Privacy

What we collect

• What you tell us. When you request a quote we collect your name, email address, shipping address and phone number, along with the items you configured. When you subscribe to our list we collect your email address and nothing else.
• How you use the site. Pages viewed, products opened, finishes chosen, searches run and items added to the cart. This is tied to a random identifier in your browser, not to your name — until you give us your email at checkout or in the signup form, at which point the two are linked.
• Session recordings. We record how pages are used so we can see where the site is confusing. Checkout is masked: everything typed into a form field, the address suggestions, and the confirmation email address are stripped out before the recording leaves your browser. We do not take payment card details anywhere on this site.

Who processes it

• PostHog — product analytics and session recording, configured as above. Sent through our own domain rather than PostHog’s, so it survives tracker blocklists; the data goes to the same place either way.
• Meta (Facebook) Pixel — tells us which of our ads led to a quote, and lets Meta show our ads to people who have visited. This is the one on this list that is genuinely advertising rather than operations, and it is the reason the consent banner exists.
• Stripe — invoicing and payment. Payment happens on Stripe’s own hosted invoice page, on Stripe’s domain. No card details are ever entered on, or pass through, this site.
• Resend — order emails, and the mailing list if you subscribe.
• Cloudflare Turnstile — checks that quote requests and list signups come from a person rather than a script.
• Radar — address autocomplete on the checkout street field.
• Vercel — hosting. Vercel tells us the country a request came from, which is how we know whether to ask for consent before anything above loads.
• Babylist — lets our products be added to a Babylist registry.
• Google Fonts — typefaces, served to your browser.

We do not sell personal information, and we do not share it with anyone beyond the processors listed here.

Cookies and your choices

If you are in the EU, the EEA, the UK, Switzerland, Canada or California, analytics and advertising load only after you accept them. Nothing on the list above runs, and no cookie from it is set, until you do — if you decline, the site works normally and we learn nothing about your visit beyond the request our server had to answer anyway. Elsewhere they run by default and you can turn them off at any time.

Either way, the choice is yours to change whenever you like, using Cookie settings at the bottom of any page. Turning tracking off stops session recording immediately and clears the advertising cookies.

The cart, your saved shipping details and your cookie choice itself are kept in your browser’s own storage. They never leave your device until you submit an order, and they are not analytics.

Keeping and deleting

Order records are kept as long as we need them for the order, our accounts and our tax obligations. Analytics data is kept for as long as it is useful and no longer. You can unsubscribe from the mailing list using the link in any email we send.

Your rights

Depending on where you live, you may have the right to:

• Know or access what personal information we hold about you.
• Correct inaccurate personal information.
• Delete personal information we hold about you.
• Get a copy of your personal information in a portable form.
• Opt out of the sharing described above under Meta Pixel, which some laws classify as a “sale” or “sharing” of information for targeted advertising. Use Cookie settings at the bottom of any page — it stops immediately, and we do not sell information in any other sense.

To exercise any of these, get in touch and tell us which — we will need the email address you used so we can find the right records, and may need to verify it’s you before acting on the request. We will not treat you differently for asking. If you are not satisfied with our response, you may have the right to appeal our decision or to complain to your local data protection authority.

A few more things

• Children. This site is not directed at children, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has given us information, contact us and we will delete it.
• International transfers. The processors listed above operate globally, so your information may be processed in a country other than the one you live in.

Contact

Questions about this policy, or want to exercise one of the rights above? Call (484) 293-1840, email heirloomcribs.care@heirloomcribsandmore.com, or write to us at 421 Manor Dr, Nazareth, PA 18064, United States.