Privacy Policy

Effective Date: September 17, 2025

I. Introduction

Welcome to HometownBrix.com (“Company,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website (such as HometownBrix.com), and/or any related services, sales, marketing, or events (we refer to them collectively in this Privacy Policy as the “Services”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website HometownBrix.com, including any other media form, media channel, mobile website, or mobile application related or connected thereto. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

A privacy policy is a vital document that outlines how we gather, handle, and process the data of our customers and visitors. It describes whether that information is kept confidential or shared with third parties. For HometownBrix.com, this policy is a commitment to transparency and protecting your data. Building trust with our users is important, and a clear privacy policy is a key part of that.

II. Core Privacy Principles

We are guided by the following core privacy principles in our data handling practices:

Transparency: We will be clear about what information we collect and how we use it.
Purpose Limitation: We will collect and use personal information only for the specific purposes we identify or as permitted by law.
Data Minimization: We will limit the collection of personal information to what is relevant and necessary for the purposes for which it is collected.
Accuracy: We will strive to keep personal information accurate and up to date.
Storage Limitation: We will keep personal information only for as long as necessary to fulfill the stated purposes or as required by law.
Security: We will implement appropriate technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction.
Accountability: We take responsibility for our data privacy practices and are committed to complying with applicable privacy laws.

III. Understanding Your Legal Obligations

As a business operating online, HometownBrix.com is subject to various data privacy laws depending on where our users are located and how we process their data.

A. Applicable U.S. Laws

1. CCPA/CPRA (California Consumer Privacy Act/California Privacy Rights Act)

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants California residents specific rights regarding their personal information. This law applies to for-profit businesses that collect California consumers’ personal information and meet certain thresholds (e.g., annual gross revenue, volume of data processed, or revenue from selling/sharing personal information).

If HometownBrix.com meets these thresholds, we are required to provide California residents with disclosures about the categories of personal information collected, the purposes for collection, and rights such as the right to know, delete, correct, opt-out of the sale or sharing of personal information, and limit the use of sensitive personal…source Our privacy policy must be updated at least every 12 months.

2. COPPA (Children’s Online Privacy Protection Act)

COPPA is a U.S. federal law designed to protect the online privacy of children under 13. It applies to operators of websites or online services directed to children under 13, or operators who have actual knowledge that they are collecting personal information online from a child under 13. HometownBrix.com is not directed to children under 13, and we do not knowingly collect personal information from them. This is further detailed in our “Children’s Privacy” section.

3. Other U.S. Federal Laws

Other federal laws like HIPAA (for health information) and GLBA (for financial information) are generally not applicable to a standard e-commerce business like HometownBrix.com unless we offer specific services in those sectors.

4. Arizona State Law

Currently, Arizona does not have a comprehensive general consumer data privacy law similar to those in some other states. However, Arizona does have a data breach notification law (A.R.S. §18-552) which requires businesses to notify Arizona residents if a security system breach occurs involving their personal information. We are committed to complying with this law, including notifying affected individuals and relevant authorities within the legally mandated timeframe if such a breach occurs.

B. Key Compliance Requirements Summary

Based on these laws, key requirements for HometownBrix.com include:

Transparency: Clearly disclosing our data collection, use, and sharing practices.
User Rights: Providing mechanisms for users to exercise control over their personal data (e.g., access, deletion, opt-out).
Data Security: Implementing reasonable security measures to protect personal data.
Opt-Out Options: Providing clear ways for users to opt-out of certain data uses, such as the sale or sharing of personal information (if applicable under CCPA/CPRA) or marketing communications.

IV. What Information Does HometownBrix.com Collect?

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and services, when you participate in activities on the Services, or otherwise when you contact us. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use.

A. Categories of Personal Data

The types of personal information we may collect include:

