Privacy Policy

Effective Date: October 03, 2025

Last Updated: October 03, 2025

Austin Enterprises Group (“we,” “us,” or “our”) operates heritagesupply.com (the “Site”), which provides an online e-commerce platform powered by WooCommerce for purchasing products and services (the “Service”). We respect the privacy of our users (“you”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site, make a purchase, or interact with our Service. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site or use the Service.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the “Effective Date” of this Privacy Policy and posting a notice on the Site (e.g., via email or a pop-up banner for significant updates). Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the Site. You will be deemed to have been made aware of, subject to, and in agreement with the changes in any revised Privacy Policy by your continued use of the Site or Service after the date such revised Privacy Policy is posted.

You are encouraged to periodically review this Privacy Policy to stay informed of updates. This Privacy Policy applies to all information collected through the Site and Service, including during checkout, account creation, or newsletter sign-ups. The terms used in this Privacy Policy have the same meanings as in our Terms of Service, accessible at [insert link to Terms of Service], unless otherwise defined herein.

1. Information We Collect We collect information to provide, improve, and secure our Service. Information is collected in three main ways: directly from you, automatically through the Site, and from third parties. We only collect what is necessary for our e-commerce operations, such as processing orders and preventing fraud.

Personal Data Personally identifiable information that you voluntarily provide, such as:

  • Name, email address, phone number, billing/shipping address, and payment details (e.g., credit card number, expiration date) during checkout or account registration.
  • Order history, product preferences, and feedback from surveys or customer service interactions. You are under no obligation to provide this information, but refusal may limit your ability to complete purchases or access features like saved carts.

Derivative and Technical Data Information automatically collected when you access the Site, such as:

  • IP address, browser type/version, device ID, operating system, and location data (approximate, based on IP).
  • Log data: Pages visited, time/date of visits, time spent on pages, referral sources, and search terms.
  • Usage data: Interactions with WooCommerce features like abandoned carts or wishlist items.

Financial Data Payment-related information (e.g., card brand, CVV) collected during transactions. We do not store full card details; they are handled securely by our payment processor (e.g., Stripe). For details, review their privacy policy at [insert link to Stripe Privacy Policy].

Data from Third Parties Information from social media (if you connect via Facebook or Google), affiliates, or partners like shipping providers (e.g., USPS for address verification).

We do not collect sensitive personal information (e.g., health data) unless explicitly required for a product/service and with your consent.

2. How We Use Your Information We use your information for legitimate business purposes, including fulfilling orders and enhancing your shopping experience. Specific uses include:

  • Processing and shipping orders, handling payments/refunds, and communicating about your account (e.g., order confirmations via email).
  • Providing customer support, resolving disputes, and preventing fraud (e.g., using IP data for security checks).
  • Personalizing your experience (e.g., product recommendations based on browsing history) and sending marketing emails/newsletters (with opt-out options).
  • Analyzing Site usage to improve the Service (e.g., via WooCommerce analytics) and compiling anonymous statistics.
  • Complying with legal obligations, such as tax reporting.

Legal bases for processing (where applicable): Contract performance (e.g., order fulfillment), consent (e.g., marketing), legitimate interests (e.g., fraud prevention), or legal requirements.

3. Disclosure of Your Information We do not sell your personal information. We may share it in limited circumstances:

  • Service Providers: Third parties that help operate the Service, such as WooCommerce/WordPress hosting, payment processors (e.g., Stripe with integrated options like Klarna and Affirm), shipping carriers (e.g., ShipStation for order fulfillment and tracking), inventory management (e.g., Cin7 for stock syncing), analytics tools (e.g., Meteorik for business intelligence reporting), and email marketing (e.g., Klaviyo for newsletters, automations, and personalized campaigns). They are contractually obligated to use data only for specified tasks and maintain security. For example:
    • Stripe (and Klarna/Affirm): Receives payment and order details for transaction processing; see their policies.
    • ShipStation: Receives order and shipping address data for label generation and fulfillment.
    • Cin7: Receives inventory and order data for stock management.
    • Meteorik: Receives data for performance insights.
    • Klaviyo: Receives subscriber data (e.g., email, purchase history) for sending transactional and marketing emails; you can opt out at any time via unsubscribe links in emails.
  • Business Transfers: In mergers, acquisitions, or asset sales, your data may be transferred as a business asset.
  • Legal Requirements: To comply with laws, respond to subpoenas, or protect rights/safety (e.g., fraud investigations).
  • With Your Consent: For marketing partners or affiliates, only if you opt in. We may share limited data (e.g., browsing behavior) with ad networks like Meta (Facebook), Google, Microsoft (Bing), Reddit, and TikTok for retargeting and analytics, but only after obtaining explicit consent via our cookie banner.

