Privacy Policy
Krosswood Doors Privacy Policy
Effective Date: January 1, 2025
This Privacy Policy ("Policy") describes how Krosswood Doors ("Krosswood," "we," "us," or "our") collects, uses, discloses, and protects the Personal Information of individuals who visit our website, www.krosswood.com, including our Shopify Plus store and the Krosswood Pro Program (collectively, the "Site").
Please read this Policy carefully. By using our Site, you agree to the collection, use, and disclosure of your information as described in this Policy. If you do not agree, please do not use our Site.
1. Scope of This Policy
This Policy applies to "Personal Information," which is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
This Policy does not apply to:
- Information that is not "Personal Information," such as de-identified or aggregated data.
- The Personal Information of our employees or job applicants, which is covered by a separate policy.
2. Personal Information We Collect, Use, and Share
The chart below details the categories of Personal Information we have collected in the past 12 months, the sources from which we collect it, our purposes for using it, and the categories of third parties to whom we disclose it.
| Category of Personal Information | Examples of Information Collected | Sources | Business Purposes for Collection | Categories of Third Parties to Whom We Disclose |
|---|---|---|---|---|
| A. Identifiers | Name, email address, phone number, billing and shipping address, IP address, account username/password, unique cookie IDs. | Directly from you; from your device (e.g., cookies); from third-party partners. | Fulfill orders; process payments; communicate with you; manage your account; marketing; prevent fraud; analytics. | Payment processors; shipping carriers; marketing platforms; analytics providers; fraud prevention services. |
| B. Personal Info (Cal. Civ. Code § 1798.80) | Name, phone number, address, credit/debit card information. | Directly from you. | Process transactions and fulfill orders. | Payment processors; shipping carriers; fraud prevention services. |
| C. Commercial Information | Records of products purchased, considered, or reviewed; "Pro Program" membership status; quotes. | Directly from you; from your account activity. | Fulfill orders; provide customer service; analytics; make product recommendations; manage Pro Program. | Marketing platforms; analytics providers; Shopify (our e-commerce platform). |
| D. Internet or Network Activity | Browsing history, search history, interaction with our Site (e.g., clicks, page views), interaction with our ads. | From your device (e.g., cookies and tracking pixels). | Site analytics; advertising and marketing; improving site functionality; security. | Advertising networks; analytics providers (e.g., Google Analytics); Shopify. |
| E. Geolocation Data | General location (e.g., city/state) inferred from your IP address. | From your device. | To estimate shipping times; for marketing; to comply with tax laws; analytics. | Advertising networks; analytics providers; Shopify. |
| F. Professional or Employment-Related Info | (For Pro Program) Company name, business type (e.g., contractor, designer), business license number. | Directly from you when you apply for the Pro Program. | To verify and manage your Pro Program account; provide B2B services. | Our internal CRM; verification services. |
| G. Inferences | A profile or summary reflecting your product preferences, interests, and likely purchasing behavior. | Derived from your Identifiers and Commercial/Network Activity. | To provide personalized product recommendations; for targeted advertising. | Advertising networks; marketing platforms. |
| H. Sensitive Personal Information | Account log-in and password; precise geolocation (if you provide it). | Directly from you; from your device (if permission is granted). | To secure and provide access to your account. (We do not use this for any other purpose). | We do not disclose this for any purpose other than as necessary to secure your account. |
3. How We "Sell" or "Share" Personal Information
We do not "sell" your Personal Information in the traditional sense (i.e., exchanging it for money).
However, some state laws (like the CCPA in California) define "Sale" and "Sharing" very broadly. When we use online advertising trackers (cookies) to show you "targeted advertising" or "cross-context behavioral advertising," this activity may be considered a "Sale" or "Sharing" of your Personal Information (like Identifiers, Network Activity, and Inferences) with our Advertising Partners.
You have the right to opt-out of this activity.
4. Your Privacy Rights
Depending on your state of residence, you may have the following rights regarding your Personal Information.
- Right to Know/Access: The right to request what Personal Information we have collected, used, and disclosed about you.
- Right to Delete: The right to request that we delete Personal Information we have collected from you, subject to certain exceptions (e.g., we need the data to complete your order or for legal/tax purposes).
- Right to Correct: The right to request that we correct inaccurate Personal Information we maintain about you.
- Right to Portability: The right to receive a copy of your Personal Information in a portable and, to the extent technically feasible, readily usable format.
- Right to Opt-Out of Sale/Sharing/Targeted Advertising: The right to direct us not to "sell" or "share" your Personal Information or use it for "targeted advertising" (as these terms are defined by state law).
- Right to Limit Use of Sensitive Personal Information (California): The right to direct us to limit our use of your Sensitive Personal Information to only what. (Note: As described in Section 2, we only use your Sensitive PI for necessary purposes, so this right is not applicable to our practices).
- Right to Non-Discrimination: The right not to be discriminated against for exercising any of your privacy rights.
