Privacy Policy

1. Information We Collect

We collect only what is needed to run the business:

• Identifiers and contact information: name, email address, shipping address, billing address, phone number.
• Commercial information: order history, products purchased, payment method details (handled by our payment processors; we never store full credit-card numbers).
• Internet / device information: IP address, browser type, device data, pages viewed, and similar technical data collected automatically through cookies and similar technologies.
• Limited inferences drawn solely from purchase history for order fulfillment and customer service.

We do not collect sensitive personal information beyond what is required to complete a transaction.

2. How We Collect Information

• Directly from you at checkout, account creation, contact forms, or email.
• Automatically through essential cookies and similar technologies (cart, login, security).
• From service providers that process payments, ship orders, or deliver transactional email.

3. How We Use Information

We use personal information only for:

• Fulfilling, shipping, and processing orders.
• Handling payments and preventing fraud.
• Communicating about orders, returns, or customer service.
• Maintaining site security and functionality.
• Complying with legal obligations (tax, accounting, law-enforcement requests).
• Sending marketing emails only if you have explicitly opted in. You can unsubscribe at any time.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

4. How We Share Information

We share personal information only as necessary with:

• Payment processors (Stripe, PayPal, or equivalent payment providers we enable at checkout).
• Shipping carriers and shipping platforms to deliver your order.
• Email and fulfillment service providers under contracts that prohibit secondary use or sale.
• Law enforcement or regulators when required by valid legal process or to protect our rights, property, or safety.

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

We do not sell or rent customer lists.

If this ever changes we will update this Policy and provide the legally required opt-out mechanism before any such activity begins.

5. Data Retention

We retain personal information only as long as necessary for the purposes described above, to meet tax and record-keeping requirements, resolve disputes, and enforce our agreements.

Order records are retained for 7 years. After that period they are deleted or anonymized, subject only to any longer retention required by law. You may request deletion of other personal information subject to these legal retention obligations.

6. Your Privacy Rights

Depending on your state of residence you may have the right to:

• Know what personal information we collect and how we use it.
• Request deletion of your personal information (subject to legal exceptions).
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information (we do not sell or share for advertising).
• Non-discrimination for exercising these rights.

California residents (CCPA/CPRA): The rights listed above apply. Email us at the address below to exercise them. We will verify your identity and respond within the statutory timeframes. We honor Global Privacy Control (GPC) signals where required. You may also use an authorized agent.

Other U.S. state residents: Similar rights may exist under applicable state laws. Contact us to exercise any rights that apply to you. Our baseline practices follow the higher California standard where feasible.

Children: This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information we will delete it.

7. Cookies and Tracking Technologies

Essential cookies required for cart, login, security, and basic site function run without consent. Non-essential cookies (analytics or advertising) are used only with consent or as permitted by law. Manage preferences through any cookie banner we display or through your browser settings. Disabling essential cookies may prevent the site from working properly.

8. Data Security

We apply reasonable administrative, technical, and physical safeguards. Payment data is processed by PCI-compliant providers. No system is perfectly secure; we cannot guarantee absolute security.

9. Contact Us

For privacy questions, access, correction, or deletion requests, email:

contact@vintageiconvault.com

You may also use our contact form.

We will respond to verifiable requests within the time required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top will reflect the most recent version. Continued use of the site after changes constitutes acceptance of the revised Policy.