Privacy Policy

1. Introduction

At Vesper Wild ("us", "we", "our" or the "Company") we value your privacy and the importance of safeguarding your data. This Privacy Policy (the "Policy") describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data ("Personal Data") refers to any information that on its own, or in combination with other available information, can identify an individual.

We are committed to protecting your privacy in accordance with applicable data protection law. The primary laws that apply to our business include:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA)
• California's Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), where applicable
• The EU's General Data Protection Regulation (GDPR), where applicable
• Other U.S. state privacy laws, where applicable to our business

Scope

This Privacy Policy applies to the Vesper Wild online store, website, checkout, orders, customer service, fulfillment, delivery, returns, refunds, and related transactional and marketing communications.

Vesper Wild is the organization responsible for personal information collected through the store and is the controller or accountable organization for that information where applicable law uses those terms.

Privacy contact: Privacy Officer. Mailing address: Vesper Wild, Ontario, Canada. Email: support@vesperwild.com.

For international sales, this policy covers customers in the United States, Canada excluding Quebec orders, Australia, New Zealand, Japan, Singapore, Norway, Switzerland, and Liechtenstein. We process only the personal information needed to sell, collect payment and tax, produce, ship, support, secure, and account for orders in those destinations.

This Policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third party's own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.

Processing Activities

This Policy applies when you interact with us by doing any of the following:

• Make use of our application and services as an authorized user
• Visit any of our websites that link to this Privacy Statement

2. Personal Data We Collect

What Personal Data We Collect

When you make a purchase, or attempt to make a purchase, we collect the following types of Personal Data:

• Account Information such as your name, email address, and password
• Payment Information such as your billing address, phone number, credit card, debit card or other payment method
• Order and commercial information, such as products ordered, order number, transaction amount, currency, order date, shipping method, tracking status, refunds, returns, delivery issues, disputes, and customer-service history.
• Payment and checkout information is collected and processed by Stripe, including payment method details, billing and shipping address, email address, phone number where provided, transaction identifiers, payment status, fraud and risk signals, IP address, device information, disputes, refunds, and related checkout data. We do not intentionally receive or store full payment card numbers.
• Fulfillment information, such as recipient name, shipping address, email address or phone number where needed, ordered items, product details, shipping method, tracking number, delivery status, returned-package information, and customs or tax information where applicable.
• Technical information, such as IP address, device type, browser type, operating system, pages visited, referring URLs, checkout or session identifiers, cookies, server logs, Cloudflare security logs, bot/fraud signals, and other information needed to deliver, secure, debug, and operate the website.
• Marketing preferences and consent records, such as newsletter subscription status, opt-in date and source, unsubscribe status, and records needed to honor or prove consent and opt-out choices
• User-provided content, such as support messages, feedback, product customization text, uploaded files or images, gift notes, and other content you submit through the store, if those features are offered.

We do not intentionally collect sensitive personal information, such as government identification numbers, precise geolocation, health information, biometric information, or information about race, religion, sexual orientation, or union membership. Please do not submit sensitive information unless we specifically ask for it and explain why it is needed.

When you use our products and/or features, we collect the following types of Personal Data:

• Account Information such as your name, email address, and password
• Payment Information such as your billing address, phone number, credit card, debit card or other payment method

How We Collect Your Personal Data

We collect Personal Data from the following sources:

From You. You may give us your Account Information, Payment Information, Financial Information, Demographic Data, Purchase Information, Content, Feedback, Product Information, by filling in forms, using our products or services, entering information online or by corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide, for example, when you:

• Create an account or purchase products on our website;
• Use our products or services;
• Create content through our products or services;
• Express interest in our products or services;
• Downloading software and/or our mobile application;
• Subscribe to our newsletter;
• Complete a voluntary market research survey;
• Contact us with an inquiry or to report a problem by phone, email, social media, or messaging service;
• When you log in to our website via social media.

Automated technologies or interactions: As you interact with our website, we may automatically collect Device Data about your equipment, Usage Data about your browsing actions and patterns, and Contact Data where tasks carried out via our website remain uncompleted, such as incomplete orders or abandoned baskets. We collect this data by using cookies, server logs and other similar technologies. Please see our Cookie section below for further details.

