Privacy Policy - Things Vintage CA
Type of Website: Ecommerce
Last Revised: February 28, 2024
Things Vintage CA (“Things Vintage CA,” “we”, “us”, or “our”) recognizes the importance of privacy to our customers and users of our website.
This Privacy Policy applies to our website, applications, or website features you use or access (collectively, the “Sites”), as well as any mobile application (each, an “Application” and together with the Sites and Applications, our “Services”).
By using our Services, you consent to the practices set forth in this Privacy Policy, our Terms of Use, and our Cookie Policy.
1. Purpose
The purpose of this privacy policy (this "Privacy Policy") is to inform users of our Site the following:
-
The types of information we collect or receive;
-
The use of the collected data;
-
Who has access to the data collected;
-
The rights of Site users; and
-
The Site's cookie policy.
This Privacy Policy applies in addition to the terms and conditions of our Site.
2. California Consumer Privacy Act (CCPA)
We value your privacy, that is why we have taken the necessary precautions to be in compliance with the California Consumer Privacy Act (CCPA). For visitors coming from California, the CCPA applies. You can opt out of the processing of your data any time. Additionally, you can make use of your rights under the CCPA by contacting us at support@thingsvintageca.com.
3. General Data Protection Regulation (GDPR)
For users in the European Union, we adhere to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (the "GDPR"). For users in the United Kingdom, we adhere to the GDPR as enshrined in the Data Protection Act 2018.
We have not appointed a Data Protection Officer as we do not fall within the categories of controllers and processors required to appoint a Data Protection Officer under Article 37 of the GDPR.
4. Consent
By using our Site users agree that they consent to:
-
The conditions set out in this Privacy Policy;
-
Our Terms and Conditions; and
-
Our Cookie Policy.
When the legal basis for us processing your personal data is that you have provided your consent to that processing, you may withdraw your consent at any time. If you withdraw your consent, it will not make processing which we completed before you withdrew your consent unlawful.
You can withdraw your consent by contacting us at:
Things Vintage CA
Attention: Privacy Policy
1-800-678-1501
40 Elm St., Unit 108, Sudbury ON P3C 1S8
5. Legal Basis for Processing
We collect and process personal data about users in the EU only when we have a legal basis for doing so under Article 6 of the GDPR.
We rely on the following legal bases to collect and process the personal data of users in the EU:
-
Users have provided their consent to the processing of their data for one or more specific purposes; and
-
Processing of user personal data is necessary for us or a third party to pursue a legitimate interest. Our legitimate interest is not overridden by the interests or fundamental rights and freedoms of users. Our legitimate interest(s) are: Use of client data and Marketing.
6. Information We Collect or Receive
We only collect data that helps us achieve the purpose set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.
When you visit our Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support or if you have product requests.
We collect 2 types of information: Device-Identified Information (DII) and Personally-Identified Information (PII).
6.1 Data Collected Automatically
Device-Identified Information (DII) is any data that is linked to a particular browser or device where that data does not by itself directly identify a particular individual. DII may include, but is not limited to, unique identifiers associated with browsers or devices, such as cookie identifiers or advertising identifiers, and IP addresses, where such data is not linked or intended to be linked to PII.
When you visit and use our Site, our Site automatically collects and stores the following online activity and device identifiers:
-
IP address/location;
-
Hardware and software details;
-
Clicked links;
-
Content viewed;
-
Unique visitors;
-
Page views;
-
Top channels;
-
Language;
-
Browser;
-
Time on Site;
-
Pages per Session; and
-
Search Engine Queries.
6.2 Data Collected in a Non-Automatic Way
In order to provide and continually improve our Services, we collect information that alone or in combination with other information could be used to identify you (“Personally-Identified Information”).
Personally-Identified Information (PII) is information that, when used alone or with other relevant data, can identify an individual. The PII data can be linked, or intended to be linked, to an identified individual, and can include details such as: name, address, telephone number, email address, and payment information.
PII we may collect when you perform certain functions on our Site may include:
-
First and last name;
-
Email address;
-
Phone number;
-
Address;
-
Payment information;
-
Date;
-
Communication preferences and details;
-
Cookie consent type;
-
Item favorites;
-
Items left in cart; and
-
Order history or purchasing tendencies
Non-sensitive PII may be accessible through social media sites and can include your location, race, gender, and date of birth.
6.3 Tracking Technologies
Like many websites, our Services incorporate tracking technologies such as “pixel tags”, “web beacons” and “cookies”. These technologies allow us to track the actions of our users across time and Services.
