VAULT & CO — PRIVACY POLICY

Last updated: October 4, 2026

Vault & Co operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).

Vault & Co is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, process and disclose your personal information when you visit or use our website, make a purchase or other transaction through the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will control in relation to the collection, processing and disclosure of personal information.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how personal information is handled as described in this Privacy Policy.

1. Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies you or can reasonably be associated with you.

Personal information does not include information that has been anonymised or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with Vault & Co, we may collect or process the following categories of personal information:

Contact information, including your name, billing address, delivery address, telephone number and email address.

Payment and financial information, including payment method, transaction information, payment confirmation and other information necessary to process a transaction. Payment information may be processed on our behalf by third-party payment processors.

Account information, including your username, password, preferences and account settings where applicable.

Transaction information, including products you view, add to your cart or wishlist, purchase, return, exchange or cancel, as well as information about previous transactions.

Communications, including information you provide when contacting Vault & Co regarding an order, customer-support request, return, complaint or other enquiry.

Device information, including information about your device, browser, network connection, IP address and other online identifiers.

Usage information, including information about how and when you access, interact with or navigate our website and Services.

2. Sources of Personal Information

We may collect personal information:

• directly from you when you place an order, create an account, communicate with us or otherwise provide information to us;
• automatically when you use our website or Services, including through cookies and similar technologies;
• from service providers that provide technology, ecommerce, payment, fulfilment, logistics, analytics or other services on our behalf; and
• from business partners or other third parties where permitted by applicable law.

3. How We Use Your Personal Information

Depending on how you interact with Vault & Co, we may use personal information for the following purposes.

Providing and Improving the Services

We may use personal information to:

• process and fulfil orders;
• process payments;
• procure or coordinate products ordered through Vault & Co;
• arrange collection, fulfilment and delivery;
• communicate order and delivery information;
• process returns, refunds or exchanges;
• maintain customer accounts;
• provide customer support;
• remember customer preferences;
• improve our website and Services; and
• personalise aspects of the shopping experience.

Marketing and Advertising

Where permitted by law, we may use personal information to communicate information about Vault & Co, products, promotions or services that may be relevant to you.

Marketing communications may be sent by email, SMS or other permitted communication channels.

Where consent is required by applicable law, we will obtain the appropriate consent.

You may unsubscribe from promotional communications using the unsubscribe mechanism provided in the communication or by contacting us.

Security and Fraud Prevention

We may process personal information to protect Vault & Co and our customers, including to:

• authenticate accounts;
• provide a secure shopping and payment experience;
• detect, investigate and prevent suspected fraud;
• identify unlawful or malicious activity;
• protect our website and systems; and
• enforce our Terms of Service and other policies.

Communicating With You

We use personal information to respond to enquiries, provide customer support, communicate regarding orders and maintain our relationship with customers.

Legal and Regulatory Purposes

We may process personal information where reasonably necessary to comply with applicable laws, legal obligations, lawful requests from authorities, legal proceedings or the enforcement or defence of legal rights.

4. How We Disclose Personal Information

Vault & Co may disclose personal information to third parties where reasonably necessary to operate our business and provide the Services.

This may include:

• Shopify and other ecommerce technology providers;
• payment processors;
• courier and logistics providers;
• fulfilment providers;
• IT, hosting and cloud-service providers;
• analytics providers;
• customer-support providers;
• professional advisers;
• marketing providers where permitted by law;
• retailers or suppliers involved in fulfilling an order where necessary; and
• government, regulatory or law-enforcement authorities where disclosure is required or permitted by law.

We may also disclose information in connection with a legitimate corporate transaction such as a restructuring, merger, acquisition or sale of all or part of our business, subject to applicable law.

5. Retailers, Suppliers and Fulfilment Partners

Because Vault & Co may procure or collect products from independent retailers and suppliers, it may sometimes be necessary to provide limited customer or order information to a retailer, supplier or fulfilment partner involved in completing an order.

Where this is necessary, we seek to limit the information provided to what is reasonably required for the relevant purpose.

For example, information may be used to identify an order, coordinate collection or fulfilment, resolve a product issue or otherwise complete the transaction.

6. Relationship With Shopify

The Vault & Co ecommerce Services are powered by Shopify.

Shopify collects and processes certain personal information relating to customers' access to and use of the Services in order to provide and improve its ecommerce services.

Information submitted through our store may therefore be transmitted to and processed by Shopify and other service providers, including providers located outside South Africa.

Certain Shopify features may also process information regarding customers' interactions with our store and other merchants using Shopify.

Where Shopify independently determines the purposes and means of particular processing activities, Shopify may be responsible for that processing in accordance with its own privacy policies.

Customers may review Shopify's consumer privacy information and privacy controls through Shopify's official privacy resources.

