Stoneyard Privacy Policy

1) Company Information

2) Information We Collect

• Contact Information: name, email address, phone number, mailing/shipping address.
• Order & Payment Information: products purchased, order history, and limited payment details processed by our payment providers (we do not store full credit card numbers).
• Account Information: username, passwords, saved preferences.
• Communications: inquiries, support requests, reviews, survey responses, showroom bookings (including virtual showroom requests).
• Website & Device Data: IP address, device and browser type, operating system, referring/exit pages, timestamps, and page interactions.
• Cookies & Similar Technologies: session cookies, analytics cookies, advertising cookies, and preference cookies (see Cookies, Analytics & Cookie Consent).
• Approximate Location: derived from IP for fraud prevention, localization, and analytics.

3) How We Use Information

• To process, fulfill, and manage orders, returns, and customer service.
• To provide virtual and in-person showroom visits, consultations, and project support.
• To communicate about orders, appointments, service notices, and account changes.
• To send updates, newsletters, and offers (with consent where required and opt-out always available).
• To maintain, secure, troubleshoot, and improve our website, products, and services.
• For analytics, measurement, personalization, and advertising (see Facebook Business Tools and Cookies).
• To protect against fraud, enforce terms, and comply with legal obligations.

4) Facebook Business Tools & Targeted Advertising

We use Facebook Business Tools (including the Facebook Pixel, SDKs, and related integrations). These tools allow Facebook and Instagram to collect or receive information from our website and elsewhere on the internet and use that information to provide measurement services and targeted advertising. Depending on your interactions, we may share:

• Contact Information (e.g., email, phone)—hashed for matching to Facebook/Instagram user IDs.
• Event Data (e.g., page views, product views, add-to-cart, purchases) for analytics, reporting, audience creation, delivery optimization, and personalization.

Facebook may combine Event Data with other data and provide us with reports and insights. We do not share information about children under 13, health information, financial account numbers, or other sensitive categories with Facebook.

How to Opt Out of Targeted Ads: You can manage ad preferences with the tools below:

• US: AboutAds Choices
• EU: YourOnlineChoices
• Cookie Settings (to manage consent for advertising cookies on our site)

Where required by law (e.g., EU/UK/EEA), we obtain your consent before placing or accessing cookies via Facebook Business Tools. For EU/EEA, UK, and Switzerland: for certain matching, measurement, and analytics services, Stoneyard is the data controller and Facebook Ireland Ltd. is our data processor.

5) Cookies, Analytics & Cookie Consent

We use cookies and similar technologies to operate our site, remember your preferences, understand usage, and personalize content and ads.

Analytics

We use Google Analytics to collect usage data. Learn more in Google’s Privacy Policy and opt out with the Google Analytics Opt-Out add-on.

Advertising

We may use advertising cookies and pixels (e.g., Facebook/Meta) to measure ads and show more relevant content. You can opt out via:

• AboutAds Choices
• YourOnlineChoices
• Cookie Settings on our site

Cookie Consent

Where required by law (e.g., EU/UK/EEA), we obtain your consent before setting non-essential cookies. You can change your preferences at any time using this Cookie Settings section or the cookie banner on our site.

You can also configure your browser to block or delete cookies; some features may not work without them.

6) How We Share Information

• Service Providers: shipping carriers, payment processors, hosting, security, analytics, communications, and customer support partners (bound by contract to use data only on our instructions).
• Marketing Partners: We may occasionally share postal mailing addresses with trusted partners for offers that may interest you, unless you opt out (see Your Rights). We do not sell email addresses.
• Advertising & Measurement Partners: As described in Facebook Business Tools and Cookies.
• Legal, Safety & Compliance: to comply with law, respond to lawful requests, or protect our rights, users, and services.
• Business Transfers: in the event of a merger, acquisition, or sale of assets, in accordance with applicable law.

We do not sell personal information for money. However, under certain U.S. state laws (e.g., California), sharing personal information for cross-context behavioral advertising may be considered a “sale” or “sharing.” See U.S. State Privacy Notices to learn how to opt out.

7) Data Retention

• Orders & Accounts: up to 7 years (tax, accounting, legal compliance).
• Marketing: until you unsubscribe or request deletion.
• Analytics: up to 26 months (or as configured with our analytics providers).
• Facebook Event Data: as permitted by Facebook’s terms (audiences retained until you delete them in your account tools).

8) Data Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data we process, including TLS/SSL encryption in transit. Payment card data is processed securely by our payment processors; we do not store full card numbers.

9) Your Privacy Rights

Depending on your location, you may have rights to:

• Access, correct, or delete your personal information.
• Opt out of marketing communications (use the “unsubscribe” link or contact us).
• Opt out of targeted advertising and certain cookie uses (see Facebook tools, Cookies, and U.S. State Notices).
• Restrict or object to certain processing, or request data portability (GDPR regions).

Submit a Request: Email admin@stoneyard.com or write to the address in Company Information. We may take steps to verify your identity before fulfilling your request.

10) U.S. State Privacy Notices (CA, CO, CT, UT, VA)

Residents of certain U.S. states have additional rights, including the right to know, delete, correct, and to opt out of the sale or sharing of personal information and targeted advertising.

Sale/Sharing & Targeted Advertising

We do not sell personal information for money. We may “share” personal information for targeted advertising (e.g., via advertising cookies and pixels). You can opt out of sale/sharing and targeted advertising by:

• Using our Do Not Sell or Share My Personal Information section of this page and/or Cookie Settings to disable advertising cookies.
• Using industry tools: AboutAds Choices and YourOnlineChoices.

Categories We Collect

Identifiers (e.g., name, email, phone, IP), commercial information (orders), internet activity (site interactions), geolocation (approximate), and inferences (preferences). Sensitive personal information is not collected for the purpose of inferring characteristics, and we do not use it for additional purposes.

Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

Authorized Agents (CA)

You may designate an authorized agent to exercise rights on your behalf, subject to verification.

Appeals (CO/CT/VA)

If we deny your request, you may appeal by replying to our decision email with “Appeal.”

11) EU/EEA, UK & Swiss Users (GDPR)

Controller

Stoneyard, Inc. is the data controller for processing described in this Policy.

Facebook as Processor (Matching/Measurement/Analytics)

For Facebook Business Tools used for matching, measurement, and analytics, Facebook Ireland Ltd. acts as our data processor under Facebook’s Data Processing Terms.

Legal Bases

• Contract performance (order processing, account management).
• Legitimate interests (site security, fraud prevention, analytics, improvement, certain marketing to existing customers).
• Consent (non-essential cookies, email/SMS marketing where required, targeted advertising).
• Legal obligations (tax and accounting recordkeeping).

GDPR Rights

You have rights of access, rectification, erasure, restriction, objection, and portability. You may withdraw consent at any time through Cookie Settings or by contacting us.

12) SMS Policy

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be shared with any third parties. Message and data rates may apply. You may opt out at any time by replying STOP.

13) Children’s Privacy

Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it.

14) International Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.

15) Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated Policy on this page and revise the “Last Updated” date. Material changes will be highlighted for a reasonable period.

16) Contact Us

Manage Cookie Settings | Do Not Sell or Share My Personal Information | Submit a Privacy Request