1. Who controls your information
Phantom Scripts is operated by the UK sole trader whose legal name, geographical business address and support email are shown in the business details on our home page. That sole trader is the data controller for information handled by Phantom Scripts.
2. Information we collect
- email address and display name;
- account, verification and login information;
- Discord user ID, username, avatar and role status;
- Stripe subscription ID, plan, status, payer email and billing dates;
- security information such as IP address and request logs;
- support messages and communications you send us.
Phantom Scripts does not receive or store your complete Stripe card or bank-account details.
3. Why we use the information
- to create and secure your account;
- to verify email and connect Discord;
- to provide and manage paid membership access;
- to process cancellations and subscription updates;
- to prevent fraud, abuse and unauthorised access;
- to answer support requests;
- to meet accounting, tax and legal obligations.
4. Lawful bases
Depending on the activity, we use information because it is necessary to perform the membership contract, comply with a legal obligation, or pursue legitimate interests such as account security, fraud prevention and service improvement.
5. Who information is shared with
Information may be processed by service providers used to operate Phantom Scripts, including:
- Cloudflare for website hosting, security and databases;
- Stripe for payments and recurring subscriptions;
- Discord for account linking and membership roles;
- Resend for transactional emails.
Information may also be disclosed where required by law, to deal with fraud or to establish or defend legal claims.
6. International processing
Some service providers may process information outside the UK. Where required, appropriate legal safeguards are used for those transfers.
7. How long information is kept
Account information is kept while the account is in use and for only as long afterwards as reasonably needed. Payment, transaction, tax and dispute records may be retained for up to six years where legally or operationally necessary. Temporary verification records are kept for a shorter period.
8. Cookies
Phantom Scripts uses strictly necessary cookies for account sessions, sign-in and security. If optional analytics or marketing cookies are introduced, separate information and consent will be provided where required.
9. Security
Reasonable technical and organisational measures are used to protect accounts and personal information. No internet service can guarantee absolute security.
10. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to the use of your information, and to receive certain information in a portable format.
You may also complain to the UK Information Commissioner's Office if you believe your data-protection rights have been breached.
11. Contact
Send privacy or data-rights requests to the support email shown in the business details on the home page. Identity verification may be required before account information is disclosed or changed.