Privacy Policy

Information We Collect

When you use FloorFreight, we collect information that helps us process your orders, improve your experience, and keep our site running smoothly. The types of information we collect include:

• Account information — your name, email address, phone number, and shipping address when you create an account or place an order.
• Order information — the products you purchase, order totals, shipping details, and delivery preferences.
• Payment information — payment is processed securely through Stripe. We never store your full credit card number, CVV, or billing details on our servers.
• Sample requests — the products you request samples for and the shipping address associated with those requests.
• Waitlist and room planner — if you join a product waitlist or use our room planner tool, we collect the email address you provide.
• Usage data — we collect anonymized data about how you browse the site, including pages visited, time on site, device type, and browser information. This data does not personally identify you.

How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders, including coordinating shipments with our manufacturing partners.
• Sending order confirmations, shipping notifications, and delivery updates.
• Following up on sample requests to help you find the right flooring for your project.
• Sending a welcome series when you create an account, including helpful guides on choosing and installing flooring.
• Improving the site experience based on anonymized usage patterns, such as which categories are most popular or where users encounter friction.

We do not sell your data to third parties. Ever.

How We Share Your Information

We share your information only with the service providers necessary to operate FloorFreight and fulfill your orders:

• Shaw Floors — your name and shipping address are shared with Shaw Floors so they can ship your order directly to you.
• Stripe — our payment processor. Stripe handles all payment data in accordance with PCI DSS standards.
• Resend — our email service provider, used to send transactional emails like order confirmations and shipping updates.
• Vercel — our hosting provider. Vercel processes requests to serve the site but does not access or store your personal data independently.

We do not share your data with advertisers or data brokers.

Cookies and Analytics

FloorFreight uses a small number of cookies to keep the site functioning properly:

• Cart and session cookies — these keep track of your shopping cart contents and login session. They are essential for the site to work and cannot be disabled.
• Analytics — we use privacy-focused analytics to understand how visitors use the site. We do not track personally identifiable information (PII) through analytics, and we do not use third-party advertising trackers.

You can disable non-essential cookies in your browser settings at any time. Disabling cookies may affect cart functionality.

Your Rights

You have the following rights regarding your personal information:

• Request a copy of your data — you can ask us for a complete copy of the personal information we hold about you.
• Request deletion — you can ask us to delete your account and all associated personal data. We will comply within 30 days, except where we are required by law to retain certain records (such as order history for tax purposes).
• Unsubscribe from marketing — every marketing email includes an unsubscribe link. You can opt out at any time. Transactional emails (order confirmations, shipping updates) will still be sent as needed.
• California residents (CCPA) — if you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. Since we do not sell personal information, there is nothing to opt out of — but you may still exercise your other rights by contacting us.

Data Security

We take the security of your information seriously and implement the following measures:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Payment processing is handled entirely by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security compliance.

While no system is perfectly secure, we continuously review and update our security practices to protect your data.

Contact

If you have questions about this privacy policy or would like to exercise any of your rights, please reach out to us at hello@floorfreight.com with the subject line “Privacy Request.” We will respond within 10 business days.