7. Cookies and Similar Technologies

Vault & Co, Shopify and certain service providers may use cookies and similar technologies to operate the website, remember preferences, understand how customers interact with the Services, improve functionality, provide analytics, protect against fraud and, where permitted, provide relevant marketing.

Your browser may allow you to control or disable certain cookies.

Disabling cookies may affect the functionality of some parts of the Services.

8. Third-Party Websites and Links

Our Services may contain links to websites or online platforms operated by third parties.

If you follow a link to a third-party website, you should review that party's privacy policy, security practices and terms.

Vault & Co is not responsible for the privacy or security practices of websites or platforms that we do not control.

The inclusion of a link does not necessarily constitute an endorsement of the relevant third party.

9. Children's Personal Information

The Services are not intended for use by children who do not have the legal capacity to enter into the relevant transaction.

We do not knowingly collect personal information from children contrary to applicable law.

If you are a parent or guardian and believe that a child has provided personal information to us unlawfully, please contact us so that we can assess and, where appropriate, delete or otherwise appropriately handle that information.

10. Security of Personal Information

Vault & Co takes reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, interference, alteration, disclosure or destruction.

However, no electronic system, website, transmission method or storage system can be guaranteed to be completely secure.

Customers should therefore avoid sending highly sensitive or confidential information through unsecured communication channels.

11. Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

Retention periods may depend on factors including whether information is required to:

• maintain an account;
• process or document a transaction;
• provide customer support;
• fulfil an order;
• comply with accounting, tax or other legal requirements;
• resolve disputes;
• prevent fraud; or
• establish, exercise or defend legal claims.

When personal information is no longer reasonably required, we may delete, destroy, anonymise or otherwise appropriately dispose of it in accordance with applicable requirements.

12. Your Rights and Choices

Depending on applicable law and the circumstances, you may have rights regarding your personal information.

These may include the right to:

• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion or destruction of personal information where applicable;
• object to certain processing;
• withdraw consent where processing is based on consent;
• object to certain direct marketing;
• request information regarding the processing of your personal information; and
• exercise other rights provided by applicable privacy law.

These rights are not absolute and may be subject to lawful exceptions.

We may need to verify your identity before processing a privacy request.

We will not unfairly discriminate against a customer for exercising a lawful privacy right.

13. Marketing Preferences

You may opt out of promotional emails by using the unsubscribe option included in our marketing communications.

If you unsubscribe from marketing, Vault & Co may still send you non-promotional communications that are necessary to administer your account, process transactions, provide delivery information or communicate regarding orders and customer-service matters.

 

14. South African Privacy Rights — POPIA

Where the Protection of Personal Information Act 4 of 2013 (“POPIA”) applies, Vault & Co processes personal information in accordance with applicable South African data-protection requirements.

We process personal information only where there is an appropriate lawful justification for doing so, including where processing is necessary to provide our Services, fulfil orders, comply with legal obligations, pursue legitimate business purposes permitted by law or where you have provided consent when consent is required.

Personal information may be shared with service providers where reasonably necessary to operate Vault & Co and fulfil customer orders. These may include our ecommerce platform provider, payment processors, courier and logistics providers, technology providers, customer-support providers and other providers involved in processing or fulfilling an order.

Where necessary to fulfil an order, limited information may also be provided to a retailer, supplier or fulfilment partner involved in supplying the relevant product.

We seek to limit such information to what is reasonably necessary for the relevant purpose.

Subject to POPIA and other applicable law, you may request access to personal information we hold about you, request correction or deletion of certain information, object to certain processing or withdraw consent where processing is based on consent.

If you have concerns regarding the processing of your personal information, please contact Vault & Co using the details below.

You may also have the right to lodge a complaint with the Information Regulator (South Africa).

 

15. International Transfers

Some of Vault & Co's service providers, including ecommerce, cloud, technology or other service providers, may process or store personal information outside South Africa.

Where personal information originating in South Africa is transferred to a recipient outside South Africa, we will handle the transfer in accordance with applicable requirements under POPIA, including applicable requirements governing cross-border transfers of personal information.

Where additional international privacy laws apply to a particular customer or transfer, other recognised safeguards or transfer mechanisms may also be used where required by law.

 

16. Complaints

If you have a complaint regarding how Vault & Co processes your personal information, please contact us using the details below so that we can investigate the matter.

Depending on applicable law, you may also have the right to lodge a complaint with the relevant data-protection authority, including the Information Regulator (South Africa) where POPIA applies.

 

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, service providers or legal and regulatory requirements.

When the policy is updated, we will update the “Last updated” date and provide any additional notice required by applicable law.

 

18. Contact Us

If you have questions regarding this Privacy Policy, our privacy practices, or would like to exercise an applicable privacy right, you may contact Vault & Co at:

Vault And Co (Pty) Ltd
220 3rd Street
Chartwell, Gauteng, 2196
South Africa

Telephone: +27 10 006 9427
Email: info@vaultandco.co.za