← Back

Privacy Policy

Last updated: October 2026

1. Introduction & Data Controller

Vierlot (referred to as “we”, “us”, or “our”) operates the official international luxury curation website vierlot.com. This Privacy Policy governs the collection, processing, storage, and cross-border transfer of personal data collected during your browsing, order execution, wholesale communication, and after-sales concierge services.

Vierlot serves as the designated Data Controller responsible for your personal data. We are fully committed to protecting your privacy in full compliance with the European Union General Data Protection Regulation (EU GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and applicable international cross-border data protection frameworks.

For all privacy-related matters, data rights requests, or supervisory inquiries, please contact our dedicated Data Compliance Officer via service@vierlot.com.

2. Information We Collect

We strictly adhere to the principle of “data minimization” under global data protection frameworks, collecting only data essential for transaction fulfillment, secure international logistics, and client concierge services:

  • Personal Identifiable Information: Full legal name, billing address, verified international delivery address, primary email address, and direct contact telephone number. For enterprise wholesale clients, this includes commercial entity details, corporate WhatsApp numbers, and verified commercial credentials.
  • Payment & Transaction Security Data: Financial transactions are processed via tier-one, PCI-DSS Level 1 certified third-party payment gateways including Stripe, PayPal, Visa, Mastercard, and American Express. Vierlot does not store, access, or archive complete credit or debit card numbers, expiration dates, or CVV codes on internal servers.
  • Technical, Device & Browsing Data: Internet Protocol (IP) address, operating system, browser specifications, access timestamps, and anonymized interaction history across the platform. This technical data is strictly utilized for fraud prevention, server security diagnostics, and interface optimization.
  • Archival Verification & Order History: Macro inspection imagery, historical authentication dossiers verified under our Authentication & Guarantee Policy, and transactional ledgers. These archival records are strictly preserved for client provenance verification, chargeback dispute defense, and statutory commercial compliance.

3. Legal Grounds for Data Processing

Under international data protection regulations, we process personal information strictly under legitimate legal bases:

  • Contractual Performance: Executing purchase contracts, fulfilling express door-to-door delivery, managing pre-shipment approvals under our Pre-Shipment Approval Policy, and administering warranty remedies.
  • Legitimate Business Interests: Mitigating international payment fraud, safeguarding platform infrastructure against malicious intrusions, and upholding transaction security.
  • Statutory Compliance: Adhering strictly to mandatory cross-border customs declarations, international commercial trade laws, and statutory corporate financial reporting.
  • Client Consent: Administering optional editorial publications, transactional notifications, and voluntary concierge communications.

4. International Data Transfers & Authorized Third-Party Sharing

To fulfill cross-border luxury commerce, your personal information may be transferred across international borders. We ensure all cross-border transmissions are governed by robust administrative safeguards, standard contractual clauses (SCCs), and end-to-end SSL cryptographic protocols.

We do not sell, rent, monetize, or trade client personal information to data brokers or unrelated commercial third parties. Data is shared exclusively with authorized service providers essential for retail fulfillment:

  • Financial Payment Networks: Stripe, PayPal, Visa, Mastercard, and accredited banking acquirers for settlement verification.
  • Global Logistics Partners: Tier-one insured express carriers (FedEx, DHL, UPS) and licensed customs clearance brokers exclusively to fulfill secure door-to-door delivery under our Shipping & Delivery Policy.
  • E-Commerce & Infrastructure Hosts: Enterprise platform infrastructure (Shopline) for encrypted hosting and secure order management.
  • Statutory Legal & Regulatory Bodies: Competent administrative, judicial, or customs enforcement agencies solely when mandated by binding international legal process.

5. Data Security, Retention Schedule & Erasure Protocols

We employ advanced Secure Sockets Layer (SSL) 256-bit encryption across all digital interfaces to shield sensitive data against unauthorized disclosure, interception, or manipulation. While robust safeguards are enforced, no digital storage environment or internet transmission is guaranteed to be 100% impenetrable.

Retention & Statutory Preservation: In accordance with international fiscal, customs, and commercial trade legislation, transactional and customs-clearing archives are retained for a statutory duration of seven (7) years. Following this statutory threshold, expired data is either irrevocably erased or permanently rendered anonymous.

Mandatory fiscal and export-import customs archives cannot be deleted upon unilateral request prior to statutory expiration due to mandatory global regulatory compliance.

6. Your Sovereign Privacy Rights

Under global privacy standards (including GDPR and CCPA/CPRA), you maintain enforceable rights regarding your personal information, which we accommodate free of charge:

  • Right to Access: Obtain formal confirmation and verified copies of your personal data held within our systems.
  • Right to Rectification: Request immediate correction of outdated, incomplete, or inaccurate personal information.
  • Right to Erasure (“Right to be Forgotten”): Request permanent deletion of non-statutory data, provided the data is no longer mandated for active orders or statutory fiscal archives.
  • Right to Restrict or Object: Limit or challenge specific automated data processing activities.
  • Right to Data Portability: Request structured, machine-readable exports of your transaction files.
  • Right to Opt-Out of Sale / Sharing: Vierlot does not sell personal information. You retain the permanent right to opt out of commercial communications or cross-context analytics at any time.
  • Right to Non-Discrimination: Exercising your statutory privacy rights will never result in price penalties, degraded service quality, or commercial discrimination.

To submit a formal data inquiry or exercise your privacy rights, please direct your request to service@vierlot.com. We verify and respond to all authentic claims within thirty (30) calendar days.

7. Global Data Governance & Cross-Border Framework

As an international luxury purveyor serving global collectors, Vierlot maintains a unified global data compliance framework. Whether you reside in the European Economic Area, North America, or other global territories, our centralized Data Compliance Team manages regulatory requests and privacy matters with full institutional accountability and transparency, strictly aligned with our Terms of Service.

8. Data Breach Incident Protocol

In the unforeseen event of a confirmed data security incident that poses a potential risk to user privacy, Vierlot enforces a strict incident response framework in accordance with international standards. We will notify the competent supervisory data protection authority within seventy-two (72) hours of confirmation, and promptly dispatch formal notification advisories to impacted clients whenever significant risks exist.

9. Cookies & Analytical Technologies

Our platform deploys limited cookies to optimize browsing integrity:

  • Essential Operational Cookies: Mandatory for shopping cart persistence, secure checkout sessions, fraud prevention, and system stability. These cookies cannot be deactivated.
  • Analytics & Preference Cookies: Anonymized metrics used to gauge traffic flow and interface performance, which you may freely accept, decline, or configure at any time.

You retain complete control over cookies through your personal browser settings or via our frontend privacy preference settings.

10. Protection of Minors

Vierlot curates high-value archival luxury assets exclusively intended for individuals who are at least eighteen (18) years of age or the age of legal majority in their jurisdiction.

We do not knowingly solicit or collect personal information from individuals under the age of 18, and strictly prohibit data submission from children under 13. If a parent or guardian discovers that a minor has provided personal details without consent, please notify service@vierlot.com immediately for swift data expungement.

11. Amendments & Official Contact

Vierlot reserves the right to amend this Privacy Policy to reflect regulatory enhancements, technical integrations, or operational updates. All revisions become effective immediately upon publication on this page with an updated timestamp. Continued engagement with our platform constitutes formal acceptance of the revised terms.

For official privacy requests, regulatory inquiries, or general support:

  • Data Compliance Office: service@vierlot.com
  • Client Concierge Portal: Reach our team directly via our verified Contact Us gateway or official order portal.

Cart

loading