Privacy Policy

Last updated: October 23, 2025

We do not sell personal information for monetary consideration. However, certain data sharing practices (such as sharing data with advertising platforms like LinkedIn or analytics providers like Google Analytics) may be considered a “ sale ” or “ share ” under some state privacy laws (including California, Nevada, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws) even without monetary exchange.

Under these laws, “ sale ” generally means the disclosure of personal information to a third party for monetary or other valuable consideration, subject to specific statutory exceptions.

“Sharing” generally means disclosing personal information to a third party for cross-context behavioral advertising or targeted advertising.

Where required by law, we provide opt-out mechanisms and honor Do Not Sell/Share requests.

This Privacy Policy contains a complete description of your privacy rights and opt-out mechanisms in the “Your Privacy Rights and Choices” section below.

Our Terms of Use contain additional provisions regarding user obligations, dispute resolution procedures, and governing law.

Vault Funeral Technology Inc. (“ Vault ”, “ we ”, “ our ”, or “ us ”) respects your privacy and is committed to protecting it through compliance with this policy.

This policy describes how we collect, process, retain, and disclose personal data about you when we provide services through our websites and related Services (including https://www.vaultfuneraltech.com and https://vault-storefront.vercel.app, collectively the “ Services ”).

The data controller responsible for your personal data is Vault Funeral Technology Inc. You may contact us regarding privacy matters via email at privacy@vaultfuneraltech.com;

via mail at Vault Funeral Technology, Inc., Attn: Privacy Requests, 99 Wall Street, #5006, New York, NY 10005, or via telephone at (212)-328-1169.

See the “Contact Us and Privacy Requests” section below for further information on the methods to submit privacy requests and notices.

This policy applies only to information we collect:

• Through the Services, including https://www.vaultfuneraltech.com and https://vault-storefront.vercel.app.
• In communications, including email, text, chat, and other electronic messages, between you and the Services.
• When you interact with our advertising and applications (including mobile apps) on third-party websites and services that include links to this policy.

It does not apply to information collected by us offline or through any other means, including on any other website or service operated by us that does not link to this policy.

This policy also does not apply to personal data collected or processed by third parties who are independent controllers of that data, including our payment processor Stripe, which acts as an independent controller for payment card data (see Stripe’s privacy policy at https://stripe.com/privacy).

For a complete understanding of how third parties process your personal data, please consult their privacy policies, which are linked in the “Third-Party Service Providers and Subprocessors” section below.

We may provide additional or different privacy policies that are specific to certain features, services, or activities offered through the Services.

Please read this policy carefully to understand our policies and practices regarding your information and how we treat it.

By using our Services, you acknowledge that you have read and understood this privacy policy.

For processing activities that require consent under applicable law (including for sensitive personal information, non-essential cookies, marketing communications, and other specific processing activities), we will obtain your separate, affirmative, freely-given, specific, informed, and unambiguous consent before processing your personal data.

Mere use of the Services does not constitute valid consent for such processing activities.

This policy may change from time to time; see the “Changes to This Privacy Policy” section below for details.

For material changes that affect your rights or how we process your personal data, we will provide prominent notice and, where required by law, obtain your consent before the changes take effect.

Your continued use of the Services after the effective date of changes (following appropriate notice) will constitute acceptance of those changes.

You are responsible for providing accurate and up-to-date information to us.

While failure to maintain current information may limit our ability to provide Services or to respond to certain requests, your statutory privacy rights under applicable law remain enforceable regardless of whether your contact information is current.

Children’s and Minors’ Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 13 in the United States (as required by the Children’s Online Privacy Protection Act (COPPA)) or under 16 in the European Economic Area and United Kingdom (as required by GDPR Article 8).

These Services are designed for use by business entities and their authorized representatives in the funeral services industry.

If we learn that we have collected or received personal data from a child under the applicable age threshold without verified parental consent, we will delete that information within a reasonable time period not to exceed 30 days, unless retention is required by law.

If you believe we have collected information from a child under the applicable age threshold, please get in touch with us immediately at spencer@vaultfuneraltech.com.

The Personal Data That We Collect or Process

For this policy, “ personal data ” (also referred to as “ personal information ” under some laws) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular natural person or household, as defined by applicable privacy laws including GDPR, CCPA, and similar state privacy statutes.

