Privacy Policy

The controller responsible for processing your personal data is:

For any question or request about your personal data, contact us at info@mastercopter.com.

Depending on how you use our website and services, we may process:

• first and last name;
• email address;
• shipping and billing address, country;
• the display name you choose at checkout;
• customer account information;
• order history and purchased Community Box booster positions;
• Box Topper auction participation and bids;
• payment status and transaction references;
• shipping and tracking information;
• messages you send us;
• technical data needed to operate and secure the website, such as your IP address.

We only collect data that is reasonably necessary for our website and services, or where we have another valid legal basis.

We use your personal data to:

• create and manage your customer account;
• process Community Box orders and allocate your boosters;
• process and confirm payments;
• run Box Topper auctions and identify winners;
• prepare and ship your orders and provide tracking;
• communicate with you about your orders and provide customer support;
• resolve payment or delivery problems;
• prevent fraud, abuse and unauthorized account use;
• keep legally required accounting and transaction records;
• comply with other legal obligations.

We never sell your personal data.

Under the GDPR, we process your data on one or more of these legal bases:

• Performance of a contract: for example using your name, address and order details to process and deliver your purchase.
• Legal obligation: for example keeping invoices and transaction records for accounting and tax purposes.
• Legitimate interests: for example preventing fraud, securing the website and accounts, and resolving disputes, provided your rights and freedoms do not override these interests.
• Consent: where required, for example for marketing emails or non-essential cookies. You can withdraw consent at any time.

Community Box boosters are opened during a public livestream. When your booster is opened, the display name you entered at checkout may be shown on stream and in recordings.

Your full name, email address and address are never shown on stream. You are free to choose a nickname as display name. If you want your display name changed or left out of a future opening, contact us before the opening.

You can pay by bank transfer or through PayPal.

Bank transfer: when you pay by bank transfer, we receive the details shown on our bank statement, such as the name of the account holder, the account number (IBAN), the amount, the date and the payment reference. We use these only to match your payment to your order and for our accounting.

PayPal: when you pay through PayPal, we share your name, email address, order amount and order reference with PayPal. We receive back the payment status, amount, date and transaction reference. You log in and enter any card details directly in PayPal's secure environment. We never receive or store your card details or PayPal login details.

PayPal processes your data under its own legal obligations and privacy policy.

We use your shipping details to prepare your parcel, create shipping labels, send your cards, provide tracking and resolve delivery problems.

To deliver your order, we share with the postal service or courier only what they need, such as your name, shipping address, email address, a phone number where required for delivery notifications, and a shipment reference.

We never sell addresses or use them for unrelated advertising.

We keep information about your orders, such as order numbers, products and booster positions, dates, amounts, payment status, delivery details and auction purchases.

We use this to provide support, investigate payment or delivery problems, keep accurate records and meet our legal obligations.

When you bid, we store your account, bid amount, date and time, auction history, whether you won and the payment status.

We use this to run the auction, determine the highest valid bidder, investigate technical problems, prevent manipulation and resolve disputes.

Your full personal details are never shown publicly on the auction page. Where a bidder is displayed, we use a username, partially hidden name or similar limited identifier.

If you create an account, we store what is needed to manage it: your name, email address, address details, order history, Community Box purchases and auction activity. This data is kept for as long as your account is active.

You can request deletion of your account at any time by emailing info@mastercopter.com, preferably from the email address linked to your account. A simple message is enough, for example:

We may ask for additional information to verify your identity. After a valid request, we delete or anonymise your data unless we are legally required to keep it (see section 12).

Deleting your account does not always mean every record can be erased immediately. We may need to keep some information for:

• accounting, tax and VAT obligations;
• transaction records and payment disputes;
• fraud prevention;
• establishing, exercising or defending legal claims.

We only use that information for those purposes, and delete or anonymise it once the retention period ends.

We keep personal data no longer than necessary.

• Account data: while your account is active.
• Invoices and accounting records: for the period required by Belgian law, currently up to 10 years.
• Other order and auction data: as long as reasonably needed for support, disputes and warranty claims.
• Deleted accounts: data that is no longer needed is deleted or anonymised.

Within the limits of the law, you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data deleted;
• restrict certain processing;
• object to certain processing;
• receive your data in a portable format where applicable;
• withdraw your consent at any time, where processing is based on consent.

Send your request to info@mastercopter.com. We respond within one month. We may take reasonable steps to verify your identity first.

Creating an account or placing an order does not mean you agree to receive promotional emails. Where consent is required for marketing, we ask for it separately, and you can unsubscribe at any time.

Essential messages about your orders, payments, auctions, deliveries, account security and customer service are always sent, as they are part of our service.

Our website uses cookies and similar technologies that are necessary for customer accounts, login sessions, reservations and checkout, security, and remembering necessary preferences.

Cookies that require consent under applicable law are only used after you have given that consent. More information is available in our cookie notice or cookie settings.

We use service providers where needed to run the website and fulfil orders, such as:

• website hosting;
• payment providers;
• email providers;
• postal and courier services;
• technical service providers.

They only receive the data they need for their service. Where they process data on our behalf, we take the measures required by the GDPR.

Some service providers may process data outside Belgium or the European Economic Area. In that case we make sure appropriate safeguards are in place, as required by data protection law.

We take reasonable technical and organisational measures to protect your data against unauthorized access, loss, misuse or disclosure. No online service can guarantee absolute security.

Keep your password confidential. If you suspect someone has accessed your account, contact info@mastercopter.com or +32 497 28 52 69 as soon as possible.

We may update this Privacy Policy when our services, website or legal obligations change. The latest version is always available on this page, and the date at the top shows when it was last updated.

For questions about this policy or to exercise your rights, contact us:

If you are not satisfied with our answer, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, via gegevensbeschermingsautoriteit.be, or with the supervisory authority in your own EU country.