Privacy Policy

1. Introduction

Welcome to VINTAGE ROOTS. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or purchase our premium vintage beverage syrups and concentrates.

By accessing or using our services, you agree to the practices described in this policy. This document is designed to comply with United States federal and state privacy regulations. If you do not agree with this policy, please do not use our website.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you. The types of data we collect include:

• Personal Identification Information: Full name, email address, phone number, and shipping/billing address.
• Account Data: Encrypted passwords, order history, and saved preferences.
• Financial Information: Payment details are processed securely through established U.S. payment gateways (such as Stripe, PayPal, or Apple Pay). Note: We do not store your full credit card numbers or CVV codes on our servers.
• Device & Usage Data: IP address, browser type, operating system, and interaction data (e.g., clicks, page views) collected via standard analytics tools.

3. How We Use Your Information

We use the collected information for the following business and operational purposes:

• To process and fulfill your orders, including securely packing and shipping our beverage products.
• To communicate with you regarding order statuses, tracking information, and customer support queries.
• To process refunds or exchanges strictly under our store policies.
• To improve our website layout, product offerings, and user experience based on traffic analysis.
• To send promotional emails or newsletters (only if you have explicitly opted in), from which you can easily unsubscribe at any time.
• To prevent fraud, monitor for suspicious transactions, and ensure the security of our platform.

4. Data Sharing & Third Parties

We respect your privacy and do not sell, rent, or trade your personal information. We may share your data with trusted third parties exclusively for operational purposes:

• Logistics & Shipping Partners: Your name, phone number, and address are shared with our carriers (e.g., USPS, UPS, FedEx) strictly to deliver your orders to your doorstep.
• Payment Processors: When processing payments, data is securely transmitted to our PCI-compliant payment gateways (e.g., Stripe, PayPal) in accordance with their strict privacy regulations.
• Service Providers: We may use third-party platforms for email marketing (e.g., Mailchimp, Klaviyo) or customer support ticketing, who are bound by confidentiality agreements.
• Legal Compliance: We may disclose information if required to do so by U.S. law, such as responding to a subpoena, court order, or to protect the rights and safety of VINTAGE ROOTS and our customers.

5. Data Security

We implement advanced technical and organizational security measures to protect your personal data from unauthorized access, loss, or alteration. These measures include strict SSL (Secure Socket Layer) encryption, secure server hosting, and restricted administrative access protocols.

However, please be aware that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

6. Cookies & Tracking Technologies

We use cookies to enhance your browsing experience. Cookies are small data files stored on your device that help us remember your preferences, such as keeping items in your shopping cart or keeping you logged in between sessions.

You can choose to disable cookies through your browser settings, but doing so may affect the functionality of certain features on our website, potentially preventing you from completing a purchase.

7. State Privacy Rights (CCPA & Others)

Depending on your U.S. state of residence (such as California, Virginia, Colorado, etc.), you may have specific rights regarding your personal information:

• Right to Know: You can request a disclosure of the specific pieces of personal data we have collected about you over the past 12 months.
• Right to Deletion: You may request the deletion of your account and associated personal data (subject to legal, tax, and accounting retention requirements).
• Right to Opt-Out: We do not sell your personal data. However, you have the right to opt-out of targeted advertising.
• Non-Discrimination: We will not discriminate against you (e.g., by denying goods or charging different prices) for exercising your privacy rights.

To exercise these rights, please contact our privacy team via email.

8. Children's Privacy

Our website and products are intended for a general audience. We do not knowingly collect personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we become aware that we have inadvertently collected data from a child under 13 without parental consent, we will take immediate steps to delete that information from our servers.