal information described in this Privacy Policy.

For privacy-related questions, data requests, or concerns about how your information is handled, you can contact us through a ticket in our official Blacklist RP Discord server.

Data Controller: Gh0stUK Trading name of the sole trader operating Blacklist RP

Privacy contact: Blacklist RP Discord support ticket

02WHAT WE COLLECT

When you use the Blacklist RP website or make a purchase, we may collect information necessary to process and fulfil your order.

This may include:

Your in-city character name; Your Discord username or Discord identifier; Your email address; Your order and purchase history; Information relating to refunds, disputes or chargebacks; Payment-related information provided to us by our payment processor, such as transaction status, payment method type and transaction identifiers.

We do not receive or store your full payment card number, CVV/security code, PIN, or online banking credentials. Payment card information is handled by Stripe.

Where necessary for payment processing, fraud prevention, payment authentication, dispute handling or compliance, Stripe may process additional information in accordance with its own privacy policy.

If you visit the website without making a purchase, we do not intentionally collect personal information beyond information necessary for the secure and normal operation of the website, including limited technical or security logs where applicable.

03HOW WE USE IT

We use personal information where necessary to operate Blacklist RP, process purchases and provide customer support.

This may include:

Processing and fulfilling purchases; Delivering purchased services or benefits to the correct in-city character; Identifying your order when providing customer support; Contacting you regarding your purchase or support request; Processing refunds; Preventing fraud, abuse and unauthorised transactions; Handling payment disputes and chargebacks; Maintaining accurate order and financial records; Meeting legal, accounting or regulatory requirements; Maintaining the security and integrity of our website and services.

We do not sell your personal information.

We do not use your personal information for third-party advertising.

Our processing of personal information may be based on one or more of the following lawful bases under UK data protection law:

Contractual necessity

Where processing is necessary to provide a service or fulfil a purchase that you have requested.

Legal obligation

Where we are required to retain or process information to comply with applicable legal, accounting or regulatory requirements.

Legitimate interests

Where processing is reasonably necessary to operate, secure and protect Blacklist RP, prevent fraud or abuse, resolve disputes and maintain appropriate business records.

Where we rely on legitimate interests, we will only process information where it is necessary and proportionate and does not unfairly override your rights.

04PAYMENTS & STRIPE

Payments made through the Blacklist RP store are processed by Stripe.

When you make a payment, information required to process the transaction may be provided directly to Stripe. This can include payment information, billing information, contact information, transaction details and information used for fraud prevention and payment authentication.

Your full payment card details are handled by Stripe and are not stored on Blacklist RP's own website or servers.

Stripe may process personal information as a payment service provider and, in certain circumstances, as an independent data controller for purposes such as fraud prevention, security, payment authentication and regulatory compliance.

Stripe may also share information with banks, card networks, payment providers and other relevant parties where necessary to process transactions, prevent fraud, authenticate payments or handle disputes.

Stripe's processing of personal information is governed by its own privacy documentation.

Stripe Privacy Policy: https://stripe.com/gb/privacy

05WHO WE SHARE INFORMATION WITH

We only share personal information where necessary to operate Blacklist RP, provide requested services, process payments, comply with legal obligations or protect against fraud and abuse.

Depending on the circumstances, information may be shared with:

Stripe, for payment processing, fraud prevention, payment authentication and payment-related services; Service providers that assist with operating our website or store; Relevant parties involved in payment disputes, refunds or chargebacks; Professional, regulatory or governmental bodies where disclosure is required by law; Law enforcement or other competent authorities where we are legally required to provide information.

We do not sell personal information to third parties.

We do not share customer information with third parties for their own advertising or marketing purposes.

06HOW LONG WE KEEP YOUR INFORMATION

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Order and transaction records may be retained for as long as necessary for:

Accounting and financial record keeping; Resolving refunds, disputes and chargebacks; Customer support; Fraud prevention and abuse investigations; Meeting legal or regulatory obligations; Protecting our legitimate interests.

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

Some information may need to be retained even after you request deletion where we are legally required to keep it or where it is necessary for the establishment, exercise or defence of legal claims.

07DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Order and customer information is stored on systems used to operate Blacklist RP and is accessible only to authorised members of the Blacklist RP staff team who require access to perform their responsibilities.

Payment information is processed through Stripe's payment infrastructure rather than being stored directly on our website or servers.

While we take reasonable measures to protect your information, no internet-based system can be guaranteed to be completely secure.

08YOUR DATA PROTECTION RIGHTS

Depending on the circumstances and applicable legal requirements, you may have rights under UK data protection law, including the right to:

Request access to personal information we hold about you; Request correction of inaccurate or incomplete information; Request deletion of your personal information; Request restriction of certain processing; Object to processing based on legitimate interests; Request portability of certain information where applicable; Withdraw consent where processing is based on consent.

These rights are subject to certain legal exceptions. For example, we may need to retain information where there is a legal obligation to do so or where it is necessary to establish, exercise or defend legal claims.

To exercise your rights, open a privacy or support ticket through the official Blacklist RP Discord server.

We may need to verify your identity before completing certain requests to ensure personal information is not disclosed to the wrong person.

09INTERNATIONAL DATA TRANSFERS

Some of the service providers we use, including payment and technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law.

For information about how Stripe handles international transfers and protects personal information, please refer to Stripe's privacy documentation.

10COOKIES & LOCAL STORAGE

The Blacklist RP website uses only cookies, browser storage and similar technologies that are necessary for the operation and security of the website, where applicable.

This may include:

Staff authentication or login sessions; Security-related functionality; Essential website preferences; Remembering limited preferences, such as dismissing a sale or announcement banner; Technologies required by payment functionality provided by Stripe.

We do not intentionally use advertising cookies or third-party tracking cookies for behavioural advertising.

Stripe and other essential service providers may use cookies or similar technologies as part of payment processing, fraud prevention, security or authentication. Those technologies are governed by the relevant provider's privacy documentation.

11CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to Blacklist RP, our services, payment providers, technology or applicable legal requirements.

When significant changes are made, we will update the "Last updated" date at the top of this policy and, where appropriate, provide additional notice.

12COMPLAINTS

If you have concerns about how Blacklist RP handles your personal information, please contact us through our official Discord server first so that we can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

https://ico.org.uk/

The ICO provides information about your rights and how to make a data protection complaint.