Pixel tags or web beacons are tracking technologies on websites, ads, and in emails that can monitor the behavior of the user visiting our website, viewing the ad, or receiving the email.
Cookies are small files placed on your computer that recognize you when you return to our website, and that allow us to customize your user experience, deliver relevant ads, and improve the Services.
You may modify the cookies that are accepted by your computer by changing your browser settings, or by clicking ‘Manage Preferences’ in the cookie banner popup that appears on your screen, although this may change how the Things Vintage CA website is presented to you.
Other companies’ use of their cookies is subject to their own privacy policies, and we encourage you to review their policies to better understand their data practices
7. How Personally-Identified Information May be Collected
Personally-Identified Information (PII) may be collected using the following methods listed below:
-
Subscribing on the website;
If you subscribe to our Site, you will be asked to enter your email. By subscribing, you are agreeing to receive Marketing emails from us. We use your email for this activity.
-
Creating an account on the website;
If you create an account on our Site, you will be asked to enter your email. The login link will be sent to your email. From your login, you can review your past orders, any items in your cart, your favorites, your name and email, your communications and cookie preferences.
-
Placing an Order;
By making a purchase through our Site, you give us consent to use and provide your financial information as we consider necessary to process the transaction. Our payment processing partner stores and processes your credit card or other payment information using industry-standard security. By placing an order, you are also automatically creating an account on our Site. From your user account, you will be able to review your past order details, any items in your cart, your favorites, your personal information, and your communication and cookie preferences.
-
Selection of cookie preference;
-
Favoriting an item on the website; and
-
Telephone, mail, facsimile, or Internet correspondence;
If you contact us either in person, by phone, email, instant message, social media, or by some other means (either through our Services or through a third party provider), we may keep records of your contact information and any correspondence for later reference.
Other personal information which we utilize while using third party social media services such as Facebook or Instagram:
-
Social media information, including your contact details, when you choose to interact with our pages on social media sites such as Facebook or Instagram.
-
In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.
8. How We Use Personal Data
Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose in this Privacy Policy.
The data we collect automatically is used for the following purposes:
-
Website Analytics;
-
Improving website function; and
-
Improving visitor experiences.
The data we collect when the user performs certain functions may be used for the following purposes:
-
Communication;
-
Marketing;
-
Analytics;
-
Improvement of services; and
-
Improve visitor experience.
The following describes the types of Customer Notification Emails you may receive from us:
-
Order confirmation: Sent to the customer after successful order placement to acknowledge its receipt. This email contains information about order items, shipping, billing, and order status;
-
Order status changed: Sent on the order’s status change to inform the customer about the progress in order fulfillment;
-
Order shipped: Sent when a tracking number to the order is assigned or when the order’s status is changed to “Shipped” to notify the customer that the purchased items are on their way; and
-
Order is ready for pickup: Sent when the order status is changed to “Ready for Pickup” to notify the customer that purchased items are ready for pickup.
The following describes the types of Marketing Emails you may receive from us:
-
Discount Coupons through automated emails: This helps us better service you and also encourages repeat sales to our Site;
-
Abandoned Cart Recovery through automated emails: When a customer abandons their cart, an automated recovery email is sent to the shopper about their unfinished order; and
-
Inactive Customer Reminder through automated emails: An automated email is sent to a customer 6 months after their last order to remind them about our store.
9. Who We Share Personal Data With
Employees
We may disclose user data to any member of our organization who reasonably needs access to user data to achieve the purposes set out in this Privacy Policy.
Third Parties
We may share user data with the following third parties:
-
Moneris Solutions;
-
Meta Pixel;
-
Google Analytics.
Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.
10. Other Disclosures
We will not sell or share your data with other third parties, except in the following cases:
-
If the law requires it;
-
If it is required for any legal proceeding;
-
To prove or protect our legal rights; and
-
To buyers or potential buyers of this company in the event that we seek to sell the company.
If you follow hyperlinks from our Site to another Site, please note that we are not responsible for and have no control over their privacy policies and practices.
11. How Long We Store Personal Data
We store user data for as long as reasonably necessary for the purposes described in this Privacy Policy, or as may be required by law (eg. for accounting and tax purposes, legal, or other purposes).
12. How We Protect Your Data and Information Security
Personal Information will be protected by security safeguards that are appropriate to the sensitivity level of the information. We take all reasonable precautions to protect your Personal Information from any loss or unauthorized use, access or disclosure.
