Privacy Policy

Last updated: 27 June 2026

This Privacy Policy explains how VST Vault collects, uses and protects your personal data when you visit vstvault.com or buy a product from us. VST Vault is the data controller for the information described below. If you have any questions, email [email protected].

What we collect

When you place an order, create an account or contact support, we collect:

  • Your name and email address
  • Your billing address and country
  • Payment details, processed directly by our payment providers (we never see or store your full card number)
  • Your IP address and browser information, captured automatically when you visit the site
  • Cookies and similar identifiers (see our Cookie Policy)
  • Any message you send us through email, WhatsApp or our contact form

If you subscribe to our newsletter, we also store your email address against your subscription preferences.

Why we collect it

We use your data to:

  • Process your order and deliver your download link
  • Provide customer support and reply to your messages
  • Send order confirmations, receipts and account emails
  • Send newsletter emails — only if you have opted in
  • Detect fraud, abuse and protect the security of the site
  • Meet our accounting and tax obligations under UK law

Who we share it with

We share the minimum data needed with the following service providers:

  • Payment processors — Stripe and PayPal handle your payment securely. They receive your name, email, billing address and payment details. They are independent data controllers for that information.
  • Email provider — our email service handles transactional emails (order confirmations, download links, support replies) and newsletter delivery.
  • Hosting and analytics — our website host and any analytics tool we use process technical data such as IP address and pages visited.
  • Authorities — we share data only when we are required to by law (for example, tax authorities, fraud investigation).

We do not sell or rent your personal data to third parties.

How long we keep it

We keep order and accounting records for six years to meet UK tax law. Account data is kept while your account is active, then deleted on request. Newsletter data is kept until you unsubscribe. Support emails are kept for two years.

Your rights under UK GDPR

You have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted, subject to legal retention rules
  • Request a copy of your data in a portable format
  • Restrict or object to processing
  • Withdraw consent at any time, where processing is based on consent
  • Complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, email [email protected]. We respond within 30 days.

Cookies

We use cookies to keep your shopping cart working, remember your account session and understand how the site is used. See our Cookie Policy for the full list and how to control them.

Security

The site runs over HTTPS. Payment information goes directly to our payment processors over their secure channels — it does not pass through our servers. We restrict access to personal data inside our team to the people who need it to do their job.

Children

VST Vault is not directed at children under 16. If you are under 16, please do not submit any personal data through this site without a parent or guardian.

International transfers

Some of our service providers are based outside the UK. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses to protect your data.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page tells you when. Material changes will be flagged on the homepage or by email.

Contact

For any privacy question, data request or complaint, contact: