Privacy Policy

Effective Date: 15 December 2025

This Privacy Policy explains how NEXSKINS LTD (“NEXSKINS LTD”, the “Company”, “we”, “our”, or “us”) collects, uses, records, stores, shares, transfers, protects, and otherwise processes personal data in connection with the website http://nexskins.com/ and any related pages, features, marketplace tools, communications, transactions, and services made available through that website (together, the “Service”).

Company Details
NEXSKINS LTD
Registered office: 5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN
Registered: 02 December 2025
Company registration number: 871564
Telephone: +44 748 881 8429
Email: [email protected]

This Privacy Policy is intended to inform users of the Service (each, a “User”) how personal data is processed by NEXSKINS LTD in accordance with applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and, where applicable, the General Data Protection Regulation (EU) 2016/679 (“EU GDPR”).

For the purposes of applicable data protection law, NEXSKINS LTD acts as the data controller in respect of personal data processed through the Service, except where this Privacy Policy states otherwise or where another party clearly acts as an independent controller.

By accessing or using the Service, the User acknowledges that they have been provided with this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed by NEXSKINS LTD in connection with:

  • access to and use of the Service.
  • registration and administration of user accounts.
  • the listing, purchase, sale, exchange, transfer, deposit, or withdrawal of Counter-Strike 2 skins or related digital marketplace activity facilitated through the Service.
  • technical support, customer service, and user communications.
  • fraud prevention, security, compliance, and dispute handling.
  • operational analytics, diagnostics, and improvement of the Service; and
  • compliance with legal, regulatory, tax, accounting, and law enforcement obligations.

 

This Privacy Policy does not apply to websites, services, platforms, games, publishers, payment environments, social networks, Steam services, or third-party tools that are operated independently by third parties, even if they are accessible through or connected to the Service. Such third parties process personal data under their own terms and policies.

2. Categories of Personal Data We Collect

Depending on the nature of the User’s interaction with the Service, NEXSKINS LTD may collect and process the following categories of personal data.

2.1 Account and identity-related data

This may include:

  • username or account name;
  • Steam ID, Steam profile identifier, or other linked account identifier;
  • profile image or avatar;
  • email address;
  • account status;
  • authentication and login-related records;
  • records relating to account creation, verification, restriction, suspension, or closure.

2.2 Marketplace and transaction data

This may include:

  • records of listings, offers, purchases, sales, transfers, exchanges, deposits, withdrawals, or other marketplace interactions;
  • item-related transaction data, including item identifiers and transaction metadata;
  • internal transaction references;
  • timestamps and status logs;
  • records of settlement, payout, reversal, cancellation, or dispute activity;
  • communications or documentation relating to contested or suspicious transactions.

2.3 Payment and payout-related data

Where payments or payouts are supported through the Service, we may process limited payment-related information necessary to administer transactions, such as:

  • payment status;
  • payout status;
  • transaction references;
  • billing-related metadata;
  • payment provider response codes or identifiers.

 

NEXSKINS LTD does not represent that it stores full payment card details unless expressly stated elsewhere. Payment credentials and regulated payment information may be processed directly by third-party payment service providers acting under their own legal and compliance obligations.

2.4 Technical and device data

This may include:

  • IP address;
  • browser type and version;
  • operating system;
  • device type and configuration;
  • language settings;
  • time zone settings;
  • referring and exit pages;
  • log files;
  • cookie identifiers and similar online identifiers;
  • network and connection information;
  • security event data.

2.5 Usage and behavioral data

This may include:

  • pages visited;
  • features used;
  • clicks, actions, and navigation paths;
  • search queries entered within the Service;
  • timestamps of account access and user activity;
  • session history;
  • records of preferences and consent choices;
  • marketplace behavior patterns relevant to fraud prevention, functionality, or service improvement.

2.6 Communications and support data

This may include:

  • emails, messages, or support tickets sent to NEXSKINS LTD;
  • complaint details;
  • records of user inquiries;
  • attachments or evidence submitted in relation to support or disputes;
  • correspondence relating to privacy requests, legal requests, or operational issues.

