Last updated: 30 October 2026
This policy explains what personal information VSTmarketplace (vstmarketplace.net) collects, why we collect it, how long we keep it and the choices you have. We are the controller of the personal information described here. If you have a question about your data, use our contact page.
Information we collect
When you place an order
- Your name, email address, phone number and country.
- Details of what you bought, the price paid and the order date.
- Confirmation of your payment from the payment provider you pay with. You enter your card or bank details on the provider’s own secure page, so we never see or store them.
When you create an account
- Your name, email address and password (stored only in encrypted form), and your order and download history.
When you download a product
- The date and time of the download and the IP address it was made from. We use this to protect your purchases and to detect misuse of download links.
When you claim wallet credit
- Your email address and the date, to give you the welcome credit and keep your wallet. We use it to email you about your credit (for example when it is added or used). We only send you deals and news about new products if you tick the box for them, and you can stop them at any time.
- Your wallet history: credit added, used, returned and expired, with the order it belongs to.
When you contact us or leave a review
- Your name, email address, order number if you give one, and your message.
- For product reviews: your name as shown on the review, your rating and your comment.
When you browse the site
- Technical information such as your IP address, browser type and the pages you request, recorded in our server logs for security.
- Information stored in cookies, described in our Cookie Policy.
How we use your information
| Purpose | Legal basis |
|---|---|
| Processing your order, delivering your downloads and managing your account | Performance of our contract with you |
| Keeping accounting records | Legal obligation |
| Preventing fraud and protecting downloads and accounts | Our legitimate interests in keeping the store secure |
| Answering your messages and handling refund requests | Performance of our contract, or our legitimate interests in helping you |
| Showing product reviews | Our legitimate interests in helping customers choose products |
| Sending marketing emails, only if you opt in | Your consent, which you can withdraw at any time |
We do not sell your personal information, and we do not share it with third parties for their own advertising.
Who we share it with
We share personal information only with service providers who help us run the store, and only as much as they need:
- Payment providers: to create your payment link, take and verify your payment and prevent fraud.
- Hosting provider: to run the website and store its data.
- Content delivery network: to deliver your download files.
- Email delivery provider: to send order confirmations and replies to your messages.
We may also disclose information when the law requires it, or to protect our rights and the safety of our customers.
International transfers
Some of our service providers process data outside the country you live in, including in the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses so your information stays protected.
How long we keep it
- Orders and billing records: 6 years after the order, to meet tax and accounting rules.
- Accounts: until you ask us to delete your account. Order records are kept for the period above.
- Download logs: up to 2 years.
- Wallet records: as long as your credit is valid and then with your order records for the period above. Email addresses that only claimed credit are kept for up to 12 months after the credit expires; you can ask us to delete them sooner.
- Messages to us: up to 2 years after the conversation ends.
- Server logs: up to 90 days.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal information we hold about you,
- correct information that is wrong,
- delete your information, where we are not required to keep it,
- restrict or object to how we use it,
- send your information to you or to another company in a portable format, and
- stop sending you marketing emails (you can also use the unsubscribe link in any marketing email).
To make a request, use our contact page. We reply within one month. We may need to confirm your identity first.
UK and EU residents: if you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority. We would appreciate the chance to resolve your concern first.
US residents: residents of California and other states with privacy laws have the right to know what personal information we collect, to ask us to delete or correct it, and not to be treated differently for using these rights. We do not sell personal information or share it for cross-context behavioural advertising.
Security
The site uses encrypted connections (HTTPS), passwords are stored in encrypted form, and download links are signed and time-limited. No system is completely secure, so please use a strong, unique password for your account.
Children
Our store is not aimed at children under 16, and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. If we make a significant change, we will tell account holders by email.