For California residents under CCPA/CPRA: In the past 12 months, we have not sold or shared personal information for cross-context behavioral advertising. If we do, you can opt out via [insert Do Not Sell or Share My Personal Information link]. See Section 6 for rights.

4. Tracking Technologies (Cookies) We use cookies, web beacons, and similar tools to enhance functionality and analyze usage. Types include:

  • Essential Cookies: For cart functionality and secure checkouts (cannot be disabled).
  • Performance Cookies: Track Site speed and errors (e.g., via Google Analytics).
  • Marketing Cookies: Personalize ads and retargeting (e.g., via Meta Pixel for Facebook, Google Ads, Microsoft Clarity/Bing, Reddit Pixel, and future TikTok Pixel). These require your prior consent under GDPR/CCPA to avoid privacy risks like unintended data sharing.

Cookies store small data files on your device. You can manage them via browser settings (e.g., accept/refuse) or our cookie banner. Disabling may affect Site features. For details, see our Cookie Policy. We honor Do Not Track signals where possible.

5. Data Retention We retain your information only as long as necessary for the purposes described, or as required by law:

  • Order data: 7 years for tax/audit compliance.
  • Account info: Until deletion request or account closure.
  • Log/technical data: 12 months.
  • Marketing data: Until opt-out or 2 years of inactivity.

After retention periods, data is deleted, anonymized, or archived securely.

6. Your Privacy Rights You have rights regarding your data. To exercise them, contact us at [email protected] (provide verification like email confirmation). We respond within 45 days (extendable if needed).

  • Access: Request details on data we hold about you.
  • Correction: Update inaccurate information.
  • Deletion: Request removal (with exceptions for legal obligations).
  • Opt-Out: Unsubscribe from marketing (e.g., via one-click links in Klaviyo emails or account settings); opt out of cookies via settings; specifically, opt out of ad tracking/sharing with partners like Meta, Google, Bing, Reddit, or TikTok.
  • Restriction/Objection: Limit processing (e.g., for marketing) or object to automated decisions.
  • Portability: Receive data in a structured format (e.g., for GDPR users).
  • CCPA-Specific (California Residents): Right to know (categories collected/sold), delete, and opt out of sales/sharing. Non-discrimination for exercising rights.

For EU/UK residents (GDPR): You can complain to your local data protection authority (e.g., after contacting us). For other regions, rights align with local laws (e.g., PIPEDA in Canada).

7. Security We use commercially reasonable measures to protect your information, including SSL encryption for transmissions, secure WooCommerce servers, access controls, and regular audits. Payment data is tokenized via PCI-DSS compliant processors like Stripe, Klarna, and Affirm. However, no system is 100% secure; we cannot guarantee absolute protection against breaches. Report suspected issues to us immediately.

8. Children’s Privacy Our Service is not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we discover such data, we will delete it promptly. Parents/guardians: Contact us if your child has provided information. We comply with COPPA and equivalent laws.

9. Links to Other Sites The Site may contain links to third-party sites (e.g., payment gateways). We are not responsible for their privacy practices. Review their policies before interacting.

10. International Data Transfers Data is primarily stored in the U.S. (via WooCommerce/WordPress). For international users, transfers (e.g., to EU) use safeguards like Standard Contractual Clauses. EU/UK residents: We ensure adequacy for transfers.

11. Contact Us If you have questions about this Privacy Policy, your data, or rights, contact: Austin Enterprises Group 2117 S. Division Ave., Orlando, FL 32805, United States Email: [email protected]

We aim to respond within 30 days. For complaints, EU users can contact their supervisory authority.