2.7 Compliance, verification, and risk data

Where necessary, NEXSKINS LTD may process data required to verify account integrity, detect abuse, investigate suspicious conduct, comply with legal obligations, protect the Service, or respond to regulatory or legal requests. This may include internal risk flags, security review notes, and compliance-related records.

2.8 Data received from third parties

We may receive personal data from third parties, including:

  • linked account providers or authentication providers;
  • payment service providers;
  • fraud prevention, anti-bot, hosting, infrastructure, and cybersecurity vendors;
  • analytics or technical support providers;
  • legal advisers, regulators, courts, law enforcement agencies, or public authorities.

3.How Personal Data Is Collected

NEXSKINS LTD may collect personal data:

  • directly from the User when the User creates an account, interacts with the Service, communicates with us, or submits information;
  • automatically through the User’s use of the Service, including through logs, cookies, pixels, similar technologies, and technical monitoring;
  • from integrated third-party services or accounts connected by the User;
  • from service providers assisting with security, transactions, support, infrastructure, analytics, or compliance;
  • from legal, regulatory, or public sources where collection is lawful and necessary.

4. Purposes of Processing

NEXSKINS LTD processes personal data only to the extent necessary for legitimate and lawful business, contractual, legal, technical, or security purposes. These purposes may include the following.

4.1 Providing the Service

Including:

  • creating, administering, and maintaining user accounts;
  • enabling access to platform features;
  • facilitating marketplace functionality;
  • enabling the listing, transfer, purchase, and sale of digital items;
  • maintaining account preferences and account-related settings.

4.2 Operating and administering marketplace activity

Including:

  • recording and administering transactions;
  • validating actions carried out through the Service;
  • reconciling transaction histories;
  • managing transaction-related communications, issues, reversals, or disputes.

4.3 Security, fraud prevention, and platform integrity

Including:

  • detecting, preventing, and investigating fraud, scams, chargeback abuse, automated misuse, bots, account compromise, suspicious trading patterns, or other prohibited conduct;
  • maintaining system integrity and service reliability;
  • enforcing internal controls, acceptable use rules, and platform restrictions;
  • preventing unauthorized access or unlawful activity.

4.4 Customer service and communications

Including:

  • responding to support requests, complaints, and inquiries;
  • communicating regarding account matters, service notices, updates, technical alerts, and security issues;
  • handling user feedback and operational correspondence.

4.5 Improvement, testing, and analytics

Including:

  • understanding how the Service is used;
  • diagnosing bugs and technical issues;
  • improving website stability, performance, usability, and product design;
  • conducting internal reporting, testing, and quality assurance.

4.6 Compliance with legal obligations

Including:

  • complying with legal, regulatory, accounting, tax, audit, disclosure, and recordkeeping requirements;
  • responding to lawful requests, investigations, court orders, subpoenas, or regulatory demands;
  • maintaining records necessary to establish, exercise, or defend legal claims.

4.7 Protection of business and legal interests

Including:

  • protecting the rights, property, and security of NEXSKINS LTD, its users, service providers, and advisers;
  • supporting corporate governance, legal review, insurance matters, auditing, and dispute resolution;
  • preparing for, or carrying out, business transactions such as investment, financing, acquisition, merger, restructuring, or asset transfer.

5. Lawful Bases for Processing

NEXSKINS LTD processes personal data only where a valid lawful basis exists under applicable data protection law. Depending on the circumstances, we may rely on one or more of the following lawful bases.

5.1 Contractual necessity

Processing may be necessary to enter or perform a contract with the User, including:

  • creating and maintaining the User’s account;
  • providing access to the Service;
  • processing marketplace actions and associated records;
  • handling service-related support.

5.2 Legal obligation

Processing may be necessary to comply with legal obligations imposed on NEXSKINS LTD, including obligations relating to:

  • tax and accounting compliance;
  • record retention;
  • lawful disclosure;
  • fraud prevention;
  • law enforcement cooperation;
  • regulatory compliance.