Business contact information (such as a responsible individual’s name, email address, telephone number, business address, payment and billing information, tax identifiers like SSN, funeral provider license numbers, and other identifiers used to contact or verify an individual) constitutes personal data when it identifies or is reasonably linkable to a specific natural person.

Business entity information that does not identify or is not reasonably linkable to a natural person (such as a generic business name, corporate EIN without individual association, or business-only contact information like info@company.com) does not constitute personal data under this policy, except where applicable law requires otherwise.

When we collect business contact information that identifies or is reasonably linkable to a natural person, we treat it as personal data subject to the protections in this policy.

The types and categories of personal data we collect or process include the following, organized by category:

We do not collect demographic personal data (such as age, gender, race, ethnicity, income, education, marital status, or citizenship status) as part of our standard registration or marketplace operations.

We do not collect biometric information (such as fingerprints, faceprints, voiceprints, retina or iris scans, or other unique biological characteristics) as part of our Services.

If you are a California resident and would like additional information that applies specifically to California privacy law, see the “California Privacy Rights” section below or visit https://www.vaultfuneraltech.com/privacy.

Some of the information identified above may be considered sensitive personal information under specific laws (including California’s CPRA and other state privacy laws).

Sensitive personal information may include: Social Security numbers and other government-issued identifiers, precise geolocation data (within a radius of 1,750 feet), financial account information (account and routing numbers), and contents of non-public communications.

We collect and process sensitive personal information only when necessary for the following purposes:

1. account verification and identity confirmation
2. legal, regulatory, or tax compliance
3. fraud prevention and security
4. payment and payout processing
5. and providing services you specifically request.

... We obtain your affirmative, express opt-in consent before collecting and processing sensitive personal information, except where applicable law permits processing for the limited purposes listed above without consent (such as to perform services requested by you, for security and fraud prevention, or to comply with legal obligations).

You have the right to limit our use and disclosure of your sensitive personal information as described in the “Your Privacy Rights and Choices” section below.

If you choose not to provide sensitive information we request for verification or compliance purposes, we may not be able to activate or maintain your account or provide certain Services.

However, this limitation applies only when the sensitive information is strictly necessary for the specific purpose, and we will explain why it is necessary before requesting it.

We also collect:

If we combine or connect non-personal statistical or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data subject to all protections under this Privacy Policy and applicable law.

How We Collect Your Personal and Other Data

You Provide Information to Us

We collect information you provide when you interact with our Services, for example when you create or update an account, register as a Vendor or Funeral Home, place an order, create or edit a product listing, provide shipping or billing details, submit tax or verification documents (for example, EIN, W-9, or license numbers), contact support, or communicate with other users through the Services.

Automatically Through Our Services

As you navigate through and interact with our Services, we and our service providers may use automatic data collection technologies that collect information such as usage details, IP addresses, device and browser data, and information collected through cookies, web beacons, and other tracking technologies.

These technologies may collect traffic data, logs, page interaction details, and other communication data to help us operate and improve the Services.

We use third-party tools, including Google Analytics, LinkedIn Insight, Lemlist, Cookiebot, and SendGrid for analytics, email delivery, and marketing;

see the “Third-Party Service Providers and Subprocessors” section below for details.

We may use automatic collection technologies to collect information about your online activities over time and across third-party sites or online services for analytics and, where permitted by law and with appropriate consent, for marketing.

Where applicable law treats such practices as a sale, sharing, or targeted advertising, you have the right to opt out as described in “Your Privacy Rights and Choices,” including the California Do Not Sell/Share and Nevada opt-out procedures.

The specific opt-out mechanisms and procedures are fully described in this Privacy Policy.

Our Terms of Use contain additional provisions regarding dispute resolution, governing law, and venue.

Using automated collection technologies helps us improve the Services, secure accounts, detect and prevent fraud, and deliver a more personalized experience.

The technologies we use for automatic data collection may include cookies, web beacons, pixels, local storage, and similar technologies.

We use a consent management platform (Cookiebot) to manage user cookie preferences and to implement region-appropriate consent requirements.

Cookies.

Cookies. A cookie is a small file placed on your device when you interact with the Services.

We use cookies for strictly necessary functions (which do not require consent), performance, and analytics (for example, Google Analytics), and marketing and advertising where permitted.

Cookie preferences are managed through Cookiebot. For users in the European Economic Area, the United Kingdom, and other jurisdictions that require prior consent for non-essential cookies, we obtain affirmative opt-in consent before non-essential cookies are set.

