Privacy policy

PSPAddict is an online store selling refurbished and modded PlayStation Vita consoles. For privacy questions write to privacy@pspaddict.store.

• Order data — name, delivery address, email address and phone number, so we can ship your console and keep you updated.
• Payment data — handled entirely by our payment provider. We never see or store your full card number.
• Support messages — the content of emails you send us, kept with your order history.
• Basic usage data — pages viewed and rough country level location, used only to keep the store fast and working.
• Cart contents — stored locally in your own browser so your basket survives a refresh. It never leaves your device until checkout.

• Fulfilling your order — taking payment, packing the console, printing the shipping label and sending tracking updates.
• Returns, refunds and warranty — checking purchase dates, issuing return labels and processing refunds to the original card.
• Customer support — answering your questions and keeping a history so you never have to repeat yourself.
• Fraud prevention — spotting stolen cards and fake delivery addresses before a parcel leaves the workshop.
• Legal and accounting — keeping invoices and tax records for the period the law requires.
• Improving the store — aggregated, anonymous page statistics so we know what to fix.

We never sell or rent your data, and we only send marketing email if you tick the box to receive it. Every marketing email has a one-click unsubscribe link.

• Contract — order, delivery, return and warranty data. Without it we cannot sell you a console.
• Legal obligation — invoices and tax records.
• Legitimate interest — fraud prevention, security and basic store analytics, balanced against your privacy.
• Consent — marketing email and published review photos. You can withdraw consent at any time.

Only the parties needed to fulfil your order: our payment provider, the shipping carrier that delivers your parcel, and our email provider. Each receives the minimum data required and may not use it for their own purposes.

Our providers may process data outside your country. Where data leaves the EEA or the UK it is protected by Standard Contractual Clauses or an equivalent approved safeguard, and only the data needed for that service is transferred.

• Invoices and order records — retained for the statutory accounting period, normally 7 to 10 years depending on your country.
• Delivery address and phone number — 24 months after delivery, so we can handle warranty and return claims.
• Support conversations — 24 months from the last message in the thread.
• Warranty records — 12 months after the warranty period ends.
• Marketing subscription — until you unsubscribe, then a suppression record so we do not email you again by mistake.
• Cart data in your browser — until you clear it or your browser storage is cleared. It lives on your device, not our servers.

When a retention period ends the data is deleted or irreversibly anonymised.

We use only the storage needed to run the store — your cart and session. No advertising or cross-site tracking cookies are set.

• Access — get a copy of the personal data we hold about you.
• Correction — fix anything inaccurate, such as a misspelled delivery address.
• Deletion — have your data erased, except records we must legally keep.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a machine-readable file.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — unsubscribe from marketing or ask us to remove a published review photo.

Email privacy@pspaddict.store with your order number. We reply within 30 days and never charge for a request. Exercising a right never affects the price or service you receive.

The store is not aimed at children under 16 and we do not knowingly collect their data. If a child has ordered without a parent's permission, contact us and we will delete the record.

We do not use profiling or automated decision-making that has a legal effect on you. Fraud checks may flag an order, but a person always makes the final call.

The store runs over encrypted connections, access to order data is limited to the people who fulfil orders, and payment details never touch our systems.

If a breach ever affects your personal data we notify you and the relevant supervisory authority without undue delay, and tell you plainly what happened and what to do.

If you are unhappy with how we handled your data, write to us first — we would rather fix it directly. You also have the right to complain to the data protection authority in your country of residence.

If this policy changes we update the date at the top of this page. Material changes are also announced on the home page.