Contact and Identification Data: Such as your full name, email address, shipping address, billing address, and telephone number.
Account Credentials: If you create an account, your username and password.
Payment Information: Credit or debit card numbers, expiration dates, and security codes. This information is typically processed by our third-party payment processors. We do not store full credit card numbers on our servers. We also collect transaction history.
Technical Data: Internet Protocol (IP) address, browser type and version, device type, operating system, and server log files.
Usage and Behavioral Data: Pages visited, links clicked, search terms entered on our site, products viewed or added to cart, items purchased, time spent on pages, and referring/exit pages. This is often collected via cookies and analytics tools.
Location Data: General geographic location inferred from your IP address. More precise location data is collected only with your explicit consent.
User-Generated Content (UGC):
- Customer Reviews: When you submit a customer review, we collect the content of your review, any rating you provide, the name or username you choose to display, and the date of submission. If the review is linked to a verified purchase, we may associate the review with that transaction.
- Professional Reviews/Testimonials: If you are a professional providing a review or testimonial for display on HometownBrix.com, we may collect your name, professional title, affiliation, the content of your review/testimonial, and any image or likeness you provide. This information is typically collected directly from you or with your explicit consent if sourced from a public domain.
- Other UGC: Any other content you submit, such as comments on blog posts or forum contributions (if applicable).
Communications Data: Information provided when you contact us for customer support, respond to surveys, or participate in promotions, including the content of those communications.

B. Methods of Collection

We collect information in the following ways:

Directly from You: When you fill out forms (e.g., order, account registration, contact, newsletter sign-up), make purchases, or communicate with us.
Automatically When You Use Our Website: Through cookies, web beacons, log files, and analytics tools that gather technical and usage data as you navigate our site.
From Third-Party Sources (If Applicable):
- Social Media Platforms: If you log in using social media credentials or interact with our social media pages, we may receive profile information from the social media provider, based on your settings on that platform.
- Payment Processors: We receive transaction confirmation details and information for fraud prevention from our payment gateways.
- Analytics Providers: Such as Google Analytics, to help us understand user behavior.

V. How HometownBrix.com Uses Collected Information

We use the information we collect for various business purposes, including:

To Provide and Manage Services:
- Processing and fulfilling your orders, including payment verification and shipping.
- Creating and managing your user account.
- Providing customer support and responding to your inquiries.
To Personalize User Experience:
- Tailoring website content, product recommendations, or offers to your interests based on past activity.
- Remembering your preferences (e.g., language, region).
For Marketing and Communications (with consent where required or opt-out provided):
- Sending newsletters, promotional offers, and information about new products or sales events. You can opt-out of marketing communications at any time.
- Communicating important service updates or changes to our terms.
For Analytics and Improvement:
- Analyzing how users interact with our website to identify areas for improvement, popular products, and to optimize performance.
- Developing new products and services.
To Display User-Generated Content:
- Displaying customer reviews on product pages and other areas of our website to assist other users.
- Featuring professional reviews and testimonials on our website and in marketing materials to provide expert insights and build credibility.
For Security and Fraud Prevention:
- Monitoring for and preventing fraudulent transactions.
- Securing user accounts and protecting the integrity of our website.
To Comply with Legal Obligations:
- Complying with applicable laws, regulations, court orders, or lawful government requests.
- Enforcing our terms of service.

VI. Sharing Information with Third Parties

HometownBrix.com does not sell your personal information in the traditional sense. However, we may share your personal information with certain categories of third parties for legitimate business purposes as described below.

A. Categories of Third Parties and Purposes for Sharing

Payment Processors (e.g., Stripe, PayPal):
- Purpose: To securely process payments and prevent fraud.
- Data Shared: Payment card details, billing address, transaction amount.
Shipping and Delivery Partners (e.g., USPS, FedEx, UPS):
- Purpose: To deliver your orders.
- Data Shared: Name, shipping address, phone number, email for tracking.
Analytics Providers (e.g., Google Analytics):
- Purpose: To analyze website traffic and user behavior for service improvement.
- Data Shared: IP address, browser/device info, browsing data (often pseudonymized or aggregated).
Marketing and Advertising Partners:
- Email Marketing Services (e.g., Mailchimp): To manage email lists and send marketing communications (with your consent/opt-out). Data shared includes email address, name.
- Advertising Networks (e.g., Google Ads, Meta Ads): To manage and display targeted ads (retargeting) and measure ad performance. Data shared includes cookie data, advertising identifiers, IP addresses.
Cloud Hosting Providers (e.g., AWS, Google Cloud):
- Purpose: To host our website and databases.
- Data Shared: All personal data collected may reside on their servers.
Customer Support Tools (e.g., Zendesk):
- Purpose: To manage customer communications and support.
- Data Shared: Contact info, communication history.
Legal and Professional Advisors (e.g., lawyers, accountants):
- Purpose: To obtain professional advice or comply with legal obligations.
- Data Shared: Relevant data as necessary.
Law Enforcement or Government Bodies:
- Purpose: To comply with lawful requests or protect our rights.
- Data Shared: Specific data as required by law.

