Privacy Policy

Overview

Houston Store Fixtures (doing business as Houston Fixtures) operates the website houstonfixtures.com. We respect your privacy and are committed to being transparent about how we collect, use, and protect information when you use our website or place an order with us. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights with respect to that data.

By using our website, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our website or services.

1. Information We Collect

We collect information in a few different ways depending on how you interact with us:

Information You Provide Directly

• Contact form: When you submit a contact inquiry, we collect your name, email address, phone number, and the contents of your message.
• Orders: When you place an order, we collect your name, email address, phone number, business name, and shipping address as necessary to fulfill your purchase.
• Newsletter signup: If you subscribe to our email newsletter, we collect your email address.
• Back-in-stock notifications: If you sign up to be notified when a product is back in stock, we collect your email address and the product you are interested in.

Information Collected Automatically

• IP address: When you submit a form or place an order, your IP address is logged as part of standard web server operations for security and fraud-prevention purposes.
• Cookie preference: We store your cookie consent preference in your browser's local storage to remember whether you have accepted or declined analytics cookies.
• Analytics data (if accepted): If you accept analytics cookies, we use Google Analytics 4 to collect information about how visitors use our site, including page views, time on site, device type, browser, and the source that referred you to our site. This data is aggregated and does not directly identify you.

Payment Information

We do not collect, store, or process your payment card information directly. All payment transactions are handled securely by Stripe, a PCI-DSS certified payment processor. When you enter card details during checkout, that information is transmitted directly to Stripe and never touches our servers. Please review Stripe's Privacy Policy for details on how they handle your payment data.

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders, including sending order confirmations and shipping updates
• Respond to your inquiries and provide customer support
• Send marketing emails if you have subscribed to our newsletter (you may unsubscribe at any time)
• Notify you when a product you requested is back in stock
• Prevent fraud and protect the security of our website and customers
• Analyze website usage patterns to improve our site (only if you accept analytics cookies)
• Comply with legal obligations

We do not sell your personal information. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

3. How We Share Your Information

We share your information only with trusted service providers who help us operate our business, and only to the extent necessary for those services:

• Stripe — Payment processing. Stripe receives the information necessary to authorize and settle your payment. We do not receive or store your full card details.
• Resend — Transactional and marketing email delivery. Resend processes your email address and message content to deliver emails on our behalf (order confirmations, notifications, newsletters).
• Vercel — Website hosting and infrastructure. Vercel hosts our web application and may process request data including IP addresses as part of normal web hosting operations.
• Google Analytics — Website analytics (only if you accept analytics cookies). Google receives aggregated, anonymized data about how visitors use our site.

We may also disclose information when required by law, court order, or government authority, or to protect the rights, property, or safety of our company, customers, or the public.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies in limited ways:

• Cookie consent preference (essential): We store your cookie consent choice in your browser's local storage. This is necessary to remember your preference and is not used for tracking. This storage does not expire unless you clear your browser data.
• Google Analytics cookies (analytics, optional): If you accept analytics cookies, Google Analytics places cookies in your browser to collect aggregated usage statistics. These cookies expire after a period set by Google (typically 2 years for the main analytics cookie).

You can accept or decline analytics cookies using the cookie consent banner when you first visit our site. You can also clear your browser's local storage and cookies at any time through your browser settings to reset your preference.

We do not use advertising cookies, cross-site tracking pixels, or retargeting technologies.

5. Data Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our website is served over HTTPS (TLS encryption) for all pages. Our hosting infrastructure (Vercel) maintains industry-standard security practices.

Payment card data is never transmitted to or stored on our servers — it goes directly to Stripe's PCI-DSS compliant systems.

No method of data transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

6. Your Privacy Rights

Depending on where you reside, you may have specific rights regarding your personal information:

Texas Residents — Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, you may have the right to:

• Know what personal data we have collected about you
• Correct inaccuracies in your personal data
• Delete personal data we have collected about you
• Obtain a portable copy of your personal data
• Opt out of the sale of your personal data (we do not sell personal data)

California Residents — California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we collect
• Know how we use and share your personal information
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to verifiable requests within 45 days (or as otherwise required by applicable law). We may need to verify your identity before processing your request.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law:

• Order records: Retained for a minimum of 7 years for tax and accounting purposes, or longer if required by law.
• Contact form submissions: Retained for up to 2 years unless you request deletion earlier.
• Newsletter subscriptions: Retained until you unsubscribe. You may unsubscribe at any time by clicking the unsubscribe link in any email we send you.
• Back-in-stock notification requests: Retained until the notification is sent or you request removal.
• Analytics data: Governed by Google Analytics' retention settings (typically 14 months for user-level data).

8. Children's Privacy

Our website is intended for business and commercial buyers and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other business reasons. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we may also notify you by email (if you have provided one) or by posting a notice on our website.

We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

This Privacy Policy is provided for informational purposes only and does not constitute legal advice. If you have specific legal questions about your rights, please consult a qualified attorney.