Privacy Policy
Your privacy matters. Here's what data we collect, how we use it, who we share it with, and the rights you have over your personal information — explained clearly and honestly.
Last updated: August 29, 2026 · Hearthside Supply LLC
Transparency
We tell you what data we collect and why — no hidden tracking, no buried clauses.
Data Protection
Your information is encrypted, access-controlled, and never sold to third parties.
Limited Sharing
We share data only with the partners needed to fulfill your order — processors, carriers, and analytics.
Your Rights
You can access, correct, export, or delete your data at any time — just ask.
What data we collect
We collect only the data needed to process your orders, provide support, and improve our store. Here's the full picture — categorized and explained.
Personal & Contact Information
Your name, email address, phone number, and shipping address — collected when you create an account, place an order, request a quote, subscribe to our newsletter, or contact our team.
Payment Information
Billing address and payment details. Full card numbers are processed by our PCI-compliant payment processor (Wix Payments) and never stored on our servers. We retain only the last four digits and card type for order reference.
Order & Transaction Information
Products ordered, quantities, pricing, shipping method, order history, and tracking numbers — used to fulfill, track, and support your purchases.
Quote Request Information
Project details you share when requesting a quote — product interest, budget range, installation timeline, and property details. Used to prepare personalized pricing and recommendations.
Communication Data
Messages you send via our contact forms, live chat (Tidio), and email — including the content of your inquiries and our responses. Used to provide support and improve service.
Browsing & Technical Data
Pages visited, search queries, device type, browser, IP address, and approximate location — collected through cookies and analytics to improve your shopping experience and site security.
How we use your data
We use your data to do four things — and only these four. We don't sell your data, and we don't use it to build advertising profiles.
Process & Fulfill Orders
Process payments, prepare and ship products, provide order tracking, and handle returns and warranties.
Communicate With You
Send order confirmations, shipping updates, quote responses, and respond to your questions and support requests.
Advertising & Personalization
With your consent, we use tools like Google Ads to show relevant ads to people who may be interested in our products, including past visitors. You can opt out of personalized ads at any time.
Improve Our Store
Analyze browsing and purchase patterns to improve product recommendations, site performance, and user experience.
Security & Fraud Prevention
Detect and prevent fraudulent transactions, protect against unauthorized access, verify identity, and secure our platform.
Legal Compliance
Retain transaction records for tax and accounting purposes, respond to legal requests, and meet our regulatory obligations.
Who we share data with
We share your data only with the partners needed to fulfill your order and operate our store — and never for advertising. Here's exactly who gets what.
Payment Processor (Wix Payments)
Our PCI-compliant payment processor (Wix Payments, branded as Base44 Payments) handles your transactions. They receive the data needed to authorize and settle your payment — your full card number never touches our servers.
Shipping & Freight Carriers
Carriers such as FedEx, UPS, and specialized freight companies receive your name, phone number, and shipping address to deliver your order. They do not receive your payment information.
Google (Ads, Analytics & Search Console)
We use Google Ads to promote our products and Google Analytics to understand site usage. Google may collect cookies and device data through its own tags on our site. We do not share your personal data directly with Google — see our Advertising section below.
Tidio (Live Chat)
Our live chat widget is provided by Tidio. When you use the chat, Tidio processes your messages, name, and email to deliver and improve the chat service. Tidio's own privacy policy applies to data they collect.
Email Service (Resend)
We use Resend to send transactional and marketing emails on our behalf. They receive your email address and name to deliver our messages — they do not use your data for their own purposes.
We Never Sell Your Data
We do not sell, rent, or trade your personal information to third parties. We share data only with the service providers listed above — and only the minimum each needs to perform their function. We never share data in exchange for payment.
Cookies & tracking
Cookies are small files stored on your device. We use them to keep the store working and to understand how to improve it — here's the breakdown.
Essential Cookies
Required for the store to function — shopping cart, checkout, account login, and security. These cannot be disabled; without them the store won't work.
