Privacy Policy

This Privacy Policy describes how Woodalix Craft ("we", "us", or "our") collects, uses, discloses, and protects personal information when you visit woodalixcraft.com (the "Website"), contact us, or purchase our design and planning services (the "Services"). It also explains your privacy rights and how to exercise them.

1. Who we are

Woodalix Craft is an online woodworking design and planning studio based in Centennial, Colorado, United States. For privacy matters, you can reach us at support@woodalixcraft.com or at the postal address listed at the end of this policy. We act as the controller of the personal information described here.

2. The platforms and processors we use

Our Website and store run on the Shopify e-commerce platform (Shopify Inc.), which hosts the site and processes orders on our behalf. Payments are handled by our payment processor (such as Shopify Payments / Shop Pay), which collects and processes payment details directly under its own security standards. Where web analytics is enabled, we use Google Analytics (Google LLC) to understand site usage. These providers process data as our service providers or as independent controllers under their own privacy policies.

3. Categories of personal information we collect

4. How we use personal information

• To respond to inquiries, prepare quotes, and provide the Services you request.
• To communicate about your project, including updates, drafts, and approvals.
• To process payments and maintain accounting, tax, and order records.
• To operate, secure, maintain, and improve the Website.
• To prevent fraud and misuse and to protect our rights and users.
• To comply with legal obligations and enforce our agreements.

5. Legal bases for processing

Where the EU/UK General Data Protection Regulation applies, we process personal information on these legal bases: performance of a contract (to provide the Services), consent (for example, non-essential cookies), legitimate interests (to operate, secure, and improve our business), and compliance with legal obligations (such as tax recordkeeping). Where we rely on consent, you may withdraw it at any time.

6. Cookies and analytics

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For a detailed list, including cookie names and durations, see our Cookie Policy. You can opt out of Google Analytics by declining analytics cookies where a consent banner is shown, or by using Google's opt-out browser add-on.

7. How we disclose personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as follows:

• Service providers — Shopify (hosting and store operations), our payment processor, and analytics providers, who process data on our behalf under contract.
• Legal and safety — when required by law, subpoena, or regulation, or to protect rights, property, and safety.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, where information may be transferred as part of the transaction.

8. Data retention

We keep personal information only as long as necessary for the purposes described here. As general guidance: order and financial records are retained for at least seven (7) years to meet tax and legal requirements; inquiry and quote correspondence is typically retained for up to 24 months; and analytics data is retained according to the analytics provider's settings. When information is no longer needed, we delete or anonymize it.

9. Data security

We and our providers maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit on our Website and access controls. No system is completely secure, however, and we cannot guarantee absolute security.

10. International data transfers

We are based in the United States, and our providers may process data in the United States and other countries. If you access the Website from outside the United States, you understand that your information may be transferred to and processed in the United States, where data-protection laws may differ from those of your country.

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Access / know — to learn what personal information we hold and how we use it.
• Correction — to fix inaccurate or incomplete information.
• Deletion — to request deletion, subject to legal exceptions.
• Portability — to receive certain information in a portable format.
• Opt out — of any sale or sharing of personal information, targeted advertising, and certain profiling.
• Limit / object — to limit or object to certain processing.
• Non-discrimination — we will not discriminate against you for exercising your rights.

To submit a request, email support@woodalixcraft.com with the details of your request. We will verify your identity before responding and will respond within the time required by law — generally within 45 days, with an extension where permitted. You may use an authorized agent where the law allows.

12. Colorado residents (Colorado Privacy Act)

If you are a Colorado resident, you have the rights described above under the Colorado Privacy Act, including the right to opt out of the sale of personal data, targeted advertising, and certain profiling. If we decline your request, you may appeal that decision by replying to our response or contacting us at the email above; we will inform you of the outcome of the appeal. If you have concerns about the appeal, you may contact the Colorado Attorney General.

13. California residents (CCPA/CPRA)

If you are a California resident, you have the right to know, delete, and correct your personal information, to opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. As stated above, we do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

14. EEA/UK residents (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the rights described above and the right to lodge a complaint with your local data-protection supervisory authority. Where processing is based on consent, you may withdraw consent at any time without affecting prior processing.

15. Do Not Track and opt-out signals

Because there is no common industry standard for "Do Not Track" signals, our Website may not respond to them uniformly. Where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control.

16. Children's privacy

The Website and Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

17. Changes to this policy

We may update this Privacy Policy from time to time. Material changes take effect when posted on this page, with a revised "Last updated" date above. Please review this page periodically.