Privacy Policy

Welcome to Heirloom Supply ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website heirloomsupply.co (the "Site") and use our services.

Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Site.

2.1 Personal Information

We may collect the following personal information from you:

• Contact Information: Name, email address, phone number, and mailing address
• Account Information: Username, password, and preferences
• Payment Information: Credit card details, billing address (processed securely through third-party payment processors)
• Communication Data: Information you provide when you contact us, sign up for our waitlist, or subscribe to our newsletter

2.2 Automatically Collected Information

When you visit our Site, we automatically collect certain information, including:

• Usage Data: Pages viewed, time spent on pages, links clicked, and other actions on our Site
• Device Information: IP address, browser type, operating system, device type, and unique device identifiers
• Location Data: General geographic location based on your IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies (see Section 4 for more details)

We use the information we collect for the following purposes:

• Service Delivery: To process orders, provide customer support, and deliver products and services
• Communication: To send you order confirmations, updates, newsletters, marketing communications, and respond to your inquiries
• Account Management: To create and manage your account, including waitlist registration and invite code management
• Marketing: To send promotional materials, special offers, and personalized content via email and SMS (with your consent)
• Analytics: To analyze website usage, improve our Site, and enhance user experience
• Security: To protect against fraud, unauthorized access, and other security risks
• Legal Compliance: To comply with legal obligations and enforce our terms and conditions

4.1 Cookies

We use cookies and similar tracking technologies to track activity on our Site and store certain information. Cookies are small data files stored on your device that help us improve your experience, analyze usage patterns, and deliver personalized content.

4.2 SMS Abandoned Cart Tracking

Important: Heirloom Supply's website uses cookies and tracking technologies to help keep track of items you put into your shopping cart, including when you have abandoned your cart. This information is used to determine when to send cart reminder messages via SMS to phone numbers you have provided and consented to receive such messages.

When you add items to your cart and provide your phone number with consent to receive SMS communications, we may use this information to send you reminders about your abandoned cart. You can opt out of these messages at any time by replying STOP to any SMS message.

4.3 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality
• Analytics Cookies: Help us understand how visitors interact with our Site
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness
• Preference Cookies: Remember your settings and preferences

5.1 SMS Program

When you opt-in to receive SMS messages from Heirloom Supply, we may send you text messages about:

• Order confirmations and shipping updates
• Abandoned cart reminders
• Promotional offers and exclusive deals
• New product announcements
• Waitlist updates and early access notifications

5.2 How We Use Phone Numbers

Phone numbers you provide to us are used exclusively for the following purposes:

• Sending transactional SMS messages (order updates, shipping notifications)
• Sending marketing SMS messages (only with your explicit consent)
• Sending abandoned cart reminders via SMS (only with your explicit consent)
• Providing customer support when you contact us

We do not sell or share your phone number with non-affiliated third parties for their marketing purposes.

5.3 SMS Opt-Out

You can opt out of receiving SMS messages at any time by:

• Replying STOP to any SMS message from us
• Texting HELP for assistance
• Contacting us directly at the email address provided below

Message and data rates may apply. Message frequency varies based on your interactions and preferences.

We may share your information with the following parties:

6.1 Service Providers

We work with third-party service providers who perform services on our behalf, including:

• Payment processors
• Shipping and fulfillment partners
• Email and SMS marketing platforms (e.g., Klaviyo)
• Website hosting and analytics services
• Customer support tools

These service providers are contractually obligated to protect your information and may only use it to provide services to us.

6.2 Third-Party Data Sharing Exclusion

Important SMS Data Protection: While we may share certain personal information with service providers as described above, SMS opt-in data and consent information will not be shared with any third parties for their own marketing purposes. This includes your phone number and consent records related to SMS communications. We only share SMS data with service providers who help us send SMS messages on our behalf and who are contractually bound to protect this information.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

7.1 Collection of Location Data

We collect general location information based on your IP address to:

• Provide region-specific content and pricing
• Calculate shipping costs and delivery estimates
• Detect and prevent fraud
• Comply with legal requirements and tax obligations
• Improve our services and analyze regional trends

7.2 Precise Location Data

We do not collect precise GPS location data from your device unless you explicitly grant permission through your device settings. If you enable location services:

• We may use this data to provide location-based features or services you request
• You can disable location services at any time through your device settings
• Disabling location services may limit certain features but will not prevent you from using our Site

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Secure server infrastructure and regular security audits
• Access controls and authentication requirements
• Regular security training for our team

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Objection: Object to processing of your personal information for certain purposes
• Restriction: Request restriction of processing your personal information
• Portability: Request transfer of your information to another service
• Withdraw Consent: Withdraw consent for marketing communications or SMS messages

To exercise these rights, please contact us using the information provided in Section 13.

10.1 Email Marketing

You can opt out of marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your email preferences in your account settings
• Contacting us directly

10.2 SMS Marketing

You can opt out of SMS marketing by replying STOP to any message. Even if you opt out of marketing messages, we may still send you transactional messages related to your orders.

Our Site is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will take steps to delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new "Effective Date"
• Sending you an email notification (if you have provided your email address)
• Displaying a prominent notice on our Site

Your continued use of our Site after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within a reasonable timeframe, typically within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, disclose, and sell
• Right to delete personal information we have collected from you
• Right to opt-out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us using the information in Section 13.

Our Site is operated in the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our Site, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country of residence.