Arthur's Vault · Legal

Privacy Policy

Last updated: 18 September 2026

1. Who We Are

Arthur's Vault operates the Arthur's Vault website and associated customer account and ordering services.

For privacy questions or requests:

Arthur's Vault
arthursvault00@gmail.com

2. Information We Collect

Depending on how you use Arthur's Vault, we may collect and process:

Account information
  • Name
  • Email address
  • Account information and identifiers
  • Account status
  • Apex Rewards information
Game and fulfilment information
  • Governor UID
  • Server
  • In-game name
  • Information necessary to fulfil and investigate orders
Order information
  • Products purchased
  • Quantities
  • Amounts paid
  • Order dates/times
  • Order status
  • Fulfilment status
  • Apex Rewards earned/redeemed
  • Relevant order/support history
Payment information

Payments are processed through Stripe. Arthur's Vault may receive payment-related information from Stripe such as payment status, transaction identifiers, payment method information and information necessary to manage or investigate transactions. Arthur's Vault does not need to store complete payment card details in order for Stripe to process card payments.

Support information

If customers contact support, we may process:

  • Contact details
  • Order number
  • Messages
  • Information supplied about the issue
  • Relevant account/order/fulfilment information
Technical/security information

Where necessary to operate and protect the website, limited technical information may be processed, including security logs, authentication information, IP addresses and device/browser information.

Arthur's Vault does not currently use third-party behavioural advertising or analytics tools.

3. Why We Use Information

Information may be used to:

  • Create and maintain Arthur's Vault accounts
  • Authenticate customers
  • Process orders/payments
  • Fulfil Apex orders
  • Match orders with the correct game account
  • Maintain order history
  • Operate Apex Rewards
  • Apply offer eligibility/purchase limits
  • Provide support
  • Investigate failed/incorrect orders
  • Prevent fraud/abuse
  • Protect website security
  • Maintain transaction/business records
  • Comply with legal obligations
  • Send promotional communications where permitted

4. Lawful Bases

Depending on the purpose, Arthur's Vault may rely on:

Contract

Where processing is necessary to provide accounts, process/fulfil purchases, administer orders, operate purchase-related features and provide requested support.

Legal obligation

Where information must be processed or retained to comply with applicable legal, accounting, tax or regulatory obligations.

Legitimate interests

Where reasonably necessary for:

  • Fraud prevention
  • Security
  • Protecting customers/Arthur's Vault
  • Investigating payment/fulfilment problems
  • Enforcing purchase limits
  • Establishing/exercising/defending legal claims
Consent or other applicable marketing basis

Where consent is legally required, we request it appropriately. Customers can withdraw marketing consent or opt out of promotional communications at any time.

5. Promotional and Service Emails

We separate:

Service communications

Important messages concerning:

  • Accounts
  • Orders
  • Payments
  • Fulfilment
  • Security
  • Support
  • Apex Rewards administration
  • Important service changes
Promotional communications

Promotions, events, offers and similar marketing.

Customers can unsubscribe or opt out of promotional emails without preventing essential account/order/security/fulfilment communications. Customers are never unsubscribed from essential transactional communications merely because they opt out of marketing.

6. Who Information May Be Shared With

Information is only shared where reasonably necessary. This may include:

Stripe — for payment processing and payment-related functions.
Fulfilment providers/systems — only information reasonably necessary for fulfilling Apex orders.
Technology/service providers — hosting, infrastructure, communications, security or other providers reasonably necessary to operate Arthur's Vault.
Legal/regulatory disclosures — where required by law or reasonably necessary for fraud investigation, legal rights or protection of Arthur's Vault/customers.

Arthur's Vault does not sell personal information to advertisers.

7. International Processing

Some providers may process information outside the United Kingdom. Where applicable law requires safeguards for international transfers, appropriate lawful safeguards are used.

8. Retention

Arthur's Vault accounts do not automatically expire simply because they have been inactive. This is important because accounts may contain:

  • Apex Rewards balances
  • Purchase history
  • Order records
  • Information needed when customers return after a break

We retain account information while the account remains open and for as long as reasonably necessary to operate the account and Apex Rewards programme.

Other information may be retained where reasonably necessary for transactions, customer support, fraud prevention, security, disputes, legal claims and accounting/tax/legal obligations.

We periodically review retained information and delete or anonymise information that is no longer reasonably required, subject to applicable legal requirements and the continued operation of the account/Rewards balance.

Account inactivity alone does not cause Apex Rewards to expire.

9. Apex Rewards Data

Apex Rewards information may include:

  • Rewards earned
  • Rewards redeemed
  • Rewards balance
  • Rewards tier
  • Qualifying spend
  • Promotional Rewards activity

We process this information as necessary to operate the programme.

10. Customer Rights

Depending on circumstances and applicable law, customers may have rights to:

  • Access personal information
  • Correct inaccurate information
  • Request erasure in certain circumstances
  • Request restriction in certain circumstances
  • Object to certain processing
  • Request portability where applicable
  • Withdraw consent where applicable
  • Object to direct marketing

Privacy requests should be sent to arthursvault00@gmail.com. Identity verification may be required where appropriate.

11. Direct Marketing

Customers have the right to object to direct marketing. Promotional emails include a straightforward unsubscribe / opt-out mechanism.

12. Account Deletion

Customers may contact Arthur's Vault to request account closure or deletion. Requests are handled according to applicable data protection law.

Some information may need to be retained for legal obligations, transaction records, fraud prevention, disputes or legal claims.

Because Apex Rewards are associated with the account, customers with an unused balance should contact support before requesting deletion.

13. Security

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

14. Cookies

Arthur's Vault may use necessary cookies / similar technologies for:

  • Sign-in
  • Security
  • Sessions
  • Checkout
  • Necessary website state

Arthur's Vault does not currently use third-party behavioural advertising or analytics tools. If non-essential analytics or advertising technologies are introduced later, we will update these disclosures and implement any legally required consent mechanism.

15. Children and Purchases

Customers must be at least 18 years old to make a purchase, or have permission from a parent or legal guardian.

16. Complaints

Customers with privacy concerns can contact Arthur's Vault first at arthursvault00@gmail.com.

Customers may also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).

17. Changes

The latest Privacy Policy displays its updated date. Where a change materially affects use of personal information, we provide appropriate notice where required.

18. Contact

Related Policies
Questions? Contact arthursvault00@gmail.com or open a support ticket from your Vault.