Your data, used only where necessary.

This policy covers personal data processed when you browse products, place orders, look up orders, request after-sales or contact support on GetVIP.

We process only the information needed to complete transactions, deliver services, handle after-sales and keep the site secure. Where a product needs extra information, we explain its purpose on the order page or through support.

Order data: order email, product and plan, quantity, amount, order status, order number, order time and any note you choose to add.

Delivery and after-sales data: keys or account details assigned by automatic delivery; delivery content entered by staff for manual services; necessary details you provide when contacting support. Sensitive credentials may include accounts, redemption links or temporary login information — submit them only through the channels we explicitly describe.

Technical data: IP address used to rate-limit abusive requests (held in memory only and not written to the order database), your theme preference stored locally in the browser, and the most recent order numbers and order emails stored locally.

Administrator data: name, email and hashed password for back-office accounts, plus an HttpOnly cookie used to keep administrators signed in. Customers do not receive back-office accounts.

This version has no advertising tracking, third-party analytics or profiling. If that changes, we will update this policy and explain the purpose.

To create and fulfil orders, verify payment status, assign or enter delivery details, handle after-sales and refunds, recover orders and answer your questions.

To protect the site and accounts, including preventing abuse of the ordering API, brute-force order lookups, unauthorised back-office access and abnormal payment behaviour.

To meet legal requirements, respond to lawful requests from competent authorities and resolve disputes or protect legitimate rights.

We do not sell your personal data or use the order email for marketing unrelated to the transaction unless you separately agree.

Back-office sign-in uses a necessary HttpOnly cookie for the session; scripts cannot read it, and it expires on sign-out or session expiry.

The storefront uses browser localStorage for your theme preference and for recent order numbers and order emails, so this device can show your order history. You can clear browser data at any time; afterwards, look orders up manually with the order number and email.

We do not use advertising or third-party tracking cookies. Once live payment is connected, the payment provider may set necessary security cookies under its own policy.

Payments: online payments are processed by our payment provider, which handles the information required to complete the payment. We do not store your payment password, card password or full verification codes.

Infrastructure: database, server, backup and operations providers may access data within their scope of service; we require them to protect it contractually.

Support channels: Telegram, QQ and similar platforms are operated by third parties, and your communications there are also subject to their privacy policies. Do not post sensitive details in public groups.

Legal requirements: we may provide necessary information where required by law, by a lawful request from a judicial or administrative body, or where needed to protect users, the public or our legitimate rights.

Outside these cases, we do not provide your personal data to unrelated third parties without your consent.

Order records and delivery details are kept for as long as needed for order recovery, after-sales and warranty. The exact period varies with product type, warranty commitments and legal requirements.

Sensitive login credentials submitted for manual services should be invalidated or replaced by you once processing is complete. You may ask support to delete related records; afterwards the order may no longer be searchable or eligible for replacement or after-sales.

Records needed for security and dispute handling may be retained for a reasonable period after an order closes.

You can view order information on the order page and ask support to access, correct or delete your personal data, or to withdraw consent you previously gave.

After verifying your identity and ownership of the order, we will act within a reasonable period. Requests may be partly limited where they affect others' rights, legal retention obligations or an ongoing dispute.

Do not send identity documents or account passwords through public channels; support will explain a safe verification method after checking the order number.

Administrator passwords are stored as bcrypt hashes, and back-office APIs require a valid session; sensitive pages and actions are limited to administrators.

We use access control, input validation, rate limiting, security headers and HTTPS in production to reduce risk. No system is absolutely secure, so please protect your own accounts and devices.

If a security incident could affect your rights, we will take remedial steps and notify you in a reasonable manner as required by applicable law.

This site is intended for users with the relevant legal capacity. Minors should use it with a guardian's consent and guidance, and should not buy third-party services unsuitable for them.

If we learn that we collected a minor's data without guardian consent, we will delete it or stop processing as required by law.

We may update this policy for business, payment or legal reasons and will show the update date on this page. Material changes will be highlighted.

To exercise privacy rights, ask about data handling or raise a complaint, contact us through Support or the footer channels and include your order number for verification.