Analytics Cookies (Google Analytics)
Google Analytics cookies help us understand how visitors use the site — pages visited, session duration, and traffic sources. Data is aggregated and used to improve the site.
Advertising Cookies (Google Ads)
Google Ads cookies allow us to measure ad performance and show relevant ads to people who have visited our site (remarketing). You can opt out of personalized ads via Google Ads Settings.
Functional Cookies (Tidio Chat)
Tidio live chat uses cookies to enable the chat widget and remember your chat session. These allow our support team to assist you in real time.
Preference Cookies
Remember your settings — recently viewed products, cart contents across sessions, and display preferences — for a smoother, personalized experience.
Managing Cookies
You can control and delete cookies through your browser settings. Disabling essential cookies will affect site functionality. See our Cookie Policy page for more detail.
Your privacy rights
You have control over your data. Here are the rights you can exercise at any time — and how to exercise them. To make a request, contact us using the details below.
Access Your Data
Request a copy of the personal data we hold about you. We'll provide it within 30 days.
Correct Your Data
Ask us to fix inaccurate or incomplete information. You can also update it yourself in your account settings.
Export Your Data
Receive your data in a portable, machine-readable format so you can take it with you.
Delete Your Data
Request that we delete your personal data, subject to legal retention requirements for tax and order records.
Opt Out of Marketing
Unsubscribe from marketing emails at any time using the unsubscribe link in every email or via your account.
Do Not Sell or Share (CCPA)
California residents: request that we not sell or share your personal information. We do not sell your data, but you may submit this request to confirm your preference.
Limit Sensitive Data Use
Request that we limit the use of sensitive personal information to what's necessary to provide our services.
Withdraw Consent
Withdraw consent for data processing at any time — contact us and we'll honor your request within 30 days.
Non-Discrimination
We will not discriminate against you for exercising your privacy rights. You'll receive the same service regardless of whether you exercise these rights.
How we protect your data
We take data security seriously. Here's how we protect your information from unauthorized access, use, or disclosure.
SSL Encryption
All data is transmitted over encrypted connections using industry-standard SSL/TLS protocols.
PCI Compliance
Payment processing meets PCI-DSS requirements — the highest standard for card data security.
Access Controls
Internal access to personal data is restricted to authorized staff and logged for audit.
Secure Storage
Data is stored on secured, access-controlled servers with regular security reviews.
How we use advertising
We use advertising to reach customers who may be interested in our products. We're committed to transparency about the tools we use and the choices you have. Here's exactly how advertising works on our site — and how to opt out.
Google Ads
We use Google Ads to promote our products across Google Search, the Display Network, and Google Shopping. Google may set cookies and collect data through our ad tags to measure ad performance and show ads to relevant audiences.
Remarketing
We may use remarketing to show ads to people who have previously visited our website. This uses a cookie stored in your browser to recognize you across Google's advertising network. We do not share your personal data directly with Google for this purpose — Google collects this data through its own tags.
Conversion Tracking
We use Google Ads conversion tracking to measure how effectively our ads lead to purchases. This collects a conversion cookie when you complete an action after clicking one of our ads. The data is aggregated and used to optimize our ad spend.
Your Choices
You can opt out of personalized advertising by visiting Google Ads Settings (ads.google.com/settings), using the Digital Advertising Alliance opt-out (aboutads.info/choices), or disabling advertising cookies in your browser settings. Opting out does not remove ads — it only makes them less personalized.
Who we are
This privacy policy is published by Hearthside Supply LLC, a limited liability company registered in the United States. We operate the online store at hearthsidesupply.com, selling premium saunas, hot tubs, cold plunges, steam showers, and swim spas with nationwide delivery.
Hearthside Supply LLC
3240 B St NW, Auburn, WA 98001
Email: sales@hearthsidesupply.com
Phone: +1 (253) 264-2435
Hours: Mon–Fri, 9am–6pm PT, Sat–Sun: Closed
How long we keep your data
We retain your personal data only as long as necessary to provide our services and meet our legal obligations:
Order & transaction records: 7 years, to comply with U.S. tax and accounting requirements.
