Store Privacy Policy

Store Privacy Policy 

Last Updated: 7/16/2026 

SCOPE OF THIS POLICY This Store Privacy Policy explains how Velora (“Velora,” “we,” “us,” or “our”) processes personal data specifically in connection with purchases, payments, and transactions made through our official store, which is hosted and operated using Tebex and other authorized payment processors (“Store”). 

This Store Privacy Policy supplements the main Velora Privacy Policy. For matters expressly addressed in this Store Privacy Policy in the context of store purchases and payment processing, this Store Privacy Policy governs. For all other data protection matters, the main Velora Privacy Policy governs.  

This Store Privacy Policy applies when you: 

  • Purchase Digital Goods, including ranks, subscriptions, cosmetics, or virtual currency  

  • Use any Tebex-hosted checkout or payment page linked to Velora  

  • Interact with payment confirmation, billing, or transaction verification systems  

  • Receive store-related communications such as receipts or purchase confirmations  

 

By completing a purchase, you acknowledge and agree to the processing of your data as described in this Store Privacy Policy, Store Terms of Service and the main Privacy Policy. 

 

1. Scope of This Policy 

This Store Privacy Policy applies to all purchase-related processing when you use the Velora Store, including checkout, payment processing, and order fulfillment. It should be read together with the main Velora Privacy Policy. 

 

2. Data We Collect for Store Purchases 

When you use the Store, we may collect and process the following categories of data: 

2.1 Account & Identification Data 

  • Minecraft UUID  

  • Xbox User ID (XUID)  

  • Username / Gamertag  

  • IP address  

  • Device and connection metadata (as required for fraud prevention and order verification)  

  • Email address (where provided at checkout or for receipt/confirmation delivery) 

 

2.2 Transaction & Payment Data 

  • Purchase history (items, ranks, subscriptions, Digital Goods)  

  • Transaction ID and order reference numbers 

  • Package purchased 

  • Time and date 

  • Payment method 

  • Payment status (completed, pending, failed, refunded)  

  • Billing country or region and other information required for tax, fraud prevention, or transaction processing 

2.3 Payment Processing Data (Tebex/Providers) 

Payments are processed by third-party providers such as Tebex and other authorized payment processors.  

These providers may process: 

  • Full payment details (card or payment method information)  

  • Billing details required to complete transactions  

  • Fraud prevention and risk scoring data  

  • Chargeback and dispute information  

 

Velora does not directly collect or store complete payment card information, as this is processed directly by third-party payment providers. 

2.4 Fraud Prevention & Security Data 

To protect the Store and prevent abuse, we may process: 

  • IP address and geolocation approximation  

  • Transaction behavior patterns and fraud risk indicators 

  • Device identifiers  

  • Suspicious activity flags from payment providers  

  • Chargeback history or dispute signals  

 

2.5 Communication Data 

We may collect communications related to purchases, including: 

  • Support tickets  

  • Email correspondence  

  • Payment dispute messages  

  • Tebex or store-related inquiries  

 

3. How We Use Store Data 

We process Store-related personal data for the following purposes: 

3.1 Order Processing & Delivery 

  • Processing purchases  

  • Delivering Digital Goods, ranks, and subscriptions  

  • Verifying successful payment completion  

  • Applying purchased items to user accounts  

 

3.2 Fraud Prevention & Abuse Protection 

  • Detecting fraudulent transactions  

  • Preventing chargebacks and payment abuse  

  • Identifying unauthorized or suspicious purchases  

  • Protecting the integrity of the Store  

 

3.3 Legal & Tax Compliance 

  • Maintaining financial and transaction records  

  • Complying with applicable accounting and tax obligations  

  • Handling disputes, chargebacks, and payment investigations  

 

3.4 Customer Support 

  • Responding to purchase issues  

  • Handling refund requests where applicable law requires it  

  • Investigating transaction errors or missing items  

 

3.5 Service Operations 

  • Maintaining purchase logs  

  • Synchronizing Digital Goods with user accounts  

  • Ensuring accurate entitlement tracking  

 

4. Legal Basis for Processing (Store Data) 

We process Store-related personal data under the same legal bases outlined in the main Privacy Policy, including: 

  • Contractual Necessity – to fulfill purchases and deliver Digital Goods  

  • Legal Obligations – tax, accounting, and financial compliance  

  • Legitimate Interests – fraud prevention, security, and abuse detection  

  • Consent – only where required under applicable data protection law and only where such processing is not covered by contractual necessity, legal obligation, or legitimate interests as described in the Privacy Policy and Store Privacy Policy. 