For users in jurisdictions that permit opt-out consent models (such as most U.S. states), we present cookie choices via Cookiebot before non-essential cookies are set, and you may opt out or adjust preferences using the cookie preference center at any time.

You may refuse or disable cookies by changing your browser or device settings;

however, disabling certain cookies may prevent access to some features of the Services.

For a detailed list of the cookies we use and their purposes, please visit our Cookie Policy at https://www.vaultfuneraltech.com/cookie-policy.

Web beacons.

Web beacons. Some parts of the Services and our emails may contain web beacons (also referred to as pixel tags) that allow us and our service providers (for example, SendGrid) to track users who have visited those parts or opened an email, as well as gather related statistics.

To the extent any automated technologies we or our providers use are treated as a sale, sharing, or targeted advertising under applicable law, you may opt out by submitting a request as described in “Your Privacy Rights and Choices” below (for example, via our Do Not Sell/Share webform, or by emailing privacy@vaultfuneraltech.com).

California and Nevada residents may use the designated methods described in those state-specific sections.

Please note that opting out may disable certain non-essential features.

When you interact with the Services, third parties may also use automatic collection technologies to collect information about you or your device.

These third parties include our service providers and subprocessors such as Stripe (payment processing and identity verification), Google (Google Analytics and Google Maps API), LinkedIn (advertising), Lemlist (marketing outreach), SendGrid (transactional and marketing email delivery), Cookiebot (consent management), Curri and ShipStation (fulfillment and shipping), and other providers identified in the “Third-Party Service Providers and Subprocessors” section below.

These third parties may associate the information they collect with personal data and use it for their own purposes, such as analytics, service improvement, or interest-based advertising.

We do not control how those third parties use data collected through their technologies.

For information about how these third parties collect and use your data, including opt-out options, please consult their privacy policies:

• Stripe: https://stripe.com/privacy
• Google (Analytics and Maps): https://policies.google.com/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• SendGrid: https://www.twilio.com/legal/privacy
• Cookiebot: https://www.cookiebot.com/en/privacy-policy/
• Lemlist: https://www.lemlist.com/privacy-policy
• Curri: https://www.curri.com/privacy-policy
• ShipStation: https://www.shipstation.com/privacy-policy/

You may also opt out of interest-based advertising by visiting the Digital Advertising Alliance’s opt-out page at https://optout.aboutads.info or the Network Advertising Initiative’s opt-out page at https://optout.networkadvertising.org.

We do not control third parties’ tracking technologies or how they may be used.

If you have questions about an advertisement or other targeted content, you should contact the responsible provider directly.

From business partners and service providers

... in addition to information you provide directly, we may receive personal data about you from Vendors, partners, and service providers to enable account verification, payment processing, order fulfillment, and communications.

Examples include Stripe (payment processing and identity verification), Curri and ShipStation (shipping and fulfillment), Google Maps API (location services), Cookiebot (consent management), Lemlist and SendGrid (email and marketing), and other processors listed in the “ Third-Party Service Providers and Subprocessors ” section below.

We may receive personal data about you from other sources and combine that with information we collect directly from you.

For example, we receive information from the vendors and funeral home operators that use our marketplace, from our payment processor (Stripe), from shipping and fulfillment providers (Curri, ShipStation), from analytics and mapping providers (Google Analytics and Google Maps API), and from our consent and marketing providers (Cookiebot, Lemlist, SendGrid).

We also obtain information from business partners, publicly available sources, and other third-party service providers that help us verify accounts, prevent fraud, process orders, and deliver services.

We combine these sources with information you provide to enable account verification, order fulfillment, customer support, and other purposes described in this policy.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal data, to:

