Legal & Transparency

Privacy Policy

Last Updated: June 2026

Overview

Brood & Co. Vintage Goods ("we," "us," or "our") operates the website broodandco.com (the "Site"). We are a family-owned vintage and antique shop based in Tennessee, USA. Our primary sales channel is the Whatnot platform — this website is an informational presence only and does not directly collect personal data for purchases.

This Privacy Policy explains what limited data is collected when you visit our Site, how it is used, and your rights regarding that data.

Information We Collect

We do not collect personal information directly through this website. There are no contact forms, account registrations, newsletter sign-ups, checkout flows, or payment systems on broodandco.com. We do not receive your name, email address, mailing address, or payment details through this Site.

The following categories of data may be collected automatically through the third-party services described below:

  • Usage data — pages visited, time on page, referrer URL, browser type, device type, and general geographic region (country/region level).
  • Technical data — IP address (anonymized or processed by Google Analytics and Cloudflare), browser/OS version.
  • Cookie identifiers — analytics cookies placed by Google Analytics 4 (see below).

Google Analytics 4 (GA4)

We use Google Analytics 4 (property ID: G-T8T7346T6D) to understand how visitors find and interact with our Site. GA4 collects anonymized usage data via cookies and sends it to Google's servers.

Google Analytics may use cookies such as _ga, _ga_*, and related identifiers to distinguish visitors and sessions. This data is processed by Google LLC and subject to Google's Privacy Policy.

We use this data solely to understand traffic patterns and improve the Site — it is not sold, shared with third parties, or used for advertising targeting by us.

To opt out of Google Analytics tracking:

  • Install the Google Analytics Opt-Out Browser Add-On.
  • Use your browser's built-in privacy or "Do Not Track" settings.
  • Use a privacy-focused browser or extension (such as uBlock Origin or Privacy Badger).
  • Clear and block cookies for broodandco.com in your browser settings.

Cloudflare

This Site may be served through Cloudflare, a content delivery network and security provider. Cloudflare processes network traffic — including IP addresses — to protect the Site from threats, optimize performance, and deliver content. Cloudflare operates as a data processor on our behalf. Their data handling is governed by Cloudflare's Privacy Policy.

Cloudflare may store limited logs of network requests for security and abuse-prevention purposes, typically for a short retention window.

Third-Party Platforms & Social Media

Our Site includes links to third-party platforms where we maintain a presence. When you click through to any of these platforms, you leave broodandco.com and their own privacy policies apply. We have no control over data collected by these services:

All purchases and transactions occur on the Whatnot platform, which operates under its own terms of service and privacy policy. We do not receive or store payment information from Whatnot transactions.

Cookies

This Site uses cookies solely through Google Analytics 4 for analytics purposes. We do not use advertising cookies, retargeting pixels, or tracking cookies for marketing purposes of our own.

You can control cookies via your browser settings. Disabling cookies may affect the analytics functionality but will not prevent you from viewing the Site — all content remains fully accessible without cookies.

Data Retention

Because we do not collect personal data directly, we hold no personal records on our servers. Analytics data in Google Analytics 4 is retained according to the retention period configured in our GA4 property (default: 14 months), after which it is automatically deleted by Google.

Cloudflare's log retention is governed by their own policies and is generally short-term for standard traffic logs.

Your Rights — GDPR (EEA / UK Residents)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access — You may request a copy of any personal data we hold about you.
  • Right to Erasure — You may request deletion of your personal data.
  • Right to Data Portability — You may request your data in a portable, machine-readable format.
  • Right to Rectification — You may request correction of inaccurate data.
  • Right to Restriction — You may ask us to limit how we process your data.
  • Right to Object — You may object to processing based on legitimate interests.

Because we collect no personal data directly on this Site, most of these rights would be exercised with Google (for Analytics data) or Cloudflare rather than with us. However, you may contact us at any time with a privacy request and we will assist to the extent of our ability.

Your Rights — CCPA (California Residents)

If you are a resident of California, the California Consumer Privacy Act (CCPA) grants you additional rights:

  • Right to Know — You may request disclosure of the categories and specific pieces of personal information collected about you in the past 12 months.
  • Right to Delete — You may request deletion of personal information we have collected.
  • Right to Opt Out of Sale — We do not sell personal information. There is nothing to opt out of from our side.
  • Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us using the information in the "Contact Us" section below.

Children's Privacy

This Site is not directed to children under the age of 13. We do not knowingly collect any personal data from children. If you believe a child has provided personal data through our Site, please contact us and we will take steps to remove it.

Jurisdiction & Governing Law

Brood & Co. is a family-owned business located in Tennessee, USA. This Privacy Policy is governed by the laws of the State of Tennessee and applicable federal law. Any disputes relating to this policy shall be resolved under Tennessee jurisdiction.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Site after any changes constitutes your acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or have a concern about how your data is handled, please reach out to us through any of our social platforms or via Whatnot messages:

We will respond to all privacy requests within a reasonable timeframe.