Privacy Policy
We sell software licences. To do that we need your name, email and payment details, and we keep records of your orders.
We send order and support emails, basket reminders if you start a purchase and do not finish, and marketing only if you asked for it. You can stop the reminders and the marketing at any time.
We use Google Analytics, Google Ads and Microsoft Clarity to understand how the site is used and which adverts work. Microsoft Clarity Brand Agent also provides interactive product guidance. You control optional tracking through the cookie banner. We never sell your personal information.
1. Who we are
AutoSoftKey is an online store selling genuine software licences, operated by Cadunlock LLC. We are the data controller for the personal information described in this notice.
| Trading name | AutoSoftKey (autosoftkey.co.uk) |
| Company | Cadunlock LLC |
| Registered address | 131 Continental Drive, Suite 305, Newark, Delaware 19713, United States |
| Data protection contact | support@autosoftkey.co.uk |
Because we offer goods to customers in the United Kingdom, UK data protection law (UK GDPR and the Data Protection Act 2018) applies to that activity, alongside the Privacy and Electronic Communications Regulations (PECR) for marketing messages.
2. At a glance
- We do not sell your personal information.
- We never see your full card number. Payments are handled by Stripe.
- Every marketing or reminder email has an unsubscribe link.
- You can ask us for a copy of your data, or ask us to delete it. See section 8.
3. What we collect, why, and for how long
The table below sets out each category of information, why we use it, the lawful basis we rely on, and how long we keep it.
| Information | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Order details Name, email, billing country and postcode, phone and company name if you give them, items bought, order value | To take payment, deliver your licence key, provide support and handle refunds or disputes | Performance of a contract; legal obligation for tax and accounting records | 6 years from the end of the tax year in which the order was placed |
| Payment records Transaction reference, card type, last four digits, billing country | To confirm payment, reconcile accounts and investigate chargebacks or fraud | Performance of a contract; legitimate interests in fraud prevention | 6 years, in line with accounting records |
| Unfinished checkouts Name, email, phone and the items in your basket, captured when you fill in the checkout form but do not place the order | To send you a reminder that your basket is saved. See section 4 | Legitimate interests, together with the soft opt-in under PECR regulation 22(3) | 30 days, then the record is deleted automatically |
| Support and enquiry records Messages you send us and our replies | To answer your question and keep a record of what was agreed | Performance of a contract; legitimate interests in running a support service | 2 years from the last message, unless linked to an ongoing dispute |
| Newsletter subscription Email address and the record of your opt-in | To send marketing you have asked for | Consent | Until you unsubscribe, plus a minimal suppression record so we do not email you again |
| Reviews Display name, rating and review text | To publish reviews of our products and service | Consent | Until you ask us to remove the review |
| Technical and security data IP address, browser and device type, server and security logs | To keep the site running, detect abuse and diagnose faults | Legitimate interests in the security and availability of the site | Up to 12 months |
| Cookie and consent choices What you selected on the cookie banner | To honour your choice and to be able to show that we did | Legal obligation under PECR | 12 months, then we ask again |
4. Abandoned basket reminders
If you enter your details at checkout but do not complete the order, we save your email address and the contents of your basket so that we can send you a short reminder. This is the only reason we keep that information.
- We send at most three reminders: about 30 minutes, 1 day and 3 days after you left the checkout.
- The third reminder may include a one-time discount code.
- We stop immediately once you complete the order, unsubscribe, or 30 days pass.
We rely on the soft opt-in in PECR regulation 22(3): you gave us your details in the course of buying from us, the reminder relates to that same purchase, and you are given a way to refuse both when you enter your email and in every message.
- Select “No Thanks” next to the email field at checkout, before you submit your details.
- Select unsubscribe at the bottom of any reminder email.
- Email us at support@autosoftkey.co.uk and we will remove you.
Stopping basket reminders does not affect emails about an order you have actually placed.