Third parties: We may receive Personal Data about you from various third parties, including:

• Account Information and Payment Information from another individual when they purchase a gift for you on our website;
• Device and Usage Data from third parties, including analytics providers such as Google;
• Account Information and Payment Data from social media platforms when you log in to our website using such social media platforms;
• Content from communication services, including email providers and social networks, when you give us permission to access your data on such third-party services or networks;
• Account Information and Payment Data from third parties, including organizations such as law enforcement agencies, associations and groups, who share data for the purposes of fraud prevention and detection and credit risk reduction; and
• Account Information, Payment Data, and Financial Data from providers of technical, payment and delivery services.

We receive payment status, transaction identifiers, fraud or risk signals, billing and shipping/contact details, dispute information, refund information, and related checkout details from Stripe. We receive fulfillment status, tracking numbers, delivery updates, returned-package information, and related order information from Printful and shipping carriers. We automatically collect server logs, IP address, device and browser information, security events, bot/fraud signals, cookie identifiers, and related request data through our website and through Cloudflare.

If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the Contact Us section below.

Device and Usage Data

When you visit a Vesper Wild website, we automatically collect and store information about your visit using browser cookies or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, you may not be able to use some features of our Service.

Data We Collect From Third Parties

We may receive your Personal Data from third parties such as service providers, partners, fraud-prevention services, payment processors, fulfillment providers, shipping carriers, and other sources. This Personal Data may be collected or processed by third parties and is subject to the relevant third party's own separate privacy and data collection policies where applicable. We do not control how independent third parties handle your Personal Data outside the services they provide to us.

Our websites and services may contain links to other websites, applications and services maintained by third parties. The information practices of such other services, or of social media networks that host our branded social media pages, are governed by third parties' privacy statements.

Purpose and Legal Basis for the Processing of Personal Data

We collect and use your Personal Data with your consent to provide, maintain, and develop our products and services and understand how to improve them.

Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide products and services and to maintain our relationship with you and to protect our business, for example against fraud.

We use personal information to process and fulfill orders, including accepting payment through Stripe, confirming the order, sending order details to Printful, arranging production and shipping, providing tracking, and handling returns or delivery issues.

We use personal information to provide customer service, respond to questions, handle refunds, returns, delivery issues, disputes, chargebacks, complaints, and other support requests.

We use personal information with Stripe, Cloudflare, and other providers for payment processing, fraud prevention, site security, bot mitigation, abuse prevention, and protecting the store and customers.

We do not currently use advertising pixels, retargeting, or cross-context behavioral advertising. If we add those tools, we will update this Policy, identify the providers and purposes, and provide any opt-out or consent controls required by applicable law before using them.

Before using personal information for a new purpose that is not identified in this Policy or at the time of collection, we will identify the new purpose and obtain any consent required by law unless the use is otherwise permitted or required by law.

By placing an order or submitting information to the store, you consent to our collection, use, and disclosure of personal information needed to process payment, fulfill and deliver the order, provide support, prevent fraud, meet legal obligations, and operate the store.

The main consequences of providing personal information are that your order, payment, shipping, support request, and related records will be processed by us and by service providers such as Stripe, Printful, shipping carriers, Cloudflare, and email providers. Without information needed for checkout, payment, fulfillment, delivery, or legal records, we may be unable to accept or fulfill an order or provide support.

We do not make a purchase conditional on consent to unrelated marketing emails, advertising cookies, retargeting, or other nonessential uses of personal information.

You may withdraw consent by contacting us at support@vesperwild.com, subject to legal or contractual restrictions and reasonable notice. Withdrawal may limit our ability to process an order, complete fulfillment, provide support, or keep optional services active, but it will not affect processing already completed or records we must keep for legal, tax, accounting, fraud-prevention, dispute, or compliance purposes.

Where GDPR applies, our lawful bases are contract for checkout, payment, order fulfillment, delivery, returns, and customer support; legal obligation for tax, accounting, chargeback, sanctions, and compliance records; legitimate interests for security, fraud prevention, abuse prevention, site operation, debugging, and service improvement; and consent for marketing emails and nonessential cookies where required.

