1.Scope and who we are
This Privacy Policy explains how Alist Archive LLC ("ALIST", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit www.alistarchive.com, buy or consign an item, contact client services, or otherwise interact with us (the "Services").
This policy covers personal information about buyers, consignors, site visitors, newsletter subscribers, and business contacts. It does not cover information practices of third parties whose sites or services we link to, or the employment-related information of our own personnel, which is handled under a separate notice.
The Services are operated from the United States and are intended for U.S. residents. If you access the Services from outside the United States, you understand that your information will be processed in the United States, where privacy laws may differ from those in your country.
2.Notice at collection
This summary is provided at or before the point of collection, as California law requires. The detail behind each row is in the sections that follow.
| Category collected | Purpose | Sold or shared? | Retention |
|---|---|---|---|
| Identifiers (name, email, postal address, phone, account ID, IP address, device identifiers) | Account creation, orders, delivery, service messages, fraud prevention, marketing where you have opted in | No | Life of the account plus the period required by tax, accounting, and consumer-protection law |
| Customer records (billing address, payment card type and last four digits, shipping history) | Payment authorization, tax calculation, order fulfillment, returns and refunds, chargeback defense | No | Seven years from the transaction, for tax and audit purposes |
| Commercial information (items viewed, favorited, purchased, returned, or consigned; consignment payouts) | Order processing, returns, consignor payouts, authentication records, item provenance, service improvement | No | Life of the account; item and authentication records are retained for the life of the item record |
| Internet and network activity (pages viewed, referring page, search terms, session and interaction data) | Site operation, security, analytics, personalization, advertising measurement | No | Up to 24 months in analytics and advertising systems |
| Approximate location derived from IP address | Fraud prevention, tax and shipping eligibility, regional content | No | Up to 24 months |
| Audio, visual, and similar information (photographs of items, packaging and intake photos, recorded client service calls where permitted) | Authentication, condition grading, listing, dispute resolution, quality and training | No | Life of the item record; call recordings up to 24 months |
| Body measurement and try-on data submitted to our fit and virtual try-on tools | Providing the size recommendation or try-on visualization you requested | No. Never sold, leased, traded, or used for advertising. | Deleted per the schedule in the Fit and virtual try-on data section |
| Sensitive personal information (government ID and tax identification number for consignors; account credentials) | Identity verification, anti-fraud and sanctions screening, tax reporting for payouts, account security | No | As required by tax and anti-money-laundering rules; IDs are deleted once verification is complete unless retention is legally required |
| Inferences (style and category preferences, likely size, customer value segment) | Merchandising, recommendations, marketing where permitted | No | Life of the account |
3.Where the information comes from
- Directly from you — when you create an account, place an order, submit an item for consignment, subscribe to email, complete a form, or contact client services.
- Automatically — through cookies, pixels, and similar technologies when you use the Services, as described in our Cookie Policy.
- From service providers — payment processors and fraud-screening tools, shipping carriers, our commerce platform, and our email and analytics providers.
- From our authentication process — photographs, measurements, serial and date codes, and expert assessments relating to an item you buy or consign.
- From partners and public sources — identity verification and sanctions-screening providers, and public records where required for compliance.
4.How we use personal information
We use personal information for the following business purposes:
- to create and administer your account and authenticate you when you sign in;
- to process, fulfill, ship, and track orders, and to handle returns, refunds, and store credit;
- to authenticate, grade, photograph, and list items, and to maintain each item's authentication and provenance record, including any digital certificate;
- to onboard consignors, verify identity, screen against sanctions lists, calculate commissions, issue payouts, and meet tax reporting obligations;
- to provide client services, respond to your questions, and resolve disputes and chargebacks;
- to detect, investigate, and prevent fraud, security incidents, and prohibited or illegal activity, and to enforce our Terms of Service;
- to send transactional messages such as order confirmations, shipping notices, and service or security notices;
- to send marketing communications where you have opted in, and to measure their effectiveness;
- to personalize merchandising and recommendations on the Services;
- to analyze use of the Services and to develop, improve, and secure our features and infrastructure; and
- to comply with law, respond to lawful requests, and establish, exercise, or defend legal claims.
We do not use or disclose sensitive personal information for purposes other than those permitted under California law without first providing notice and, where required, obtaining your consent. We do not use your personal information to train third-party generative artificial intelligence models, and we do not permit our service providers to do so.
5.Fit and virtual try-on data
Some product pages offer optional size-recommendation and virtual try-on features supplied by a third-party technology provider. These features are entirely optional and are never required to browse or buy.
- The feature is launched only when you choose to open it, and it explains what it collects before you begin.
