Privacy Policy

At Sandstone West (“we,” “our,” or “us”), accessible at sandstonewest.com, we respect and prioritize your privacy. We are committed to safeguarding your personal data and ensuring transparency in how it is collected, used, and protected. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of personal data when you use our website and services, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Commitment to Privacy and Data Protection

We are dedicated to upholding the highest standards of privacy and data protection. Whether you are browsing our website, reaching out via customer support, or making purchases, your data will be processed securely and lawfully, with your privacy continuum in mind at every stage.

2. Scope of Policy and Data Controller Role

This Privacy Policy applies to all users of sandstonewest.com and covers all personal data processed through our online platforms, communications, and transactions. For the purposes of data protection legislation, Sandstone West acts as the data controller—in other words, we determine the means and purposes of processing your personal data.

3. Categories of Data Processed

We may collect and process various categories of personal data, including but not limited to:

a. Usage Data
Information automatically collected when you interact with our website, including IP address, browser type, device type, access times, visited pages, referring URLs, and session duration.

b. Account Data
Identifiers provided upon account creation or interaction, such as your full name, billing/shipping address, email address, and phone number.

c. Profile Data
Information about your preferences, purchase history, product interests, account settings, and behavioral trends on sandstonewest.com.

d. Communication Data
Records of communications you initiate with us, including customer support requests, inquiries, feedback, or chat transcripts.

e. Technical Data
Data related to your device and system configuration, including operating system, hardware information, browser plug-ins, screen resolution, and mobile identifiers.

f. Transaction Data
Details of products or services purchased, purchase timestamps, payment method (excluding full payment details, which are handled by secure third-party processors), shipping information, and order history.

g. Preference Data
Marketing communication preferences, opt-in/opt-out status, and expressed interests in specific product categories.

4. Legal Bases for Processing

We rely on one or more of the following legal bases to process your personal data:

– Performance of a contract: Where processing is necessary to fulfill our agreement with you (e.g., to provide products or services you request).
– Legitimate interests: For activities that help us operate and improve sandstonewest.com, provided they do not override your data protection rights.
– Legal obligation: Where processing is required under applicable laws, such as for tax or regulatory compliance.
– Consent: Where voluntary consent is given, notably for marketing communications or certain cookies.

5. Your Rights

In accordance with GDPR and, where applicable, CCPA, you possess the following rights:

– Right of access: Obtain confirmation of whether your data is being processed and access it.
– Right of rectification: Request corrections to inaccurate or incomplete personal information.
– Right to erasure: Request deletion of personal data in certain cases (“right to be forgotten”).
– Right to restriction: Ask us to limit processing where you contest data accuracy or object to processing.
– Right to data portability: Obtain your data in a structured, commonly used, machine-readable format and transfer it to another controller.
– Right to object: Object to processing based on legitimate interests, direct marketing, or automated decision-making.

To exercise any of these rights, please contact us at [email protected]. We will respond to all legitimate requests in accordance with applicable laws.

6. Security Measures

We employ robust technical and organizational safeguards to protect your personal data, including:

– Encryption protocols for data transmission and storage
– Role-based access restrictions to sensitive systems
– Regular data backups and secure storage
– Staff training on data privacy and protection practices
– Continuous monitoring and cybersecurity assessments

Despite our best efforts, no system is entirely immune from security risks. We encourage strong passwords and caution when sharing sensitive information.

7. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States, where Sandstone West or its service providers operate. These transfers will only occur in compliance with legal safeguards, including Standard Contractual Clauses approved by the European Commission and adherence to regional data transfer obligations.

8. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected. Retention periods vary based on data type:

– Usage and Technical Data: up to 12 months
– Account and Profile Data: while the account remains active or until a deletion request is received
– Transaction Data: up to 7 years for tax and legal compliance
– Communication Data: up to 24 months
– Preference Data: until marketing preferences are updated or withdrawn

When we no longer need your personal data, it will be securely deleted or anonymized.

9. Cookie Policy

We use cookies and similar technologies on sandstonewest.com to enhance site functionality, analyze performance, remember user preferences, and deliver personalized advertising. Our cookie categories include:

– Essential: Necessary for enabling basic functions of the site
– Functional: Remember settings and facilitate enhanced user experience
– Analytics: Provide us with insights into site usage and user flow
– Performance: Monitor website system performance and uptime

10. Cookie Management and Compliance with GDPR & CCPA

You may manage or disable cookies through your browser settings or by using our on-site cookie consent tools that comply with GDPR and CCPA opt-in requirements. Non-essential cookies will not be placed unless and until you provide explicit consent. Additionally, California residents have the right to opt-out of the sale or sharing of personal data as defined under CCPA.

11. Special Protections for Children Under 13

sandstonewest.com is not designed for or directed toward children under the age of 13. We do not knowingly collect or solicit personal information from minors. If we discover that we have inadvertently collected such information without parental consent, we will promptly delete it. Parents or guardians who believe their child has submitted personal data should contact us at [email protected].

12. Policy Updates & User Notifications

We reserve the right to update or amend this Privacy Policy at our discretion. Changes will be posted on this page, and where appropriate, you will be notified via email or through prominent messages on sandstonewest.com. Your continued use of our services following any changes constitutes acceptance of the new terms.

13. Contact

If you have questions, concerns, or wish to exercise your data rights, please contact us at:

Email: [email protected]

We take all privacy-related inquiries seriously and aim to respond fully and promptly.

This Privacy Policy is in full alignment with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data privacy frameworks. For all privacy-related decisions or concerns, you are encouraged to reach out to [email protected].