• Provide you with the Services and any contents, features, information, products, or services that we make available through the Services.
• Fulfill and manage purchases, orders, deliveries, payments, returns, and exchanges.
• Fulfill any other purpose for which you provide it.
• Provide you with notices about your account, orders, and service updates, including expiration and renewal notices where applicable.
• Improve our Services by analyzing your information and creating aggregated or de-identified data to develop, maintain, analyze, improve, optimize, measure, and report on the Services and how verified users interact with them.
• We may use automated analytics tools and artificial intelligence technologies to support these operations.
• We do not use your personal data to train generative artificial intelligence models or share personal data with third parties for their artificial intelligence or machine learning model training without your explicit consent.
• We do not make decisions that produce legal or similarly significant effects concerning you based solely on automated processing of your personal data without human involvement.
• Promote our Services, business, and offerings by sending service-related and marketing communications to registered users and by placing advertising on third-party services.
• We may use information to model, segment, target, and offer our Services using marketing and email providers like Lemlist and SendGrid, as well as advertising platforms such as LinkedIn.
• We do not sell or share personal data to unaffiliated third parties for their own direct-marketing purposes unless we obtain your consent.
• Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
• Notify you when Services updates are available and about changes to any products or services we offer or provide through them.
• Verify accounts, prevent fraud, and enhance security by monitoring for suspicious activity and unauthorized access.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent.

The usage information we collect, whether connected to your personal data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:

• Estimate our audience sizes and usage patterns.
• Store information about your preferences, allowing us to customize the Services according to your individual needs and interests.
• Speed up your searches.
• Recognize you when you return to our Services.

Please read our Terms of Use alongside this Privacy Policy.

The Terms of Use set out user obligations, dispute resolution procedures, governing law, venue, and other procedural or contractual rules, while this Privacy Policy governs how we collect, use, disclose, and secure personal information.

Where both documents address the same subject matter (for example, opt-out procedures, dispute handling, jurisdictional rules, or consumer remedies), you should consult both documents to understand your rights and obligations;

the Terms of Use governs procedural aspects and contractual remedies, and this Privacy Policy governs privacy-specific practices.

You are responsible for providing accurate and up-to-date contact, account, and business information.

Failure to keep your information current may affect our ability to provide Services or respond to your privacy requests.

For information on how to opt out of targeted advertising, how to raise disputes, and how consumer rights apply in your jurisdiction, please consult both this Privacy Policy and our Terms of Use.

We may contact you about goods and services that may interest you.

If you do not want to receive marketing communications from us, you may opt out by clicking the “unsubscribe” link in any marketing email, by adjusting your preferences in your account settings, or by emailing privacy@vaultfuneraltech.com with your request.

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your account and orders.

For additional information on opt-out procedures, dispute resolution, and consumer rights, please consult our Terms of Use and this Privacy Policy, which should be read together.

We use location information to enhance order fulfillment, shipping estimates, routing, and mapping services, including the Google Maps API for calculating shipping routes and delivery options.

For precise geolocation data (within a radius of 1,750 feet), we obtain your affirmative consent before collection and use this data only for the specific delivery-related purposes for which consent was provided.

You may withdraw consent at any time through your device settings or by contacting us at privacy@vaultfuneraltech.com.

Who We Disclose Your Information To

We may disclose aggregated information about our users without restriction.

We may also disclose personal data that we collect or you provide as described in this privacy policy:

• To our subsidiaries and affiliates for purposes consistent with this privacy policy.
• To contractors, service providers, and other third parties we use to support our operations, including payment processing (Stripe, which acts as an independent controller for payment card data), shipping and fulfillment (Curri, ShipStation), mapping and analytics (Google Maps API, Google Analytics), consent management (Cookiebot), and email and marketing services (Lemlist, SendGrid).
• Except for Stripe’s independent controller role for payment card data, these providers act as processors or subprocessors under contract and are required to keep personal data confidential and use it only to provide the contracted services.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Vault Funeral Technology Inc.’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal data held by Vault Funeral Technology Inc. is among the assets transferred.
• We do not disclose personal data to unaffiliated third parties for their own direct-marketing purposes except where you have explicitly consented to such disclosures.
• To fulfill the purpose for which you provide it. For example, if you give us an email address to use the “email a colleague” feature, we will transmit the message and your email address to the recipients.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your personal data:

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
• To enforce or apply our Terms of Use and Terms of Sale and other agreements, including for billing and collection purposes.
• If we believe disclosure is reasonably necessary to protect the rights, property, or safety of our organization, our customers, or others.
• This includes exchanging information with other companies and organizations to protect against fraud and reduce credit risk.
• Such disclosures will be limited to what is reasonably necessary for these protective purposes.

