Privacy policy

Ghosts Vintage, referred to as "we," "our," or "the Company," operates this website and provides services to you subject to this Privacy Policy. By using our website and services, you agree to the collection, use, and disclosure of your information as described in this policy.

1. Information We Collect

We collect the following types of information to provide and improve our services:

Contact Information: Includes name, email address, phone number, shipping address, and billing address. Collected through registration, ordering, and inquiries.

Payment Information: Includes credit card number, debit card number, and payment details. Collected at checkout.

Account Information: Includes username, password, and account preferences. Collected during account registration.

Order Information: Includes products purchased, order history, and returns and exchanges. Collected upon transaction completion.

Device Information: Includes IP address, browser type, operating system, and device identifiers. Collected automatically through your device.

Usage Data: Includes pages visited, time spent on site, click behavior, and referral source. Collected automatically through website analytics.

2. How We Use Your Information

We use your personal information for the following purposes:

Process and fulfill your orders, including shipping and delivery

Send order confirmations, shipping update notifications, and delivery tracking information

Provide customer support and respond to your inquiries promptly

Send promotional communications and marketing materials only with your explicit consent

Improve our website functionality, product offerings, and overall user experience

Prevent fraud, detect unauthorized transactions, and ensure website security

Comply with applicable legal obligations, tax regulations, and accounting requirements

Analyze website traffic patterns to optimize content and layout

3. SSL Security and Data Protection

We take the security of your personal information seriously. Our website is protected by SSL (Secure Sockets Layer) encryption, ensuring all data transmitted between your browser and our website is encrypted and secure. You can verify our SSL certificate by looking for the padlock icon in your browser's address bar.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, modification, disclosure, or destruction. These measures include but are not limited to:

Encrypted data transmission via TLS and SSL protocols

Secure payment processing through PCI-compliant third-party providers

Restricted access to personal data on a need-to-know basis

Regular security assessments and vulnerability monitoring

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and provide personalized services.

Shopping Cart Cookie: Saves cart contents and checkout progress. Required cookie with a 30-day retention period.

Session Cookie: Maintains login status and session continuity. Required cookie retained until end of session.

Security Cookie: Used for account authentication and security verification. Required cookie with a 1-hour retention period.

Google Analytics: Analyzes website traffic and user behavior patterns. Optional cookie with a 2-year retention period.

Google Ads: Used for personalized advertising and conversion tracking. Optional cookie with a 90-day retention period.

Facebook Pixel: Used for ad tracking and retargeting. Optional cookie with a 90-day retention period.

Klaviyo: Used for email marketing and customer analytics. Optional cookie with a 365-day retention period.

You can manage cookies through the following methods:

Browser Settings: Most browsers allow you to block or delete cookies through their privacy or settings menu.

Opt Out of Advertising Platforms:

Google Ads: Visit https://www.google.com/settings/ads to manage your ad preferences.

Facebook: Visit https://www.facebook.com/settings/?tab=ads to manage your ad preferences.

Please note that disabling certain cookies may affect website functionality, including shopping cart operations, checkout processes, and personalized recommendations.

5. Data Retention Period

Account Data: Retained for 3 years after account closure or last recorded activity.

Order Information: Retained for 5 years as required for tax, accounting, and legal compliance.

Payment Information: Retained for 1 year, only as necessary for transaction processing and dispute resolution.

Marketing Data: Retained until consent is withdrawn. You may withdraw consent at any time.

After the above retention periods expire, your data will be securely deleted or irreversibly anonymized so that it can no longer be linked to you.

6. Your Rights

Depending on your location, you have the following rights regarding your personal information:

Access Right: Request a copy of the personal data we hold about you.

Correction Right: Update or correct inaccurate personal information.

Deletion Right: Request deletion of your data, also known as the Right to be Forgotten.

Opt-Out Right: Unsubscribe from marketing communications at any time.

Objection Right: Restrict or object to specific data processing activities.

Portability Right: Receive your data in a structured, commonly used, machine-readable format.

California Consumer Privacy Act (CCPA) Rights

If you are a California resident, under the California Consumer Privacy Act (CCPA), you have the following additional rights:

Right to Know: Understand what personal information we collect, use, and disclose.

Right to Delete: Request deletion of your personal information, subject to certain legal exceptions.

Right to Opt-Out: Opt out of the sale or sharing of personal information. We do not sell your data, except as described in our Your Privacy Choices page, which explains how we may share data with advertising partners for targeted advertising purposes.

Non-Discrimination Right: You will not be discriminated against for exercising any of your CCPA rights.

How to Exercise Your Rights

Email: info@ghostsvintage.com

Phone: 360-207-4696

We will acknowledge your request within 10 business days and respond substantively within 45 days as required by applicable law.

7. Data Breach Notification

7.1 Our Commitment

In the unlikely event of a data breach, we commit to the following:

Notify affected users within 72 hours of discovering the breach

Report the breach to relevant regulatory authorities as required by applicable law

Clearly explain the nature and scope of the breach and its potential impact on affected individuals

Provide remediation measures, protective recommendations, and ongoing support

7.2 Notification Content

In the event of a data breach, our notification will include:

Types and approximate number of records affected

Potential consequences for affected individuals

Measures we have taken or plan to take to address the breach and prevent recurrence

Contact window for affected individuals to obtain further information or assistance

8. International Data Transfers

8.1 Transfer Description

Your information may be transferred to and processed in countries outside your country of residence, including but not limited to:

United States as the primary server and business operations location

Canada

EU Member States

Other jurisdictions where our service providers maintain operations

8.2 Transfer Safeguards

We implement the following measures to ensure appropriate data protection during international transfers:

Standard Contractual Clauses (SCC): Approved by the European Commission for cross-border data transfers.

Data Processing Agreements: Executed with all service providers that handle personal data.

Adequacy Decisions: We rely on EU adequacy decisions where applicable.

Security Certifications: We require service providers to maintain recognized security certifications such as ISO 27001 and SOC 2.

9. Children's Privacy

Our website is not directed to children under 13 years of age or the applicable age of digital consent in your jurisdiction.

We do not knowingly collect personal information from children. If we discover that we have inadvertently collected personal information from a child without verified parental consent, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at info@ghostsvintage.com so we can promptly remove the data.

10. Third-Party Links

Our website may contain links to third-party websites, services, or platforms that are not operated or controlled by us. We are not responsible for the privacy practices, content, or security of these external sites.

We strongly encourage you to review the privacy policies of any third-party website before providing your personal information. Our inclusion of third-party links does not constitute an endorsement of those sites or their operators.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices, service offerings, or legal requirements.

Updated policies will be posted on this page with a revised Last Updated date. Material changes will be notified to registered users via email or a prominent website notice. Continued use of the Services after the effective date of any update constitutes your acceptance of the revised policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions about this Privacy Policy, our data collection practices, or if you wish to exercise any of your rights, please do not hesitate to contact us.

Store Name: Ghosts Vintage