Thank you for visiting vintacrew.com (the "Website"). This Privacy and Security Policy (the "Policy") sets forth the types of information we collect when you access the Website, visit our physical stores, or engage in any form of communication with us. It also outlines our practices regarding the use, storage, and protection of such information, as well as your rights to access, correct, and restrict the processing of your personal data.

This Policy is an integral part of the Website’s Terms & Conditions of Use, which are legally binding on all users of the Website. If you do not agree to the terms herein, you must cease using the Website immediately.

By providing your personal data to us, you consent to our processing of such data for the purposes specified below, in compliance with applicable data protection laws.

1.1 Purposes of Processing

We process your personal data for the following legitimate business purposes:

• Creating and maintaining your personal account on the Website (e.g., full name, email address);
• Processing and fulfilling your orders (e.g., full name, delivery address, payment details);
• Sending delivery status notifications via SMS (e.g., mobile phone number);
• Delivering marketing communications, including newsletters and product catalogs (e.g., full name, email address);
• Notifying you of order-related issues or discrepancies (e.g., telephone number, delivery address);
• Responding to your inquiries and providing updates on new or modified services (e.g., email address).

1.2 Data Retention

We retain your personal data only for the period necessary to fulfill the purposes stated above, or as required by applicable laws (e.g., accounting regulations, contractual obligations). Personal data will not be retained beyond the period required by legal or contractual obligations.

1.3 Processing of Non-Personal Data

Non-personal data (i.e., data that cannot identify you individually) may be used by us in accordance with applicable laws, including combination with personal data to:

• Analyze website usage and traffic patterns to optimize our website design, products, and services;
• Customize marketing offers, promotions, and information based on your preferences;
• Integrate personal information you provide to us online, via mobile device, in our stores, or through our customer service call center;
• Combine with publicly available information or data we receive from trusted third-party partners to personalize your shopping experience and improve our communication with you.

Pursuant to applicable data protection laws, you are entitled to the following rights:

• Right of Access: Request confirmation of whether we process your personal data and access to such data;
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data;
• Right to Erasure: Request deletion of your personal data, subject to legal or contractual retention requirements;
• Right to Annual Disclosure: Receive free written documentation of your personal data held by us once per calendar year;
• Right to Withdraw Consent: Withdraw consent for our processing of your personal data for marketing purposes (e.g., newsletters, catalogs) at any time without affecting the lawfulness of prior processing;
• Right to Update Data: Access your personal account to update or modify your personal data at any time.

2.1 Exercise of Rights

To exercise the above rights, please contact our Customer Service. For requests for annual disclosure, written correspondence is required. You may withdraw marketing consent via telephone, email, or the unsubscribe function in our marketing communications.

2.2 Account Security

Your personal account is protected by a username and password, for which you are solely responsible. We shall not be liable for any actions taken while logged into your account using your credentials.

We do not sell, rent, or lease your personal data to third parties. However, we may share your personal data with third parties in the following circumstances:

• To fulfill a transaction, provide a requested service, or for administrative purposes;
• To comply with legal obligations, court orders, or regulatory requirements;
• To conduct credit checks, identity verification, credit rating monitoring, or debt collection (e.g., credit reference agencies, debt collection services);
• To protect against potential or suspected fraud, security breaches, or illegal activities;
• In the event of a merger, acquisition, corporate reorganization, or sale of all or part of our assets, where personal data may be transferred to the acquiring entity.

By providing your personal data to us, you acknowledge and consent to the above disclosures.

4.1 Definition and Use

A cookie is a small data file stored on your device that contains information about your interaction with the Website. We use both session cookies (temporary, deleted when you close your browser) and persistent cookies (remain on your device for a specified period) to:

• Track and analyze user interests and website usage patterns;
• Optimize our website design, product offerings, and user experience;
• Customize our marketing content and promotions.

Cookies do not damage your device or files, and only we can access cookies placed by the Website.

4.2 Cookie Controls

You may manage cookie preferences through your browser settings, including:

• Deleting existing cookies;
• Blocking all cookies;
• Receiving notifications before accepting cookies.

Instructions for managing cookies are available in your browser’s "Help" section. Please note that disabling cookies may limit your access to certain Website features.

We implement reasonable and appropriate security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive information (e.g., credit card numbers) using Secure Socket Layer (SSL) technology during transmission;
• A lock icon displayed on secure pages (e.g., order forms) to indicate encrypted transmission;
• Secure storage of personal data on our servers in restricted-access environments.

While we use reasonable efforts to ensure data security, no security system is infallible. We cannot guarantee the absolute security of your personal data and shall not be liable for unauthorized access due to circumstances beyond our reasonable control.

For questions regarding Website security, please contact us at service@vintacrew.com.

To fulfill our obligations to you, we may supplement the information you provide with data from third-party sources (e.g., affiliated websites) to:

• Combine purchasing habits with similar data from our affiliated entities;
• Tailor the Website to your preferences based on purchases from our affiliated companies.

6.3 Data Updates and Deactivation

You may correct, update, or deactivate your personal data by using the unsubscribe function in our marketing communications or contacting our Customer Service.

We reserve the right to revise this Policy at any time without prior notice. The effective date of the Policy is indicated at the top of this page. Revised versions will be posted on the Website, and your continued use of the Website following the posting of changes constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically for updates.