Legal
Privacy Policy
This policy explains what information Hearth & Whisk Kitchen Supply collects through this website, why we collect it, how long we keep it, and the choices you have. We have written it in plain language rather than legal shorthand.
The short version
- We collect only what we need to answer your enquiry and process an order request.
- This website does not collect or store payment card numbers.
- We do not sell your personal information, and we do not share it with third parties for their own marketing.
- Optional cookies stay switched off until you allow them, and you can change your choice at any time.
- You can ask us to access, correct or delete your information by emailing hearthandwhisk.store@gmail.com.
1. Who we are
Hearth & Whisk Kitchen Supply ("Hearth & Whisk", "we", "us") operates an online kitchen gadgets store at hearthandwhisk.com. We are the data controller for personal information collected through this website.
Hearth & Whisk Kitchen Supply4187 Kestrel Hollow Lane, Suite 210
Fort Collins, CO 80525, United States
Email: hearthandwhisk.store@gmail.com
Phone: +1 (970) 555-0148
If you have a question about this policy or about how we handle your information, contact us using the details above. We aim to respond within one business day and to resolve privacy requests within 30 days.
2. Information we collect
2.1 Information you give us
We collect information you choose to provide when you use a form on this site:
- Order requests: your name, email address, street address, city, state, ZIP code, the items and quantities in your cart, and any notes you add.
- Contact enquiries: your name, email address, chosen topic and the message you write.
- Newsletter requests: your email address and a record of your consent.
- Returns and warranty claims: your order reference, contact details and any photographs you send us to document a defect.
How forms work on this site: the contact, newsletter and order forms build a message in your browser and then open your own email application so you can send it. The form contents are not transmitted to a web server by this website. We receive the information only when you send that email, and it then sits in our email system.
2.2 Information collected automatically
When you visit, our hosting provider may record standard technical log data such as your IP address, browser type, referring page, pages requested and the date and time of the request. We use this to keep the site secure, diagnose faults and understand aggregate traffic. Log data is not used to build a personal profile.
2.3 Information stored on your device
We use browser storage and cookies for the purposes described in our Cookie Policy. Strictly necessary storage keeps your cart contents and your cookie choice. Preference, analytics and marketing storage are used only where you have given permission.
2.4 Information we do not collect
We do not collect payment card numbers, bank credentials, social security numbers, government identifiers, health information, precise geolocation, or biometric data through this website. We do not knowingly collect information from children under 16, and this store is intended for adults making household purchases.
3. How we use your information
| Purpose | Information used | Basis |
|---|---|---|
| Responding to your enquiry | Name, email, message | Your consent and our legitimate interest in answering customers |
| Confirming and fulfilling an order | Name, email, delivery address, items ordered | Performance of a contract with you |
| Arranging payment securely | Order reference and total | Performance of a contract with you |
| Shipping and delivery updates | Name, address, email | Performance of a contract with you |
| Returns, replacements and warranty | Order reference, contact details, photographs | Contract and legal obligations |
| Monthly newsletter | Email address, consent record | Your consent, withdrawable at any time |
| Site security and fault diagnosis | Technical log data | Our legitimate interest in operating a secure site |
| Aggregate site improvement | Analytics data, if permitted | Your consent |
| Measuring advertising performance | Marketing data, if permitted | Your consent |
| Accounting and tax records | Order and invoice details | Legal obligation |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects, and we do not profile you for eligibility or pricing.
4. Cookies and similar technologies
Cookies are small text files stored on your device. We group them into four categories:
- Strictly necessary — required for the cart, site security and remembering your privacy choice. Always active.
- Preferences — remembers your catalog filter and sort order. Off unless you allow it.
- Analytics — aggregated statistics about which pages are useful. Off unless you allow it.
- Marketing — measures advertising performance and caps repeat ad exposure. Off unless you allow it.
When you first visit, a banner asks for your choice. Optional categories remain disabled until you actively allow them. You can revisit your decision at any time using the link in the footer or the button in this paragraph. Full details, including cookie names and lifetimes, are in the Cookie Policy.
5. When we share information
We do not sell or rent personal information. We share it only in these limited situations:
- Delivery carriers: your name, address and, where needed for delivery notifications, your phone number or email, so a parcel can reach you.
- Payment processors: when you approve an order total, payment is handled by a third-party processor on their own secure page. We receive confirmation of payment, not your card details.
- Email and hosting providers: companies that host this website or our business email process data on our instructions under contract.
- Professional advisers and authorities: where required by law, subpoena, or to protect our legal rights, and only to the extent necessary.