International Data Transfer and Storage

Where possible, we store and process data on servers within the general geographical region where you reside, though this may not be within the country in which you reside. Your Personal Data may also be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We will take appropriate steps to ensure that your Personal Data is treated securely and in accordance with this Policy as well as applicable data protection law.

Customers in Australia, New Zealand, Japan, Singapore, Norway, Switzerland, and Liechtenstein should expect that order, payment, tax, fulfillment, shipping, security, and support information may be processed outside their home country. These cross-border transfers are necessary to operate the store and complete international orders.

Personal information may be processed or stored in Canada, the United States, the EU/EEA, and other countries where we, Stripe, Printful, Cloudflare, shipping carriers, email providers, analytics providers, and other service providers operate.

Service providers such as Stripe, Printful, Cloudflare, shipping carriers, email providers, analytics providers where used, professional advisors, banks/payment networks, tax authorities, regulators, courts, and law enforcement may process information in Canada, the United States, the European Union, or other jurisdictions where they or their service providers operate.

Sharing and Disclosure

We will share your Personal Data with third parties only in the ways set out in this Policy or set out at the point when the Personal Data is collected.

We do not currently make personal information available to corporate affiliates or related organizations. If that changes, we will identify the related organization and the personal information made available where required by law.

Legal Requirement

We may use or disclose your Personal Data in order to comply with a legal obligation, in connection with a request from a public or government authority, or in connection with court or tribunal proceedings, to prevent loss of life or injury, or to protect our rights or property. Where possible and practical to do so, we will tell you in advance of such disclosure.

We may share limited personal information with professional advisors and authorities, such as accountants, lawyers, insurers, banks, payment networks, tax authorities, regulators, courts, or law enforcement, where necessary for business records, legal claims, chargebacks, audits, compliance, or lawful requests.

Service Providers and Other Third Parties

We may use a third party service provider, independent contractors, agencies, or consultants to deliver and help us improve our products and services. We may share your Personal Data with marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others but only to maintain and improve our products and services.

We use email service providers to send transactional emails, including order confirmations, receipts, shipping updates, support replies, and, if you opt in, marketing emails. These providers process email address, message content, delivery status, and consent or unsubscribe records as needed to provide email services.

Payment Processing

Stripe provides payment processing and checkout services. Stripe receives and processes payment method details, billing and shipping address, email address, phone number where provided, IP address, device information, fraud and risk signals, transaction data, refunds, disputes, and related checkout information according to Stripe's terms and privacy policy.

Stripe Checkout collects and processes billing and payment data. Stripe may share payment status, transaction identifiers, limited checkout/order data, refund information, and dispute or chargeback information with us. Stripe, payment networks, banks, and related providers process payment data for authorization, fraud prevention, refunds, disputes, and payment compliance.

Order Fulfillment

Printful provides print-on-demand production and fulfillment. We share recipient name, shipping address, email address or phone number where needed, ordered items, product details, shipping method, and related order and shipping information with Printful so it can produce, pack, and help deliver orders.

Printful and/or we share shipping recipient information with shipping carriers, including name, shipping address, tracking details, and contact information where needed, so carriers can deliver orders, provide tracking, handle customs where applicable, and manage delivery issues or returns.

We process order items, product details, and any design or personalization content you submit, and share them with Printful and, where needed, carriers or customs authorities for production, packing slips, customs, shipping, delivery, returns, and support.

Cloudflare and Website Security

We use Cloudflare for hosting, content delivery, performance, and website security. Cloudflare may process IP addresses, device and browser information, server logs, security events, bot/fraud signals, request data, and cached website content for site delivery, performance, security, and abuse-prevention purposes.

Marketing Communications

We do not send marketing emails unless you explicitly opt in. Transactional emails, including order confirmation and shipping updates, are not marketing.

If you opt in to marketing, we collect and keep marketing consent records, subscription status, unsubscribe status, and related email delivery information. We share this information with our email provider to send promotional messages and honor opt-outs.

We collect your email address through the store and Stripe Checkout and use it for receipts, order updates, support, fulfillment updates, and marketing only if you opt in. We may share it with Stripe, Printful where needed, shipping or email providers, and service providers that support those purposes.

