Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains what information we collect, why we collect it, and what we do with it. It applies to everyone who visits our storefront or buys a FiveM vehicle through it.

If anything below is unclear, reach us through the contact form.

Who we are

We operate a digital storefront that sells FiveM vehicles and related resources. In this policy, “we”, “us” and “our” refer to Tebex, trading as Lore Garage Tebex; “you” refers to the visitor or customer.

Information we collect

We try to collect only what we need to deliver your purchase and keep the store online.

What you provide

Email, name and country entered at checkout, used to deliver your downloads and order receipts, and for tax compliance.
Contact messages — anything you write in the contact form, plus the email address you submit it from. These are emailed to our support inbox and are not kept in our website database. If sending fails, your text is held for up to 10 minutes so the form can show it to you again, then deleted.
Reviews — the display name and review text you choose to publish.

What we collect automatically

IP address and approximate location, recorded in server logs and used for fraud prevention, abuse blocking, and basic analytics (request counts, error rates).
Browser user-agent, captured in the same server log line.
Order metadata — order number, line items, total, currency, the timestamp of each state transition.
Contact form limits — a one-way hash of your IP address is kept for one hour to limit how many messages one connection can send.

Payment data

Card numbers, expiry dates, CVV and 3-D Secure tokens are entered into hosted fields supplied by our payment processor. An alternative wallet provider processes payment details directly when that option is offered. These details are never stored by Lore Garage Tebex; we receive the transaction reference and payment result needed to fulfil the order.

How we use it

Fulfilling your order — generating the per-order download link and emailing it to you.
Customer support — responding to questions you submit through the contact form.
Fraud prevention and abuse mitigation.
Tax, accounting and statutory record-keeping.
Occasional product updates and new-release announcements to the email you used at checkout, including for orders that did not complete payment. You can unsubscribe at any time from any email we send, or by contacting us.
Improving the storefront — debugging errors, tuning performance, prioritising what to build next.

We do not sell your personal data and we do not use it for cross-site advertising.

Cookies and local storage

We use a small set of strictly-functional storage entries:

Cart and session cookies (wp_woocommerce_session_*, woocommerce_items_in_cart, woocommerce_cart_hash) — set when you add something to your cart, so the store remembers it while you shop. The cart itself is kept on our server for up to 48 hours.
Review cookies — if you leave a review and ask the site to remember you, your name and email are saved in your browser for next time.
Cloudflare bot management — sets the __cf_bm cookie automatically as part of CDN protection.

We do not use marketing or third-party analytics cookies.

Third-party processors

We share the minimum information needed to operate the store with these providers:

Payment processor — hosted card and wallet payment processing.
Alternative wallet provider — payment processing where that option is offered.
Cloudflare — DNS, CDN and DDoS protection, and storage that serves your download files (Cloudflare R2).
SMTP email provider — used to deliver your order email and any support replies.
Hosting provider — infrastructure that runs the store and stores its database.

Data retention

Order records — retained for the period required by tax and accounting law (typically 7 years).
Contact messages — kept only in our support email inbox, for up to 2 years from the last reply, then deleted. No copy is held in the website database.
Server logs — rolled and deleted after 30 days.
Reviews — kept while the product is published; removed if you ask us to take them down.

Your rights

You can ask us to:

Confirm what personal data we hold about you.
Correct anything that is wrong.
Delete your data, subject to records we are legally required to keep (chiefly tax-related order records).
Export a copy of the data you have given us.

Send a request from the email address you used at checkout through the contact form. We aim to respond within 30 days.

International transfers

Our infrastructure and processors operate across multiple jurisdictions. Where personal data is transferred outside its country of origin, we rely on the standard contractual clauses or equivalent safeguards offered by each processor.

Children

This service is not directed at children under 16. We do not knowingly collect personal data from anyone under that age. If you believe a child has submitted information to us, contact us and we will delete it.

Changes to this policy

If we make a material change, we will update the “Last updated” date at the top of this page. Substantive changes that affect existing customers will also be sent by email.

Contact

Questions about this policy or your data: /contact.