Data protection

Privacy Policy

Tebex Limited Read the full notice

F5 Studio sells through Tebex, who handle checkout, billing and refunds as the merchant of record. The document below is reproduced here for your convenience — if it ever differs from the version Tebex publishes, the Tebex version applies.

Tebex Privacy Notice — Summary

This page is a summary

What follows is a plain-language overview of the ten sections of Tebex Limited's privacy notice — enough to see what is collected and why. It is not the complete notice, and it deliberately leaves out detail such as the full table of processing purposes and lawful bases. Before relying on it, or to exercise any of your rights, read the full privacy notice published by Tebex, which is the version that applies to you.

Tebex Limited respects your privacy and is committed to protecting your personal data. Because Tebex operates the checkout and is the merchant of record for every order placed on this store, Tebex — not F5 Studio — is the controller of the personal data you provide when you buy something here.

1. Important information and who we are

  • Controller: Tebex Limited, a company registered in England and Wales under company number 08129184, registered office at 201 Haverstock Hill, Second Floor C/O Fkgb, London, England, NW3 4QG.
  • Data privacy manager: Liam Wiltshire (liam.wiltshire@overwolf.com).
  • Scope: the notice covers www.tebex.io, www.buycraft.net and any third-party webstore — including this one — running on the Tebex platform.
  • The service is not intended for children, and Tebex does not knowingly collect data relating to children.
  • You can complain at any time to the UK supervisory authority, the Information Commissioner's Office.

2. The data collected about you

  • Identity data — first name, last name, username or similar identifier.
  • Contact data — billing address, delivery address, email address, telephone numbers.
  • Transaction data — payments to and from you, and details of products purchased.
  • Technical data — IP address, login data, browser type and version, time zone, location, operating system and platform.
  • Profile data — username and password, orders you have made, account preferences.
  • Usage data — how you use the website, products and services.
  • Marketing and communications data — your preferences for receiving marketing.

3. How your personal data is collected

  • Direct interactions — filling in forms, registering an account, subscribing to updates, contacting support.
  • Automated technologies — cookies, server logs and analytics on your interaction with the store.
  • Third parties — analytics providers such as Google and Cloudflare, and service providers such as Help Scout and Braintree.

4. How your personal data is used

Tebex uses your data where it needs to perform the contract with you, where it has a legitimate interest that your rights do not override, or where it must comply with a legal or regulatory obligation. Consent is used only in limited cases, such as certain marketing.

The full notice sets this out as a table pairing each purpose (registering you as a customer, processing an order, managing the relationship, delivering relevant marketing, improving the service, and so on) with the specific data types used and the lawful basis relied on. That table is not reproduced here — see the full notice.

5. Disclosures of your personal data

  • Other companies within the Tebex group.
  • External third parties such as IT and hosting providers (including Amazon Web Services) and payment processors.
  • Commercial partners and analytics platforms, for anonymised and aggregated audience insights.

6. International transfers

  • Many of these third parties are based outside the European Economic Area.
  • Where data is transferred outside the EEA, Tebex states that safeguards such as standard contractual clauses or an adequacy decision are relied on.

7. Data security

  • Security measures are in place to prevent accidental loss and unauthorised access, use, alteration or disclosure.
  • Access is limited to employees, contractors and agents with a business need to know.

8. Data retention

  • Data is kept only as long as necessary for the purposes it was collected for, including legal, accounting and reporting requirements.
  • Basic customer information (identity, contact and financial data) is retained for up to ten years after the end of the customer relationship for legal and tax purposes.

9. Your legal rights

Under data protection law you can request access to your data, correction of it, or its erasure; object to processing; request that processing be restricted; request transfer of your data to another party; and withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact the data privacy manager at liam.wiltshire@overwolf.com or use the Tebex support contact form. You will not usually have to pay a fee, and Tebex aims to respond within one month.

10. Glossary

  • Legitimate interest — the interest of the business in conducting and managing its services so as to give you the best and most secure experience, weighed against any impact on you.
  • Performance of contract — processing your data where it is necessary to perform an agreement you are party to, or to take steps at your request before entering into it.
  • Compliance with a legal obligation — processing your data where it is necessary to comply with a legal or regulatory obligation.

Questions about how F5 Studio itself handles anything outside the Tebex checkout can go to our contact details.