Privacy

Last revised 2024-06-12

This page describes the privacy policy for Local Vyntage, LLC (also known as "Local Vyntage", and referred to in this document by "we", "us", or "our"). This policy describes how, why, and when we might collect, store, use and/or share ("process") your information, and your rights concerning this collection. Consent to these terms is implied when you interact with our services ("Services"), including but not limited to:

when you visit our website at localvyntage.com, or any other website of ours that links to this privacy policy;
when you make a purchase via our website, or via an embedded shopping experience such as the ones offered by Meta;
when you provide Local Vyntage with personal information in other contexts, such as completing a transaction, placing an order, arranging for a delivery, or returning a purchase; and
when you interact with Local Vyntage in other related ways.

Consent to these terms also implies consent to the Shopify Privacy Policy, located at https://www.shopify.com/legal/privacy as of this revision.

To withdraw consent, refer to the section at the end of this document.

What is the scope of this Privacy Policy?

This Privacy Policy applies to the main Local Vyntage website located at https://localvyntage.com, as well as any other Services owned and operated by Local Vyntage which link or otherwise refer to this policy.

When interacting with the Services, you may click links or otherwise be directed to resources maintained by third parties. Once you leave our store's website or are redirected to a third-party website, application, or other resource, you are no longer governed by this Privacy Policy or our website's Terms of Service.

Our Services also enable you to share content, such as links to our products or other pages, via social networks or other online communities. Please note that we cannot control the actions of others with whom you may choose to share information or other content. As stated in the previous paragraph, this Privacy Policy does not cover any content provided to these third-party sites. We do not allow these services to provide any personal information, profile data, or other content back to our website unless you agree. To request removal of your personal information from our Services, please refer to the section at the end of this document.

What happens when this Privacy Policy is updated or changed?

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on our website. If we make material changes to this policy, we will notify you by revising the date at the top of the policy that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

What information do we collect?

When you engage with Local Vyntage, we may collect information, including but not limited to:

identifying information such as name, mailing or billing address, phone number and email address;
transaction information such as purchase date and payment information;
usage data such as pages visited, searches performed, and ads clicked;
technical data such as IP address, browser version, and device characteristics;
user-submitted media such as photos of you enjoying your Local Vyntage apparel; and
other automatically collected information as detailed below.

We will use this information to carry out actions on your behalf, as explicitly stated or reasonably inferred from the context in which it was provided. Information collected is also subject to the Shopify privacy policy, available at https://www.shopify.com/legal/privacy as of this revision.

We collect some information automatically when you interact with our Services. This information cannot be used to identify you personally, but may include device and usage information such as Internet Protocol (IP) address, device and browser information, country, and other technical information. We primarily use this information for analytics to provide a better experience for you and other visitors.

In the past 12 months, we have not collected information about protected classification characteristics, such as gender, age, ethnicity, or national origin; biometric information such as fingerprints and voiceprints; or sensitive personal information such as health care data. We do not create profiles based on inferences drawn from collected personal information. Our third-party service providers may behave differently; please review these providers, listed later in this document.

Finally, while the Local Vyntage website offers a location-based experience, it does not use precise geolocation, including GPS or similar technologies, without your consent. The homepage guesses your approximate location based on the IP address of your device. Geolocation data is only used in an anonymized fashion and is not associated with your user profile. After your location is approximated, a cookie is set on your device to ensure a consistent localized experience. We only use this cookie to enhance the presentation of the site; this particular cookie is not used for tracking or data collection. To learn more about how geolocation is inferred, visit https://developers.cloudflare.com/network/ip-geolocation/.

Job applicants

Local Vyntage may collect further information from those seeking employment with us. This information may include professional or employment-related information such as job titles, work history, professional qualifications, and education history.

Automatically collected information

The information we collect automatically includes:

Log and usage data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
Device data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

Why do we collect information?

We collect information for a variety of business purposes, including:

To fulfill and manage your orders. We use your information to track your order throughout the process and to manage payments, returns, exchanges, and order update notifications.
When we have a legitimate interest in processing your personal data. For example, we may need to communicate with you about changes to our Services or legal documents, to prevent fraud, or to provide, protect, or improve our products and services.
To enable account management and provide customer support. We use your information in accordance with the Shopify privacy policy to enable a smooth post-purchase experience.
To send you marketing and promotional messages. If you have opted into our promotional communications, we will use your information to alert you to content we think you may like, such as blog posts or new products.
To protect our Services. The analytics we collect are used in part to keep Local Vyntage a safe and secure experience for everyone.
To deliver targeted advertising to you. We may process your information to offer a personalized advertising experience. To learn more, please read our cookie policy at https://localvyntage.com/pages/cookie-policy.
To learn more about how we can improve Local Vyntage. We use analytics to identify usage patterns, evaluate advertising campaigns, and improve the customer experience, among other things.
To comply with legal obligations.

