Privacy Policy

1. Overview

Vintage Bar Co. ("Company," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information you provide when you visit vintagebarco.com(the "Site"), contact us, or engage with our products and partner services.

By using our Site or services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Site. This Policy applies to all users located in the United States. We do not operate, sell, or service outside the United States and do not knowingly collect information from individuals outside the U.S.

Quick Summary: We collect information you give us directly (inquiry forms, email, purchases), information collected automatically when you browse (analytics, cookies), and optional information you share when applying to become a Vintage Bar Co. partner. We do not sell your personal information to third parties for their own marketing purposes. We use your information to respond to inquiries, process transactions, and improve our services.

2. Information We Collect

We collect information in two primary ways: information you provide directly, and information collected automatically through your use of our Site.

Information You Provide Directly

• Contact & Inquiry Information: Name, email address, phone number, city/state/market, and any message content submitted through our inquiry forms or email
• Partner Application Information: Business name, operating history, market territory, references, and financial background information provided in the context of a partner or VBCN membership application
• Purchase & Transaction Information:Billing name, address, payment card information (processed securely through third-party payment processors — we do not store full card numbers), and purchase history for products or starter packages
• Account Information: Username, password, and profile details if you create an account on our Site or partner supply store
• Communications: Content of emails, messages, or correspondence you send us, including support requests and feedback
• NDA & Agreement Information: Name, organization, title, and signature data collected in connection with Non-Disclosure Agreements or partnership contracts

Information Collected Automatically

• Usage Data: Pages visited, time spent, referring URLs, click paths, and browser or device type
• Log Data: IP address, browser type, operating system, and timestamps of access
• Cookies & Similar Technologies:Session cookies, persistent cookies, pixel tags, and analytics identifiers (see Section 5 — Cookies)
• Location Data:General geographic location inferred from your IP address (city/state level — not precise GPS)

Information We Do Not Collect

• Social Security Numbers or government-issued ID numbers (except as required by law for business contracting purposes)
• Biometric data of any kind
• Health or medical information
• Data from individuals under 18 years of age

3. How We Use Your Information

We use the information we collect for the following business purposes:

• To Respond to Inquiries: Contacting you in response to partner inquiries, product questions, or general correspondence
• To Process Transactions: Fulfilling purchases, processing payments, and delivering products or starter packages
• To Evaluate Partner Applications: Reviewing applications for the Vintage Bar Co. Network (VBCN), Collective membership tiers, or Operating Partner arrangements
• To Administer Agreements: Executing and managing NDAs, partnership agreements, and vendor relationships
• To Operate Our Supply Store: Managing accounts, orders, and product delivery for the Vintage Bar Co. partner supply store
• To Improve Our Site and Services: Analyzing usage patterns, troubleshooting technical issues, and enhancing user experience
• To Send Communications:Sending transactional emails (receipts, order confirmations), operational notices, and — with your consent — marketing communications about new products, events, or opportunities
• To Send SMS Messages (With Your Consent):Sending conversational replies, appointment reminders, scheduling and build-status updates, and — with your express written consent — promotional messages. Full details about our A2P 10DLC messaging program, including how to opt in, opt out, and request help, are in Section 6.
• To Comply with Legal Obligations: Meeting applicable federal, state, and local legal requirements, including tax, licensing, and recordkeeping obligations
• To Protect Our Business and Users: Detecting and preventing fraud, unauthorized access, and other harmful activity

We will not use your information for any purpose materially different from those described above without providing you prior notice and, where required by law, obtaining your consent.

4. Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for their own independent marketing or commercial purposes. We may share your information in the following limited circumstances:

• Service Providers:Third-party vendors who assist in operating our website, processing payments, sending emails, managing our CRM, or providing analytics — all under written agreements requiring them to protect your data and use it only for services rendered to us. Examples include payment processors (Stripe, Square), email platforms, and website hosting providers.
• Business Partners (With Your Consent):If you apply to join the VBCN Corporate Preferred Vendor Network, limited profile information may be shared with corporate clients or event organizers in connection with vendor matching — only with your knowledge and agreement as part of the partnership terms.
• Legal Requirements: When required by law, court order, subpoena, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Vintage Bar Co., our users, or the public.
• Business Transfers: In connection with a merger, acquisition, sale of assets, or other business transaction, your information may be transferred to a successor entity, subject to the same privacy protections described herein.
• With Your Consent: We may share information for other purposes with your explicit prior consent.

