Privacy policy

This Privacy Policy explains how we collect, use, share, store, and protect your personal data when you visit, browse, or use this website and related services, as well as the rights you may have under applicable data protection laws. We value the proper handling of personal data and are committed to conducting data processing activities in a transparent and reasonable manner.

1. Scope of This Privacy Policy

This Privacy Policy applies to the processing of personal data in connection with your access to, browsing of, and use of this website, including when you shop, place orders, contact customer support, or use other related services.

This Policy applies to relevant data processing activities regardless of the country or region in which you are located. Where the data protection laws of your location impose additional requirements, we will fulfill our corresponding obligations under applicable law. This Policy should be read together with any other terms applicable to the services you use.

2. Data Controller and Contact Information

We act as the data controller for the relevant personal data processing activities associated with this website. We are responsible for determining the purposes and means of processing personal data and managing related processing activities in accordance with applicable law.

If you have questions about this Privacy Policy, how your personal data is processed, or your data protection rights, you can contact us using the following details:

Phone: +1 (303) 482-6719

Email: care@vintagenestaeu.com

3. Information We Collect

To operate this website, process orders, provide customer support, and maintain website security, we may collect the following categories of information depending on how you interact with the website.

Device and technical information: This may include your IP address, browser type, operating system, device identifiers, and other technical information associated with your access to the website. This information helps us identify technical issues, maintain website functionality, and detect unusual activity.

Website usage data: This may include access times, pages viewed, time spent on pages, click activity, referral sources, and records of interactions with the website. The specific information collected depends on the features you use and your choices regarding relevant tracking technologies.

Order and transaction information: When you place an order or make a transaction through this website, we may collect your name, billing address, shipping address, email address, phone number, ordered products, payment status, transaction records, and shipping information. The specific way payment information is handled depends on the payment service provider you select and its payment process.

Customer service and communication records: When you contact us by email, phone, or another contact channel provided on the website, we may retain the inquiries you submit, relevant order information, and subsequent communication records so that we can address your questions and maintain necessary service records.

We process relevant personal data only where there is a reasonable business purpose or an applicable legal basis. If certain information is not necessary to provide a specific service or fulfill a legal obligation, we do not treat it as necessary merely because it can technically be collected.

4. Cookies and Tracking Technologies

This website may use cookies, pixel tags, and other similar technologies to support essential website functions, remember your preferences, understand how the website is used, and, where applicable, measure advertising performance.

Depending on their purpose, these technologies may include the following categories:

Strictly necessary cookies: These support core website functions, including shopping carts, checkout processes, security verification, and other essential features. Such technologies are generally necessary to provide services you request or ensure that the website operates properly.

Functional cookies: These help remember certain choices or preferences to improve your experience when you return to the website.

Analytics cookies: These help us understand website traffic, page usage, and how visitors interact with the website, allowing us to assess performance and make improvements.

Marketing cookies: Where applicable, these help measure advertising performance, understand interactions with advertisements, or support relevant marketing activities.

Where applicable law requires consent for non-essential cookies or similar technologies, we will request your consent in accordance with those requirements. You can adjust your choices through the cookie settings tool provided on the website, if available, and manage or delete cookies through your browser settings. Disabling certain cookies may affect the normal operation of the shopping cart, preference settings, or other website features.

Some analytics or advertising technologies are operated by third-party service providers. These providers may process technical data in accordance with their own privacy policies and relevant settings. We manage the use of these technologies in accordance with applicable law and relevant consent requirements.

5. How We Use Information

We use personal data according to the specific processing purpose and applicable legal basis. Our primary purposes include the following:

Order processing and fulfillment, including confirming orders, arranging payments, coordinating warehousing and shipping, sending order status notifications, and handling return, exchange, or refund requests.

Customer support and after-sales service, including responding to inquiries, verifying order information, addressing shipping issues, resolving transaction disputes, and maintaining necessary service records.

Website security and operation, including identifying unusual access, preventing fraud, troubleshooting technical issues, protecting accounts and transaction processes, and fulfilling applicable legal obligations.

Improving website experience and business operations, including analyzing website usage, evaluating feature performance, optimizing page flows, and identifying technical issues that may affect website stability.

Sending marketing communications and information about relevant products or services, and measuring the performance of related promotional activities, where we have obtained the consent required by applicable law or have another lawful basis. You can unsubscribe from marketing communications using the method provided in those communications. Unsubscribing from marketing messages will not affect necessary notifications we send to process your orders or fulfill legal obligations.

Different processing activities may rely on different legal bases, such as the performance of a contract, compliance with legal obligations, legitimate interests, or your consent. We will determine the applicable basis according to the circumstances and respect your choices regarding relevant processing activities where required by law.

6. Information Sharing and Third-Party Services

To fulfill orders, provide website functionality, and maintain daily operations, we may disclose or transfer personal data to relevant third-party service providers to the extent necessary for specific purposes.

Payment service providers: These providers process payments, verify transactions, identify unusual payment activity, and support refund procedures. The specific handling of payment data depends on the payment method you select and the relevant service provider.

Logistics and shipping service providers: These providers receive necessary shipping information, arrange transportation, provide delivery status updates, and complete order deliveries.

IT infrastructure and cloud service providers: These providers support website hosting, data storage, system maintenance, communications, and related technical services.

Data analytics and advertising technology providers: Where applicable, these providers help us analyze website usage, measure advertising performance, or conduct authorized marketing activities.

Where permitted or required by law, we may also provide necessary information to professional advisers, auditors, regulatory authorities, or other relevant parties to fulfill legal obligations, handle disputes, protect legitimate interests, or respond to lawful requests.

