Privacy Policy

This Privacy Policy explains what information we collect, why we collect it, and how we handle it. The Vault Drop is operated as a sole proprietorship in Ontario, Canada, and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information we collect

Email address, name, shipping address, phone number (optional), and order history. Payment card details are collected and stored exclusively by Stripe; we do not see or retain them.

2. Why we collect it

To process and ship your order, to send transactional email (order confirmations, shipping notifications), and to respond to support inquiries.

3. Processors

Stripe processes payments. Resend (or an equivalent transactional provider) sends email. Vercel hosts the site and database. These processors are bound by their own privacy terms.

4. What we do not do

We do not sell, rent, or share your personal information with third-party marketers. We do not run third-party advertising pixels on the site.

5. Data retention

Order records are retained for seven (7) years for accounting and tax purposes.

6. Your rights

Under PIPEDA, you may request access to the personal information we hold about you, request correction of inaccuracies, and request deletion where applicable. Requests should be sent to the support email address listed in the site footer.