What we collect
- Order details: your name, email, mobile number, delivery address, the pieces you ordered and any delivery note.
- InstaPay / Etisalat Cash payments: the number you sent from and the screenshot of your transfer.
- Account (optional): your name, email and password. The password is stored only as a secure hash; we can never see it.
- Saved addresses, your bag and your wishlist, if you use them.
- Basic technical data needed to keep the site safe, such as your IP address when you sign in or check out (used to limit repeated attempts).
Why we use it
- To process, confirm, deliver and support your order, and to contact you about it.
- To check that a transfer reached us before we confirm your order.
- To send emails about your order and your account (confirmations, shipping updates, password resets). We don't send marketing emails.
- To prevent fraud and abuse, and to keep records the law requires.
Who we share it with
We never sell your data. We share it only with the services that help us run the store, and only what each one needs:
- The delivery company: your name, phone number and address.
- Our email provider, to deliver order and account emails.
- Our hosting and database providers, which store the site and its data.
Transfer screenshots
Transfer screenshots are stored privately with your order, with photo location data (GPS) removed, and only our staff can view them. They are never published.
Cookies
We use only the cookies the site needs to work: one keeps you signed in (up to 30 days), one remembers a guest's bag (up to 60 days), and one briefly remembers a piece you asked to save while you sign in. We don't use advertising or tracking cookies.
How long we keep it
We keep order records for as long as we need them for the order, for disputes and for our accounting and legal obligations. Transfer screenshots are deleted 30 days after the order is delivered, cancelled or returned (later only while a payment question on that order is still open); the number you sent from stays with the order. Private order links expire on their own. If you ask us to delete your account, we remove your account details but keep the records of past orders.
Your choices
You can ask us to show, correct or delete your personal information by emailing support@projectvintage.store. We'll reply within a reasonable time and may need to confirm it's you first.
Changes
If we change this policy, we'll update this page and the date at the top.