How do we collect information?

Some of the information we collect is provided by you, the customer, as outlined in the "What information do we collect?" section above.

We also use cookies to provide the best experience possible. Cookies (including targeting cookies and marketing cookies), beacons, pixels, tags, and related technologies, enable us to collect information and allow us to maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions. To learn more, please read our cookie policy at https://localvyntage.com/pages/cookie-policy.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.

To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under the applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described in the section at the end of this document.

How do we protect your information?

We have implemented industry-standard, appropriate, and reasonable measures to protect your data, including technical and organizational security measures. However, it should be noted that no information transmission or storage technique can be guaranteed 100% secure, so we cannot guarantee that hackers, criminals, or other third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Local Vyntage is committed to the protection of its customers; however, when you transmit personal information to and from our Services, it is done at your own risk and should always be performed in a secure environment.

Our store is hosted on Shopify Inc. Local Vyntage limits its direct handling of most of the transaction-related information we collect, instead using Shopify's servers to store and update your information. This information is protected on a secure server behind a firewall, and benefits from Shopify's security practices.

Shopify handles your credit card data in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). If you provide us with your credit card information, the information is encrypted using Transport Layer Security (TLS) and stored with AES-256 encryption. Your purchase transaction data is stored only as long as is necessary to complete the transaction.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read Shopify's Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

If Local Vyntage becomes aware of a breach involving your data, you will be notified as soon as is reasonably possible.

Certain third-party providers may be located in a different jurisdiction than you or us, or have facilities that are located in such a jurisdiction. If you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

For how long is your information retained?

We will retain your information only for as long as required to fulfill the purposes for which we have collected it, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, then we will securely store your personal information and isolate it from any further processing until deletion is possible. If you would like us to delete your information sooner, please review the "opt out" section at the bottom of this document.

You may also wish to review the Shopify data retention policy, located at https://www.shopify.com/legal/privacy#how-long-do-we-retain-your-information as of this revision.

What third parties have access to your information?

Local Vyntage may disclose information with our service providers pursuant to a written contract between us and each service provider. In general, the third-party providers we use will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.

We may share your information with the following types of third party:

Shopify. Online services for Local Vyntage are primarily provided by Shopify. As such, in order to fulfill your order, your information must be managed and processed by Shopify in accordance with their privacy policy, available at https://www.shopify.com/legal/privacy as of this revision.
Vendors, contractors, and service providers. Local Vyntage may employ other companies and/or individuals to perform services on our behalf. We have contracts in place with our third parties which are designed to safeguard your information. These third parties cannot process or share your information beyond the terms outlined in this document, and must protect the data according to industry standards.
Compliance with legal requirements. We may disclose your personal information if we are required by law to do so, or if you violate our Terms of Service.
Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

The categories of third party with which we may share personal information include:

ad networks and ad retargeting platforms,
website and cloud hosting providers,
data storage service providers,
payment processors,
sales and marketing tools, and
user account registration and authentication services.

Certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in place with respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

We have not sold any personal information to third parties for a business or commercial purpose in the last twelve (12) months. We have disclosed some information to third-parties for a business or commercial purpose in the last twelve (12) months, including personal information as defined in the California Customer Records law.

Google Analytics

We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Remarketing with Google Analytics, Google Display Network Impression Reporting, Google Analytics Demographics and Interest Reporting, and integrated services that require Google Analytics to collect data via advertising cookies and identifiers. These Advertising Features enable Google Analytics to collect data about your traffic via Google advertising cookies (more information at https://www.google.com/policies/technologies/types/) and identifiers, in addition to data collected through a standard Google Analytics implementation. To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

We will not facilitate the merging of PII with Non-PII collected through any Google advertising product or feature unless you have robust notice of, and the user's prior affirmative (i.e., opt-in) consent to, that merger.

Klaviyo

Local Vyntage uses Klaviyo to collect information about our visitors and readers of our newsletters and other promotional materials. To learn more about Klaviyo, visit Klaviyo's Privacy Center, located at https://www.klaviyo.com/legal/privacy as of this revision.

Other third parties

Local Vyntage also uses other, smaller third parties for collecting and processing information. Such third parties are subject to the data processing restrictions defined in this section.

Do we serve ads based on tracking?

We may work with online advertising companies to show you relevant and useful ads. This may include ads on our website. This may also include our ads or client ads served on other companies' sites. These ads may be based on information collected by us or third parties (for example, when you register for a site) except as otherwise stated herein. These ads may also be based on your activities on our websites or on client or third party sites. This second type of advertising is called "online behavioral advertising."

