Privacy Policy

This Privacy Policy applies to V.I. Consignment ("V.I. Consignment," "we," "us," or "our"), a consignment retailer based in Cobble Hill, British Columbia, Canada, and the family of storefronts we operate, including Honey Willow Consignment, Modern Maven Consignment, and Offboarded (collectively, the "Sites"). It covers information we collect through the Sites, our checkout and account pages, and when you interact with us as a customer or consignor by phone, email, or in person.

We are governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, as a British Columbia-based organization, the BC Personal Information Protection Act (PIPA). If provincial private-sector privacy legislation in another province where we do business applies instead of PIPEDA, we comply with that legislation as well.

We collect information in the following ways:

• Information you give us directly: name, email address, shipping and billing address, phone number, and order details when you create an account, place an order, or contact customer support.
• Consignor information: contact details, item descriptions, and payout details for individuals who consign items with us.
• Information collected automatically: IP address, browser type, device information, pages viewed, and referring pages, collected via cookies and similar technologies (see Cookies & tracking below).
• Payment information: processed directly by our payment processor, Square (see Payment information below). We do not receive or store full payment card numbers.

• Processing and fulfilling orders, and communicating about order status
• Managing consignor accounts and processing consignment payouts
• Responding to customer service inquiries
• Improving our Sites, catalog, and shopping experience
• Sending order-related notifications and, where you've opted in, marketing communications
• Detecting and preventing fraud, and meeting our legal and accounting obligations

We use strictly necessary cookies to operate your shopping cart, keep you signed in, and protect the checkout process. These cannot be disabled without breaking core site functionality.

We also use optional analytics cookies (Google Analytics 4) to understand aggregate traffic patterns and improve our Sites. You can opt out of analytics cookies at any time through Your Privacy Choices, also available from the footer of every page.

We do not sell your personal information. We share information only with:

• Service providers who help us operate the Sites (payment processing, shipping carriers, email delivery, hosting infrastructure), under contractual confidentiality obligations
• Professional advisors (legal, accounting) as needed
• Law enforcement or regulators, where required by law or to protect our rights and the safety of others
• A successor entity, in the event of a merger, acquisition, or sale of business assets

All payment card processing is handled directly by Square, Inc. through their secure, PCI-DSS-compliant payment infrastructure. Card numbers are entered directly into Square Web Payments SDK fields and are never transmitted to or stored on our servers. Square's own privacy practices govern the payment data they process; see Square's privacy policy for details.

We retain order and transaction records for as long as required to meet Canadian tax and financial recordkeeping obligations (generally a minimum of six years per Canada Revenue Agency requirements), and account information for as long as your account remains active or as needed to provide you services. We retain consignor records for the duration of the consignment relationship and as required for payout and tax reporting purposes.

Subject to applicable law, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent to optional uses of your information (e.g., marketing emails, analytics cookies)
• Request deletion of your account information, subject to our legal recordkeeping obligations

To exercise any of these rights, contact us using the details in Contact us below. We will respond within the timeframes required by applicable privacy legislation.

Our Sites are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use industry-standard technical and organizational safeguards — including encrypted connections (HTTPS/TLS), access controls, and secure hosting infrastructure — to protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure, but we work to continually improve our safeguards.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy here with an updated "Last updated" date. Material changes will be communicated through a notice on our Sites.