PRIVACY POLICY

Uncle Sam Vintage ("we," "us," or "our") operates this website. Safeguarding the privacy and security of our customers and site visitors is fundamental to our business. This Privacy Policy details how we collect, use, disclose, and protect your personal information when you visit or make a purchase from our website.

By using our website, you agree to the collection and use of information in accordance with this policy.

WHO WE ARE

Uncle Sam Vintage (referred to as “we” or “us”) gathers, utilizes, and assumes responsibility for the retention of specific personal data related to you. In such instances, we operate under the provisions of the General Data Protection Regulation (GDPR) that are applicable throughout the European Union (including the United Kingdom).
We hold the role of a “Controller” for this personal information as stipulated by these laws.

Uncle Sam Vintage is a business operating in Canada. We collect and process personal information in compliance with applicable global privacy regulations, including:

  • PIPEDA (Personal Information Protection and Electronic Documents Act - Canada)

  • US State Privacy Laws (including CCPA/CPRA)

  • GDPR & UK GDPR (General Data Protection Regulation for European Union and UK residents)

For the purposes of applicable data protection legislation, Uncle Sam Vintage acts as the Data Controller for personal information collected through our store, while our e-commerce platform provider (Shopify Inc.) acts as a Data Processor.

THE PERSONAL INFORMATION WE COLLECT AND USE

A. PERSONAL INFORMATION YOU PROVIDE TO US

We collect the following personal information that you provide to us:

  • Name

  • Email

  • Address

  • Payment details

  • Phone number

Some examples of when we collect this information include:

  • When registering for an account

  • When making purchases

  • When leaving comments

  • When signing up to newsletters or entering competitions

B. PERSONAL INFORMATION YOU PROVIDE ABOUT THIRD PARTIES

If you give us information about another person, you confirm that the other person has appointed you to act on their behalf and agreed that you:

  • Shall consent on their behalf to the processing of their personal data;

  • Shall receive any data protection notices on their behalf; and

  • Shall consent on their behalf to the transfer of their personal data abroad.

C. COOKIES AND SIMILAR TECHNOLOGIES

A cookie is a small text file placed on your computer or electronic device when you access our website. Similar technologies include web beacons, action tags, local shared objects (“flash cookies”), and single-pixel GIFs. Such technologies can be used to track users’ actions and activities and to store information about them. We use these cookies and/or similar technologies on this website.

In addition, it should be noted that in some cases, our cookies or similar technologies may be owned and controlled by third parties who will also collect personal information about you.

The following examples illustrate how we may use cookies to monitor and/or collect information:

A. Information You Provide Directly

  • Contact & Identification Data: Full name, email address, shipping address, billing address, phone number.

  • Order & Transaction Data: Items purchased, order history, payment confirmation details (we do not store full credit card numbers directly on our servers; payments are processed securely through PCI-DSS compliant gateways).

  • Communication Data: Inquiries sent to customer support, reviews, or responses to marketing surveys/promotions.

B. Information Collected Automatically (Cookies & Tracking)

When you browse our store, Shopify and integrated analytics tools automatically collect device and usage information, including:

    • IP address, browser type, operating system, and device details.

    • Time zone, geolocation details, pages viewed, items added to cart, and referral links.

    • Cookies & Tracking Technologies: We use functional cookies (to maintain your cart session), performance/analytical cookies (to optimize store navigation), and marketing cookies. You may manage or disable cookies through your browser settings; however, disabling functional cookies may impair checkout functionality.

For further information on cookies, visit www.aboutcookies.org or www.allaboutcookies.org.

HOW WE USE YOUR PERSONAL INFORMATION

We utilize your personal information strictly for legitimate business operations, including:

  • Fulfillment & Delivery: Processing orders, issuing order confirmations, calculating applicable shipping/duties (DDP), and shipping packages to your address.

  • Customer Support: Resolving order inquiries, shipping tracking, and return/refund requests.

  • Fraud Prevention & Security: Screening orders for potential risk, unauthorized transactions, or fraudulent activity.

  • Marketing Communications: Sending newsletters, promotional offers, and abandoned cart reminders (only where you have explicitly opted in, compliant with CASL and TCPA).

  • Legal Compliance: Fulfilling tax, accounting, and regulatory obligations.

WHO YOUR INFORMATION MAY BE SHARED WITH

We do not sell, rent, or trade your personal information. We share your data strictly with trusted service providers necessary to operate our business and fulfill your orders:

  • E-Commerce Platform: Shopify Inc. (hosts our online store, processes checkout data, and maintains database security).