We do not sell your personal data. Third-party service providers process data only within the scope of their service responsibilities, applicable contractual arrangements, and the limits permitted by relevant law. Some third parties may process relevant information as independent data controllers and assume their own responsibilities under their respective privacy policies. When you use third-party payment, shipping, or other services, you should also review the privacy notices of the relevant service providers.

7. Data Storage and Retention Periods

We retain personal data only for a reasonable period necessary to fulfill the relevant collection purposes. Specific retention periods are determined by considering the type of data, processing purpose, business needs, and applicable legal requirements.

Order and transaction records may need to be retained for a certain period to handle after-sales matters, maintain financial records, meet tax and accounting requirements, and fulfill other legal obligations.

Customer service and communication records may be retained for a reasonable period to follow up on unresolved issues, address subsequent disputes, and maintain necessary service records.

The retention periods for website technical data, analytics data, and related records may vary depending on their purpose, the services used, and the relevant settings.

When personal data is no longer necessary for its relevant processing purpose and there is no legal obligation or other lawful basis for continued retention, we will take reasonable steps to delete the data or anonymize it. Data stored in backup systems may be deleted according to established system maintenance cycles.

8. International Data Transfers

Because this website is involved in cross-border e-commerce operations, your personal data may be transferred to countries or regions outside the country or region in which you are located and may be processed or stored by relevant service providers in their places of operation.

Data protection laws may differ between countries and regions. For international data transfers, we will assess applicable requirements and implement appropriate safeguards where necessary. Depending on the circumstances, these safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, other transfer mechanisms recognized under applicable law, and contractual arrangements or technical measures relating to data access, confidentiality, and security.

We will take appropriate measures based on the nature of the relevant data transfers and applicable legal requirements. The specific safeguards used will depend on the countries or regions involved, the service providers, and the applicable legal requirements.

9. Your Rights

Depending on your location and the data protection laws that apply, you may have one or more of the following rights:

Right of access: Request confirmation of whether we process your personal data and obtain a copy of the relevant data to the extent permitted by law.

Right to rectification: Request correction of inaccurate or incomplete personal data.

Right to erasure: Request deletion of your personal data where the conditions under applicable law are met.

Right to restriction of processing: Request that the processing of relevant personal data be restricted in circumstances specified by law.

Right to object: Object to processing carried out on certain legal bases to the extent permitted by applicable law, including, where applicable, objecting to processing for direct marketing purposes.

Right to withdraw consent: You may withdraw your consent at any time for processing activities based on your consent. Withdrawal does not affect the lawfulness of processing carried out on the basis of valid consent before the withdrawal.

Right to data portability: Where the conditions under applicable law are met, request to receive relevant personal data in a structured, commonly used, and machine-readable format, or request that the data be transferred to another data controller where technically feasible and legally permitted.

Right to lodge a complaint: Submit a complaint to a competent data protection supervisory authority.

You can submit requests for access, correction, deletion, or other privacy-related matters using the contact details provided in this Policy. To protect personal data, we may need to verify your identity or confirm the validity of your request. We will handle requests within the time limits and procedures required by applicable law.

Some rights may be subject to legal limitations. For example, we may be unable to delete certain data immediately when it must be retained to fulfill legal obligations, address legal disputes, or preserve transaction records required by law. If we are unable to fulfill all or part of a request, we will explain the relevant reasons to the extent required by applicable law.

10. Data Security

We implement technical and organizational measures appropriate to the types of personal data we process, the purposes of processing, and the potential risks, with the aim of reducing the risk of unauthorized access, disclosure, alteration, loss, or improper use of personal data.

These measures may include access permission management, encryption during transmission, secure storage mechanisms, system maintenance, necessary internal management procedures, and oversight of data processing arrangements with relevant service providers.

We will reasonably assess and adjust our security measures as our business operations and technical environment change. Where third-party services are involved, we also manage relevant data processing risks to the extent required by applicable law and contractual arrangements.

Internet transmission and electronic storage involve certain risks, so we cannot guarantee that all data will remain unaffected by security incidents under all circumstances. If a personal data security incident occurs, we will take appropriate measures in accordance with applicable law and notify relevant regulatory authorities or affected individuals where legally required.

11. Third-Party Links

This website may contain links to third-party websites, payment pages, or other external services. These third parties may have their own privacy policies, cookie settings, and data processing practices.

When you visit a third-party website or use a third-party service, the relevant personal data processing activities are governed by that third party's applicable rules. We do not control the content, privacy practices, or security measures of third-party websites. We therefore recommend reviewing their privacy policies and relevant notices before submitting personal information.

This Privacy Policy applies only to this website and the related data processing activities described in this Policy. It does not replace the privacy policies of third parties.

12. Updates to This Policy

We may update this Privacy Policy in response to changes in applicable law, data processing activities, business operations, or related services.

The updated version will be published on this page and will take effect from the effective date stated on the page. If no separate effective date is specified, it will take effect on the date of publication. For material changes that require separate notice or consent under applicable law, we will take the appropriate steps in accordance with those requirements.

We recommend reviewing this page periodically to stay informed about how we process and protect your personal data.

13. Contact Information

If you have questions about this Privacy Policy, the collection and use of personal data, international data transfers, or the exercise of your personal data rights, you can contact us through the following channels.

Address: 8387 Midsummer Ln, Elizabeth, CO 80107, US
Phone: +1 (303) 482-6719
Email: care@vintagenestaeu.com
Business Hours: Monday to Friday, 10:00 AM – 6:00 PM (Mountain Time, MT)

When submitting a privacy-related request, please provide details about your request and any relevant background information to help us identify and process it accurately. To protect your information, we may request reasonable identity verification before processing your request.