We do not sell personal information.This applies regardless of your state of residence. We do not engage in the "sale" or "sharing" of personal data as defined under the California Consumer Privacy Act (CCPA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), or analogous state laws.

5. Cookies & Tracking Technologies

Our Site uses cookies and similar tracking technologies to improve your experience and help us understand how the Site is used.

• Strictly Necessary Cookies: Required for the Site to function (session management, security, shopping cart). These cannot be disabled without breaking core functionality.
• Analytics Cookies: Tools such as Google Analytics that help us understand traffic patterns, popular pages, and user behavior in aggregate. Data is anonymized or pseudonymized where possible.
• Functional Cookies: Remember your preferences (language, form fills) to personalize your experience.
• Marketing Cookies: Used to track visits across websites and may be used to display relevant advertising. We will request your consent before placing non-essential marketing cookies where required by law.

Your Cookie Choices:Most browsers allow you to refuse or delete cookies through their settings. Disabling cookies may affect certain features of the Site. For residents of states with opt-out rights related to targeted advertising (California, Colorado, Connecticut, Virginia, and others), see Section 11 — Other State Privacy Rights.

We do not currently respond to browser "Do Not Track" signals, as there is no uniform standard for doing so. However, we do honor state-law opt-out requests submitted as described in this Policy.

6. SMS Messaging & A2P 10DLC Compliance

Vintage Bar Co. operates an Application-to-Person (A2P) 10DLC messaging program in accordance with the Telephone Consumer Protection Act (TCPA), the Federal Communications Commission (FCC) rules, CTIA Messaging Principles & Best Practices, and the carrier requirements administered by The Campaign Registry (TCR). This section describes the program, how you consent, and how you control the messages you receive from us.

Program Name: Vintage Bar Co. Customer Communications

Brand: Vintage Bar Co.

Sending Number: Our registered 10-digit long-code (10DLC) and/or toll-free business number, as listed on our Site and in message footers.

Types of Messages You May Receive

• Conversational & Customer Care: Direct one-to-one replies from the Vintage Bar Co. team regarding inquiries, consultations, scheduling, order status, shipping, and post-sale support.
• Transactional & Account Notifications: Appointment reminders, consultation confirmations, build-status updates, payment reminders, delivery coordination, and program onboarding milestones.
• Promotional & Marketing (with consent): Occasional updates about new offerings, events, partner opportunities, or operator community programming. You may opt out of marketing messages at any time while continuing to receive transactional messages, if applicable.

How You Consent (Opt-In)

We obtain prior express written consent before sending any SMS message that requires consent under the TCPA. Consent is collected through one of the following mechanisms:

• Website Form Opt-In:When you submit our consultation, contact, or "Send a Note" form on vintagebarco.com, you must affirmatively check a box that is not pre-checkedstating: "I agree to receive SMS messages from Vintage Bar Co. at the phone number provided, including appointment reminders and follow-ups. Message and data rates may apply. Message frequency varies. Reply STOP to opt out or HELP for help."
• Direct Reply / Inbound Message: If you initiate a text conversation with us by sending a message to our business number, that interaction is treated as consent for our reply and ongoing conversational and customer-care messaging related to your inquiry.
• Verbal or Written Consent on Record: Where you provide explicit verbal or written agreement to receive SMS during a phone call, in-person meeting, or signed agreement, we maintain a contemporaneous record of that consent including timestamp and method.

For each opted-in contact we retain a record of the consent event including the date and time, the source of the opt-in (form name and page URL where collected), the IP address or session identifier where applicable, and the exact disclosure language presented at the time of consent. Consent is never assumed, transferred, or shared with third parties.

Phone-Number Information Is Not Shared with Third Parties for Marketing. The mobile-phone numbers and consent records we collect for SMS purposes are used solely by Vintage Bar Co. and our messaging service provider to deliver the messages you have consented to. We do not sell, rent, lease, or share phone numbers or SMS opt-in data with third parties or affiliates for their own marketing or promotional purposes.

