Privacy policy

Last updated: 24 October 2026.

RoyalCDKeys is operated by ROYAL KEYS MARKET LIMITED, 135 Bonham Strand Trade Centre, 135 Bonham Strand, Sheung Wan, Hong Kong. Contact: support@royalcdkeys.com.

Scope and responsibility

This notice explains how ROYAL KEYS MARKET LIMITED handles personal information when you visit RoyalCDKeys, buy a product, receive digital delivery or contact support. We are responsible for the processing we determine. Using the website does not, by itself, constitute consent to every form of data processing.

Information we collect

  • Information you provide: name, email, contact and billing details, account information, orders and support messages, including relevant screenshots or product-error information you choose to send.
  • Transaction information: products, amounts, currency, payment status, transaction references, limited card information and payment-verification results supplied by the payment provider.
  • Technical and usage information: IP address, browser and device information, cookie identifiers, visits and interactions with the store.
  • Digital-delivery records: delivery emails, delivery status, access-link activity and records of revealing product details where recorded by our delivery systems.

We collect information directly from you, automatically through the store and its technologies, and from providers involved in payments, hosting, delivery or support. Information needed to process and deliver an order is necessary for that purchase; optional marketing choices are not a condition of purchase. Do not send full card details or personal passwords to support.

Why we use information

  • To process payments, fulfil digital orders, provide account access, investigate delivery or activation problems and handle replacements and refunds.
  • To operate, secure and improve the store, prevent fraud, maintain relevant records and respond to payment disputes.
  • To meet accounting, tax and other legal requirements and establish or defend legal claims.
  • To send relevant service messages and, where permitted and subject to your choices, marketing messages, analytics and personalised advertising.

Where a legal basis is required, order fulfilment and requested support rely on performance of a contract or steps requested before it; required records rely on legal obligations; proportionate security, fraud prevention and service improvement rely on legitimate interests where permitted; and activities requiring permission, including certain marketing or non-essential tracking, rely on consent. You may withdraw consent without affecting processing lawfully carried out before withdrawal.

Shopify and other recipients

Our store is hosted by Shopify, which processes information about visits and purchases. Shopify Network Intelligence is enabled for the store. This allows Shopify to combine information about interactions with our store, other merchants and Shopify to provide enhanced services, including personalisation, analytics, fraud prevention and advertising. For some of these purposes Shopify acts as an independent controller or business.

Read Shopify's Consumer Privacy Policy. You can also use Shopify's privacy portal to learn about and exercise applicable rights relating to Shopify's processing, including objections, withdrawal of consent and advertising choices.

Information may also be disclosed as necessary to payment processors and banks, digital-delivery and fulfilment providers, support and communications providers, analytics and advertising providers, professional advisers, and public authorities where legally required. Relevant order, payment, delivery and support records may be shared with banks or payment networks to investigate disputes. Suppliers receive information relevant to their role, subject to applicable law. Independent payment, platform or account services may also process information under their own privacy notices.

Cookies, analytics and marketing choices

We and our providers, including Shopify, use cookies and similar technologies for store operation, security, preferences, analytics and advertising. Our existing analytics tools may include Google Analytics; information about Google's practices is available in Google's Privacy Policy.

Where required, non-essential tracking and relevant advertising processing require your consent. Use the privacy or cookie choices displayed on the store, where available, or contact us to request help managing your choices. Browser cookie controls can also be used, although blocking essential cookies can affect the store. You can unsubscribe from marketing emails using their unsubscribe link or by contacting us; service messages about an order may still be sent.

Depending on your location, you may have the right to opt out of data sharing or targeted advertising. Use our data-sharing opt-out page, email support@royalcdkeys.com, or exercise Shopify-related choices through its privacy portal. Where applicable and supported by the relevant consent tools, Global Privacy Control signals express an opt-out choice.

International transfers, retention and security

We are based in Hong Kong, and our providers operate internationally. Information may be processed in Hong Kong, the United States and other countries, including in connection with Shopify's enhanced services. Restricted transfers must be subject to the safeguards required by applicable law, such as adequacy decisions or appropriate contractual safeguards. Contact us for information about safeguards relevant to your data.

We retain information only for as long as reasonably necessary for the purposes described, taking into account fulfilment, support, applicable accounting and legal retention requirements, fraud prevention and dispute or claim periods. Retention depends on the record and its purpose rather than a single period for all data. We take reasonable organisational and technical measures to protect information; no online service can guarantee absolute security.

Your rights and requests

Depending on applicable law, you may request access to or a copy of your information, correction, deletion, restriction, portability, withdrawal of consent or an objection to particular uses, including relevant marketing. Some information may need to be retained to meet legal obligations or handle an ongoing claim. We may verify identity using information proportionate to the request.

Email support@royalcdkeys.com with “Privacy request” in the subject, or write to ROYAL KEYS MARKET LIMITED at the business address above. You may use an authorised agent where applicable law permits; we may request proportionate proof of authorisation. If applicable law provides an appeal right, you may appeal a decision using the same contact details. We respond within the deadlines required by applicable law. You may also complain to your local data-protection authority, including the Hong Kong Privacy Commissioner for Personal Data where relevant. Where applicable law protects against discrimination for exercising privacy rights, those protections apply.

Children and changes

The store is intended for adults or purchases made with appropriate parent or guardian involvement. If you believe a child has supplied personal information without the required permission, contact us so we can investigate and take appropriate action.

We may update this notice to reflect our practices or legal requirements and will show the latest revision date here. Where law requires additional notice or consent for a material change, we will provide it.