The categories of personal information we may disclose for business purposes include identifiers (business name, contact name, business email, business phone number, business address), commercial information (order history, transaction details, product selections, pricing), financial information (EIN, billing address, bank account and routing information provided via Stripe, payment card tokenized data through Stripe), professional and employment information (funeral provider license numbers, vendor registration details), internet and device data (IP address, browser and device identifiers, cookies, Google Analytics data), geolocation information (shipping address and, with your consent, device location used for delivery routing), and communications (emails and support correspondence).

We do not disclose sensitive personal information for purposes other than those specifically permitted under applicable law (including, without limitation, the purposes enumerated in CCPA/CPRA Section 1798.121(a) and similar provisions in Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, and other state privacy laws) without first obtaining your prior affirmative consent.

Under applicable law, you may have the right to limit our use and disclosure of sensitive personal information to only those purposes permitted by law.

Your Rights and Choices About Your Information

This section describes mechanisms you can use to control specific uses and disclosures of your information and rights you may have under applicable law, depending on where you live.

This Privacy Policy governs our privacy practices. For information about user obligations, dispute resolution, governing law, venue, and procedural aspects, refer to our Terms of Use, which are incorporated herein by reference and available at https://vaultfuneraltech.com/termsofuse.

You are responsible for providing accurate and up-to-date contact, account, and business information;

failure to keep your details current may affect your ability to exercise rights, receive notices, or resolve disputes.

Advertising, marketing, cookies, and other tracking technologies choices:

Cookies and Other Tracking Technologies.

Cookies and Other Tracking Technologies. We use Cookiebot to obtain and manage consent for non-essential cookies and similar technologies.

Cookiebot displays a cookie banner and preference center that allow you to provide or withdraw consent for performance, analytics, and marketing cookies.

In the European Economic Area, the United Kingdom, and other jurisdictions that require affirmative consent for non-essential cookies (including under the ePrivacy Directive and UK Privacy and Electronic Communications Regulations), we require you to opt in to non-essential cookies before those cookies are set.

For users in the United States and other jurisdictions where permitted by law, we present cookie choices via Cookiebot and permit you to opt out or adjust preferences using the cookie preference center.

You can also control cookies through your browser settings, and you can send a global privacy control (GPC) signal;

we will treat that as a valid request to opt out of sale or sharing of personal data to the extent required by applicable law, including under laws in California, Colorado, Connecticut, Montana, Oregon, Texas, and other states that recognize GPC signals.

Disabling cookies may affect the functionality of the Services.

Promotions by Us.

Promotions by Us. If you do not wish to receive promotional emails, you can opt out by clicking the unsubscribe link in any promotional email, by adjusting your email preferences in your account settings, by emailing privacy@vaultfuneraltech.com, or by following any other opt-out instructions provided in the promotional message.

Promotional messages include marketing messages sent through third-party email service providers such as Lemlist or SendGrid.

Please note that even if you opt out of promotional emails, we will still send you transactional and service-related communications necessary for your use of the Services.

Targeted Advertising by Us.

Targeted Advertising by Us. If you do not want us to use information to deliver targeted advertising, you can opt out via the cookie preference center managed by Cookiebot, by adjusting platform ad settings (for example, LinkedIn or Google ad settings), or by contacting privacy@vaultfuneraltech.com.

Note that opt-out choices may be device and browser-specific. We will process your opt-out request within the timeframes required by applicable law.

For California residents, we will comply with CCPA/CPRA requirements to process opt-out requests as soon as feasibly possible, but no later than fifteen (15) business days of receipt.

For residents of other states, we will comply with applicable state law timeframes.

We will verify your identity using methods reasonably appropriate to the request, and will notify you if additional information is needed for verification.

Disclosure of Your Information for Third-Party Advertising.

Disclosure of Your Information for Third-Party Advertising. We do not disclose personal data to unaffiliated third parties for their own advertising and marketing purposes without your prior express written consent, which must be obtained separately from and not as a condition of any terms of service or other agreement.

We contractually prohibit our subprocessors from using personal data for their own direct marketing unless you have consented.

Location Data Choices

Location Data.

Location Data. You can control the collection of device location data through your device settings and browser permissions.

We will only collect precise geolocation data (within a radius of 1,750 feet or less, as defined under applicable state privacy laws, including CCPA/CPRA) with your prior affirmative consent obtained before collection.

You may withdraw your consent at any time through your device settings, by contacting us at privacy@vaultfuneraltech.com, or through your account settings if available.

Upon withdrawal of consent, we will cease collecting precise geolocation data, though we may continue to process shipping addresses you provide for order fulfillment.