  • Payment Processors: Shopify Payments, Stripe, and PayPal (secure processing of payment credentials under PCI-DSS standards).

  • Fulfillment & Shipping Partners: Stallion Express (and their cross-border shipping partner networks including USPS, Canada Post, and regional express couriers) to generate customs documentation, clear import duties (DDP), and deliver packages.

  • Analytics & Operational Tools: Google Analytics and Shopify Analytics for aggregate store performance evaluation.

  • Legal Authorities: When required by subpoena, court order, or applicable law to protect our rights, prevent fraud, or assist law enforcement.

REQUIRED PERSONAL INFORMATION

The following information is mandatory for you to provide:

  • Name

  • Address

  • Payment details

  • Email

  • Phone number

This is essential for us to perform the following tasks:

  • Process your order

  • Complete the payment

  • Arrange delivery, including sending delivery schedule notifications via text

When we collect information from you, we will specify whether it’s necessary for you to furnish this information to us.

HOW LONG YOUR PERSONAL INFORMATION WILL BE KEPT

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Operating customer accounts and order history.

  • Retaining transaction records for 6 years to comply with Canadian corporate tax and accounting legal requirements.

  • Resolving open chargebacks, disputes, or legal obligations.

REASONS WE CAN COLLECT AND USE YOUR PERSONAL INFORMATION

Our collection and utilization of your personal information are based on the following lawful grounds:

  • Contractual necessity (to process your purchases)

  • Legal obligation (for tax and accounting purposes)

  • Legitimate business interest (to improve services and prevent fraud)

  • Consent (for newsletters or marketing communications)

KEEPING YOUR INFORMATION SECURE

We maintain appropriate security measures to prevent inadvertent loss, unauthorized use, or access of personal information.
Access to your personal data is restricted to individuals with a legitimate business need to access it. Those handling your information are bound by confidentiality obligations and are authorized to process it solely in a lawful manner.

Furthermore, we have established protocols to address any suspected breaches of data security. If legally required, we will inform you and relevant regulatory authorities about any suspected data security breach.

While we diligently employ reasonable efforts to safeguard your personal data, it’s important to acknowledge that internet usage is not entirely secure. Consequently, we cannot provide an absolute guarantee of the security or integrity of any personal data transferred over the internet.
If you have specific concerns about your information, please contact us at unclesamvintagestore@gmail.com.

TRANSFERS OF YOUR INFORMATION OUT OF THE EEA

At no point will we transfer your personal information beyond the borders of the EEA, except when necessary for the operation of our services (e.g., Shopify servers, payment processors, or shipping integrations), which all comply with GDPR-approved safeguards.

WHAT RIGHTS DO YOU HAVE?

Depending on your geographic location, you possess specific legal rights regarding your personal information:

  • Right to Access & Portability: Request a copy of the personal data we hold about you.

  • Right to Correction: Request updates or corrections to inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal data, subject to legal retention obligations (e.g., tax records).

  • Right to Opt-Out of Marketing: Unsubscribe from promotional emails or SMS at any time via the "Unsubscribe" link or by replying "STOP."

  • US Residents (CCPA/CPRA): You have the right to direct us not to sell or share your personal information. (Note: Uncle Sam Vintage does not sell customer personal data).

To exercise any of these rights, please:

  • Email us at unclesamvintagestore@gmail.com

  • Provide sufficient information to verify your identity (such as an order number or recent transaction record)

  • Specify the information your request pertains to

Periodically, we may offer alternative methods for unsubscribing (opting out) from direct marketing, such as unsubscribe buttons or web links. Please note that there may be a brief interval during which you might still receive marketing materials as your request is processed.

HOW TO COMPLAIN

We aspire to address and resolve any inquiries or concerns you may have regarding our utilization of your information.

Furthermore, under the General Data Protection Regulation, you possess the right to file a complaint with a supervisory authority.
In Canada, this would typically be the Office of the Privacy Commissioner of Canada (OPC).

CHANGES TO THE PRIVACY POLICY

This Privacy Policy was initially released on August 13, 2023, and most recently revised on October 10, 2025.

Please note that we may modify this Privacy Policy periodically. It is recommended that you review this policy regularly to ensure you remain informed about the latest version that will be in effect whenever you access this website.

Effective as of: October 7, 2026