Privacy Policy & Data Notice — VALE & VESSEL WELLNESS

Data Sales	Never sold. We do not sell, rent, or trade your personal information to third parties, broker networks, or data aggregators.
Payment Security	Tokenized via Stripe. Credit card numbers and CVV codes are processed directly through Stripe's PCI-DSS Level 1 vault. We never see or store full card details.
Marketing Dispatches	Opt-in only. Subscribers to our Evening Journal and batch notification alerts can unsubscribe instantly with 1-click via the footer of any dispatch.
Consumer Rights	Full transparency. You have the right to request access to, correction of, or permanent deletion of your stored records at any time by contacting us.

1. Introduction & Entity Information

Vale & Vessel Wellness ("we", "us", "our", or "Vale & Vessel") operates the website https://vale-and-vessel.com. This Privacy Policy details our practices concerning the collection, use, maintenance, and disclosure of information collected through our online store, customer communications, reservation forms, and marketing operations.

For inquiries regarding privacy, data protection, or CCPA rights, you may reach our Privacy Team directly at:
Email: [email protected]
Entity: Vale & Vessel Wellness · Small-Batch Evening Skincare & Bath

2. Information We Collect

We collect only the information necessary to fulfill seasonal 15-box reservation batches, process payments securely, deliver studio-fresh orders, and communicate relevant updates:

Contact Information: Your full name, email address, shipping address, and telephone number when placing a pre-order or joining our waitlist.
Payment & Transaction Details: Payment tokens, card brand, last 4 digits, billing zip code, and transaction identifiers generated securely by our payment processor, Stripe. We never store raw payment card credentials.
Batch Reservation Details: Your designated seasonal batch selections, backer position (e.g., Backer 1 of 15), reservation date, and shipment tracking information.
Store Communications: Email correspondence and customer support records conducted through [email protected].
Technical & Telemetry Data: IP address, device type, browser user-agent, operating system, and anonymized referral paths collected via Cloudflare edge infrastructure to ensure site reliability, security, and bot mitigation.

3. How We Use Your Information

We process personal information under lawful, commercial purposes:

To reserve, process, and fulfill limited-edition batch orders of skincare and bath essentials.
To notify you when a batch achieves its 15-unit threshold, when card charges execute, and when studio cartons dispatch with tracking numbers.
To process returns and refunds for defective or damaged items in accordance with our Return & Refund Policy.
To send requested evening journal monographs and editorial wind-down guides (opt-in only).
To detect, prevent, and remediate fraud, unauthorized access, or cyber security threats.
To comply with statutory legal, tax, accounting, and regulatory obligations.

4. Payment Security & Stripe Processing

Zero Card Storage Guarantee: All payment transactions on Vale & Vessel Wellness are powered by Stripe, Inc. Payment details are transmitted through end-to-end encrypted TLS 1.3 connections directly to Stripe's certified PCI-DSS Level 1 environment. Vale & Vessel systems never hold, view, or retain your primary account number (PAN) or security code.

5. Third-Party Service Providers

We partner with established, privacy-respecting technology providers who process information solely on our behalf under strict confidentiality agreements:

Stripe, Inc.: Payment processing, fraud screening, and cardholder billing.
Cloudflare, Inc.: Global edge content delivery, DDoS mitigation, DNS resolution, and anonymized site telemetry.
Independent Maker Studios: Direct drop-ship fulfillment partners (who receive only recipient shipping names and addresses to pack authentic, sealed maker cartons).
Pinterest API: We utilize official Pinterest Developer API v5 integrations to publish our daily editorial wind-down monographs and product rich pins to our official brand boards. This integration is internal and does not transmit customer personal data to Pinterest.

6. Cookies & Tracking Technologies

We employ essential cookies and local storage tokens strictly required for site navigation, session persistence, and security verification. We do not use intrusive third-party cross-site behavioral tracking cookies.

7. Your Rights & Choices (CCPA / CPRA / GDPR)

Regardless of your state or country of residence, Vale & Vessel Wellness extends the following privacy rights to all customers:

Right to Know & Access: You may request a copy of the specific pieces of personal information we have gathered about you.
Right to Deletion: You may request that we delete personal records gathered from you, subject to statutory record-retention requirements (such as tax invoices).
Right to Opt-Out: We do not sell personal data. You may opt out of marketing emails anytime via the "Unsubscribe" link in our dispatches.
Right to Non-Discrimination: We will never deny services, charge different prices, or provide a differing quality of service for exercising your privacy rights.

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Rights Request". We respond to all verified inquiries within 30 business days.

8. Data Retention & Security

We retain customer transaction data only as long as necessary to complete batch fulfillment, provide post-delivery customer care, honor our 30-day defective return guarantee, and satisfy federal tax and accounting rules. We implement rigorous technical controls including strict Content Security Policies (CSP), HTTPS encryption, and access controls.

9. Policy Updates

We may update this Privacy Policy periodically to reflect enhancements to our service, new regulatory mandates, or altered fulfillment processes. Any modifications will be posted here with an updated "Last Updated" date.

Privacy Policy & Notice at Collection

Privacy at a Glance