Privacy Policy

VSTore.me is an online marketplace specialising in VST plugins, virtual instruments, audio effects, digital audio workstation (DAW) software, sample libraries, and music production tools. We are committed to protecting the privacy of everyone who visits or makes a purchase through our store.

We collect personal data only when it is necessary to operate our store, process your orders, and provide customer support. The types of data we may collect include:

We use your personal data only for clearly defined, legitimate purposes. We do not use your data for automated decision-making or profiling.

To process and fulfil your orders. Your name, email, and order details are used to deliver purchased products, send confirmation emails, and manage your account dashboard.

To provide customer support. When you contact us, we use the information you provide to respond to your query, assist with installation issues, or process refund requests.

To improve our website and services. Anonymised technical data helps us understand how visitors use VSTore.me so we can fix issues and improve the experience.

To comply with legal obligations. We may be required to retain certain records for accounting, tax, or legal compliance purposes.

Under applicable data protection law — including the EU General Data Protection Regulation (GDPR) — we are required to have a lawful basis for processing your personal data. The bases we rely on are:

Contract performance. Processing your name, email, and order data is necessary to fulfil the purchase contract when you buy from us.

Legitimate interests. We process technical and security data to protect the integrity of our website and prevent fraud.

Legal obligation. Certain data is retained to comply with accounting, tax, and legal requirements.

Consent. Where we rely on consent — for example, for optional cookies or marketing communications — you may withdraw that consent at any time.

VSTore.me uses cookies to make the site work correctly and to improve your experience. Cookies are small text files stored in your browser. We use the following types:

Strictly necessary cookies keep you logged in, maintain your shopping cart, and enable core site functions. These cannot be disabled without breaking the site.

Functional cookies remember your preferences, such as your saved display settings, so you do not need to reset them on each visit.

Analytics cookies collect anonymised data about how visitors use the site. This helps us improve performance and fix issues.

All payments on VSTore.me are processed by secure third-party providers — Stripe and PayPal. When you pay, you are entering your payment details directly into their secure environments. VSTore.me never sees, handles, or stores your card number, CVV, or bank account details.

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Payment processors (Stripe, PayPal). To authorise and complete your purchase. Only the data required to process the transaction is shared.

Email service providers. To send you order confirmations and support responses. These providers process email data on our behalf under strict data processing agreements.

Legal authorities. If required by law, court order, or to protect the rights and safety of VSTore.me or its customers, we may disclose data to relevant authorities.

Pages on VSTore.me may include embedded content such as YouTube videos or product demos from external sources. Embedded content from other websites behaves in the same way as if you had visited those websites directly — they may collect data about you, set cookies, and track your interaction with the content.

Our website may also contain links to external developer portals or third-party sites. We are not responsible for the privacy practices of those sites. Visiting any linked external site is at your own discretion.

We retain your personal data only for as long as is necessary for the purposes it was collected, or as required by law.

Order and account data is retained for as long as your account is active and for a reasonable period thereafter to handle any follow-up support or refund requests.

Legal and financial records may be retained for up to 7 years in accordance with applicable accounting and tax regulations.

Support communications are retained for as long as is reasonably necessary to resolve the matter and any related disputes.

Depending on your location, you have the following rights regarding your personal data. To exercise any of these rights, please contact us through our Contact page.

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include encrypted connections (HTTPS) across the entire website, restricted access to personal data on a need-to-know basis, and secure third-party payment processing that keeps card data entirely off our servers.

VSTore.me serves customers worldwide. Some of our third-party service providers — including payment processors and email platforms — may store or process data outside the European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your data in accordance with applicable law.

VSTore.me is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data practices. When we make significant changes, we will update the date at the top of this page.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your personal data, please get in touch with us directly.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority in your country of residence.