POPVAULT (“POPVAULT,” “we,” “us,” or “our”) respects the privacy of individuals and processes personal data in accordance with the legislation of the Republic of Azerbaijan, including the Law of the Republic of Azerbaijan “On Personal Data,” as well as other applicable legislation.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, how we protect it, how long we retain it, and the privacy rights available to you.

POPVAULT operates an international ecommerce website. Personal data may therefore be processed or transferred outside Azerbaijan where necessary to provide the website, accept payments, fulfill orders, deliver products, prevent fraud, provide customer support, operate technology services, or comply with law. The Azerbaijani Personal Data Law regulates collection, processing, protection and cross-border transfer of personal data and establishes the rights and obligations of relevant persons.

Nothing in this Privacy Policy is intended to limit any privacy rights that cannot legally be limited.

1. Who We Are

POPVAULT is an international online collectibles store offering collectible figures, designer toys, limited-edition products, and related collectibles.

For privacy-related questions or requests, please contact us using the contact information published on our website.

The legal entity name, registered details, and official privacy contact details of the website operator are displayed in the website footer and/or the website’s official contact information.

POPVAULT determines the purposes and means of processing personal data collected through its website to the extent provided by applicable law.

2. Personal Data We Collect

We collect personal information that you provide to us, information generated automatically when you use our website, and information received from certain third-party services.

The information we collect depends on how you interact with POPVAULT.

2.1 Information You Provide Directly

Depending on your interaction with us, we may collect:

  • Full name;
  • Email address;
  • Telephone or mobile number;
  • Billing address;
  • Shipping address;
  • Country and postal/ZIP code;
  • Account login information;
  • Order and purchase history;
  • Product preferences;
  • Customer-service communications;
  • Reviews, comments, photographs, or other content you voluntarily submit;
  • Information provided when participating in promotions, giveaways, or surveys; and
  • Any other information you voluntarily provide to us.

We collect only information reasonably necessary for the relevant purpose. You should not submit sensitive or special-category information unless it is specifically requested and there is a lawful basis for processing it.

2.2 Payment and Transaction Information

When you purchase from POPVAULT, payment information may be processed by third-party payment providers.

Depending on the payment method, this may include:

  • Payment card information;
  • Cardholder name;
  • Billing information;
  • Transaction information;
  • Payment authorization information;
  • Fraud-prevention information; and
  • Other information required to process or verify a payment.

Where payment is processed by a third-party payment provider, that provider may independently process your information under its own privacy policy and terms.

Where payment is processed directly by a third-party payment provider, POPVAULT does not intentionally store complete payment-card numbers or security codes on its own systems. The relevant provider may process payment data under its own terms and privacy notice.

3. Information Collected Automatically

When you visit or interact with our website, certain information may be collected automatically.

This may include:

  • IP address;
  • Browser type and version;
  • Operating system;
  • Device type;
  • Screen resolution;
  • Language and regional settings;
  • Approximate geographic location derived from IP address;
  • Referring website;
  • Pages viewed;
  • Products viewed;
  • Search queries;
  • Links clicked;
  • Date and time of visits;
  • Session information;
  • Website interaction data;
  • Cart and checkout activity;
  • Error and diagnostic information; and
  • Other technical information transmitted by your browser or device.

We may collect this information through cookies, pixels, tags, SDKs, log files, analytics technologies, and similar technologies.

4. Cookies and Similar Technologies

POPVAULT may use cookies and similar technologies to operate, secure, analyze, personalize, and improve the website.

Cookies may be used for purposes including:

Strictly Necessary Technologies

These technologies may be required to:

  • Maintain your shopping cart;
  • Process checkout;
  • Maintain account sessions;
  • Remember security settings;
  • Prevent fraudulent activity;
  • Provide essential website functionality; and
  • Maintain website security.

These technologies generally cannot be disabled without affecting core website functionality.

Analytics Technologies

We may use analytics services to understand:

  • How visitors use our website;
  • Which pages and products are viewed;
  • How users navigate the website;
  • Website performance;
  • Traffic sources; and
  • Conversion and ecommerce performance.

