Last updated: May 2026
Vierlot (referred to as "we", "us", or "our") operates the official website vierlot.com. This policy explains how we collect, use, store and disclose your personal data during your browsing, ordering and after-sales service.
We are the official data controller of all your personal information.
Only contact method: service@vierlot.com
We fully comply with EU GDPR, California CCPA/CPRA, China Personal Information Protection Law and global cross-border data protection laws.
We collect only necessary data to complete orders, delivery and customer service, in line with the "minimum necessary" principle of global data protection laws.
All bank card and payment details are processed and stored by third-party payment platforms Stripe & PayPal. We do not save complete bank card information internally, and payment data is only used for order settlement.
IP address, browser information, access time, page browsing records, device identification code. All anonymous data will not be linked to personal identity, nor will it be traced or filed.
Product condition photos, authenticity verification records and transaction files are only used for item appraisal, after-sales rights protection and compliance filing, and will never be disclosed to luxury brands or unrelated third parties.
We process your personal data based on legitimate legal grounds:
Your personal data may be transmitted and stored in regions with different data protection regulations. We take standard contractual clauses and encryption measures as appropriate safeguards for cross-border data transmission. By using our website, you agree to cross-border data transmission.
We only share necessary information with qualified partners, and sign confidentiality agreements with all third parties:
We will never sell, rent or trade your personal privacy data for commercial profit.
We adopt SSL full-site encrypted transmission to protect user data security. No internet transmission or electronic storage is absolutely 100% secure.
We retain personal order data for 7 years in accordance with international cross-border tax and customs legal requirements.
After the statutory retention period, data will be completely and securely deleted or anonymized.
Tax and customs archived records cannot be deleted according to mandatory legal regulations, even if users submit deletion applications.
You own full data rights under global privacy laws, and we will not charge any fees for exercising your rights:
We respond to all user data applications within 30 calendar days.
As a cross-border enterprise established outside the EU, we have designated a representative in the EU to handle GDPR-related data subject requests and regulatory communications, in full compliance with GDPR mandatory requirements.
In case of personal data leakage, we will comply with GDPR mandatory requirements: report to the competent data protection regulatory authority within 72 hours, and notify affected users in a timely manner when high security risks exist.
We use two types of website cookies:
You can manage all cookie settings directly through your browser, or withdraw relevant consent through the website frontend.
Our luxury service is only for adults aged 18 and above.
We will never knowingly collect personal information from users under 13 years old.
If you are a guardian and find your minor child has submitted personal data, please contact us immediately, and we will delete relevant data promptly.
We will update this privacy policy with legal changes, business adjustments or regulatory requirements. Revised content will be published on this page directly, and the update date will be revised simultaneously.
Privacy policy inquiries & data right applications: service@vierlot.com
loading