- Depending on the feature, it may process a photograph you upload or capture, body measurements you enter, or measurements derived from an image, in order to generate the size recommendation or visualization you asked for.
- This information is used only to provide the feature to you. We do not use it for advertising, profiling, or any decision that produces a legal or similarly significant effect, and we never sell, lease, trade, or otherwise profit from it.
- The provider processes this information on our behalf under a written contract that prohibits any use other than providing the service to us.
- Images and derived measurements are deleted when the purpose for collecting them has been satisfied and in any event no later than one year after your last interaction with the feature, unless a longer period is required by law or to defend a legal claim.
To request deletion of information submitted through these features, email camilla@alistarchive.com with the subject "Fit data deletion".
6.How we disclose personal information
We disclose personal information only as described below. We do not disclose personal information to third parties for their own independent marketing purposes.
| Recipient type | What they receive | Why |
|---|---|---|
| Commerce platform and hosting providers (including Shopify) | Account, order, and catalog data | To operate the storefront, checkout, and our infrastructure |
| Payment processing and fraud screening (Shopify and its payment partners) | Billing and transaction data, device and risk signals | To authorize card payments, prevent fraud, and defend chargebacks. We do not receive or store full payment card numbers. |
| Shipping carriers and logistics partners | Name, address, phone, email, and package details | To deliver, insure, and track shipments and to process returns |
| Authentication, appraisal, and repair partners | Item data and photographs; your identity only where necessary | To authenticate, grade, restore, or verify an item |
| Identity verification and sanctions screening providers | Name, address, date of birth, government ID and tax identifiers (consignors) | To verify identity, meet anti-money-laundering and sanctions obligations, and report payouts |
| Email, messaging, and customer support platforms | Contact details and communication history | To send transactional and opted-in marketing messages and to support you |
| Analytics providers | Online identifiers, device data, and interaction data | To keep the Services secure and to understand and improve how they are used. We do not disclose personal information to advertising partners; see the section on sale and sharing. |
| Professional advisors, insurers, and auditors | Only what is necessary for the engagement | Legal, accounting, insurance, and audit services |
| Law enforcement and other legal recipients | Only what is required or permitted | To comply with law, valid legal process, or a lawful government request, or to protect rights, safety, and property |
| A successor entity | Information relevant to the transaction | In connection with a merger, acquisition, financing, or sale of assets, subject to notice as required by law |
Service providers are bound by written contracts that limit them to processing personal information for the purposes we specify and prohibit them from selling it or using it for their own purposes.
7."Sale" and "sharing" of personal information
We do not sell personal information for money, and we do not sell the personal information of consumers we know to be under 16 years of age.
We also do not currently share personal information for cross-context behavioral advertising, and we do not use it for targeted advertising as other state laws define it. We do not run advertising pixels or third-party advertising cookies on the Services.
| Category | Sold? | Shared for cross-context behavioral advertising? |
|---|---|---|
| Identifiers | No | No |
| Customer records | No | No |
| Commercial information | No | No |
| Internet and network activity | No | No |
| Geolocation | No | No |
| Audio and visual information | No | No |
| Fit and try-on data | No | No |
| Sensitive personal information | No | No |
| Inferences | No | No |
9.Digital certificates and public blockchain records
Where an item carries a digital certificate of authenticity, we publish a reference to a public blockchain so that the certificate can be independently verified. We publish only item and certificate identifiers and links to the certificate record. We do not publish your name, contact details, or any other personal information on-chain.
Information written to a public blockchain is permanent, public, and outside our control. That means a request to delete personal information cannot extend to data already recorded on-chain. If you have questions about what a certificate contains before you buy, contact us first.
10.How long we keep information
We keep personal information only as long as necessary for the purposes described in this policy, and then delete or de-identify it. In deciding how long to keep information, we consider the amount and sensitivity of the data, the risk of harm from unauthorized use, whether we can achieve the purpose by other means, and applicable legal requirements. Our general schedule:
| Information | Retention |
|---|---|
| Account records | For the life of the account, then up to 24 months after closure for fraud prevention and dispute resolution |
| Order, payment, and tax records | Seven years from the transaction |
| Item, authentication, and certificate records | For the life of the item record, so that provenance remains verifiable |
| Consignor identity verification documents | Deleted once verification is complete, unless retention is required by tax or anti-money-laundering rules |
| Client service correspondence and call recordings | Up to 24 months |
| Marketing preferences and suppression lists | Until you withdraw consent; suppression records are kept indefinitely so we can honor your opt-out |
| Analytics and advertising data | Up to 24 months |
| Fit and virtual try-on data | As described in the Fit and virtual try-on data section |
11.Your privacy rights
Depending on where you live, you have some or all of the following rights. We extend the core rights below to all U.S. residents, regardless of state.
