Privacy policy

Privacy Policy and Data Protection Governance Terms

Effective Date: January 1, 2026
Last Material Revision: September 30, 2026

This Master Privacy Policy and Data Protection Governance Terms ("Privacy Policy") constitutes a legally binding and comprehensive privacy agreement between Crown and Consign ("Company," "we," "us," or "our"), operating the Crown and Consign e-commerce platform, the Crown and Consign mobile application (available across iOS and Android platforms), and all associated high-value consignment and secondary-market luxury resale operations, and you ("User," "Client," "Consignor," or "Data Subject").

Given the high-value, luxury, and pre-owned nature of the merchandise brokered, consigned, and sold across our digital and physical channels, the Company enforces stringent corporate, legal, and technological protocols to govern the collection, acquisition, ingest, processing, storage, tokenization, transfer, and disposition of Personal Data. By accessing, browsing, interacting with, creating an account upon, submitting consignment items through, or purchasing via the website located at crownresale.com, any associated subdomains, or the Crown and Consign mobile application, you explicitly consent to the data processing practices, risk allocations, and disclosure frameworks articulated herein.

1. Scope, Applicability, and Institutional Jurisdiction
   
   1.1. Universal Scope: This Policy applies universally to all individuals who access our services, including web visitors, registered account holders, mobile app end-users, consignment partners, corporate vendors, and prospective clients. It applies to all data gathered online through our digital properties, via mobile SDKs, through electronic mail and telephone communications, and offline via physical documentation submitted to our Los Angeles facilities.
   
   1.2. High-Value Asset Governance: Due to the significant financial valuation of secondary-market luxury goods, horological pieces, fine jewelry, leather goods, and designer apparel handled by the Company, data security protocols are escalated above standard retail baselines. Personal data collected under this Policy is utilized to maintain stringent anti-money laundering (AML) controls, fraud prevention matrixes, identity verification protocols, and chain-of-custody tracking.
   
   1.3. Jurisdictional Compliance: This Policy is designed to comply with applicable federal, state, and international data protection and privacy statutes, including but not limited to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), California Civil Code § 1798.100 et seq., federal financial privacy standards, and applicable state breach notification mandates.
2. Comprehensive Taxonomy of Collected Personal Data
   
   The Company collects Personal Data directly from you, automatically through your interaction with our electronic services, and indirectly via authorized third-party identity, anti-fraud, and financial verification partners. The categories of data collected include:
   
   2.1. Direct Identifiers and Contact Information:
   • Legal full name, alias, and corporate entity representations.
   • Primary residential address, physical shipping address, and verified billing address.
   • Personal telephone numbers, mobile device contact numbers, and electronic mail addresses.
   • Government-issued identification credentials, including Driver’s License numbers, State Identification Card numbers, Passport details, or Taxpayer Identification Numbers (TIN/SSN), collected strictly when required for high-value consignment intake, tax reporting (IRS Form 1099-K compliance), or high-risk transaction fraud verification.
   2.2. Financial, Banking, and Transactional Metadata:
   • Encrypted payment card details, including primary account numbers (PAN), expiration dates, and cardholder security metadata (processed exclusively through PCI-DSS Level 1 compliant payment gateways).
   • Direct deposit and ACH banking details, account numbers, and routing numbers provided by consignors for authorized electronic payout settlement.
   • Complete historical purchase ledgers, consignment agreement history, item valuation logs, trade-in records, invoice history, payment schedules, and account credit records.
   2.3. Consignment Asset and Provenance Documentation:
   • Documentation regarding item ownership history, purchase receipts, certificates of authenticity, appraisal reports, repair records, and serial/date code logs submitted during item intake.
   • Physical photographic, video, and biometric-adjacent visual records of merchandise, including high-resolution archival imagery capturing micro-details, security tag placement, and serial number engravings.
   2.4. Mobile Application Data and Device Diagnostics:
   • Unique Device Identifiers (UDID, IMEI, Identifier for Advertisers/IDFA, Google Advertising ID).
   • Mobile operating system architecture, firmware versions, device brand/model, carrier networks, and language preferences.
   • App-specific usage metrics, session durations, screen tap/scroll heatmaps, crash log diagnostics, and feature utilization records within the Crown and Consign application.
   2.5. Automated Web Diagnostics, Cookies, and Telemetry:
   • Internet Protocol (IP) address logs, Internet Service Provider (ISP) network signatures, geographical region location identifiers, and domain server requests.
   • Uniform Resource Locator (URL) clickstreams, referrer/exit pages, timestamped access logs, and browsing behavior across store categories.
   • Cookies (session, persistent, and essential), local storage objects (HTML5), web beacons, clear GIFs, and pixel tags.
3. Legal Bases and Operational Purposes for Data Processing
   
   The Company processes your Personal Data strictly under legally substantiated parameters necessary to execute retail operations, protect corporate assets, and comply with state and federal laws:
   
   3.1. Contractual Execution and Order Fulfillment: To process, invoice, authorize, ship, insure, and deliver purchased luxury items; to issue order tracking information; to manage return requests, warehouse intake inspections, and restocking fee calculations under our store policies.
   
