Privacy Policy

We take a strong stance against the sale of your data. We believe our customers deserve the utmost privacy in their financial endeavors. We will never sell, rent, or trade your personal information—ever.

Effective date: 10/19/2025
Last updated: 10/19/2025

This Privacy Policy explains how The Vault & Co. (“The Vault & Co.,” “we,” “us,” or “our”) collects, uses, and safeguards information when you use thevaultand.co, callthevault.com, and their subdomains (the “Site”), visit our store, participate in auctions/consignments, or communicate with us (email, phone, SMS/MMS, chat).

Contact us
The Vault & Co.
112 N Ponce De Leon Blvd, St Augustine, FL 32084
Phone: 904-500-2646 (904-500-COIN)
Email: privacy@thevaultand.co


1) Who may use our services

  • United States only. We market to and do business exclusively in the United States. If you are outside the U.S., please do not submit personal information or use the Site to transact.

  • 18+ only. Our Site and services are intended for adults 18 years and older. We do not knowingly collect information from anyone under 18.


2) Information we collect

You provide: name, email, phone, shipping/billing address; account credentials; order/appointment details; consignment/auction details (item info, photos, reserve/bid amounts, payouts); messages and preferences.
Payments: processed by third-party processors (e.g., Square/Stripe/PayPal). We do not store full card numbers.
Automatically: IP address, device/browser data, pages viewed, session data, and cookies for login, cart, fraud prevention, and analytics.
From service providers: shipping carriers, messaging providers (e.g., Twilio), fraud/identity tools, analytics, and hosting/CDN.


3) How we use information

  • Provide, fulfill, and improve our retail, auction, and consignment services;

  • Process payments, shipping, confirmations, and receipts;

  • Schedule and manage appointments;

  • Communicate operational updates (order status, reminders) and—only with your consent—marketing;

  • Protect our customers and business (fraud prevention, security, compliance);

  • Meet legal, tax, and accounting obligations.


4) SMS/MMS messaging

If you opt in, we may send transactional or marketing SMS/MMS (via carriers/platforms such as Twilio). Message & data rates may apply. Frequency varies.

  • Opt-out: reply STOP to any message.

  • Help: reply HELP for assistance.
    We maintain opt-in/opt-out records as required.


5) How we share information

We do not sell personal information to anyone, ever. We also do not “share” personal information for cross-context behavioral advertising as defined by certain U.S. state laws.

We disclose information only to:

  • Service providers/processors under contracts that limit use to our purposes (e.g., hosting/CDN, payment, shipping, messaging, analytics, fraud/ID tools, professional advisors);

  • Legal/safety recipients when required by law or to protect rights and security;

  • Business transfers (e.g., merger or asset sale), in which case your information may transfer subject to this Policy.


6) Cookies & analytics

We use cookies, local storage, and similar tech to keep you logged in, remember your cart, enhance performance, and understand usage. You can manage cookies via your browser and (if enabled) our {Cookie Settings} tool.


7) Your choices & rights (U.S.)

  • Marketing: unsubscribe from emails via link; for SMS, reply STOP.

  • Account & info: request updates or deletion at privacy@thevaultand.co or 904-500-2646.

  • State privacy rights: Depending on your state (e.g., CA/CO/CT/VA/UT), you may request access, correction, deletion, or limits on certain processing. We will verify requests and respond per applicable law.


8) Security

We apply administrative, technical, and physical safeguards (e.g., encryption in transit, least-privilege access, monitoring). No method is 100% secure, but we work to protect your information.


9) Retention

We keep information as needed for services and legitimate business needs (e.g., tax/audit, fraud prevention, dispute resolution). When no longer required, we delete or de-identify it.


10) Children’s privacy

We do not target or knowingly collect information from persons under 18. If you believe a minor provided information, contact us to request deletion.


11) Third-party links

Our Site may link to third-party websites/services we do not control. Review their privacy policies before providing information.


12) Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” reflects the latest version. Material changes will be posted here and, where appropriate, we may notify you by email or SMS.