- Know and access
- Confirm whether we process your personal information and obtain a copy, including the categories collected, sources, purposes, and categories of recipients.
- Correct
- Ask us to correct inaccurate personal information.
- Delete
- Ask us to delete personal information we collected from you, subject to exceptions such as completing a transaction, security, legal compliance, and defending legal claims.
- Portability
- Receive a copy in a portable, readily usable format where technically feasible.
- Opt out of sale, sharing, and targeted advertising
- Direct us not to sell or share your personal information or use it for targeted advertising.
- Opt out of profiling
- Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. We do not currently engage in that kind of profiling.
- Limit the use of sensitive personal information
- Direct us to limit use of sensitive personal information to permitted purposes. We already limit our use to those purposes.
- Non-discrimination
- Exercise your rights without receiving a different price or level of service. We do not offer financial incentives in exchange for personal information.
- Appeal
- If we decline your request, ask us to reconsider. See How to exercise your rights.
12.How to exercise your rights
Submit a request by any of these methods:
We are an online-only business, so we accept requests by email and web form. Include the email address associated with your activity, the state you reside in, and the right you wish to exercise.
Verification
To protect your information, we verify requests before acting on them. For most requests, we will ask you to confirm control of the email address on file and to provide two or more data points that match our records (for example, an order number and shipping ZIP code). For requests involving sensitive information, we may ask for additional verification. We use information provided for verification only for that purpose. Opt-out requests do not require verification.
Authorized agents
You may use an authorized agent. We will ask for written permission signed by you (or a valid power of attorney) and may still verify your identity directly. An agent submitting an opt-out signal on your behalf must be able to demonstrate your authorization.
Timing
We acknowledge requests within 10 business days and respond within 45 days. Where reasonably necessary, we may extend by an additional 45 days and will tell you why. Requests are free unless they are manifestly unfounded or excessive, in which case we will explain the reason before charging a fee or declining.
Appeals
If we decline your request, our response will explain why. You may appeal by replying to that response or by emailing camilla@alistarchive.com with the subject "Privacy appeal". We will decide the appeal within 45 days and will tell you in writing how to contact your state attorney general if you disagree with the outcome.
13.State-specific notices
California
The Notice at collection, "Sale" and "sharing", Your privacy rights, and How to exercise your rights sections above constitute our disclosures under the California Consumer Privacy Act, as amended. California residents may also request information about disclosures of personal information to third parties for their direct marketing purposes under California's "Shine the Light" law; we do not make such disclosures.
Nevada
Nevada residents may submit a verified request directing us not to sell certain covered information. We do not sell covered information as Nevada defines it, but you may submit a request to camilla@alistarchive.com.
Washington and Nevada consumer health data
We do not collect, use, or share consumer health data as defined by the Washington My Health My Data Act or Nevada's consumer health data law, and we do not operate a geofence around any health care facility. If that changes, we will publish a separate consumer health data privacy notice before collecting such data.
Oregon
Oregon residents may request a list of the specific third parties, rather than categories, to which we have disclosed personal information. Submit that request using the methods above.
Other states
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Rhode Island, Kentucky, Indiana, Tennessee, and Florida have rights under their state's law that are reflected in the Your privacy rights section, including the right to appeal a denied request.
14.Children and minors
The Services are intended for adults. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share the personal information of consumers under 16. If you believe a minor has provided us with personal information, contact camilla@alistarchive.com and we will delete it.
15.Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls and least-privilege permissions for staff, logging and monitoring, vendor security review, and a documented incident response process. Payment card data is handled by PCI DSS compliant processors; we do not store full card numbers.
No method of transmission or storage is completely secure. If we become aware of a security incident affecting your personal information, we will notify you and the appropriate authorities as required by applicable state breach notification law.
16.Third-party sites and features
The Services may link to or embed third-party sites and features, including social media, payment providers, and product tools. Those third parties may collect information about you under their own policies, which we do not control. Review their notices before providing information.
17.Changes to this policy
We review this policy at least annually and update it when our practices change. We will update the "Last updated" date and, for material changes, provide additional notice through the Services or by email before the change takes effect. Prior versions are available on request.
18.How to reach us about privacy
We are a small team and do not have a dedicated data protection officer. Privacy requests and questions are handled directly by ALIST and can be sent to the address below.
Alist Archive LLCAttn: Privacy8 The Green, Ste ADover, DE 19901United StatesContact
Questions about this document can be sent to camilla@alistarchive.com or by mail:
Alist Archive LLCAttn: Legal8 The Green, Ste ADover, DE 19901United States