Message Frequency

Message frequency varies based on your engagement with our team and stage in our program. Typical volume ranges from 2 to 10 messages per month for active leads and onboarding customers, and may temporarily increase during scheduling, build, or delivery windows.

Message and Data Rates

Standard message and data rates may apply, depending on your wireless carrier and mobile plan. Vintage Bar Co. does not charge for SMS messages; any such charges are imposed by your carrier. Contact your wireless provider for information about your messaging plan.

How to Opt Out (STOP) and Get Help (HELP)

• STOP: Reply STOP, END, QUIT, CANCEL, or UNSUBSCRIBE to any Vintage Bar Co. SMS message to stop receiving further messages. You will receive a one-time confirmation message acknowledging your opt-out, after which no additional messages will be sent unless you opt back in.
• HELP: Reply HELP or INFO at any time to receive contact information for customer support, including our business email and phone number.
• Alternative Opt-Out Methods: You may also opt out at any time by emailing hello@vintagebarco.com with the subject "SMS Opt-Out" and the phone number to be removed, or by contacting us using the information in Section 14.

Opt-out requests are honored immediately upon receipt. We maintain a suppression list of opted-out numbers indefinitely to ensure messages are not resent absent a new, explicit opt-in.

Carrier & Delivery Disclaimer

Messages are sent through registered A2P 10DLC and/or toll-free verified routes via our messaging service provider. Carriers are not liable for delayed or undelivered messages, and delivery is not guaranteed. Service availability depends on your carrier’s network and your handset’s capabilities. Supported carriers include all major U.S. wireless carriers (AT&T, T-Mobile, Verizon, US Cellular, and others).

Age Restriction

Our SMS program is intended for individuals who are 18 years of age or older. By opting in, you represent that you are at least 18 and that you are the subscriber of, or have authority to consent on behalf of, the wireless number provided.

Recordkeeping & Compliance Audits

We retain SMS consent records, opt-out records, and a log of message activity (sender, recipient, timestamp, and message category) for at least four (4) years, or longer where required by law, to demonstrate compliance with the TCPA, FCC, FTC, CTIA, and carrier requirements. These records are made available to carriers, registry administrators (including TCR), and regulators upon lawful request.

Updates to the SMS Program

If we materially change the categories of messages we send, the frequency, the brand, or the consent mechanism, we will obtain renewed consent where required by law and will notify opted-in users via SMS or email in advance of the change.

SMS Contact & Complaints

For questions about our SMS program or to report a concern, email hello@vintagebarco.com with the subject "SMS Inquiry." You may also contact us using the information in Section 14. If you believe you have received a message in error or without your consent, please notify us immediately so we can investigate and remediate.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption of data in transit via TLS/SSL protocols
• Secure, access-controlled hosting environments
• Payment data handled exclusively through PCI-DSS-compliant third-party processors — we do not store full payment card numbers on our systems
• Internal access controls limiting employee access to personal data on a need-to-know basis
• Regular review of our data handling practices

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately using the details in Section 14.

In the event of a data breach that triggers state notification requirements, we will notify affected individuals and applicable regulators in accordance with the breach notification laws of the relevant states, including but not limited to California (Cal. Civ. Code § 1798.29, 1798.82), Texas (Tex. Bus. & Com. Code § 521), Florida (Fla. Stat. § 501.171), and analogous laws in all other U.S. states.

8. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements.

• Inquiry and Contact Records: Retained for up to 3 years from last contact, or longer if a business relationship develops
• Transaction Records: Retained for 7 years in accordance with standard accounting and tax obligations
• Partner and NDA Records: Retained for the duration of the partnership plus 5 years, consistent with NDA terms
• Analytics Data: Retained in aggregated/anonymized form indefinitely; identifiable data retained for up to 26 months
• Marketing Opt-outs: Records of opt-out requests are retained indefinitely to honor your preferences

When personal information is no longer needed, we will delete or anonymize it in a secure manner. You may request earlier deletion as described in Section 9 — Your Privacy Rights.

9. Your Privacy Rights

Depending on your state of residence, you may have some or all of the following rights with respect to your personal information. We honor these rights for all U.S. residents to the extent applicable under their state’s law.

How to Submit a Request:To exercise any of the rights above, please contact us using the information in Section 14. We will verify your identity before processing requests to protect your data. We will respond within 45 days (extendable by an additional 45 days with notice) or the period required by your state’s law.

