1. Who we are

CoachCarry ("CoachCarry", "we", "us") runs coachcarry.com and provides World of Warcraft services. We decide how and why your personal data is used for our website and our orders. This policy applies to the website and to the services you order from us. You can reach us through our Contact page.

2. What data we collect

• Account data: your email address, username and the password you choose for your CoachCarry account.
• Order data: the service you order, level range or options, region, faction, realm and character name, and the order history and status.
• Game account login details: for piloted orders, the login details we need so our booster can work on your account (see Section 4).
• Payment data: payment status, transaction reference and the payment method used. Payments are handled by our payment providers, and we do not store your full card number.
• Contact data: your email address and, if you give them, your Discord name or other contact details used for updates on your order.
• Support messages: your messages with our support team and the chat history.
• Technical data: IP address, browser and device information, language, pages visited and cookie identifiers.
• Marketing preferences: whether you want to receive offers, and your opt-outs.

3. Why we use your data

• To provide your order: create your account, assign a booster, carry out the service, keep you updated and give support.
• To process payments and refunds: confirm payments, handle refunds and prevent fraud and chargeback abuse.
• To run and improve the website: keep it secure, fix problems and understand how it is used.
• To meet legal obligations: for example tax, accounting and responding to valid legal requests.
• To send offers: only where the law allows and, where required, with your consent. You can opt out at any time.

Depending on where you live, our legal basis is to perform the contract with you, to comply with the law, for our legitimate interests (such as security and fraud prevention) or, where needed, your consent.

4. Your game account login details

If you order a piloted service, you give us login details for your World of Warcraft account. We use them only to carry out your order. Only the booster assigned to your order should use them, and our boosters use a VPN. We do not change your email, password or security settings without your agreement.

When your order is complete, we recommend that you change your password and review your account security. Please share login details only through the secure steps of your order, never through public channels.

5. Who we share data with

• Boosters assigned to your order: they receive only the information needed to complete it.
• Payment providers: card processors and cryptocurrency payment providers handle your payment and send us the result.
• Service providers: companies that help us with website hosting, our support chat, email and messaging, analytics and security. They may only use the data to provide their service to us.
• Authorities and advisers: where the law requires it, or to protect our rights, for example in a payment dispute.
• A buyer or successor: if our business is ever sold or reorganized, data may be transferred as part of that change.

We do not sell your personal data.

6. Cookies and similar technologies

We use cookies and similar tools to keep you signed in, remember your cart and preferences, keep the website secure and understand how it is used. Where the law requires your consent for non-essential cookies, we ask for it. You can manage cookies in your browser settings. Blocking some cookies may stop parts of the website from working.

7. International transfers

Our providers and boosters may be located in different countries. Where your data is transferred to a country with a different level of data protection, we use appropriate safeguards required by the law that applies to you.

8. How long we keep data

We keep your data only as long as needed for the purposes in this policy: while your account is active, to handle support and disputes, and as long as tax, accounting and legal rules require. After that we delete it or make it anonymous. Support chat history and order records may be kept for a reasonable period to resolve disputes and prevent fraud.

9. How we protect data

Our website uses an encrypted (HTTPS) connection, and we use reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. No online service can be completely secure, so please also protect your own passwords and devices.

10. Your rights

Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, where the law allows;
• ask us to limit or stop certain uses, including direct marketing;
• withdraw consent you gave us, at any time; and
• complain to your local data protection authority.

To use these rights, contact us through our Contact page or the support chat. We may need to confirm your identity first. Some records, such as payment records, may have to be kept by law.

11. Age

Our services are for people aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. The current version is always on this page with its date. If a change is significant, we will show a notice on the website.

13. Contact

For privacy questions or requests, use our Contact page or the support chat on the website. Our support team is available 24/7. See also our Terms of Service and Refund Policy.