Privacy Policy

Who we are

This Privacy Policy explains how TRUE TECHNOLOGIES LTD (reg. no. 16459127), 45 Barbican Road, Greenford, England, UB6 9DH ("we") processes your personal data when you use the SkyVault website, store and Minecraft server. We are the data controller. Please read this policy together with our Terms & Conditions. We follow the UK GDPR and the Data Protection Act 2018 and, for users in the EU, the EU GDPR. We have not appointed a Data Protection Officer; privacy questions go to info@skyvaultland.com.

Data we collect

• Account data: email address, first and last name (used for receipts and invoices), and a securely hashed password.
• Gameplay and delivery data: your Minecraft username and the UUID we look up from Mojang's public service, used to deliver items and ranks to your linked account.
• Order data: items purchased, amounts, currency, payment method, payment reference and the payment outcome we receive from our payment provider.
• Billing details: phone number and billing address, entered at checkout and passed to our payment provider to process the payment.
• Support data: complaints, refund requests and chargeback records.
• Preferences: your chosen language and display currency.
• Technical data: IP address, approximate location derived from it, and browser information from website logs.
• Game server data: when you join the server, we log your IP address, username, chat messages, commands and any moderation actions (warnings, mutes, bans).
• Cookies: see our Cookie Policy.

You must give us an email address, password and Minecraft username to create an account and receive purchases. Without them we cannot provide the service.

Why we use it

• Create your account and deliver purchases - contract.
• Show prices in your currency and charge the correct VAT - contract and legal obligation.
• Verify your email and keep accounts secure - legitimate interests: protecting accounts from takeover.
• Prevent fraud, chargeback abuse and cheating - legitimate interests: protecting our business and players.
• Enforce our Terms and server rules, including suspending accounts and reversing deliveries - legitimate interests: keeping the server safe and fair.
• Handle complaints, refunds and cancellations - contract and legal obligation.
• Keep accounting and tax records, including evidence of your country for VAT - legal obligation.
• Non-essential cookies and marketing emails - your consent.

We do not make decisions about you based solely on automated processing. Our payment provider may automatically screen payments for fraud; if a payment is declined you can contact us for a manual review.

Children

You must be at least 13 to create an account. If you are under 18, a parent or guardian must agree to our Terms and to any purchase. If a purchase was made without that permission, we may cancel and refund it, using your account and order data to do so. We do not knowingly collect data from children under 13 and will delete any we find. Parents can contact info@skyvaultland.com to review or delete their child's data.

Payments, sharing and transfers

Card details, and the details you enter for Skrill, Neteller, Paysafecard or BLIK, are entered directly with our payment provider, PayAdmit, and never reach our servers. We receive only a payment reference and the result. PayAdmit acts as an independent controller for its own fraud-prevention and legal duties.

We share data only with:

• Processors working for us under data-processing agreements: website hosting (DigitalOcean), game server hosting (Apex Hosting), email delivery (Resend), our support mailbox (Microsoft 365) and bot protection on our forms (Cloudflare Turnstile).
• Mojang/Microsoft, when we look up your UUID from your username through their public service.
• Authorities or advisers, where the law requires it or to defend legal claims.
• A buyer, if our business or its assets are sold.

Some recipients are in the United States or elsewhere outside the UK and EU. We rely on UK adequacy regulations (including the UK-US data bridge), the UK International Data Transfer Agreement, or EU Standard Contractual Clauses. You can ask us for a copy of these safeguards.

Security

We use encrypted connections (HTTPS), hashed passwords and access controls limited to staff who need the data. If a breach is likely to put you at risk, we will tell you and the regulator as the law requires.

Retention

We keep account and order data for as long as your account is active and as required for legal/accounting purposes (typically up to the statutory retention period), then delete or anonymise it.

Your rights

You can ask to access, correct, delete, restrict or move your data, and withdraw consent at any time.

Right to object: you can object at any time to processing based on our legitimate interests, and to marketing emails. Every marketing email has an unsubscribe link.

We reply within one month, which we may extend by two months for complex requests. We may ask you to confirm your identity first.

Complaints: if you are unhappy with how we handle your data, use the contact form on our Contacts page or email info@skyvaultland.com. We acknowledge complaints within 5 working days and aim to resolve them within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113) or, if you live in the EU, to your local data protection authority, though we would appreciate the chance to put it right first.

Changes and contact

We may update this policy. Material changes will be posted here with a new date, and we will tell you before they take effect where the law requires it.

Questions or requests: info@skyvaultland.com, or write to TRUE TECHNOLOGIES LTD, 45 Barbican Road, Greenford, England, UB6 9DH.