Digital Junkyard respects your privacy and is committed to protecting your personal data. This policy explains how we look after your data when you visit digitaljunkyard.com, and tells you about your rights and how the law protects you.
The Website is not intended for children, and we do not knowingly collect data relating to anyone under the age of 16.
1. Who we are
Digital Junkyard is the controller responsible for the personal data we process through the Website. If you have any questions about this policy or about how we use your data — including any requests to exercise the rights set out below — please contact our data privacy manager at privacy@digitaljunkyard.com.
You also have the right to lodge a complaint with the UK Information Commissioner's Office at any time (ico.org.uk). We would, however, appreciate the opportunity to address your concerns first, so please contact us before approaching the regulator.
2. What we collect
"Personal data" means any information about an individual from which that person can be identified. We may collect, use, store, and transfer the following categories of personal data:
- Identity data — first name, last name, username, or similar identifier.
- Contact data — billing address, email address, and telephone numbers.
- Transaction data — details about purchases and the digital assets you have bought from us.
- Technical data — IP address, login data, browser type and version, time-zone setting, and device information.
- Marketing & communications data — your preferences for receiving marketing from us and your communication preferences.
We do not collect any "special category" personal data (race, ethnicity, religion, sex life, political opinions, trade-union membership, health, biometric or genetic data) and we do not collect information about criminal convictions or offences.
3. How we collect it
We collect personal data through direct interactions — when you create an account, place an order, complete a contact form, subscribe to our newsletter, or correspond with us — and through automated technologies such as cookies and analytics tools as you interact with the Website.
4. How we use it
We will only use your personal data when the law allows us to. Most commonly we will rely on one or more of the following lawful bases:
- Performance of a contract — when you buy a domain or another digital asset from us.
- Legitimate interests — running and improving our marketplace, preventing fraud, and informing our marketing strategy.
- Legal obligation — keeping records for tax, accounting, anti-money-laundering, and other regulatory purposes.
- Consent — for non-essential cookies and marketing where consent is required by law.
6. International transfers
Some of our processors are based outside the United Kingdom, which means processing your personal data may involve a transfer of data outside the UK. Where we transfer your data we ensure a similar level of protection through one of the safeguards recognised under UK GDPR, such as adequacy decisions or the UK International Data Transfer Agreement.
7. Security
We have put in place appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access to personal data is limited to staff and contractors who have a genuine business need, and we have procedures in place to deal with any suspected personal-data breach.
8. Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain it for a longer period in the event of a complaint or where we reasonably believe litigation is likely.
9. Your rights
Under UK data-protection law you have the following rights in relation to your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to fix data that is inaccurate or incomplete.
- Erasure — ask us to delete your personal data when there is no good reason to keep it.
- Objection — object to processing where we rely on legitimate interests.
- Restriction — ask us to suspend processing in certain circumstances.
- Portability — request transfer of your personal data to you or to another provider.
- Withdraw consent — at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us at privacy@digitaljunkyard.com. You will not have to pay a fee in most cases, and we aim to respond to all legitimate requests within one month.
11. Contact
Questions about this Privacy Policy or how we handle your data? Email privacy@digitaljunkyard.com and we will get back to you.