We collect your shipping address through the store and Stripe Checkout and share it with Stripe, Printful, and shipping carriers for fraud checks, fulfillment, delivery, tracking, returns, and delivery issue resolution.

If you contact support, we process your message, contact information, order details, and related records. We may share this information with email, helpdesk, fulfillment, payment, shipping, professional, or legal providers as needed to respond, resolve disputes, and keep business or legal records.

3. Cookies and Analytics

What Are Cookies?

A cookie is a small file with information that your browser stores on your device. Information in this file is typically shared with the owner of the site in addition to potential partners and third parties to that business. The collection of this information may be used in the function of the site and/or to improve your experience.

We use essential cookies, server logs, and similar technologies for cart, checkout, security, fraud prevention, Cloudflare protection, bot mitigation, load balancing, session management, and site operation. If we use analytics cookies, advertising pixels, retargeting tools, affiliate tracking, or other nonessential tracking, we will identify the provider and purpose and provide any consent or opt-out controls required by applicable law before using those technologies.

Consent Management

If applicable law requires cookie consent or opt-out management, we will provide a cookie settings tool or comparable mechanism to accept, reject, or change choices for nonessential cookies and tracking technologies.

Where EU/UK cookie rules apply, we will not use analytics, advertising, retargeting, or other nonessential cookies unless you consent where required, and we will provide a way to withdraw or change that consent.

Analytics and Advertising Tools

If we use analytics cookies or similar technologies, we will identify the analytics provider, use the information to understand website performance and store usage, and provide any consent or opt-out mechanism required by applicable law.

We do not currently use advertising pixels or retargeting tools. If we add them, we will identify the providers, disclose cross-context behavioral advertising or targeted advertising where applicable, and provide required consent or opt-out controls.

Campaign Attribution

When you arrive from a campaign link, we may capture UTM parameters and ad click IDs. We use this information to understand which campaigns lead to checkout and purchases. Attribution fields may be attached to Stripe Checkout metadata and retained with order records for finance, reporting, fraud prevention, and campaign measurement.

Vendors and Purposes

If we use analytics, pixels, advertising networks, affiliate tools, or retargeting providers, we will identify the provider or category, the information processed, the purpose, and any required consent or opt-out mechanism. We do not currently use advertising pixels or retargeting unless stated in this Policy or in a cookie notice.

Your Choices

You may use browser controls and supported privacy signals such as Global Privacy Control. If applicable law requires us to honor Global Privacy Control or another universal opt-out mechanism for sale, sharing, or targeted advertising, we will process that signal as required. We do not currently sell personal information or use targeted advertising unless stated in this Policy or a cookie notice.

4. Retention & Deletion

We will only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When we no longer need Personal Data, we will remove it from our systems and/or take steps to anonymize it.

Order records are retained for 6 years per CRA requirements. Account data is deleted upon request, subject to legal retention obligations.

Customer-service, refund, return, delivery, dispute, and complaint records are kept for as long as needed to respond to the request, maintain accurate business records, prevent fraud, resolve disputes, establish or defend legal claims, and comply with legal obligations.

Marketing consent and unsubscribe records are kept as long as needed to send lawful marketing, honor opt-outs, avoid sending unwanted messages, and demonstrate compliance with applicable email and privacy laws.

Support messages, Stripe payment records, Printful fulfillment records, Cloudflare/site logs, first-party consent records, marketing consent records, attribution fields, and unsubscribe records are retained only as long as needed for support, fulfillment, security, accounting, dispute, consent, compliance, reporting, or legal purposes. We retain unsubscribe or suppression records as needed to honor opt-outs. Google Analytics retention is controlled in GA4 admin settings. First-party attribution attached to completed orders is retained with order records for finance and reporting.

5. Merger or Acquisition

If we are involved in a merger, acquisition or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy. Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities.

6. How We Keep Your Data Safe

We have appropriate organizational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.

The communication between your browser and our website uses a secure encrypted connection wherever your Personal Data is involved.

We require any third party who is contracted to process your Personal Data on our behalf to have security measures in place to protect your data and to treat such data in accordance with the law.

In the unfortunate event of a Personal Data breach, we will notify you and any applicable regulator when we are legally required to do so.

