Privacy Policy - Hearth Crafted Homes

Hearth Crafted Homes (“we,” “us,” or “our”) is deeply committed to safeguarding the privacy and personal data of our users. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website (hearthcraftedhomes.com), and outlines your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). By accessing or using our website or services, you agree to the terms set forth in this Privacy Policy.

1. Commitment to Privacy and Data Protection

We take your privacy seriously. We are dedicated to collecting only the data necessary to support your interactions with hearthcraftedhomes.com, ensuring that it is stored securely, used responsibly, and shared only where legally authorized or with your explicit consent. We employ privacy-by-default and privacy-by-design principles across our operations.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through hearthcraftedhomes.com, and any related services, features, or communications. Hearth Crafted Homes acts as the Data Controller with respect to the personal data you provide. If you have questions regarding data responsibilities, you may contact us at [email protected].

3. Categories of Data Processed

We may collect and process the following categories of personal data:

A. Usage Data
This includes data that your browser automatically transmits when you visit hearthcraftedhomes.com, such as your IP address, browser type, session duration, and navigation patterns.

B. Account Data
Personal identifiers provided when you create an account or make inquiries, such as your full name, billing address, shipping address, email address, and phone number.

C. Profile Data
Includes information related to your purchase behavior, site preferences, saved properties, and other behavioral interactions with our site.

D. Communication Data
Covers your interactions with our support and contact systems, including support requests, customer service messages, and correspondence history.

E. Technical Data
Device-related technical details such as device type, operating system, system configuration, and access timestamp identifiers.

F. Transaction Data
Information related to your financial transactions with us, including purchases, receipts, delivery records, and/or transaction history.

G. Preference Data
Includes your marketing preferences, opt-in/opt-out status, and information about your interests or demographics submitted via forms or inferred through behavioral tracking.

4. Legal Bases for Processing Personal Data

We process your personal data based on the following lawful bases:

– Contractual Necessity: For performing pre-contractual and contractual obligations when you purchase services or request information.
– Legitimate Interests: To improve our services, detect fraud, ensure security, or conduct analytics, provided such interests are not overridden by your fundamental rights.
– Consent: For marketing emails, non-essential cookies, and personal data collected where explicit authorization is required.
– Legal Obligations: To comply with applicable laws, legal proceedings, or official requests from authorities.

You may withdraw your consent at any time by contacting us at [email protected] or using the relevant opt-out mechanisms provided.

5. Your Rights

Depending on your jurisdiction, you may have the following rights under data protection laws:

– Right of Access: Request a copy of your personal data held by us.
– Right to Rectification: Request correction of inaccurate or outdated data.
– Right to Erasure (“Right to be Forgotten”): Request deletion of data under certain conditions.
– Right to Restriction: Request limitation of processing if data accuracy is contested or processing is unlawful.
– Right to Data Portability: Request transfer of your data in a structured, commonly used format to you or a third party.
– Right to Object: Object to data processing on grounds relating to your particular situation, including direct marketing.

To exercise any of these rights, email your request to [email protected]. We reserve the right to verify user identity before acting on any request.

6. Security Measures

We implement appropriate technical and organizational measures to secure your personal data, including:

– End-to-end encryption of data in transit and at rest
– Access control and authentication mechanisms to prevent unauthorized data access
– Regular data backups and disaster recovery planning
– Staff training programs to promote awareness of privacy obligations

Our infrastructure is regularly monitored, updated, and subject to risk assessments in support of data confidentiality, integrity, and availability.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we rely on recognized legal mechanisms such as Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure an adequate level of data protection. We strive to maintain data residency compliance and respect regional data localization requirements where applicable.

8. Data Retention

We retain personal data only for the time necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

– Account Data and Transaction Data: Retained for a minimum of 7 years for accounting and compliance purposes
– Communication Data: Held for 24 months to assist with ongoing support interactions
– Technical and Usage Data: Maintained for 12 to 24 months for analytics, troubleshooting, and site improvement
– Marketing and Preference Data: Retained for up to 36 months from the date of your last interaction or consent update, whichever is later

9. Cookie Policy

We use cookies and similar tracking technologies on hearthcraftedhomes.com for several purposes:

– Essential Cookies: Necessary for site operation (e.g., login functionality, secure forms).
– Functional Cookies: Enable user preferences and enhanced usability.
– Analytics Cookies: Collect data on site performance, usage trends, and behavior.
– Performance Cookies: Measure and improve page responsiveness and loading times.

Cookies may be set by us or third-party services we use. No cookies containing personal identifiers are used without your consent unless strictly necessary.

10. Cookie Management and Compliance

You can control or disable cookies through your browser settings or via our Cookie Consent Manager. Where GDPR applies, we obtain affirmative user consent before storing cookies that are not essential. Under CCPA, you have the right to opt out of the “sale” or “sharing” of personal information that may occur through third-party analytics or ad cookies; this can be exercised through our Cookie Preferences or by reaching out to [email protected].

11. Special Protections for Children

Our services are not directed toward, and we do not knowingly collect personal data from, children under the age of 13. If we learn that a child under 13 has provided us with personal data without parental consent, we will delete such information promptly. Parents or guardians who believe that their child has provided personal data to hearthcraftedhomes.com may contact us at [email protected].

12. Policy Updates and User Notifications

We may update this Privacy Policy to reflect changes in legal or operational requirements. Changes will be effective upon posting the revised version on hearthcraftedhomes.com. Where required by law, we will notify you of material changes and may seek your re-consent. You are encouraged to review this policy periodically for the latest updates.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Hearth Crafted Homes
Email: [email protected]
Website: https://hearthcraftedhomes.com

We are committed to maintaining your trust and protecting your privacy. If you believe your data protection rights have been infringed, you have the right to lodge a complaint with your local regulatory authority.

We proudly adhere to GDPR, CCPA, and all other applicable privacy laws in our data handling practices. Should you have any privacy-related concerns, please don’t hesitate to reach out to us at [email protected].