We take steps to ensure our service providers are contractually obligated to protect your personal information and use it only for the specified purposes.

VII. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies (like web beacons or pixels) to enhance your experience, analyze site usage, and for advertising purposes.

A. Explanation of Cookies

Cookies are small data files stored on your device. We use:

Essential/Strictly Necessary Cookies: Vital for website operation (e.g., shopping cart, login).
Performance/Analytics Cookies: Collect aggregated data on website usage to improve performance (e.g., Google Analytics cookies).
Functionality Cookies: Remember your choices (e.g., username, language) for a more personalized experience.
Targeting/Advertising Cookies: Track browsing habits to deliver relevant ads. May be set by us or third-party ad networks.

B. Your Choices Regarding Cookies

You can manage your cookie preferences. Most web browsers allow you to control cookies through their settings. You can typically set your browser to block or delete cookies. If our practices constitute a “sale” or “sharing” of personal information under laws like CCPA/CPRA through advertising cookies, we will provide a “Do Not Sell or Share My Personal Information” link or similar mechanism for you to opt-out. Please note that blocking essential cookies may affect website functionality.

C. Third-Party Cookies

Some cookies may be placed by third parties like analytics providers or ad networks. These parties collect data according to their own privacy policies, and we do not control these cookies.

VIII. Data Security

We are committed to protecting the security of your personal information. We implement and maintain appropriate administrative, technical, and physical safeguards designed to protect your personal information from accidental or unlawful destruction, loss, alteration, unauthorized access, disclosure, or use.

These measures include:

Using encryption (such as SSL/TLS technology) for sensitive data during transmission.
Restricting access to personal information to authorized personnel on a need-to-know basis.
Implementing firewalls and other network security measures.
Regularly reviewing our security practices.

While we strive to protect your personal information, no security system is impenetrable, and we cannot guarantee absolute security. Any transmission of personal information is at your own risk. You are also responsible for keeping your account password confidential.

In the event of a data breach affecting your personal information, we will comply with all applicable laws regarding notification to individuals and regulatory authorities, such as Arizona’s data breach notification law.

IX. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, and to comply with our legal obligations (e.g., tax and accounting requirements), resolve disputes, and enforce our agreements.

The criteria used to determine our retention periods include:

The duration of our relationship with you (e.g., as long as your account is active).
Legal or regulatory obligations (e.g., financial record-keeping).
Our legitimate business interests (e.g., dispute resolution, fraud prevention).
The nature and sensitivity of the information.

When your personal information is no longer required, we will take reasonable steps to securely delete or anonymize it.

X. User Rights and Choices

You have certain rights regarding your personal information, subject to applicable law. These may include:

Right to Access/Know: To request information about the personal data we hold about you and obtain a copy.
Right to Rectification/Correction: To request correction of inaccurate or incomplete personal data.
Right to Erasure/Deletion: To request deletion of your personal data, subject to certain exceptions.
Right to Opt-Out of Sale or Sharing (if applicable under CCPA/CPRA): To direct us not to sell or share your personal information. If we engage in such activities, we will provide a “Do Not Sell or Share My Personal Information” link.
Right to Limit Use of Sensitive Personal Information (if applicable under CCPA/CPRA): To direct us to limit the use and disclosure of your sensitive personal information. If we collect SPI, we will provide a “Limit the Use of My Sensitive Personal Information” link.
Right to Opt-Out of Marketing Communications: You can unsubscribe from our marketing emails by clicking the “unsubscribe” link in those emails or by contacting us.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

How to Exercise Your Rights:
To exercise any of these rights, please contact us using the information in the “Contact Information” section below. We may need to verify your identity before processing your request. We will respond to legitimate requests within the timeframes required by applicable law.

XI. Children's Privacy

Our Website and services are not directed to, and we do not knowingly collect personal information from, children under the age of 13. If you are under 13, please do not use our Services or provide any personal information to us. If we learn we have collected personal information from a child under 13 without parental consent, we will delete that information as quickly as possible.

XII. International Data Transfers

Our Website is hosted and our services are primarily provided from the United States. If you are accessing our Website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our servers or our third-party service providers are located. By using our services, you understand and consent to the transfer of your information to these countries, which may have different data protection rules than those of your country of residence.

XIII. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last Updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

Table of Contents