7. Children's Privacy

Our store is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us so we can review and delete it where required.

If you are a parent or guardian and believe a child has provided us personal information, contact us at support@vesperwild.com. We will review the request and delete or correct the information where required by law.

We do not knowingly sell personal information of minors or use personal information of minors for targeted advertising. If applicable law requires opt-in consent for a minor's data, we will obtain that consent before the covered processing.

8. Your Rights for Your Personal Data

Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:

• Right to Access. You have the right to learn whether we are processing your Personal Data and to request a copy of the Personal Data we are processing about you.
• Right to Rectification. You have the right to have incomplete or inaccurate Personal Data that we process about you rectified.
• Right to be Forgotten. You have the right to request that we delete Personal Data that we process about you, unless we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Right to Restriction of Processing. You have the right to restrict our processing of your Personal Data under certain circumstances.
• Right to Portability. You have the right to obtain Personal Data we hold about you in a structured, electronic format and to transmit such Personal Data to another data controller where applicable.
• Right to Opt Out. You have the right to opt out of the processing of your Personal Data for targeted advertising, the sale of Personal Data, and profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
• Right to Objection. Where the legal justification for our processing of your Personal Data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation.
• Disclosure accounting. You may request information about the existence, use, and disclosure of your personal information. Where required by law, we will provide access to your personal information and an account of the third parties or categories of third parties to which it has been disclosed, as specifically as reasonably possible and subject to legal exceptions.
• Nondiscrimination and nonretaliation. You have the right not to be denied service or have an altered experience for exercising your rights.
• File an Appeal. You may have the right to file an appeal based on our response to your exercise of applicable rights.
• File a Complaint. You may have the right to bring a claim before a competent data protection authority.

If you are based in the EEA, please visit the European Data Protection Board website for a list of local data protection authorities.

U.S. State Privacy Rights

U.S. state privacy rights apply only to residents of states whose privacy laws apply to our business and only to the extent required by those laws.

California residents may have the right to know/access, delete, correct, opt out of sale or sharing of personal information, limit use of sensitive personal information where applicable, and not be discriminated against for exercising privacy rights. In the past 12 months, we collected the categories described in this Policy from customers, Stripe, Printful, carriers, Cloudflare/site logs, and service providers; used them for orders, payment, fulfillment, support, security, legal compliance, analytics, and marketing where opted in; and disclosed identifiers, commercial information, payment/transaction information, internet or network activity, and approximate location from IP address to service providers for business purposes. We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless we add advertising pixels or retargeting tools, in which case we will provide the required opt-out link and honor applicable opt-out preference signals.

Some U.S. state privacy rights apply only if the law of your state applies to our business. Where applicable, residents may request access, correction, deletion, a portable copy, and opt-out of sale, targeted advertising, or profiling that produces legal or similarly significant effects. If we deny a request and your state law provides an appeal right, you may appeal by replying to our decision email or contacting us at support@vesperwild.com with "Privacy Appeal" in the subject line.

In the past 12 months, we may have collected these categories of personal information: identifiers; commercial information; internet or other electronic network activity; approximate geolocation derived from IP address; payment and financial information handled by Stripe; customer-support content; and marketing preferences or consent records where applicable. We do not intentionally collect sensitive personal information.

Sources include you, Stripe, Printful, shipping carriers, Cloudflare and website logs, email providers, analytics providers if used, and professional or legal sources where needed for disputes, fraud prevention, or compliance.

We collect, use, and disclose personal information for orders, payment, fulfillment, delivery, customer service, refunds, returns, security, fraud prevention, site operation, legal and tax compliance, analytics where used, and marketing where you opt in.

We disclose identifiers, commercial/order information, payment/transaction information, internet or network activity, approximate IP-based location, and support or marketing records to service providers such as Stripe, Printful, Cloudflare, shipping carriers, email providers, analytics providers where used, and professional advisors for business purposes.

We have not sold personal information in the past 12 months. We have not shared personal information for cross-context behavioral advertising in the past 12 months unless this Policy or a cookie notice states that we use advertising pixels or retargeting tools.

We do not intentionally collect sensitive personal information and do not use sensitive personal information to infer characteristics about you.