5.3 Legitimate interests

Processing may be necessary for the legitimate interests of NEXSKINS LTD or a relevant third party, provided those interests are not overridden by the User’s rights and freedoms. These interests may include:

  • operating and improving the Service;
  • securing systems and accounts;
  • preserving marketplace integrity;
  • preventing fraud, abuse, and unauthorized conduct;
  • obtaining professional advice;
  • maintaining records;
  • defending legal rights;
  • managing business risk and continuity.

5.4 Consent

Where required by law, NEXSKINS LTD will rely on the User’s consent, including in relation to certain cookies, similar technologies, or optional communications. Where processing is based on consent, the User has the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Automated Processing, Monitoring, and Risk Review

NEXSKINS LTD may use automated systems, rules, filters, or technical indicators to support:

  • security monitoring;
  • fraud detection;
  • abnormal account or transaction pattern detection;
  • bot detection;
  • service abuse prevention;
  • risk-based review and escalation.


Such tools may assist NEXSKINS LTD in identifying suspicious conduct, prioritizing manual review, applying temporary safeguards, or protecting users and infrastructure.

Unless expressly stated otherwise in a specific context, NEXSKINS LTD does not represent that decisions producing legal or similarly significant effects are made solely by automated means without appropriate safeguards where such safeguards are required by law.

7. Cookies and Similar Technologies

The Service may use cookies, local storage, scripts, tags, pixels, and similar technologies for authentication, security, functionality, analytics, consent management, and other operational purposes.

Where required by applicable law, non-essential cookies and similar technologies are used only after valid consent has been obtained. Further details regarding the categories, purposes, controls, and lawful use of cookies are set out in the separate Cookie Policy.

8. Disclosure and Sharing of Personal Data

NEXSKINS LTD may disclose personal data only where reasonably necessary for the purposes described in this Privacy Policy, where legally required, or where otherwise permitted by applicable law.

Personal data may be shared with the following categories of recipients.

8.1 Service providers and processors

Including providers of:

  • website hosting;
  • cloud infrastructure;
  • content delivery;
  • analytics;
  • fraud prevention;
  • cybersecurity;
  • customer support tools;
  • technical maintenance;
  • communications systems;
  • database and storage services.

Such service providers process personal data on documented instructions where they act as processors.

8.2 Payment and transaction-related providers

Including payment processors, payout providers, transaction support vendors, and other third parties necessary to facilitate financial or transactional aspects of the Service.

8.3 Professional advisers

Including lawyers, accountants, auditors, consultants, insurers, compliance professionals, and other external advisers where disclosure is necessary for legitimate business or legal purposes.

8.4 Authorities and official bodies

Including regulators, law enforcement bodies, tax authorities, courts, administrative bodies, or other public authorities where disclosure is required by law, legal process, or the legitimate protection of rights and interests.

8.5 Corporate transaction counterparties

Personal data may be disclosed in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, insolvency process, business sale, or transfer of assets, subject to appropriate confidentiality and legal protections.

NEXSKINS LTD does not state in this Privacy Policy that it sells personal data to unrelated third parties for their own unrestricted advertising purposes.

9. International Transfers of Personal Data

Personal data processed by NEXSKINS LTD may be stored or accessed outside the United Kingdom and, where applicable, outside the European Economic Area.

Where personal data is transferred internationally, NEXSKINS LTD will take steps intended to ensure that such transfers are made in accordance with applicable legal requirements. Depending on the circumstances, these safeguards may include:

  • adequacy regulations or adequacy decisions;
  • standard contractual clauses;
  • international data transfer agreements;
  • contractual confidentiality protections;
  • supplementary technical and organizational safeguards.

 

The transfer mechanism used will depend on the destination country, the recipient, and the processing context.

10. Data Retention

NEXSKINS LTD retains personal data only for as long as reasonably necessary for the purposes for which it was collected, including for the purposes of:

  • providing the Service;
  • maintaining account continuity;
  • administering transactions;
  • complying with legal and regulatory obligations;
  • resolving disputes;
  • preventing fraud;
  • enforcing agreements;
  • protecting legal rights.