Online behavioral advertising and ad personalization features also use cookies, web beacons, and other storage technologies to identify groups of users and deliver appropriate content, services and advertising, to provide social media features and to analyze traffic to our website. We also share information about your use of our website with our trusted, third-party, social media, advertising, and analytics partners, including, but not limited to Google and Meta. These partners may show past visitors to our website advertisements on other sites across the Internet through services such as Google Remarketing or Similar Audiences, Google AdWords, Google Analytics, Double-Click, Google Tag Manager, Google Customer Match, and other platforms as applicable. Each of these third parties and/or platforms have their own privacy policies. We encourage you to familiarize yourself with the terms and conditions of these policies.

When using Google Customer Match, we will only upload to Google, customer information shared with it directly, i.e., information collected from our website.

For more information on the types of cookies used by Google, go to the site "Types of cookies used by Google," located at https://www.google.com/policies/technologies/types/, or any other URL Google may provide from time to time. For more information on Google Analytics, and how it collects and processes data visit the site "How Google uses data when you use our partners' sites or apps," located at www.google.com/policies/privacy/partners/ , or any other URL Google may provide.

Do we collect information from minors?

By using our website, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use our website. Local Vyntage is wholeheartedly concerned about the use of the internet by children, and in particular, their privacy and safety. Without prior and verifiable parental consent, we will never knowingly request personally identifiable information online from anyone 18 years of age or younger. While the intended usage of our website is by a general audience, it's not intended for use by children, nor are we targeting children as prospective users.

If you become aware of any data we may have collected from children under age 18, please contact us via the methods listed at the end of this document.

How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please review the section at the end of this document.

What are your rights with respect to privacy?

Residents of the European Economic Area (EEA) and/or European Union have certain rights and protections under the law regarding our possessing and/or processing their data. We have made the decision to extend these rights and preferences to all of our customers and website users, regardless of the country or state of residence.

You have the right to:

request a confirmation that Local Vyntage is processing your personal data and/or information about how your personal information is being used;
access, update, correct or obtain a copy of your personal data that Local Vyntage possesses;
request a transfer of your data to you or another service provider;
have your personal data erased;
opt out of direct marketing messages/communications;
restrict processing of your personal data;
non-discrimination for exercising your rights; and
complain to your data protection regulator.

Depending upon the state where you live, you may also have the following rights:

Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California's and Delaware's privacy law)
Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including Oregon's privacy law)
Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California's privacy law)
Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including Florida's privacy law)

To exercise any of these rights, or other rights applicable to your jurisdiction, refer to the section at the end of this document.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

Opting out

You can unsubscribe from our marketing and promotional communications with the "Unsubscribe" link found at the bottom of every email. You can also unsubscribe by contacting us via the methods listed at the end of this document.

You may opt out of the use of a third-party vendor's use of cookies by visiting the Network Advertising Initiative (NAI) consumer opt-out page (http://www.networkadvertising.org/choices/). In addition, you may opt out of Google Analytics Advertising Features through Google Ads Settings, Google Ad Settings for mobile apps, or any other available means (for example, the NAI's consumer opt-out). You may also use any Google Analytics opt-out tool then available for the web which can be found at: https://tools.google.com/dlpage/gaoptout/ or any other URL Google may provide. For more information about adjusting how ads are targeted through Facebook/Meta, go to the site "How can I adjust how ads are targeted to me based on my activity off of Facebook," located at https://www.facebook.com/help/568137493302217 or any other URL Facebook or Meta may provide.

Depending on your location, we may show a cookie consent banner on the website. This banner will allow you to modify your preferences concerning cookies. You may also update your browser settings to remove or reject cookies. If you choose to remove or reject cookies, this could affect certain features and functionality of our Services.

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have your right to withdraw consent at any time. However, please note that such a withdrawal will not affect the lawfulness of the processing before said withdrawal nor, where applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

If you wish to terminate your account, you may log in via the link at https://localvyntage.com or contact us via the methods listed at the end of this document.

Do-Not-Track browser signals

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. For more information about DNT technology, please visit https://www.allaboutdnt.org. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

How to exercise your rights

To exercise your rights, you can contact us via the methods described at the bottom of this document.

Upon receiving your request, we may need to verify your identity to determine you are the same person about whom we have the information in our system. If you provide us with personal information in your request, we will only use this information for the purposes of verifying your identity or authority to make the request. However, if we are unable to verify your identity based on the provided information, we may request further information. This will help us verify your identity and mitigate the risk of fraud or security breaches. Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing our Privacy Compliance Officer at privacy@localvyntage.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state's attorney general.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section at the end of this document.

Contact us

For more information or for data requests, you may contact our Privacy Compliance Officer via one of the following methods:

Email privacy@localvyntage.com
Post mail to the following address:

Local Vyntage, LLC
Re: Privacy Compliance Officer
386 Centre St
Jamaica Plain, MA 02130