You may designate an authorized agent to make a request on your behalf. We may require written proof of authorization and will verify the agent’s identity separately.

10. California Residents — CCPA / CPRA

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). This section supplements the rest of this Policy.

Categories of Personal Information Collected (Past 12 Months):

• Identifiers (name, email, IP address, phone number)
• Commercial information (purchase records, products considered)
• Internet or electronic network activity (browsing history on our Site, interaction data)
• Geolocation data (general, city/state level only)
• Professional or employment-related information (for partner applicants)
• Inferences drawn from the above to create a profile regarding your preferences or characteristics related to business fit

Sensitive Personal Information:We do not collect, use, or disclose "sensitive personal information" as defined by the CPRA (such as Social Security numbers, precise geolocation, racial or ethnic origin, biometric data, or health information) in the normal course of our business. We do not use sensitive personal information to infer characteristics about you.

Do Not Sell or Share My Personal Information: We do not sell or share your personal information as defined under CCPA/CPRA. If this practice changes in the future, we will update this Policy and provide you with an opportunity to opt out.

Shine the Light (Cal. Civ. Code § 1798.83): California residents may also request information about disclosure of personal information to third parties for their direct marketing purposes. As stated above, we do not disclose personal information to third parties for their own direct marketing purposes.

Authorized Agent:California residents may designate an authorized agent to make requests under the CCPA on their behalf. We will require written verification of your identity and the agent’s authority before processing such requests.

California Contact:To exercise your California rights or make an inquiry, contact us at the information provided in Section 14. Please include "California Privacy Request" in your subject line.

11. Other State Privacy Rights

Residents of the following states have enacted comprehensive consumer privacy laws that grant rights similar to those described in Section 9. We extend these rights to all applicable residents:

• Colorado — CPA · SB 21-190
• Virginia — VCDPA
• Connecticut — CTDPA
• Texas — TDPSA
• Montana — MCDPA · SB 384
• Indiana — INCDPA · SB 5
• Tennessee — TIPA · HB 1181
• Iowa — ICDPA · SF 262
• Oregon — OCPA · SB 619
• Delaware — DPDPA · HB 154
• New Hampshire — NHPA · SB 255
• New Jersey — NJDPA · SB 332
• Nebraska — NDPA · LB 1074
• Maryland — MODPA · SB 541
• Minnesota — MHOPPA · HF 4757
• Rhode Island — RIDPA · H 7787

Residents of these states generally have the right to: access personal data, correct inaccurate data, request deletion, obtain a portable copy, opt out of targeted advertising, opt out of profiling in furtherance of solely automated decisions, and appeal our decisions. We will honor requests from residents of all of the above states consistent with the rights granted under each applicable law.

All other U.S. states: Even if your state has not enacted a comprehensive privacy law, we are committed to reasonable data practices and will respond to privacy inquiries on a case-by-case basis.

To submit a request, email us as directed in Section 14. Please include your state of residence and the nature of your request. Requests are typically processed within 45 days, or within any shorter period required by your state’s law.

12. Children’s Privacy

Our Site and services are intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. Our products and partner opportunities are business-to-consumer and business-to-business offerings directed at adult entrepreneurs.

If we become aware that we have inadvertently collected personal information from a person under 18, we will take prompt steps to delete such information from our records. If you believe we have collected information from a minor, please contact us immediately using the information in Section 14.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy
• Post a notice on our Site’s homepage or another prominent location
• Where required by law or where we have your contact information, send you a direct notification by email

Your continued use of our Site or services following the posting of changes constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. If you do not agree to the revised Policy, please discontinue use of our Site and contact us to request deletion of your information.

14. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to report a privacy concern, please contact us:

• Company: Vintage Bar Co.
• Founder / Privacy Contact: George Torres
• Website: vintagebarco.com
• Mailing Address: Denham Springs, Louisiana
• Email: hello@vintagebarco.com

Please include "Privacy Request" in the subject line of any email submission. We will acknowledge receipt of your request within 5 business days and respond within 45 days (or the period required by your state’s law).

If you have an unresolved privacy concern that we have not addressed satisfactorily, you may have the right to lodge a complaint with your state’s attorney general office or applicable consumer protection authority.