If you block or disable location data, some features of Services, such as automatic shipping estimates and delivery routing, may be less accurate or unavailable.

For order-related location use, you may update shipping addresses in your account or during checkout.

Your State Privacy Rights

Depending on your state or country of residency, you may have certain rights related to your personal data, including:

Access and Data Portability.

Access and Data Portability. You may confirm whether we process your personal data and request a copy of the personal data we process.

For U.S. state privacy requests... we will respond within 45 days... subject to a single 45-day extension...

For GDPR requests... we will respond within one month... subject to a two-month extension...

For Canadian requests under... (PIPEDA), we will respond within 30 days...

If additional time is needed... we may extend the response period by an additional 30 days...

Where required by law, we will provide data in a commonly used, machine-readable format suitable for portability.

Correction .

Correction . You may request that we correct inaccuracies in personal data we maintain.

To request a correction, contact privacy@vaultfuneraltech.com and provide:

1. sufficient information for us to verify your identity...
2. and sufficient detail for us to locate the specific data...

We will take steps to correct the data in our records within 45 days of receiving a verifiable correction request (or within the timeframe required by applicable law).

Where required by law, we will also inform third parties to whom the data was disclosed of the correction.

To ensure consistency between this Privacy Policy and our Terms of Use, and to help us locate your account records, please provide the same contact and account information that you use for your account on the Platform.

Deletion.

Deletion. You may request that we delete personal data about you that we maintain, subject to legal and business exceptions.

We retain account and transaction information while your account is active and for the period required to meet recordkeeping, tax, and legal obligations... we may retain records for up to seven (7) years...

State abandoned property laws may require retention for longer periods.

We will retain data for the minimum period necessary to fulfill these purposes, unless a longer retention period is required or permitted by law.

In the event of litigation, regulatory investigation, or other legal hold, we may retain data beyond these periods as legally required.

To request deletion, contact privacy@vaultfuneraltech.com and follow the verification steps we describe.

We will comply with deletion requests to the extent required by applicable law and will notify you if we cannot comply for legal reasons.

If you are a consumer asserting deletion rights... please also consult the Terms of Use...

Opt Out of Using Personal Data for Targeted Advertising, Profiling, and Sales.

You may request that we do not use your personal data for targeted advertising, profiling, or for sale or sharing as those terms are defined under applicable law.

Vault Funeral Technology Inc. does not sell personal data for monetary or other valuable consideration and does not share personal data for cross-context behavioral advertising...

However, we may disclose personal data to third-party service providers for business purposes as described in this policy.

California residents may submit a Do Not Sell or Share My Personal Information request...

Residents of other states with similar opt-out rights... may also submit opt-out requests through these same channels.

Nevada residents who wish to opt out of the sale of covered information may contact us at privacy@vaultfuneraltech.com.

Under the GDPR, you also have the right to object to processing based on legitimate interests...

contact privacy@vaultfuneraltech.com to exercise that right. For details about how opt-out choices interact with our Terms of Use...

together, these documents describe your rights and the available procedures for resolving disputes.

Important: The exact scope of these rights varies by jurisdiction.

There are also exceptions where we may not have an obligation to fulfill your request, for example, when:

1. we must retain data to comply with legal or regulatory obligations
2. retention is necessary for tax recordkeeping or other business recordkeeping requirements
3. the data is necessary to detect, investigate, or prevent fraud or security incidents
4. the data is necessary to defend or prosecute legal claims or is subject to a litigation hold
5. the request cannot be verified to a reasonable degree of certainty; fulfilling the request would require disproportionate effort
6. or other exceptions apply under the specific privacy law governing your request.

We will provide specific reasons if we deny a request in whole or in part.

Where dispute resolution, venue, or jurisdictional matters affect the exercise of these rights, please consult our Terms of Use...

This Privacy Policy should be read together with our Terms of Use...

To the extent of any conflict between this Privacy Policy and the Terms of Use... this Privacy Policy shall control.

You are responsible for providing accurate, complete, and up-to-date contact and account information;

failure to keep your information current may affect our ability to respond to privacy requests or provide notices.

To exercise any of these rights, you may submit your request online via https://www.vaultfuneraltech.com/privacy; via email at privacy@vaultfuneraltech.com;

via mail at Vault Funeral Technology Inc., Attn: Privacy, 99 Wall Street, #5006, New York, NY 10005;

or via telephone at (212)-328-1169. We will verify your identity before fulfilling requests...