To exercise applicable California or U.S. state privacy rights, contact us at support@vesperwild.com with "Privacy Request" in the subject line and describe the right you want to exercise.

Because we do not sell personal information or share it for cross-context behavioral advertising, we do not currently provide a "Do Not Sell or Share My Personal Information" link. If we begin selling or sharing personal information as those terms are defined by applicable law, we will provide the required link and opt-out process.

If applicable law requires us to honor Global Privacy Control or another universal opt-out mechanism for sale, sharing, or targeted advertising, we will process that signal as required. We do not currently sell personal information or use targeted advertising unless stated in this Policy or a cookie notice.

We do not currently offer financial incentives, loyalty programs, discounts, or rewards in exchange for personal information. If we offer such a program, we will provide the required notice and material terms before you participate.

If CCPA/CPRA applies to us, we will review and update the required California disclosures at least once every 12 months.

Where Virginia law applies, our privacy notice includes the categories of personal data processed, purposes of processing, categories shared, third-party categories, consumer rights, appeal process, and any opt-out rights for sale, targeted advertising, or covered profiling as described in this Policy.

Where Colorado law applies, you may exercise applicable access, correction, deletion, portability, and opt-out rights. If we process personal data for sale or targeted advertising, we will provide the required opt-out method and honor required universal opt-out mechanisms.

Where Connecticut law applies, you may exercise applicable access, correction, deletion, portability, and opt-out rights. If we sell personal data or process it for targeted advertising, we will provide the required website opt-out link and honor required opt-out preference signals.

Where Utah law applies, you may exercise applicable access, deletion, portability, and opt-out rights for sale of personal data or targeted advertising, subject to Utah law.

Where another U.S. state privacy law applies to our business, we will provide the rights, notices, request methods, appeal process, and opt-out mechanisms required by that law, including disclosures about categories processed, purposes, categories shared, third-party categories, and sale, targeted advertising, or profiling where applicable.

GDPR / EU Visitors

GDPR rights apply only where the GDPR applies to our processing, such as where we offer goods or services to individuals in the EEA/UK or monitor their behavior there. For orders, checkout, fulfillment, and customer support, we process data to perform a contract. For tax, accounting, sanctions, chargeback, and legal records, we process data to comply with legal obligations. For security, fraud prevention, site operation, and service improvement, we rely on legitimate interests where permitted. For marketing emails and nonessential cookies, we rely on consent where required.

Recipients include Stripe, Printful, shipping carriers, Cloudflare, email providers, analytics providers where used, professional advisors, banks/payment networks, tax authorities, regulators, courts, and law enforcement where necessary.

If Article 27 GDPR requires us to appoint an EU representative, we will identify that representative here before offering covered goods or services to individuals in the EEA.

Withdrawing Consent

If you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time, free of charge, such as where you wish to opt out from marketing messages that you receive from us.

How to Exercise Your Rights

You can make a request to exercise any of these rights in relation to your Personal Data by contacting our Privacy Officer. For your own privacy and security, at our discretion, we may require you to prove your identity before providing the requested information.

We may verify your identity before fulfilling a privacy request. Information provided for verification will be used only to verify and respond to the request, maintain required request records, and prevent fraud or misuse.

If applicable state law gives you an appeal right and we deny your privacy request, you may appeal by replying to our decision email or contacting support@vesperwild.com with "Privacy Appeal" in the subject line. We will review the appeal and provide a written response within the time required by applicable law.

You may contact the Privacy Officer at support@vesperwild.com to ask questions, request access or correction, withdraw consent, or make a privacy complaint. Please include "Privacy Request" or "Privacy Complaint" in the subject line and describe the information or issue involved. We will review and respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

9. Changes

We may modify this Policy at any time. If we make changes to this Policy then we will post an updated version of this Policy on this website. When using our services, you may be asked to review and accept our Privacy Policy.

If we make material changes involving new purposes, new categories of personal information, or new third-party disclosures, we will provide notice and obtain any consent required by law before applying those changes to personal information already collected, unless otherwise permitted or required by law.

10. Contact Us

Privacy contact: Privacy Officer
Mailing address: Vesper Wild, Ontario, Canada
support@vesperwild.com