Marketing and Advertising Technologies

Where permitted by applicable law and subject to applicable consent or opt-out requirements, we may use advertising and marketing technologies to:

  • Measure advertising performance;
  • Understand marketing campaigns;
  • Display relevant advertisements;
  • Create or use advertising audiences;
  • Measure conversions; and
  • Limit repetitive advertising.

Third-party advertising providers may collect information about your interaction with POPVAULT and other websites or services.

The specific cookies and technologies used by POPVAULT may change as our website, analytics, advertising, and ecommerce systems change.

Where required by law, we will request consent before placing or using non-essential cookies or similar technologies.

5. How We Use Personal Information

We may use personal information for the following purposes:

Order Processing

To:

  • Process and fulfill orders;
  • Confirm purchases;
  • Process payments;
  • Arrange shipping;
  • Provide delivery updates;
  • Handle returns, refunds, and exchanges;
  • Provide customer support; and
  • Maintain transaction records.

Website Operation

To:

  • Operate and maintain our website;
  • Provide account functionality;
  • Maintain shopping carts;
  • Remember preferences;
  • Improve website performance;
  • Diagnose technical problems; and
  • Protect the security of our systems.

Fraud and Security

To:

  • Detect and prevent fraud;
  • Verify transactions;
  • Prevent unauthorized purchases;
  • Protect accounts;
  • Detect abuse;
  • Investigate suspicious activity; and
  • Protect POPVAULT, customers, payment providers, and third parties.

Customer Service

To:

  • Respond to inquiries;
  • Resolve complaints;
  • Handle order issues;
  • Provide product information; and
  • Communicate with customers regarding transactions.

Marketing

Where legally permitted, we may use your information to send:

  • Promotional emails;
  • New product announcements;
  • Limited-drop announcements;
  • Restock notifications;
  • Special offers;
  • Newsletters; and
  • Other marketing communications.

You can unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting us.

Transactional communications, such as order confirmations, shipping notifications, security notices, and legally required communications, may still be sent even if you unsubscribe from marketing.

Analytics and Business Improvement

We may use information to:

  • Analyze customer behavior;
  • Improve product selection;
  • Improve website usability;
  • Measure marketing performance;
  • Understand purchasing trends;
  • Improve customer experience; and
  • Develop and improve our services.

Legal and Regulatory Compliance

We may process information when necessary to:

  • Comply with applicable laws;
  • Respond to lawful requests;
  • Meet tax, accounting, customs, and regulatory obligations;
  • Establish, exercise, or defend legal claims;
  • Enforce our Terms & Conditions; and
  • Protect our legal rights and property.

6. Legal Bases for Processing — EEA and UK

If GDPR, UK GDPR, or another similar law applies to you, we will process your personal information using an applicable legal basis.

Depending on the circumstances, these may include:

Contract

Processing may be necessary to:

  • Process your order;
  • Take payment;
  • Deliver products;
  • Provide requested services; and
  • Manage your customer account.

Legal Obligation

Processing may be necessary to comply with legal obligations, including tax, accounting, consumer-protection, fraud-prevention, and regulatory requirements.

Legitimate Interests

We may process information where necessary for legitimate interests such as:

  • Website security;
  • Fraud prevention;
  • Business administration;
  • Customer service;
  • Service improvement;
  • Direct marketing where permitted;
  • Analytics; and
  • Protecting our legal rights.

We will balance our legitimate interests against your rights and freedoms where required by law.

Consent

Where required, we may rely on your consent for activities such as:

  • Certain marketing communications;
  • Non-essential cookies;
  • Certain advertising technologies; or
  • Other processing activities requiring consent.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

7. Who We Share Information With

We may disclose personal information to third parties where necessary to operate POPVAULT and provide our services.

These parties may include:

Payment Providers

Payment processors and financial service providers may process transaction and payment information.

Shipping and Delivery Providers

We may provide shipping information to:

  • Postal services;
  • Courier companies;
  • Freight providers;
  • Customs brokers; and
  • Other logistics providers.

This may include your name, address, telephone number, email address, order information, and tracking information.

Technology and Ecommerce Providers

We may use third-party providers for:

  • Website hosting;
  • Ecommerce infrastructure;
  • Database management;
  • Cloud storage;
  • Security;
  • Customer support;
  • Email delivery;
  • Analytics; and
  • Other technical services.

