Privacy Policy
Last updated: 9 October 2026
This policy explains what we collect when you use PanelRegion, why we collect it, who else sees it, and what you can ask us to do about it. It is written to be read, not skimmed past — if anything here is unclear, ask us and we will answer plainly.
The short version
- We collect what an account and an order need: your email, your username, what you ordered, and what you paid.
- The link or username you submit with an order is passed to the provider who fulfils that order. This is how the service works, and it is the single most important thing to understand before you place one.
- We do not see or store your card details. Payments are handled by our payment providers.
- The panel runs on the RentalPanel platform, which stores your account, order and support data on our behalf.
- We do not sell your data. We do run Google Analytics and Google advertising tags on this site — the Cookies section below sets out exactly what they collect.
- When you order, we pass your email address, your username and the order number to Trustpilot, so that it can invite you to review us.
- You can ask for a copy of your data, ask us to correct it, or ask us to delete your account.
Who we are
For anything in this policy, write to support@panelregion.com or use any of the channels on our contact page — all of them reach the same team.
Under the UK and EU General Data Protection Regulation we are the controller of the data described below — we decide what is collected and why.
What we collect
Account data
Your email address, username, and the password you choose. We never see your password in readable form and we will never ask you for it. If you enable two-factor authentication, we store the settings needed to verify it.
Order data
The service you selected, the quantity, the link, profile or username you submitted, any custom comments you supplied, the price charged, and the delivery status returned to us. Where a service reports start and current counts, we store those too, because refill and cancellation claims depend on them.
Payment data
The amount, currency, date and method of each top-up, plus a reference from the payment provider. We never receive your full card number, your CVV, or your payment account credentials — those go directly to the payment provider.
Support data
The content of tickets you open, messages you send us on Telegram or WhatsApp, and our replies. Some tickets are routed to an automated assistant; those are marked in the ticket and are reviewed by a person.
Technical data
IP address, browser and device type, language and currency preference, pages requested, and timestamps. We log this to keep accounts secure, to detect fraudulent top-ups and abuse, and to find out why something broke.
API data
If you use our API, we store your API key and a record of the requests made with it, including the parameters you send, for the same security and troubleshooting reasons.
Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account; placing, fulfilling and refilling orders | Performance of a contract |
| Taking payment and maintaining your balance | Performance of a contract |
| Answering support requests | Performance of a contract |
| Preventing fraud, chargeback abuse and account takeover | Legitimate interests |
| Keeping the service working and diagnosing faults | Legitimate interests |
| Keeping financial and tax records | Legal obligation |
| Service announcements and, where you have asked for them, marketing messages | Legitimate interests / consent |
| Asking you for a review after an order | Legitimate interests |
Who we share it with
Providers who fulfil orders
PanelRegion is a reseller. When you place an order we forward the details that provider needs to deliver it — in practice, the link or username you entered, the service, and the quantity. We do not send them your email address, your payment information, or your other orders. Providers are located in a number of countries and each operates under its own privacy terms. If you would rather a particular target not be shared, the answer is not to place the order.
Payment providers
Top-ups are handled by third-party payment providers. The methods available to you are listed on the Add funds page once you are signed in. They receive the payment details you enter and act as controllers of that data under their own policies.
Infrastructure providers
The panel itself runs on the RentalPanel platform, which hosts the software and stores your account, order and support data on our behalf. Our site is delivered through Cloudflare, which provides content delivery and DDoS protection and sets a small number of security cookies described below. Both process data on our instructions.
Analytics and advertising
We run Google Analytics 4 and Google advertising tags, loaded through Google Tag Manager. They set their own cookies and send Google your IP address, the pages you request and basic device information, which Google also uses to measure advertising. Apart from the review invitations described below, this is the one place where information about your visit leaves us for a purpose other than running the panel. Google acts as a controller for that data under its own policies.
Review invitations
We ask customers for a review through Trustpilot. When you place an order on the New order page, we pass Trustpilot your email address, your username and the order number, and Trustpilot emails you an invitation some days later — not after every order. Trustpilot handles these details on our instructions, in order to send that invitation. The invitation is the same for everyone and does not depend on how your order went. What you write in a review, and the Trustpilot account you write it with, come under Trustpilot’s own privacy policy.
Authorities
We will disclose data where the law requires it, or where it is necessary to establish or defend a legal claim. We do not hand over account data on an informal request.
We do not sell personal data. Apart from the Google tags described above, we do not share it with advertising networks or data brokers.
International transfers
Because our providers and our customers are spread across many countries, your data may be processed outside the country you live in, including outside the UK and the European Economic Area. Where that happens for a provider acting on our instructions, we rely on standard contractual clauses or an equivalent safeguard.
How long we keep it
Your account, and the order, payment and support history attached to it, is kept for as long as your account exists. Payment records may be kept longer where accounting rules require it. Technical and security logs are kept for as long as the platform retains them.
If you want that to end sooner, ask us to delete your account and we will — see Your rights below.
Your rights
Wherever you live, you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that is wrong.
- Delete your account and the data attached to it, except records we are required to keep for accounting.
- Export your data in a machine-readable form.
- Object to or restrict processing we carry out on the basis of legitimate interests.
- Withdraw consent for marketing at any time, without affecting anything sent before.
Write to support@panelregion.com and we will respond within one month. We may ask you to confirm control of the account email first — not to obstruct you, but because handing an account history to the wrong person is the worse failure.
If you are in the UK or the EEA and you are not satisfied with our answer, you have the right to complain to your national data protection authority.
Cookies
Some of our cookies are needed to run the panel:
- Session cookies that keep you signed in.
- A security token that protects forms against cross-site request forgery.
- Preference cookies that remember your language, your currency, and whether you chose the light or dark theme.
- Security cookies set by our CDN to tell real visitors apart from automated traffic.
Others are set by Google and are not needed to run the panel:
- Google Analytics cookies that count visits and show us which pages people actually use.
- Google advertising cookies, set through Google Tag Manager, which Google uses to measure our advertising.
Blocking the first group will stop you signing in. The Google cookies can be blocked without affecting the panel — browser settings, a tracker blocker, or Google’s own opt-out will all do it.
The script that creates review invitations also sets Trustpilot cookies. They are not needed to run the panel either, and can be blocked in the same ways.
Security
Traffic to the panel is encrypted in transit. We never see your password in readable form, you can regenerate your API key at any time, and administrative access is limited to the people who need it. No system is perfect: if a breach ever affects your data, we will tell you and the relevant regulator within the time the law allows.
Children
PanelRegion is a business tool and is not directed at children. You must be at least 16, or the minimum age in your country if it is higher, to hold an account. If we learn that an account belongs to someone younger, we will close it and delete the data.
Changes to this policy
When we change this policy we update the date at the top. If a change materially affects how we use your data, we will say so in the panel before it takes effect.
Contact
Questions, requests and complaints all go to the same place: support@panelregion.com, or any of the channels on our contact page.