Legal

Privacy Policy

Draft for legal review.

Last updated: 8 October 2026

1. Who we are

This policy explains how [company legal name] ("Futcoin", "we", "us") collects and uses personal data when you visit futcoin.co.uk, place an order or contact us. We are the controller of that data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our company number is [registration number], our registered address is [registered address] and our ICO registration number is [ICO registration number]. For anything to do with your data, email [email protected].

2. What we collect

Order details: your platform, the amount of coins, the delivery method, your order number and the email address you use at checkout. [Confirm which order details Onlyfarms shares with us.]
Payment details: payments are taken at checkout by our partner Onlyfarms and its payment providers. We never see or store your full card number.
Comfort Trade details: if you choose Comfort Trade, your EA account login and backup codes.
Player Auction details: the player and price used for each transfer, so it can be matched to your order.
Messages: what you send us by email, with your email address and any order number you include. Our contact form and live chat are not connected yet, and this policy will be updated when they are.
Technical data: your IP address, browser type and the pages you request, logged by [hosting provider] to keep the site running and secure.
Analytics: if you agree to analytics cookies, information about how you use the site, collected through [analytics tool].

The currency you choose for prices is saved in your own browser and is not sent to us. Our cookie policy explains this.

3. How we use it and why

UK GDPR requires a lawful basis for each use of your data. Ours are:

To carry out your order (contract): delivering your coins, handling guarantee claims and refunds, and answering questions about your order.
To meet legal duties (legal obligation): keeping order and payment records for tax and accounting, and responding to lawful requests from the authorities.
To protect the service (legitimate interests): preventing fraud and payment abuse, keeping the site secure and dealing with complaints or legal claims. We weigh these interests against your rights before relying on them.
To understand how the site is used (consent): analytics, only if you agree. You can withdraw consent at any time.

We do not make decisions about you based solely on automated processing [confirm with Onlyfarms for fraud checks at checkout]. We do not send marketing emails unless you have opted in to them [confirm whether any marketing is planned].

4. Your EA login and backup codes

Comfort Trade details get extra care. They are used only to sign in to your account and deliver your order, by the people handling that delivery for us and Onlyfarms. They are never used for anything else, and they are deleted when the 72-hour guarantee period for your order ends. Please change your EA password once your coins have arrived.

Onlyfarms (onlyfarms.gg), our partner that processes checkout, payment and delivery. For the data it collects at checkout it acts as [controller / processor: confirm] under its own privacy policy.
Payment providers used at checkout, to take payment and prevent fraud.
Service providers that help us run the business, such as [hosting provider], [email provider] and, with your consent, [analytics tool]. They may only use your data on our instructions.
Professional advisers, the police, courts or regulators, where the law requires it or to protect our legal rights.

We do not sell your personal data.

6. Transfers outside the UK

Some of the companies above, including Onlyfarms, may process data outside the UK [confirm locations]. When that happens we make sure the transfer is protected, for example because the country is covered by UK adequacy regulations, or because we use the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

7. How long we keep it

EA login and backup codes: deleted when the 72-hour guarantee period for the order ends.
Order and payment records: as long as UK tax and accounting rules require, [retention period].
Support emails: [retention period] after the matter is closed.
Analytics data: [retention period], as set in [analytics tool].

8. Keeping your data safe

The site uses an encrypted connection (HTTPS), and access to order data and account details is limited to the people who need it for their work. No system is completely secure. If a breach puts your rights at high risk, we will tell you without undue delay and report it to the ICO where the law requires.

9. Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data deleted in some circumstances;
ask us to restrict or stop using your data in some circumstances, including objecting to uses based on legitimate interests;
receive data you gave us in a portable format;
withdraw your consent at any time, where we rely on it.

To use any of these rights, email [email protected]. We may ask you to confirm your identity first. We reply within one month, and there is normally no charge.

10. Under 18s

Our service is for people aged 18 or over, or under 18 with a parent's or guardian's permission. If you are a parent and believe your child has given us their data without your permission, contact us and we will help.

11. Complaints and the ICO

If you are worried about how we use your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.

12. Changes to this policy

We will update this policy when our service or the law changes, and the date at the top will show the latest version. If a change makes a real difference to how we use your data, we will tell you [how: by email or a notice on the site]. You can read how orders work in our terms of service.