Analytics Providers

We may share technical and interaction information with analytics providers to understand website usage and performance.

Advertising and Marketing Providers

Where applicable and permitted by law, we may share or permit collection of certain information through advertising and marketing technologies to measure campaigns and deliver or personalize advertising.

Professional Advisors

We may disclose information to:

  • Lawyers;
  • Accountants;
  • Auditors;
  • Insurance providers;
  • Consultants; and
  • Other professional advisors where reasonably necessary.

Government and Law Enforcement Authorities

We may disclose information when required or permitted by law, including to:

  • Courts;
  • Regulators;
  • Tax authorities;
  • Customs authorities;
  • Law-enforcement agencies; and
  • Other governmental authorities.

Business Transfers

If POPVAULT is involved in a merger, acquisition, restructuring, financing, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

8. We Do Not Sell Personal Information for Money

POPVAULT does not intend to sell customer personal information to third parties for monetary consideration in the ordinary operation of the business.

However, certain privacy laws, including California law, may define “sale” or “sharing” more broadly than the ordinary meaning of those terms.

For example, certain advertising or analytics activities may constitute “sharing” or another regulated disclosure under applicable privacy legislation.

Where applicable law gives you a right to opt out of such activities, POPVAULT will provide the required mechanism for exercising that right.

9. California Privacy Rights

If you are a California resident and the California Consumer Privacy Act (“CCPA”), as amended, applies to POPVAULT’s processing of your information, you may have additional rights.

Depending on applicable law and circumstances, these may include:

  • The right to know what categories of personal information we collect;
  • The right to know the purposes for which personal information is collected or used;
  • The right to know the categories of sources from which information is collected;
  • The right to know the categories of third parties with whom information is disclosed;
  • The right to request access to certain personal information;
  • The right to request deletion of personal information, subject to legal exceptions;
  • The right to request correction of inaccurate personal information;
  • The right to opt out of the sale or sharing of personal information where applicable;
  • The right to limit certain uses of sensitive personal information where applicable;
  • The right not to receive discriminatory treatment for exercising applicable privacy rights; and
  • The right to use an authorized agent where permitted by law.

California law also provides specific rules regarding opt-out signals such as the Global Privacy Control (“GPC”) in circumstances where applicable.

For information about California privacy rights and current requirements, see the California Privacy Protection Agency and California Attorney General guidance.

To submit a privacy request, contact:

Privacy Email: [INSERT PRIVACY EMAIL]

We may need to verify your identity before completing certain requests. Verification procedures are designed to protect your information and prevent unauthorized access.

We will respond to verified requests within the time periods required by applicable law.

10. European Economic Area and UK Privacy Rights

If GDPR or UK GDPR applies to you, you may have rights including:

  • Right of access;
  • Right to rectification;
  • Right to erasure;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object to certain processing;
  • Right to withdraw consent where processing is based on consent; and
  • Right to lodge a complaint with a competent supervisory authority.

These rights are subject to legal conditions and exceptions.

For example, we may be required to retain certain information to comply with tax, accounting, legal, fraud-prevention, or other obligations.

You may exercise applicable rights by contacting us using the contact information in this Privacy Policy.

11. International Data Transfers

Because POPVAULT operates internationally and may use service providers located in different countries, your personal information may be transferred to, stored in, or processed in countries outside your country of residence.

Those countries may have privacy laws that differ from the laws of your country.

Where applicable law requires safeguards for international transfers, we will use appropriate mechanisms, which may include:

  • Adequacy decisions;
  • Standard Contractual Clauses;
  • Appropriate contractual safeguards;
  • Binding corporate rules where applicable;
  • Recognized certification mechanisms; or
  • Other legally recognized transfer mechanisms.

For EEA personal data, transfers outside the EEA are subject to applicable GDPR transfer requirements.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may depend on:

  • The nature of the information;
  • The purpose for which it was collected;
  • Whether you maintain an account;
  • Whether you have an active customer relationship;
  • Legal, tax, accounting, or regulatory obligations;
  • Fraud-prevention requirements;
  • Dispute-resolution requirements; and
  • The establishment, exercise, or defense of legal claims.