5. How to Exercise Your Privacy Rights
You can exercise your rights using the following methods:
-
To Opt-Out of Sale/Sharing/Targeted Advertising:
- Click the "Do Not Sell or Share My Personal Information" link in the footer of our website.
- Enable the Global Privacy Control (GPC) signal in your browser. We recognize GPC signals as a valid request to opt-out of tracking for the browser you are using.
-
To Access, Correct, or Delete Your Information:
- Email us at privacy@krosswood.com.
- Call us at (520) 514-2046.
Verification Process:
To protect your privacy, we will need to verify your identity before processing your request. We may require you to provide 2-3 pieces of information that match our records (such as your name, email address, and a recent order number).
Authorized Agents (California):
You may designate an authorized agent to make a request on your behalf. We will require the agent to provide proof of their authorization and may also require you to verify your own identity directly with us.
Right to Appeal (Virginia, Colorado, Connecticut):
If we deny your request, you may have the right to appeal our decision. Please reply to our denial email or contact us at privacy@krosswood.com to initiate an appeal. We will respond to your appeal within the time period required by law.
6. Data Retention
We retain your Personal Information for as long as is reasonably necessary to fulfill the purposes for which it was collected, or as required by law. The criteria used to determine our retention periods include:
- To Provide Services: We keep your Identifiers and Commercial Information for as long as you have an active account or Pro Program membership.
- Legal & Financial Obligations: We are required to retain Commercial Information related to purchases (e.g., invoices, order details) for a minimum of 7 years to comply with tax and accounting laws.
- Customer Service: We retain communications with you for as long as necessary to provide customer support and resolve disputes.
- Marketing: We retain your information for marketing purposes (like email lists) until you opt-out or unsubscribe.
- Cookie Data: Personal Information collected from cookies (e.g., Network Activity) is retained for a shorter period, generally not exceeding 24 months.
7. State-Specific Privacy Notices
For Residents of California
This section supplements the information above and applies solely to California residents.
- "Shine the Light" Law: California's "Shine the Light" law (Civil Code Section § 1798.83) permits users who are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please email us at privacy@krosswood.com with "Shine theLight Request" in the subject line.
- Sensitive Personal Information: We collect the following categories of Sensitive PI: account log-in and password. We only use this information to provide you with access to your account and do not use it to infer characteristics about you. Therefore, we do not provide a "Right to Limit" link.
- Data Retention: As described in Section 6, we retain each category of Personal Information for a period necessary to fulfill the purposes outlined in this policy, or as required by law.
For Residents of Virginia, Colorado, and Connecticut
This section supplements the information above for residents of these states.
- Your Rights: You have the rights to Access, Correct, Delete, Portability, and to Opt-Out of Sale, Targeted Advertising, and Profiling.
- Sensitive Data: We will not process your Sensitive Personal Information (as defined by your state's law) without first obtaining your affirmative consent.
- Right to Appeal: If you are a resident of VA, CO, or CT and we deny your privacy rights request, you have the right to appeal. Please follow the "Right to Appeal" instructions in Section 5.
For Residents of Utah
This section supplements the information above for residents of Utah.
- Your Rights: You have the rights to Access, Delete, Portability, and to Opt-Out of Sale and Targeted Advertising.
- Right to Delete: Your right to delete is limited to Personal Information that you provided directly to us.
- Sensitive Data: We will provide you with clear notice and an opportunity to opt-out of the processing of your Sensitive Personal Information.
- No Right to Correct/Appeal: The Utah UCPA does not provide a right to correct inaccurate data or a right to appeal a denied request.
8. Cookie Policy and Tracking Technologies
We and our third-party partners use cookies and similar tracking technologies (like pixels and web beacons) to analyze trends, administer the Site, track users' movements around the Site, and to gather demographic information.
- Essential Cookies: These are necessary for the Site to function (e.g., to power your shopping cart).
- Analytics Cookies: These help us understand how you use our Site so we can improve it.
- Advertising Cookies: These are used by us and our ad partners to show you relevant ads.
When you first visit our Site, you will be presented with a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time.
9. Data Security
We implement reasonable technical, administrative, and physical safeguards to protect your Personal Information from unauthorized access, use, or disclosure. We use Secure Sockets Layer (SSL) technology to encrypt sensitive information (like credit card numbers) during transmission.
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.
10. Children's Privacy
Our Site is not intended for or directed at children under the age of 16. We do not knowingly collect Personal Information from children. If we learn we have collected such information, we will promptly delete it.
11. International Data Transfers
Krosswood Doors is based in the. If you are accessing the Site from outside the U.S., your information will be transferred to, stored, and processed in the United States. By using our Site, you consent to this transfer.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us:
Krosswood Doors
Attn: Privacy Compliance
723 Pacific Avenue, Suite 100
Salt Lake City, Utah, 84104
Email: privacy@krosswood.com
Phone: (520) 514-2046