Retention periods may vary depending on the category of personal data and the applicable legal or operational need.

In determining retention periods, NEXSKINS LTD may consider:

  • the nature, sensitivity, and volume of the data;
  • the purpose for which the data was collected;
  • whether the data is necessary for ongoing account functionality;
  • applicable limitation periods;
  • legal, tax, accounting, compliance, evidential, and audit requirements;
  • security and fraud prevention needs.

Once personal data is no longer required, NEXSKINS LTD will delete it, anonymize it, or otherwise render it inaccessible, unless continued retention is required or permitted by law.

11. Data Security

NEXSKINS LTD implements appropriate technical and organizational measures intended to protect personal data against unauthorized or unlawful access, disclosure, alteration, destruction, or accidental loss.

These measures may include:

  • encryption in transit using SSL/TLS or equivalent protections;
  • access restrictions and role-based permissions;
  • authentication controls;
  • security monitoring and logging;
  • backup and recovery measures;
  • infrastructure hardening;
  • vulnerability management;
  • incident response procedures;
  • confidentiality obligations for relevant personnel and providers.


While NEXSKINS LTD seeks to maintain a level of security appropriate to the risks involved, no internet-based system or electronic storage method can be guaranteed to be completely secure.

12. Data Breach Management

Where NEXSKINS LTD becomes aware of a personal data breach, it will assess the incident and take action consistent with applicable law, including containment, investigation, remediation, documentation, and notification where notification is legally required.

13. User Rights

Subject to applicable law, Users may have the following rights in relation to their personal data:

  • the right to obtain information about how personal data is processed;
  • the right of access to personal data;
  • the right to request rectification of inaccurate or incomplete data;
  • the right to request erasure in certain circumstances;
  • the right to request restriction of processing in certain circumstances;
  • the right to object to certain processing, including certain processing based on legitimate interests;
  • the right to data portability where applicable;
  • the right to withdraw consent where processing is based on consent;
  • rights relating to certain automated decision-making, where applicable.

Requests may be submitted using the contact details set out below. NEXSKINS LTD may request evidence necessary to verify identity before taking action on a request. Rights are not absolute and may be subject to legal exemptions, exceptions, and limitations.

14. Complaints

If a User believes that NEXSKINS LTD has processed personal data unlawfully or contrary to applicable data protection law, the User may contact NEXSKINS LTD first so that the matter may be reviewed.

The User may also lodge a complaint with a competent supervisory authority. In the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO). Users in the European Economic Area may also have the right to complain to the supervisory authority in their country of residence, workplace, or the place of the alleged infringement, where applicable.

15. Children

The Service is not intended for use by children where such use would be unlawful or contrary to the Service’s eligibility requirements. NEXSKINS LTD does not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.

If NEXSKINS LTD becomes aware that personal data has been collected from a child unlawfully, that data may be deleted and associated access may be restricted or terminated.

16. Third-Party Platforms and External Links

The Service may contain links to, or integrations with, third-party platforms and services, including Steam-related environments, payment environments, external websites, or communications tools. NEXSKINS LTD is not responsible for the privacy or security practices of third parties operating independently of NEXSKINS LTD.

Users should review the privacy documentation of those third parties before interacting with their services.

17. Changes to This Privacy Policy

NEXSKINS LTD reserves the right to amend, supplement, or replace this Privacy Policy from time to time in order to reflect changes in:

  • legal or regulatory requirements;
  • guidance from supervisory authorities;
  • technology or security practices;
  • service functionality;
  • vendor relationships;
  • operational or business structure.

Any updated version will be published on the Service together with the updated effective date or publication date, as appropriate. Continued use of the Service after publication of an updated Privacy Policy does not waive any rights the User may have under applicable data protection law.

18. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or the processing of personal data by NEXSKINS LTD, please contact:

NEXSKINS LTD
5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN
Registered: 02 December 2025
Company registration number: 871564
Telephone: +44 748 881 8429
Email: [email protected]
Website: http://nexskins.com/