Privacy Policy

Last updated: August 3, 2026

This Privacy Policy describes how VINTAY ("we," "us," or "our") collects, uses, and shares your personal information when you visit shopvintay.com or register your VINTAY product with us. This policy applies to visitors and customers located in the United States.

1. Information We Collect

Information you voluntarily provide

When you register your VINTAY tote through our registration form, we collect only the following information:

• Email address — to deliver your complimentary Bible study resources and periodic newsletters

We do not collect your name, phone number, mailing address, Amazon Order Number, or purchase date through our registration form. This follows the principle of data minimization: we only collect what is strictly necessary to fulfill our stated purpose.

We do not obtain any customer data from Amazon or any third-party marketplace. We only process the information you voluntarily submit through our registration form.

If you file a warranty claim in the future, we may ask you to provide additional details (such as your Amazon Order Number or Purchase Date) at that time — but this is only for the specific purpose of processing your claim.

Information collected automatically

• Log data — IP address, browser type, device information, referral source, timestamps
• Cookies — to remember your preferences and improve site functionality (see Cookies section)
• Usage data — pages visited, form interactions (used only in aggregate for site improvement)

2. How We Use Your Information

We use the information you provide to:

• Maintain records of your VINTAY product registration and warranty
• Deliver the complimentary Bible study resources you requested (30-Day Bible Reading Plan and future materials)
• Send you periodic emails about VINTAY, if you have opted in
• Send you SMS messages — not currently offered. If we introduce SMS in the future, it will be governed by separate, clearly disclosed SMS Terms & Conditions with express opt-in required.
• Respond to your inquiries and provide customer support
• Improve our website, products, and services
• Comply with legal obligations and enforce our Terms of Service

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Third-Party Service Providers

We use the following trusted service providers to operate our website and communications. Each provider processes only the data necessary to perform its function:

• Cloudflare, Inc. — website hosting, content delivery, and DDoS protection (Cloudflare Privacy Policy)
• Klaviyo, Inc. — email and SMS marketing platform (Klaviyo Privacy Policy)
• Google LLC — website analytics (Google Analytics), if enabled (Google Privacy Policy)

These providers are contractually required to protect your data and use it only for the purposes we specify.

4. Cookies and Tracking

We use essential cookies to operate the website. We may also use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

5. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (as amended by the CPRA):

• Right to Know — what personal information we have collected about you
• Right to Delete — request deletion of your personal information
• Right to Correct — request correction of inaccurate information
• Right to Opt-Out — of the sale or sharing of your personal information
• Right to Limit Use — of sensitive personal information
• Right to Non-Discrimination — we will not discriminate against you for exercising your rights

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:

• Email subscription data — retained until you unsubscribe or request deletion (typically up to 5 years of inactivity, after which we remove dormant records)
• SMS subscription data — not collected (SMS not currently offered)
• Log and analytics data — retained for up to 24 months in aggregate form

7. Children's Privacy (COPPA)

Our website and products are not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us information, contact privacy@shopvintay.com.

8. Data Security

We use industry-standard technical and organizational measures to protect your information, including encrypted data transmission (HTTPS), secure database storage (Cloudflare D1 with access controls), and rate limiting on data-collection endpoints. However, no method of transmission over the internet is 100% secure. If a data breach occurs, we will notify affected users as required by applicable law.

9. Your Choices

• Unsubscribe from emails — click the unsubscribe link in any email
• Delete your account — email privacy@shopvintay.com
• Access your data — email privacy@shopvintay.com

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated via email to registered users. We encourage you to review this policy periodically.

11. Contact Us