 

5. Data Sharing in Store Transactions 

We may share Store-related data only when necessary: 

5.1 Payment Processors (Tebex and others) 

  • To process payments  

  • To verify transactions  

  • To handle refunds or disputes  

  • To prevent fraud  

Each third-party payment processor acts as an independent data controller for its own processing activities. 

5.2 Service Providers 

  • Hosting infrastructure  

  • Security and fraud prevention tools  

  • Analytics systems (aggregated or anonymized data only)  

 

5.3 Legal Requirements 

We may disclose data where required to: 

  • Comply with laws and regulations  

  • Respond to lawful government requests  

  • Resolve disputes or enforce Terms of Service  

  • Prevent fraud or illegal activity  

 

5.4 No Sale of Personal Information 

Velora does not sell personal information collected in connection with Store transactions, as defined under applicable U.S. state privacy laws, including the California Consumer Privacy Act (as amended by the California Privacy Rights Act), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act. 

All disclosures of personal information to third parties in connection with Store transactions are limited to the purposes described in this Store Privacy Policy and are subject to appropriate contractual protections. Any disclosure of personal information to service providers or payment processors is limited to purposes necessary to process transactions, prevent fraud, and operate the Store. 

 

6. Refunds, Chargebacks, and Disputes 

Except where required by applicable consumer protection law or payment processor policies: 

  • All purchases are final once Digital Goods are delivered or made available, except where applicable consumer protection laws provide otherwise. 

  • Refund eligibility is determined in the following order of priority: (1) applicable consumer protection law; (2) the applicable policies of Tebex or the relevant payment processor or merchant-of-record; and (3) the Store Terms of Service 

  • Users agree not to initiate fraudulent or abusive payment disputes, including chargebacks relating to Digital Goods that have been delivered or made available to their account, except where such disputes are permitted under applicable consumer protection law or cannot legally be waived. 

 

Where a chargeback or dispute occurs, we may: 

  • Suspend access to purchased items  

  • Revoke Digital Goods  

  • Restrict or terminate the associated account  

  • Investigate fraudulent activity  

 

These actions are applied only where reasonably necessary to address fraud, abuse, payment disputes, or chargeback activity, or where required by payment processor rules or applicable law. 

7. Data Retention (Store Data) 

We retain Store-related data only as long as necessary for: 

  • Transaction history and order verification  

  • Fraud prevention and dispute handling  

  • Legal, tax, and accounting obligations  

  • Security and abuse prevention  

 

Retention periods are aligned with those described in the main Privacy Policy, including extended retention where required for fraud prevention or legal compliance. 

7.1 Data Breach 

In the event of a Personal Data Breach involving Store-related personal data, Velora will follow the breach detection, containment, and notification procedures described in Section 15 of the main Velora Privacy Policy. 

8. International Data Transfers 

Store data may be transferred internationally, including to: 

  • Tebex infrastructure  

  • Payment processors  

  • Security and fraud prevention systems  

 

Where such transfers occur, we apply safeguards consistent with: 

  • UK GDPR  

  • EU GDPR  

  • Brazilian LGPD  

  • Applicable US state privacy laws  

 

These may include Standard Contractual Clauses (SCCs) or equivalent legal mechanisms. 

 

9. Your Rights 

Your privacy rights for Store-related data are the same rights described in Section 11 ('Your Rights') of the main Velora Privacy Policy, including the rights to access, correction, deletion, data portability, restriction of or objection to processing, withdrawal of consent, opt-out of sale or certain profiling, non-discrimination, and lodging a complaint with a supervisory authority.  

 

Store data requests can be submitted using the same contact method: 
veloraprivacy@gmail.com 

 

10. Relationship to Main Privacy Policy 

This Store Privacy Policy: 

  • Works together with the main Velora Privacy Policy  

  • Does not replace general data protection disclosures  

  • Only applies to purchase, payment, and store-related processing 

  • Should be interpreted in conjunction with the most recent version of the main Velora Privacy Policy 

 

For matters expressly addressed in this Store Privacy Policy in the context of store purchases and payment processing, this Store Privacy Policy governs. For all other data protection matters, the main Velora Privacy Policy governs. 

 

11. Contact 

If you have any questions about this Store Privacy Policy or your purchase data: 

Email: veloraprivacy@gmail.com 

Velora acts as the Data Controller for all Store-related personal data. Store data is linked to the same user account profile used across Velora services and integrated with account, security, fraud prevention, and entitlement systems described in the main Privacy Policy.