Privacy Policy

Introduction

EdgeCraft ("we," "our," or "us") is a Colorado-based company committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Colorado Privacy Act (CPA) and the California Consumer Privacy Act (CCPA).

Information We Collect

Personal Information

• Name, email address, phone number
• Shipping and billing address
• Payment information (processed securely via third-party payment processors)
• Order history and preferences
• Account credentials (encrypted)

Automatically Collected Information

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referring website and search terms
• Cookie and tracking technology data

How We Use Your Information

• Process and fulfill orders
• Communicate about your orders and account
• Provide customer support
• Send marketing emails (with opt-in consent)
• Improve our products and services
• Detect and prevent fraud
• Comply with legal obligations

Cookie Policy

We use cookies and similar tracking technologies to enhance your browsing experience. Cookies are small data files stored on your device. You can control cookies through your browser settings. Types of cookies we use:

• Essential cookies: Required for site functionality
• Analytics cookies: Help us understand site usage
• Marketing cookies: Used to deliver relevant ads
• Preference cookies: Remember your settings

Your Rights Under CPA and CCPA

As a Colorado or California resident, you have the right to:

• Access: Request a copy of your personal information
• Delete: Request deletion of your personal information
• Opt-out: Opt-out of the sale or sharing of your information
• Correct: Request correction of inaccurate information
• Limit: Limit the use of sensitive personal information
• Non-discrimination: Equal service regardless of rights exercised

To exercise these rights, contact us at [email protected].

Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Account data: Retained while your account is active; deleted within 30 days of account closure request
• Order data: Retained for 7 years for tax and legal compliance
• Marketing data: Retained until you unsubscribe or request deletion
• Support communications: Retained for 2 years after last interaction

Information Sharing

We do not sell your personal information. We may share information with:

• Service providers (payment processors, shipping carriers, email providers) — bound by confidentiality obligations
• Legal authorities when required by law or to protect our rights
• Business partners with your explicit consent

We do not share your information for cross-context behavioral advertising without your opt-in consent.

Data Security

We implement industry-standard security measures including SSL encryption, secure payment processing, and regular security audits. However, no method of transmission over the internet is 100% secure.

• All payment data is processed by PCI-DSS compliant third-party processors
• Account passwords are hashed using bcrypt
• Access to personal data is restricted to authorized personnel only

Your Privacy Rights — How to Exercise Them

To exercise any of your rights under CPA or CCPA:

• Email [email protected] with your request
• Include your name, email, and order number (if applicable)
• We will verify your identity before processing requests
• We respond to all verifiable requests within 45 days (as required by CPA/CCPA)

You may also submit an opt-out request for the sale or sharing of your personal information by clicking the "Do Not Sell or Share My Personal Information" link in our website footer or by emailing us. We honor Global Privacy Control (GPC) signals.

Third-Party Links

Our Site may contain links to third-party websites (e.g., social media, payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

International Users (GDPR)

If you are accessing our Site from the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to processing. Our legal basis for processing your data includes consent, contract performance, and legitimate interests. To exercise GDPR rights, contact us at [email protected].

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately for deletion.

Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our Site. Your continued use of the Site after changes constitutes acceptance of the updated policy.

Contact

EdgeCraft
Denver, Colorado, USA
Email: [email protected]
Phone: (303) 555-0142
Data Protection Officer: [email protected]