- Business transfers: if the business is sold or restructured, information may transfer subject to this policy or a successor policy that provides equivalent protection, with notice to you.
Service providers are permitted to use your information only to perform the service we have asked for, and not for their own purposes.
6. Advertising and analytics
We may advertise this store through search and display advertising networks, including Google Ads. Where such a network places cookies or similar identifiers to measure whether an advert led to a visit or an order, that measurement storage is treated as marketing or analytics and is disabled until you consent.
We do not send your name, email address or delivery address to advertising networks for the purpose of targeting you, and we do not build advertising audiences from customer contact lists. Any advertising measurement we use is aggregated. You can also manage advertising personalization directly in your Google Ad Settings and through your browser controls.
7. How long we keep information
| Record | Retention period |
|---|---|
| Enquiries that do not become orders | 12 months |
| Order, invoice and delivery records | 7 years, for tax and accounting obligations |
| Returns and warranty correspondence | 24 months after the claim closes |
| Newsletter subscription and consent record | Until you unsubscribe, plus 12 months as proof of consent |
| Cookie consent record | Up to 180 days, then you are asked again |
| Server security logs | Up to 90 days |
| Cart contents in your browser | Until you empty the cart or clear browser storage |
When a retention period ends, records are deleted or anonymized so they can no longer be linked to you.
8. How we protect information
We use HTTPS to encrypt traffic between your browser and this website, restrict access to customer records to staff who need them, keep software updated, and use reputable hosting and email providers. Payment is handled entirely by a third-party processor so that card data never reaches our systems.
No method of transmission or storage is completely secure. If a breach occurs that is likely to affect your rights, we will notify affected customers and the relevant authorities as required by applicable law, and we will explain what happened and what you should do.
9. Your rights and choices
Depending on where you live, you may have some or all of the following rights:
- Access: ask what personal information we hold about you and receive a copy.
- Correction: ask us to correct information that is inaccurate or out of date.
- Deletion: ask us to delete information, subject to records we must keep by law.
- Portability: receive information you provided in a commonly used, machine-readable format.
- Objection or restriction: object to processing based on legitimate interests, or ask us to restrict it.
- Withdraw consent: unsubscribe from email or turn off optional cookies at any time, without affecting orders already placed.
- Non-discrimination: exercise any of these rights without receiving different prices or a lower standard of service.
To exercise a right, email hearthandwhisk.store@gmail.com with the subject line "Privacy request" and tell us which right you are exercising. We may ask for information that lets us verify your identity, such as the email address or order reference associated with your record. We respond within 30 days. If we need longer because a request is complex, we will tell you why and by when to expect an answer.
9.1 California residents
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to know the categories and specific pieces of personal information we collect, the sources, the business purpose, and the categories of third parties we disclose it to. You may request deletion or correction, and you may opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit. You may designate an authorized agent to submit a request on your behalf with written permission.
9.2 Residents of the EEA, UK and Switzerland
Where the GDPR or UK GDPR applies, our lawful bases are consent, performance of a contract, compliance with a legal obligation, and our legitimate interests as described in section 3. If your information is transferred outside your region, we rely on an appropriate transfer mechanism such as standard contractual clauses. You also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.
9.3 Other US states
Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah and others, may have comparable rights of access, correction, deletion, portability and opt-out, and may appeal a decision we make on a request. To appeal, reply to our decision email and we will review it and respond in writing within the period required by your state's law.
10. Children's privacy
This store sells household kitchen tools and is directed at adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
11. Links to other websites
Our guide may link to public authorities such as the USDA, or to browser and advertising settings pages. Those sites operate under their own privacy policies. We are not responsible for their content or practices, and we encourage you to read their policies before providing information.
12. Changes to this policy
We may update this policy to reflect changes in our practices, technology or legal requirements. The "Last updated" date at the top always shows the current version. If a change materially affects how we use information we already hold, we will give notice on this page and, where appropriate, by email before the change takes effect. Continuing to use the site after an update means the revised policy applies to future interactions.
13. Contact us about privacy
Questions, requests and complaints about this policy are welcome:
Hearth & Whisk Kitchen Supply — Privacy4187 Kestrel Hollow Lane, Suite 210
Fort Collins, CO 80525, United States
Email: hearthandwhisk.store@gmail.com
Phone: +1 (970) 555-0148
Hours: Monday to Friday, 9:00 AM – 5:00 PM Mountain Time
Related policies: read the Cookie Policy for cookie names and lifetimes, the Terms of Service for the rules of using this site, and Shipping & Returns for delivery and refund terms.