While we take all reasonable precautions to ensure that user data is secure and that users are protected, there always remains the risk of harm. The Internet as a whole can be insecure at times and therefore we are unable to guarantee the security of user data beyond what is reasonably practical.
13. International Data Transfers
Our company is based out of Canada. The financial technology company we utilize for payment processing is also located in Canada. Our Site is hosted in the United States.
If you are visiting the Services from outside of Canada or the United States, your information may be transferred to, stored and processed in Canada and the United States in accordance with this Privacy Policy and applicable Canadian and United States laws. Please note that data protection and other applicable laws of Canada and the United States may not be as comprehensive as those laws or regulations in your country or may otherwise differ from the data protection or consumer protection laws in your country. By using the Service, you consent to the transfer of your information to our facilities as described in this Privacy Policy.
When we transfer user personal data we will protect that data as described in this Privacy Policy and comply with applicable legal requirements for transferring personal data internationally.
If you are located in the United Kingdom or the European Union, we will only transfer your personal data if:
-
The country your personal data is being transferred to has been deemed to have adequate data protection by the European Commission or, if you are in the United Kingdom, by the United Kingdom adequacy regulations; or
-
We have implemented appropriate safeguards in respect of the transfer. For example, the recipient is a party to binding corporate rules, or we have entered into standard EU or United Kingdom data protection contractual clauses with the recipient.
14. Your Rights as a User
Under the GDPR, you have the following rights:
-
Right to be informed;
-
Right of access;
-
Right to rectification;
-
Right to erasure;
-
Right to restrict processing;
-
Right to data portability; and
-
Right to object.
For California residents, you have the following rights under the CPRA/CCPA:
-
Right to delete
-
Right to know
-
Right to opt-out
-
Rights of minors
-
Right to data portability
-
Right to correction
-
Right to opt-out of automated decision making
-
Right to know about automated decision making
-
Right to limit use of sensitive personal information
15. Children
Our services are not aimed at children under 16 years of age. We do not knowingly collect or use personal data from children under the age of 16 years. If you have not reached the age limit, do not use the services and do not provide us with your personal information. If we learn that we have collected personal data from a child under 16 years of age, the personal data will be deleted as soon as possible.
If a child under 16 years of age has provided us with personal data their parent or guardian may contact us at:
Things Vintage CA
Attention: Privacy Policy
(705) 918-3844
3215 Old Hwy 69N, Val Caron ON, P3N 1G4
16. How to Access, Modify, Delete, or Challenge the Data Collected
Through your account settings on our Site, you may access and edit the following Personal-Identifiable Information (PII):
-
Name;
-
Address;
-
Email address;
-
Item Favorites;
-
Order History;
-
Communication preferences; and
-
Cookie consent.
The information you can view, update, and delete may change as Services change.
If you would like to know if we have collected your personal data, how we have used your personal data, if we have disclosed your personal data and to who we disclosed your personal data, if you would like your data to be deleted or modified in any way, or if you would like to exercise any of your other rights under the GDPR or the CPRA/CCPA, please contact us at:
Things Vintage CA
Attention: Privacy Policy
(705) 918-3844
3215 Old Hwy 69N, Val Caron ON, P3N 1G4
17. Do Not Track Notice
Do Not Track ("DNT") is a privacy preference that you can set in certain web browsers. We do not respond to browser-initiated DNT signals. We are not responsible for and cannot guarantee how any third parties who interact with our Site and your data will respond to DNT signals.
18. How to Opt-Out of Data Collection, Use or Disclosure
In addition to the method(s) described in the How to Access, Modify, Delete, or Challenge the Data Collected section, we provide the following specific opt-out methods for the forms of collection, use, or disclosure of your personal data specified below:
Cookies-
Our website allows users to opt-out of non-essential cookies. You can opt-out by selecting your cookie tracking preference when they visit our website. You may also change your cookie settings from your website account at any time.
Marketing Emails-
You can opt-out of the use of your personal data for marketing emails. You can opt-out by clicking "unsubscribe" on the bottom of any Marketing Email or by updating your email preferences under "Your Account".