Our verification methods may include requesting identifying information that matches information we maintain...

Where applicable, we will follow the verification procedures required by the jurisdiction...

If we deny a request in whole or in part, we will provide the reasons for the denial...

For questions about dispute resolution, venue, or consumer-rights procedures... consult our Terms of Use...

Some browsers and browser extensions support the Global Privacy Control (“ GPC ”)...

When we detect a GPC signal... we will treat it as a valid request to opt out...

We process GPC signals on a device-specific and browser-specific basis.

To exercise opt-out rights or to ask how we responded to a GPC signal, contact us...

For information about how GPC signals interact with dispute resolution... consult both this Privacy Policy and our Terms of Use.

Nevada residents have a right under Nevada Revised Statutes Chapter 603A (NRS 603A.340) to opt out...

“Covered information” is defined under NRS 603A.340...

Vault Funeral Technology Inc. does not currently sell covered information as defined under Nevada law.

Nevada residents who wish to submit an opt-out request may do so via email at privacy@vaultfuneraltech.com;

via mail at Vault Funeral Technology Inc., Attn: Privacy, 99 Wall Street, #5006, New York, NY 10005;

or via telephone at (212)-328-1169. We will respond to verifiable requests in accordance with Nevada law.

For additional information on dispute procedures... please consult our Terms of Use.

If you are a California resident, additional rights and disclosures apply...

For Vault’s California-specific privacy notice... visit https://www.vaultfuneraltech.com/ccpa.

For information about dispute resolution, venue, and how those matters interact... consult both this Privacy Policy and our Terms of Use;

together, those documents explain the procedural and substantive rights available to you...

How We Protect Your Personal Data

We use commercially reasonable administrative, physical, and technical measures to protect personal data...

These measures include TLS encryption in transit, industry-standard encryption at rest...

Payment card data is processed and stored by our payment processor (Stripe) in compliance with PCI DSS;

Vault does not store raw card numbers. We maintain information security policies...

If we become aware of a breach of security... we will provide required notifications...

We will provide such notification in the most expedient time possible...

The safety and security of your information also depend on you.

Use unique, strong passwords, protect your credentials... notify us at techsupport@vaultfuneraltech.com...

Do not send sensitive personal data by unencrypted email. You must also keep your account and contact information accurate...

How We Retain Your Personal Data

We retain personal data for as long as necessary to provide the Services...

In practice, we retain account and transaction data for the duration of an active account.

After an account becomes inactive or is closed, we retain personal information for seven (7) years...

Payment and card-related data are processed and retained by our payment processor (Stripe)...

Vault does not retain full card numbers. When personal data is no longer required, we securely delete...

Consistent with the Terms of Use, you must keep your account information accurate...

Changes to Our Privacy Policy

We may update this policy from time to time...

The date the privacy policy was last updated is identified at the top of the page.

We will notify you of material changes by updating the “last updated” date...

Material changes that affect users’ rights, dispute procedures...

Where required by law, we will obtain your affirmative consent...

You should check our Services periodically...

Contact Information

To exercise your privacy rights... you may submit your request online via https://www.vaultfuneraltech.com/privacy, via email at privacy@vaultfuneraltech.com;

via mail at Vault Funeral Technology Inc., Attn: Privacy, 99 Wall Street, #5006, New York, NY 10005;

or via telephone at (212)-328-1169.

You may contact us regarding copyright matters via email at dmca@vaultfuneraltech.com;

via U.S. mail at Vault Funeral Technology, Inc., Attn: DMCA Agent, 99 Wall Street, #5006, New York, NY 10005;

or via telephone at (212)-328-1169.

All other feedback, comments, requests for technical support, and other communications... should be directed to: techsupport@vaultfuneraltech.com.

To register a privacy complaint, submit a detailed description... to privacy@vaultfuneraltech.com...

We will acknowledge receipt and investigate. If you remain unsatisfied... you may complain with the appropriate regulator...

For questions about dispute resolution procedures, jurisdiction, or consumer opt-out mechanisms... please consult both this Privacy Policy and our Terms of Use...

Nothing in this Privacy Policy or the Terms of Use is intended to limit rights afforded by applicable consumer protection laws.

We will cooperate with regulatory inquiries as required by law.