Privacy Policy - Hearth Crafted Homes

1. Introduction

HearthCrafted Homes (“we,” “us,” or “our”) is committed to safeguarding the privacy and personal data of every individual who engages with our website, hearthcraftedhomes.com (the “Site”). We recognize the importance of ensuring the confidentiality, integrity, and security of the data you entrust to us. This Privacy Policy outlines how we collect, use, store, and share your personal data and affirms our ongoing commitment to compliance with applicable data protection regulations, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all personal data collected through your interaction with the Site, including when you browse pages, create an account, make purchases, or contact our support services. HearthCrafted Homes is the data controller responsible for processing personal data in accordance with applicable data protection laws.

3. Categories of Data We Process

We may collect and process the following categories of personal data:

a. Usage Data
Includes analytical data relating to your use of the Site, such as browser type, IP address, access times, page views, geolocation, and session duration.

b. Account Data
Personal details you provide to us when creating an account or placing an order, such as your full name, address, email address, and telephone number.

c. Profile Data
Details about your product preferences, purchase history, and behavioral interactions, including favorited homes, saved searches, and other customized experiences on the Site.

d. Communication Data
Records of communications you initiate with us, including support requests, inquiry submissions, and customer service chat logs.

e. Technical Data
Device-specific details gathered automatically, such as device type, operating system, browser configuration, screen resolution, language settings, and time zone.

f. Transaction Data
Information relating to purchases made via the Site, including payment card details (processed securely by third-party payment processors), billing and delivery addresses, and order history.

g. Preference Data
Marketing preferences, opt-in/opt-out choices, areas of interest, and responses to promotional content or surveys.

4. Legal Bases for Processing

We process personal data under the following legal bases:

– Consent: When you have given us clear permission to process your data, including for newsletter subscriptions and marketing preferences.
– Contractual Necessity: When processing is required to fulfill a contract you enter into with us, such as the supply of products or services.
– Legal Obligation: When necessary to comply with legal obligations, such as tax or accounting laws.
– Legitimate Interests: When processing supports business functions that do not override your rights and freedoms, such as analytics, fraud prevention, and improving the Site.

5. Your Rights

Under applicable data protection regulations, you may exercise the following rights:

– Right of Access: Request access to your personal data held by us.
– Right to Rectification: Request correction of inaccurate or incomplete personal information.
– Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
– Right to Restriction: Request a restriction on processing in certain circumstances.
– Right to Data Portability: Request a copy of your personal data in a machine-readable format for transmission to another controller.
– Right to Object: Object to processing based on our legitimate interests or direct marketing.
– Right to Withdraw Consent: Withdraw previously given consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at [email protected].

6. Security Measures

We implement appropriate technical and organizational safeguards designed to secure your personal data. This includes but is not limited to:

– Data encryption in transit and at rest.
– Role-based access control to restrict access to personal data.
– Secure data storage and infrastructure.
– Regular data backups and audit processes.
– Staff training in data protection principles and best practices.

7. International Transfers

When personal data is transferred outside the European Economic Area (EEA), we ensure such transfers comply with applicable legal safeguards, including the use of Standard Contractual Clauses or other legally recognized mechanisms. We are committed to ensuring equivalent levels of data protection regardless of jurisdiction.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Specifically:

– Usage and Technical Data: Retained for up to 12 months for analytical purposes.
– Account and Profile Data: Retained for the duration of your account’s active status and up to 36 months after account inactivity or closure.
– Transaction Data: Retained for up to 7 years for legal and financial compliance.
– Communication Data: Retained for 24 months from the date of the last interaction.
– Preference Data: Retained until you update your settings or withdraw consent.

9. Cookie Policy

We use cookies and similar technologies on hearthcraftedhomes.com to enhance your browsing experience. Categories include:

– Essential Cookies: Necessary for Site functionality and accessibility.
– Functional Cookies: Remember your settings and preferences.
– Analytics Cookies: Help us understand site usage patterns for optimization.
– Performance Cookies: Measure performance metrics and traffic sources.

10. Cookie Management and Compliance with GDPR & CCPA

Visitors located in the EU, EEA, or California will be presented with a cookie consent mechanism in accordance with GDPR and CCPA standards. You may modify your cookie preferences at any time using the cookie settings banner available on the Site. Additionally, most browsers allow you to manage cookie permissions through your browser settings.

11. Special Protections for Children Under 13

We do not knowingly collect personal data from individuals under the age of 13. If we become aware that such data has been collected without verified parental consent, we will take appropriate steps to delete it. Parents or guardians who believe their child may have provided data to us should contact us directly at [email protected].

12. Policy Updates and User Notifications

We reserve the right to amend this Privacy Policy as necessary to reflect changes in law, technology, or operational practices. Users will be notified of any material changes through the Site or via email to ensure ongoing transparency.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

Email: [email protected]
Website: https://hearthcraftedhomes.com

We are committed to full compliance with the GDPR, CCPA, and other applicable privacy frameworks, and we encourage you to reach out with questions or requests regarding how we protect your personal information.