   3.2. Consignment Program Management: To draft, issue, and maintain legally binding Consignment Agreements; to perform multi-point item authentication; to establish baseline pre-owned valuations; to catalog inventory for web/app display; and to process consignment payout disbursements.
   
   3.3. Fraud Mitigation and High-Value Risk Asset Security: To conduct real-time anti-fraud screenings on high-dollar orders; to verify cardholder identity against shipping addresses; to prevent unauthorized stolen card usage; to detect account takeover attempts; and to enforce our anti-counterfeiting verification protocols.
   
   3.4. Legal and Regulatory Compliance: To comply with federal Anti-Money Laundering (AML) standards, Know Your Customer (KYC) resale standards, municipal second-hand dealer reporting ordinances, law enforcement inquiries, judicial subpoenas, tax reporting requirements, and corporate audits.
   
   3.5. Mobile App Optimization and System Administration: To maintain server stability, optimize digital storefront responsiveness, fix software bugs, test new app releases, and analyze conversion pathways.
4. Payment Processing, Financial Security, and Tokenization Standard
   
   4.1. Payment Gateway Encryption: All financial transactions conducted through our digital properties or the Crown and Consign mobile app are processed through certified PCI-DSS Level 1 payment gateway providers. The Company does not collect, store, or transmit unencrypted raw credit card numbers```markdown # PRIVACY POLICY AND DATA GOVERNANCE FRAMEWORK **Effective Date:** September 30, 2026 **Last Updated:** September 30, 2026 --- ## 1. PREAMBLE, APPLICABILITY, AND LEGAL BINDINGNESS This comprehensive Privacy Policy and Data Governance Framework (“Privacy Policy”) constitutes a legally binding agreement between you (“User,” “Data Subject,” “Customer,” or “You”) and Crown & Consign, including its parents, subsidiaries, affiliates, predecessors, successors, assigns, and operational brand names (collectively referred to herein as “Crown & Consign,” “Company,” “We,” “Us,” or “Our”). This Privacy Policy governs your access to, interaction with, and utilization of all websites, subdomains, mobile applications, e-commerce storefronts, retail management portals, APIs, software systems, and digital platforms owned or operated by or on behalf of Crown & Consign (collectively, the “Services”). Furthermore, this policy applies to all transactional communications, customer support interactions, marketing activities, post-sale services, and physical or digital data capture mechanisms facilitated by the Company. By accessing, browsing, interacting with, registering an account on, or engaging in high-value e-commerce transactions through the Services, you explicitly acknowledge that you have read, understood, and agree to be bound by every term, condition, and disclosure contained within this Privacy Policy in its entirety. If you do not agree with or consent to any provision set forth herein, you must immediately cease all access to and use of the Services, terminate any pending transactions, and discontinue interaction with our digital properties. Due to the nature of our operations—specifically involving high-value retail items, pre-owned luxury goods, refurbished high-end mobile devices, consumer electronics, and consignment goods—we enforce heightened data verification, fraud mitigation, identity tracking, and anti-money laundering (AML) protocols. These operations require the systematic collection, verification, cross-referencing, processing, retention, and transfer of detailed Personal Data as outlined hereinafter. --- ## 2. STATUTORY AND REGULATORY COMPLIANCE ARCHITECTURE This Privacy Policy has been structured to maintain strict adherence to applicable federal, state, national, and international data protection, consumer privacy, and regulatory frameworks. Depending on your geographical jurisdiction, residency, or the location from which you access our Services, your data may be processed pursuant to specific legislative authorities, including but not limited to: * **The California Consumer Privacy Act of 2018 (CCPA)**, as amended by the **California Privacy Rights Act of 2020 (CPRA)** (Cal. Civ. Code § 1798.100 *et seq.*). * **The General Data Protection Regulation (GDPR)** (Regulation (EU) 2016/679) and the **UK General Data Protection Regulation** (UK GDPR) as incorporated into UK law via the Data Protection Act 2018. * **Comprehensive U.S. State Privacy Statutes**, including the Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Utah Consumer Privacy Act (UCPA), Texas Data Privacy and Security Act (TDPSA), and all other applicable state-level statutes. * **The Payment Card Industry Data Security Standard (PCI-DSS)** framework governing cardholder data processing and transport. * **The Bank Secrecy Act (BSA)**, USA PATRIOT Act, and regulatory guidance issued by the Financial Crimes Enforcement Network (FinCEN) relative to high-value consumer transactions, trade-ins, and anti-money laundering mechanisms. * **The Children’s Online Privacy Protection Act (COPPA)** (15 U.S.C. §§ 6501–6506). --- ## 3. CATEGORIES OF DATA COLLECTED AND METHODOLOGY In order to execute transactions involving premium goods, manage consignment consignor/consignee payouts, mitigate fraud, fulfill warranty obligations, and optimize platform architecture, we collect multiple distinct classifications of data.