Account data: While your account is active. Deleted within 30 days of your request.
Marketing data: Until you unsubscribe. We remove you from marketing lists immediately upon opt-out.
Quote requests: 12 months, unless you become a customer.
Support communications: 24 months, for quality and training purposes.
Server logs & technical data: 90 days, for security and troubleshooting.
Privacy for children
Our website and products are intended for adults. We do not knowingly collect personal information from children under 16, and we do not direct our marketing to minors. If you believe a child has provided us with personal data, please contact us at sales@hearthsidesupply.com and we will promptly delete it in accordance with applicable law, including the Children's Online Privacy Protection Act (COPPA).
Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our site. We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of our website after a policy change constitutes acceptance of the updated policy.
Privacy questions & requests
To exercise any of your privacy rights, ask questions about this policy, or submit a data request, contact us using the details above. We'll respond to all privacy-related requests within 30 days. For faster service, include "Privacy Request" in your email subject line.
Common privacy questions
We collect your name, email address, phone number, shipping address, and billing address when you place an order, create an account, request a quote, or contact us. We also collect browsing and technical data — pages visited, search queries, IP address, and device information — through cookies and analytics. Payment card numbers are handled entirely by our PCI-compliant payment processor (Wix Payments) and never stored on our servers.
No. We never sell, rent, or trade your personal information to third parties. We share data only with the service providers needed to operate our store and fulfill orders — payment processors, shipping carriers, analytics, and marketing tools — and only the minimum data each needs. We never share data in exchange for payment.
Yes, with appropriate controls. We use Google Ads to promote our products, which may include remarketing — showing ads to people who have previously visited our site. Google collects data through its own tags on our site, and we do not share your personal data directly with Google for advertising. You can opt out of personalized advertising via Google Ads Settings (ads.google.com/settings) or by disabling advertising cookies in your browser.
We retain personal data only as long as needed to provide our services. Order and transaction records are retained for 7 years to meet tax and legal compliance requirements. Account data is kept while your account is active. Marketing data is retained until you unsubscribe. You can request deletion at any time, subject to legal retention obligations.
Contact us at sales@hearthsidesupply.com with your request. We'll delete your account and personal data, subject to legal retention requirements (such as tax records for completed orders). Data that must be retained for compliance will be anonymized where possible.
Cookies are small files stored on your device. We use essential cookies (required for cart, checkout, and login), analytics cookies (Google Analytics), advertising cookies (Google Ads remarketing), functional cookies (Tidio live chat), and preference cookies (recently viewed products, display settings). You can control and delete cookies through your browser settings. Disabling essential cookies will affect site functionality.
Yes. Every marketing email includes an unsubscribe link. You can also opt out via your account settings or by contacting us. Transactional emails — order confirmations, shipping updates, and quote responses — are not marketing and will continue, as they're necessary to fulfill your order.
Yes. All payment data is transmitted over SSL-encrypted connections and processed by Wix Payments (Base44 Payments), a PCI-compliant provider. We never store your full card number on our servers — only the last four digits and card type for order reference. Our payment systems meet PCI-DSS security standards.
If you're a California resident, you have the right to know what personal data we collect, request deletion, correct inaccurate data, opt out of the sale or sharing of your personal information, and not be discriminated against for exercising these rights. We do not sell your data. To exercise any right, contact us at sales@hearthsidesupply.com. We'll respond within 30 days.
No. Our website and products are intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us and we'll delete it promptly in accordance with COPPA.
In the event of a data breach affecting your personal information, we'll notify affected users promptly and take immediate steps to secure the data. We're committed to transparency — we'll tell you what happened, what data was affected, and what we're doing about it, in accordance with applicable laws.
You can reach us by email at sales@hearthsidesupply.com, by phone at +1 (253) 264-2435, or by mail at Hearthside Supply LLC, 3240 B St NW, Auburn, WA 98001. We'll respond to all privacy requests within 30 days.
Questions about your privacy?
If you have questions about this policy, want to exercise your privacy rights, or need help with your data, our team is here to help.