Discretion is the first courtesy we owe collectors.

We collect only what is necessary to serve you as a collector — nothing accumulated for its own sake.

• Identity — name, shipping address, email and phone number provided at checkout or on enquiry.
• Order history — the pieces you have acquired, submitted for grading or reserved through pre-order.
• Correspondence — messages exchanged with our concierge, sourcing desk or PSA submission team.
• Technical — device, browser and anonymised usage signals that help the site perform reliably.

Your information is used to fulfil the service you have asked us to perform, and for nothing else without your consent.

• Processing orders, pre-orders and PSA submissions.
• Coordinating international shipping, insurance and customs.
• Providing after-sale support and authenticity records.
• Improving the Vault experience through anonymised analytics.
• Meeting the legal and tax obligations of the United Arab Emirates.

Payments are processed by our payment partners over encrypted channels. Umami Vault does not store your card number, CVV or banking credentials on its own systems — those details never touch the Vault.

Every transaction is transmitted through PCI-DSS compliant infrastructure, and access to order records inside the Maison is limited to the small team that fulfils them.

We use a small number of first-party cookies to remember your cart, language and sort preferences. A limited set of analytics cookies help us understand which parts of the Vault serve collectors well.

We do not sell your browsing data. You may disable cookies in your browser at any time; certain conveniences such as the persistent cart will simply reset between visits.

When you subscribe, you receive quiet dispatches from the Maison — pre-order openings, curated drops and Collector Hub editorials. Nothing more.

Every message includes a one-click way to unsubscribe. Transactional messages related to your orders will continue for as long as we are fulfilling them.

A small circle of trusted partners helps us operate: our storefront platform, our payment processor, our shipping carriers, and PSA / Beckett / CGC for grading. Each partner receives only the minimum information required to perform their part.

• Shopify — commerce infrastructure.
• Payment processors — card and wallet transactions.
• DHL, FedEx, Aramex and equivalent carriers — insured worldwide delivery.
• PSA, Beckett, CGC and TAG — grading and certification.

You may, at any time and at no cost:

• Request a copy of the personal information we hold.
• Ask us to correct or update your details.
• Ask us to delete your data, subject to legal record-keeping obligations.
• Withdraw consent to marketing.
• Ask questions about how a specific piece of information is used.

Written requests are honoured within thirty days.

Any question about this policy — or about a specific piece of data — reaches us directly.