5. Cookies, analytics and advertising
We use cookies and similar technologies. Anything that is not strictly necessary for the site to work is only used after you agree on the cookie banner, and you can change your mind at any time using the Cookie settings link in the footer.
| Category | What it does | Runs by default? |
|---|---|---|
| Strictly necessary | Keeps you logged in, remembers your basket, secures checkout, stores your cookie choice | Yes — the site cannot work without these |
| Analytics | Google Analytics 4 and Microsoft Clarity, so we can understand which pages and products people use and improve the shopping experience | No — only after you agree |
| Advertising | Google Ads conversion tracking and remarketing, so we can measure which adverts lead to sales and show relevant adverts | No — only after you agree |
Measuring advert performance
When you complete an order and you have agreed to advertising cookies, we send Google a scrambled (hashed) version of your email address and phone number. Google uses it only to match your purchase to an advert you clicked, so that we can see which adverts work. Hashing is one-way: neither we nor Google can read your original email or phone number from it. If you decline advertising cookies, this does not happen.
Our separate Cookie Policy lists the individual cookies in more detail.
Microsoft Clarity Brand Agent
We use Microsoft Clarity Brand Agent to provide interactive product guidance and customer support. Business and order-management data may be used to personalise the experience. Information entered in the assistant, including chat text and interaction events, is shared with Microsoft and used to operate, secure and improve the service.
For more information about how Microsoft processes and protects data, see the Microsoft Privacy Statement. You can request removal of insights derived from your Brand Agent interactions at any time by typing a clear instruction in the chat, such as “Delete my saved information” or “Forget my previous interactions”. You can also use our Contact form for privacy assistance.
6. Who we share information with
We share only what is necessary, and only with providers who are bound to keep it confidential and use it solely on our instructions. We do not sell personal information and we do not share it with third parties for their own marketing.
| Provider | What they do for us | Main location |
|---|---|---|
| Microsoft (Clarity and Brand Agent) | Session analytics, interactive product guidance, chat processing, service security and improvement | United States / international |
| Stripe | Takes and secures card, Apple Pay and Google Pay payments | United States / Ireland |
| Google (Analytics, Ads, Merchant Center, Tag Manager) | Website analytics, advert measurement and product listings | United States / EU |
| Hostinger | Website hosting and outgoing email | European Union |
| Automattic (Jetpack) | Site statistics and security features | United States |
| Trustpilot | Collects and displays independent customer reviews | European Union |
| CookieYes | Records and manages your cookie consent | European Union / India |
We may also disclose information where the law requires it, to establish or defend legal claims, or if the business is sold or reorganised — in which case this notice would continue to apply to information transferred.
7. International transfers
Cadunlock LLC is based in the United States, and some of the providers above process information outside the United Kingdom. Where we transfer personal information out of the UK, we rely on one of the safeguards recognised by UK law — usually the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, or a country the UK has found to provide adequate protection. You can ask us for details of the safeguard used for a specific transfer.
8. Your rights
If UK or EU data protection law applies to you, you have the right to:
- Access — get a copy of the personal information we hold about you.
- Rectification — have inaccurate information corrected.
- Erasure — ask us to delete information we no longer need to keep.
- Restriction — ask us to pause processing while a dispute is resolved.
- Objection — object to processing based on legitimate interests, including basket reminders.
- Portability — receive information you gave us in a portable format.
- Withdraw consent — at any time, where we relied on consent.
Email support@autosoftkey.co.uk. We reply within one month. We may need to confirm your identity first, and some rights are limited where we are required to keep records — for example, we cannot delete an invoice we must keep for tax purposes.
9. Your marketing choices
| Type of email | When you get it | How to stop it |
|---|---|---|
| Order and licence emails | When you place an order or contact support | These are not marketing and cannot be switched off while an order is active |
| Basket reminders | Only if you start a checkout and do not finish it | “No Thanks” at checkout, or unsubscribe in the email |
| Newsletter and offers | Only if you opted in | Unsubscribe link in every email |
10. Security
The site runs over HTTPS, payment pages are handled by Stripe so card details never reach our servers, administrator access is restricted, and we take regular encrypted backups. No online service can be completely secure, but if a breach ever affected your rights we would tell you and the regulator as the law requires.
11. Children
Our products are sold to adults and businesses. We do not knowingly collect information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
12. Changes to this notice
We update this notice when our services, providers or legal obligations change. The date at the top always shows the current version. If we make a change that materially affects how we use your information, we will make that clear on this page.
13. Contact and complaints
For any privacy question or request, email support@autosoftkey.co.uk or write to Cadunlock LLC, 131 Continental Drive, Suite 305, Newark, Delaware 19713, United States.
Please come to us first — most things are quickest to fix directly. If you are not satisfied, customers in the United Kingdom can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.