When personal information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable law.

13. Data Security

We use reasonable technical and organizational measures designed to protect personal information against:

  • Unauthorized access;
  • Unauthorized disclosure;
  • Accidental loss;
  • Destruction;
  • Alteration; and
  • Other unlawful or unauthorized processing.

Security measures may include access controls, authentication mechanisms, encryption or secure transmission technologies, monitoring, and other appropriate safeguards.

However, no internet transmission, electronic storage system, or online service can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and should notify us if you believe your account has been compromised.

14. Children’s Privacy

POPVAULT is primarily intended for customers who have reached the age at which they may independently enter into contracts under applicable law. Products may be purchased by an adult as gifts for minors. Where a minor uses the website or provides personal information, the applicable requirements concerning parental or legal-guardian involvement and consent will apply.

We do not knowingly collect personal information from children in violation of applicable children’s privacy laws.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us.

If we determine that we have collected such information in circumstances where deletion is required, we will take reasonable steps to delete it.

15. Marketing Communications

You may receive marketing communications from POPVAULT if:

  • You have subscribed to receive them;
  • You have provided consent where required;
  • We have another lawful basis to send them; or
  • Applicable law permits us to communicate with you.

You can unsubscribe at any time by:

  • Clicking the unsubscribe link in the relevant email;
  • Adjusting available account preferences; or
  • Contacting us.

Unsubscribing from marketing communications does not necessarily stop transactional or service-related communications.

16. Reviews, User Content, and Social Media

If you submit a product review, photograph, testimonial, comment, or other content, information associated with that submission may be visible to other users depending on the functionality involved.

You should avoid including personal information in publicly visible content that you do not want others to see.

If you interact with POPVAULT through third-party social-media platforms, those platforms may independently collect and process information according to their own privacy policies.

17. Third-Party Websites

Our website may contain links to third-party websites, services, social-media platforms, payment providers, manufacturers, or other external services.

POPVAULT is not responsible for the privacy practices of third-party websites that we do not control.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

18. Do Not Track

Some browsers and devices provide “Do Not Track” or similar signals.

Because there is currently no single universally accepted technical standard governing all such signals, our website may not respond to every browser-based Do Not Track signal in the same manner.

Where applicable law requires us to recognize a legally recognized opt-out preference signal, we will do so as required by law.

19. Automated Decision-Making and Profiling

We may use automated technologies for purposes such as:

  • Fraud detection;
  • Security;
  • Website analytics;
  • Advertising measurement;
  • Product recommendations; and
  • Personalization.

Where such processing constitutes legally regulated automated decision-making or profiling that produces significant legal or similarly significant effects, we will provide the information and rights required by applicable law.

20. Data Breaches and Security Incidents

If POPVAULT experiences a personal-data breach, we will assess the incident and take reasonable steps to contain, investigate, remediate, and prevent recurrence.

Where notification is required by applicable law, we will notify affected individuals and/or relevant authorities within the legally required timeframe.

21. Your Privacy Requests

To exercise applicable privacy rights, use the official privacy/contact channel published on the POPVAULT website.

Please include sufficient information for us to understand your request.

Depending on the request and applicable law, we may need to verify your identity before providing information or taking action.

We will not use personal information collected solely for verification purposes for unrelated purposes except as permitted or required by law.

Where applicable, you may authorize another person to submit a privacy request on your behalf. We may require evidence of authorization and identity verification.

22. Complaints

If you believe POPVAULT has processed your personal information unlawfully, please contact us first so that we can investigate and attempt to resolve the issue.

Where applicable, you may also have the right to lodge a complaint with the data-protection authority or supervisory authority in your country or region.

For individuals in the EEA or UK, the relevant supervisory authority may depend on your country of residence, place of work, or the location of the alleged infringement.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business;
  • Changes to our website;
  • New products or services;
  • Changes to technology;
  • Changes to our service providers;
  • Changes to privacy laws; or
  • Changes to our privacy practices.

The updated version will be published on this page with a revised “Last Updated” date.

Where required by law, we will provide additional notice or obtain consent for material changes.

24. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us:

POPVAULT

Official legal and privacy contact details are published on the POPVAULT website.