Collected Personal Information-
Collected personal information. You can opt-out by upon request, users will be informed of the existence, use and disclosure of their Personal Information, and will be given access to it. They may verify the accuracy and completeness of their Personal Information, and may request that it be amended, if appropriate. However, in certain circumstances permitted by law, we will not disclose certain information to them. For example, we may not disclose information relating to them if other individuals are referenced or if there are legal, security or commercial proprietary restrictions.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
Below are various ways you can opt-out on targeted advertising:
FACEBOOK - https://www.facebook.com/settings/?tab=ads
GOOGLE - https://www.google.com/settings/ads/anonymous
YAHOO - https://legal.yahoo.com/index.html
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/. You may also learn more about opting out on interest based advertising by visiting the the Network Advertising Initiative (“the NAI”) at: https://optout.networkadvertising.org/?c=1#completed.
19. Cookie Policy
A cookie is a small file, stored on a user's computer or device when you visit a website and other parties including the advertising companies and content partners for those sites. Its purpose is to collect data relating to the user's browsing habits. You can choose to be notified each time a cookie is transmitted. You can also choose to disable cookies entirely in your internet browser, but this may decrease the quality of your user experience.
Cookies enable customization of your web experiences. For example, allowing the website to recognize the same browser as it navigates through pages and content, or remembering your preferences (such as items you have added to your cart, your login, or your favorite items). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another.
We use the following cookies to optimize your experience on our Site and to provide our services:
-
Functional cookies are used to remember the selections you make on our Site so that your selections are saved for your next visits;
-
Analytical cookies allow us to improve the design and functionality of our Site by collecting data on how you access our Site, for example data on the content you access, how long you stay on our Site, etc;
-
Targeting cookies collect data on how you use the Site and your preferences. This allows us to personalize the information you see on our Site for you;
-
Session cookies are used to remember items in your shopping cart while you are still browsing.; and
-
The term “third-party” indicates that rather than having a direct relationship with a user, a company has a relationship with one or more of the websites that a user visits. Third-party cookies are created by a website other than ours.
We may use third-party cookies to achieve the following purposes:
-
Monitor user preferences to tailor advertisements around their interests;
-
Measure the performance of ad campaigns; and
-
Generate analytics and insights.
Please note, blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “How To Opt-Out of Data Collection, Use or Disclosure” located in our Privacy Policy.
19.1 Third Party Cookies
We may share user data with the following third parties:
-
Moneris Solutions;
-
Ecwid;
-
Wix;
-
Meta Pixel; and
-
Google Analytics.
We may share the following user data with third parties:
-
Links clicked while using site and apps;
-
Customer information which may include: name, address, email, purchase history, and whether the user has either subscribed or opted-out to receive marketing emails;
-
All the company products, variations and discount coupons; and
-
Order details received in the last 6 months.
We may share user data with third parties for the following purposes:
-
To determine the performance of the apps used on our website;
-
Improve our services;
-
Targeted behavioral advertising;
-
Sharing of our company's latest news or an upcoming event;
-
Providing relevant information relating to our products; and
-
Provide our customers with an enhanced shopping experience.
Third parties will not be able to access user data beyond what is reasonably necessary to achieve the given purpose.
20. Blogs and Reviews
The Services may from time to time offer publicly-accessible blogs and customer reviews. Any information you provide in these areas may be read, collected and used by us and others who access them. To request removal of your Personal Information from our blogs or customer reviews, please contact us at support@thingsvintageca.com. Please note that in some cases, we may be unable to remove your Personal Information.
21. Additional Clauses
Our website may contain links to other third-party sites that are not governed by this privacy policy. Although we endeavor to only link to sites with high privacy standards, our privacy policy will no longer apply once you leave our website. Additionally, we are not responsible for the privacy practices employed by third party websites. Therefore, we suggest that you examine the privacy statements of those sites to learn how your information may be collected, used, shared and disclosed.
You can read Meta’s privacy policy here.
22. Modifications
This Privacy Policy may be amended from time to time in order to maintain compliance with the law and to reflect any changes to our data collection process. When we amend this Privacy Policy we will update the "Effective Date" at the top of this Privacy Policy.
We recommend that our users periodically review our Privacy Policy to ensure that they are notified of any updates. If necessary, we may notify users by email of changes to this Privacy Policy.
Your use of Services constitutes your acceptance of the terms of this Privacy Policy as amended or revised by us from time to time.
23. Questions or Complaints
If you have any questions or complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section so that we can, where possible, resolve the issue. If you feel we have not addressed your concern in a satisfactory manner, you may contact your regional supervisory authority. You also have the right to directly make a complaint to a supervisory authority.
24. Contact Information
If you have any questions, concerns or complaints, you can contact us at:
Things Vintage CA
Attention: Privacy Policy
1-800-678-1501
40 Elm St., Unit 108, Sudbury ON P3C 1S8