Privacy and retention
Draft operating notice — registered business/contact details and final retention periods must be confirmed before live commerce.
Operator
Outlaw Panda is operated by Regal IT Ltd. Administrator contact: [email protected]. The shared mailbox is being configured.
Your account
You can export your data and request erasure from account settings. Staff review the request and anonymise records that are no longer needed. Financial allocations, provider references and essential fraud or safety evidence are retained where required.
Session security
Session cookies are used for authentication and CSRF protection. Passwords are hashed. MFA secrets are encrypted. Card and bank details remain with the payment provider.
Retention review
Operational starting boundaries: expired sessions/tokens 30 days, closed support data 24 months, essential financial records subject to the verified statutory schedule. These are draft limits and automatic personal-data deletion is not activated until reviewed.