0
0

Privacy Policy

1. Who We Are

Deck Builder Outlet ("we," "us," or "our") is an online retailer of deck, porch, and outdoor building products, operating at deckbuilderoutlet.com. We have been in the deck products industry since 1993.

For the purposes of applicable data protection law — including the EU General Data Protection Regulation (GDPR) and UK GDPR where applicable — Deck Builder Outlet acts as the data controller for personal data collected through this website.

Data Controller Contact

Deck Builder Outlet

2. Data We Collect

Information You Provide Directly

  • Account data: name, email address, password (hashed), billing and shipping address
  • Order data: product selections, order dimensions (height, width, color choices), quantity, payment method type (we do not store full card numbers — payment is processed via PCI-compliant third parties)
  • Quote/inquiry data: name, email, phone number, rough opening measurements, and any notes submitted via our quote or contact forms
  • Communications: emails, phone call records, and chat messages you initiate with us

Information Collected Automatically

  • IP address and approximate geographic location
  • Browser type, operating system, and device type
  • Pages visited, time on page, referring URL, and click paths
  • Session identifiers and cookie data (see Section 9)

Information from Third Parties

  • Payment processors (transaction confirmation and fraud signals)
  • Freight carriers (delivery status and address validation)
  • Analytics platforms (aggregated site usage data)

3. How We Collect It

We collect personal data through:

  • Direct input via checkout, account registration, quote request forms, and contact forms on our website
  • Automated technologies including cookies, web beacons, and server logs when you browse our site
  • Third-party services integrated into our site (payment gateways, analytics, freight APIs)
  • Telephone and email communications when you contact us directly

4. Why We Use Your Data (Legal Bases)

We only process personal data where we have a lawful basis to do so. The table below outlines our purposes and the corresponding legal grounds under GDPR Article 6.

Purpose Legal Basis
Processing your order and delivering products Contract performance (Art. 6(1)(b))
Sending order confirmations and shipping notifications Contract performance (Art. 6(1)(b))
Responding to quote requests and customer inquiries Contract performance / Legitimate interests (Art. 6(1)(b)/(f))
Fraud prevention and payment security Legitimate interests (Art. 6(1)(f))
Legal and regulatory compliance (tax records, etc.) Legal obligation (Art. 6(1)(c))
Improving our website and product range Legitimate interests (Art. 6(1)(f))
Marketing communications (email newsletters, promotions) Consent (Art. 6(1)(a)) — opt-in only

We do not use your personal data to make fully automated decisions that produce legal or similarly significant effects. We do not sell your personal data to third parties.

5. Sharing Your Data

We share personal data only where necessary, with the following categories of recipients:

  • Payment processors (e.g., Stripe, PayPal) — to process transactions securely. These processors are PCI-DSS compliant and act as independent data controllers for payment data.
  • Freight and logistics carriers — to arrange delivery of your order (name, address, contact number)
  • IT and hosting providers — for website infrastructure and email services, operating under data processing agreements
  • Analytics providers (e.g., Google Analytics) — for anonymized/aggregated site performance data
  • Legal or regulatory authorities — if required by law, court order, or to protect our legal rights

We do not rent, sell, or share your personal data with advertisers or data brokers.

6. International Data Transfers

Deck Builder Outlet is based in the United States. If you are accessing our website from the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data transfer restrictions, please be aware that your personal data may be transferred to and processed in the United States.

Where such transfers occur, we rely on one or more of the following safeguards:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • The EU-US Data Privacy Framework (where our processors are certified)
  • Adequacy decisions by the relevant supervisory authority

You may request details of the specific safeguards in place for any transfer by contacting us at the address in Section 13.

7. Data Retention

We retain your personal data for as long as necessary for the purposes set out in this policy, and in accordance with applicable legal obligations:

  • Order and transaction records: 7 years (US tax and accounting obligations)
  • Account data: Duration of the account plus 2 years after last activity
  • Quote and inquiry data: 2 years from the date of inquiry
  • Marketing consent records: Duration of consent plus 3 years
  • Website usage logs: 13 months (standard analytics cycle)

When data is no longer required, we securely delete or anonymize it.

8. Your Rights

Depending on your location, you may have the following rights over your personal data. EU/UK residents have these rights under the GDPR and UK GDPR. US residents may have additional rights under applicable state privacy laws (e.g., CCPA for California residents).

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.

Right to Restrict Processing

Ask us to pause processing your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests, including direct marketing.

Right to Withdraw Consent

Withdraw consent at any time where processing is consent-based, without affecting prior processing.

Right to Lodge a Complaint

Complain to your local data protection supervisory authority.

To exercise any of these rights, contact us at privacy@deckbuilderoutlet.com . We will respond within 30 days. We may need to verify your identity before processing your request.

California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information. To submit a CCPA request, email us at privacy@deckbuilderoutlet.com .

9. Cookies & Tracking

We use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device that help us operate the site and understand how it is used.

Types of Cookies We Use

  • Strictly necessary cookies: Required for the shopping cart, checkout, and account login. These cannot be disabled without breaking site functionality.
  • Performance / analytics cookies: Collect anonymized data on page visits, traffic sources, and session duration (e.g., Google Analytics). We apply IP anonymization.
  • Functional cookies: Remember your preferences (e.g., previously viewed products).
  • Marketing / retargeting cookies: Used only with your explicit consent to show relevant advertising on third-party platforms.

When you first visit our site, you will see a cookie consent banner. You can manage your preferences at any time via our cookie settings link in the website footer. Withdrawing consent for non-essential cookies will not affect prior processing.

For more information about managing cookies in your browser, visit aboutcookies.org .

10. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include:

  • SSL/TLS encryption for all data transmitted through our website
  • PCI-compliant payment processing (card data is never stored on our servers)
  • Access controls limiting staff access to personal data on a need-to-know basis
  • Regular security assessments of our web infrastructure

No method of transmission over the internet is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately at privacy@deckbuilderoutlet.com .

11. Children's Privacy

Our website and services are intended for adults and are not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered customers by email.

We encourage you to review this policy periodically. Your continued use of our website after an update constitutes acceptance of the revised policy.

13. Contact & Complaints

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us:

Deck Builder Outlet — Privacy Enquiries

We aim to respond to all data-related requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your relevant data protection authority. EU residents may contact the supervisory authority in their EU member state. UK residents may contact the ICO at ico.org.uk .

0
0
Your Cart
Your cart is emptyReturn to Shop