Privacy Policy

VaultLoot (“we,” “us,” or “our”) is committed to protecting the privacy, integrity, and security of your personal data. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you interact with our website located at vaultloot.com (“Website”). We are dedicated to ensuring that your privacy is respected in accordance with applicable laws, including the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”) and the California Consumer Privacy Act (“CCPA”).

1. Commitment to Privacy and Data Protection

Your privacy is of paramount importance to us. We collect and process your data responsibly and transparently, and only as necessary to deliver our services, fulfill legal obligations, and continually improve the user experience. We implement technical and organizational safeguards to ensure the confidentiality, integrity, and availability of your data.

2. Scope of This Policy and Role as Data Controller

This Privacy Policy applies to users of vaultloot.com and any other interactions you may have with our services, including communications via email and customer support. For the purposes of data protection laws, VaultLoot is the “data controller” responsible for determining the purposes and means of processing your personal data.

3. Categories of Personal Data We Process

We process various types of personal data, described as follows:

a) Usage Data
We collect data about your interactions with our Website, including your browser type, IP address, pages visited, timestamp of activity, referring URLs, session duration, and other general behavioral patterns.

b) Account Data
When you create an account or conduct business on our Website, we may collect your full name, email address, phone number, billing address, and shipping address.

c) Profile Data
We process information such as login credentials, user preferences, purchase history, saved items, browsing behavior on vaultloot.com, and related personalization metrics.

d) Communication Data
This includes records and contents of inquiries, support requests, emails, messages via our contact form, and any other correspondence initiated by you.

e) Technical Data
Collected through cookies and similar technologies, this includes device type, operating system, browser user agent strings, mobile identifiers, system configuration settings, network data, and crash diagnostics.

f) Transaction Data
We collect data necessary to complete and deliver orders, including payment method, transaction amount, purchase timestamp, delivery details, order history, and invoicing information.

g) Preference Data
This includes your choices concerning marketing communications, products or services you have expressed interest in, and other preference details provided to us.

4. Legal Bases for Processing Personal Data

We process your personal data under the following legal grounds as applicable under the GDPR:

– Consent: When you voluntarily provide data for specific purposes (e.g., subscribing to newsletters).
– Contract: Where processing is necessary to perform a contract with you or to take steps prior to entering into a contract.
– Legal Obligation: Where processing is required to comply with applicable laws and regulations.
– Legitimate Interests: For purposes such as service optimization, fraud prevention, marketing (within lawful bounds), and Website security, provided such interests are not overridden by your rights.

For California residents under the CCPA, we ensure the collection, use, and disclosure of personal information aligns with consumer rights and obligations specified under California law.

5. Your Rights

In accordance with applicable data protection laws, you have the right to:

– Access your personal information.
– Request correction of inaccurate or incomplete information.
– Request deletion (erasure) of your data, where eligible.
– Restrict processing in limited circumstances.
– Request data portability in a structured, commonly used, machine-readable format.
– Withdraw consent at any time, where processing relies on consent.
– Object to processing, including use for direct marketing.

To exercise any of these rights or to inquire further, please contact us at [email protected]. We will respond in accordance with applicable data protection laws.

6. Security Measures

We implement state-of-the-art security technologies and organizational measures, including but not limited to:

– End-to-end encryption for data in transit and at rest.
– Role-based access controls and multi-factor authentication.
– Regular audits and monitoring for security vulnerabilities.
– Daily backups and secure disaster recovery protocols.
– Privacy-training programs for our staff.

Despite these measures, no digital transmission or storage method can be guaranteed to be 100% secure. We encourage users to take their own appropriate precautions.

7. International Data Transfers

VaultLoot is based in jurisdictions that may not offer the same level of data protection as your country. Whenever personal data is transferred outside of the European Economic Area (EEA) or other regions with comprehensive data protection laws, we ensure adequate safeguards are in place, including:

– Standard Contractual Clauses approved by the European Commission.
– Data Processing Agreements enforced with international partners.
– Compliance with regional requirements, such as the UK GDPR and Swiss DPAs.

8. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Policy or to fulfill legal, accounting, or reporting obligations. Generally:

– Usage and Technical Data: Retained for up to 12 months from collection.
– Account and Profile Data: Retained while your account remains active and for up to 3 years after account closure.
– Communication Data: Retained for 24 months from the last interaction.
– Transaction Data: Retained for 7 years in accordance with tax and financial record-keeping laws.
– Preference Data: Retained until you change or withdraw your preferences.

9. Cookie Policy

VaultLoot uses cookies and similar technologies to enhance content delivery, save preferences, and analyze site traffic. Categories of cookies used include:

– Essential Cookies: Required for core site functions such as login and navigation.
– Functional Cookies: Store user choices and settings for a personalized experience.
– Analytics Cookies: Provide insights into user behavior, allowing us to improve our services.
– Performance Cookies: Monitor site performance and usage metrics.

10. Cookie Management and Legal Compliance

You may manage or reject cookies through your browser settings or opt-out via on-site cookie consent tools. Under the GDPR and CCPA, you have the right to opt out of the sale or sharing of your data and the use of non-essential cookies.

For EU users, we comply with ePrivacy Directive standards by seeking your consent before placing non-essential cookies. Californian users may exercise their CCPA rights by using the “Do Not Sell My Personal Information” link or by contacting us directly.

11. Children’s Privacy

Our services are not directed toward individuals under the age of 13. We do not knowingly collect or store personal data from children without verifiable parental consent. If we discover that data from a child has been inadvertently collected, we will delete it immediately upon notification.

12. Policy Updates and User Notifications

We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, or business operations. When changes are significant, we will notify users via appropriate channels, including email or on-site alerts. Continued use of vaultloot.com signifies your acceptance of the modified terms.

13. Contact Us

If you have any questions, concerns, requests, or complaints regarding your personal data or this Privacy Policy, you may contact our data protection team by email at:

[email protected]

We are committed to resolving any inquiries swiftly and in accordance with applicable privacy laws.

VaultLoot values your trust and is fully committed to maintaining your data rights in compliance with GDPR, CCPA, and global data protection standards. Please reach out to us at any time for further information or to exercise your privacy rights.