Stone Yard, Inc. Privacy Policy

Last updated: November 3, 2026

1. Who we are and what this policy covers

This Privacy Policy explains how Stone Yard, Inc. ("Stone Yard," "we," "us," or "our"), collects, uses, discloses, and retains personal information, and the choices you have.

This policy applies to our website at stoneyardinc.com, our online store, and our sales and customer service communications, including by phone, email, and website forms.

We design, manufacture, and sell handcrafted planters, tables, seating, fountains, fire tables and bowls, mantels, pedestals, and other site furnishings for hospitality, commercial, and residential projects. Our customers include designers, architects, contractors, trade professionals, businesses, and homeowners.

2. Information we collect

Depending on how you interact with us, we collect the following types of personal information:

• Contact details and identifiers: Your name, telephone number, email address, billing and shipping addresses, and customer or account identifiers.
• Account information: Information used to create and manage your online account, including sign-in credentials, preferences, and settings. Our online store and account functionality are provided through BigCommerce.
• Order and transaction information: Products you view, add to your cart or wishlist, purchase, return, exchange, or cancel; order history; and transaction details such as payment confirmations.
• Business and trade account information: Your company name, professional role or profession type, business contact details, and any business license or resale number you provide when applying for a trade account.
• Project and communication information: Quote requests, sample or catalog requests, project specifications, measurements, drawings or photos you choose to share, delivery or job-site details, information you submit through our forms, and the contents of emails and customer service records.
• Website and device information: IP address, cookie and similar online identifiers, browser type and language, device and operating system, referring pages, pages visited, interactions with our website, and the dates and times of visits.
• Preferences: Product interests, preferred finishes, and project requirements you share with us, along with your email and cookie preferences.

We collect information directly from you when you create an account, apply for a trade account, place an order, request a quote, samples, or a catalog, complete a form, subscribe to our newsletter, or contact us. We also collect certain information automatically through cookies and similar technologies.

We may receive information from payment and shipping providers, advertising and analytics providers, and social media platforms when you interact with our pages or advertisements.

We may also receive your information from another person who provides your details as a project or delivery contact.

Phone calls. We do not record telephone calls.

Payment information. We use Authorize.Net to process credit card payments. If you select another payment option offered at checkout, the provider for that option processes the information needed to complete your transaction. Payment details are handled through the relevant payment provider's systems, and its processing is subject to its privacy notice. We receive the information needed to confirm and administer transactions, but we do not store full payment card numbers or CVV/CVC security codes in our customer relationship management system, Acumatica, or other business records.

We do not request Social Security numbers. Please do not send payment card numbers, Social Security numbers, account passwords, or other sensitive information by email.

Certain account credentials and payment details may be considered sensitive personal information under applicable law. We process this information for account access, transactions, security, fraud prevention, and other permitted operational or legal purposes.

3. How we use and retain your information

We use personal information to:

• Prepare quotes, process orders, coordinate custom products, arrange shipping, and fulfill your requests.
• Create and manage online accounts, shopping carts, returns, and exchanges.
• Review trade applications and manage trade accounts.
• Send requested finish samples, catalogs, lookbooks, and product information.
• Communicate with you by phone or email about products, quotes, orders, delivery, and customer service.
• Provide warranty assistance and follow-up support.
• Send marketing emails and suggest products related to your interests or purchases, subject to your choices.
• Operate, maintain, and improve our website and understand how it is used.
• Measure advertising performance and deliver relevant online advertising.
• Protect accounts and payments, prevent fraud, resolve disputes, and comply with legal, tax, accounting, and reporting requirements.

Newsletter and marketing email

We may send Stone Yard marketing emails to customers who have purchased from Stone Yard and to people who subscribe to our newsletter, as permitted by law.

You can unsubscribe using the link in a marketing email or by contacting us using the details in section 7. Unsubscribing from marketing emails does not stop order confirmations, shipping updates, or other communications needed to complete a transaction or respond to your requests.

A purchase from or newsletter subscription to Stone Yard does not subscribe you to a sister brand's marketing emails.

How long we retain information

Retention depends on the type of information, the reason it was collected, our relationship with you, and applicable legal requirements. We consider open orders and projects, warranty obligations, tax and accounting requirements, fraud prevention, disputes, and the sensitivity of the information.

• BigCommerce records: Our current practice is to retain customer and transaction records while our BigCommerce subscription remains active, subject to valid deletion requests and applicable legal requirements.
• Acumatica records: We retain information in our enterprise resource planning system as needed to maintain business operations, support customer relationships and orders, meet legal and reporting requirements, and prevent fraud.
• Marketing and preference records: We retain information as needed to manage marketing, subscriptions, and privacy choices. We may keep limited information after an unsubscribe or advertising opt-out request so that we can continue to honor it.
• Website and tracking information: Retention varies by the technology and provider involved and the purposes for which the information is used, including website operation, security, analytics, and advertising measurement.

You may request deletion using the methods in section 7. After reviewing your request and verifying your identity where required, we will coordinate deletion of eligible personal information from our customer, online store, and other relevant systems. We may retain information when permitted or required by law, including to complete transactions, handle warranty claims, meet accounting and recordkeeping obligations, prevent fraud, resolve disputes, or honor your privacy choices.

4. How we disclose information

We do not sell personal information for money. Certain disclosures to marketing and advertising providers, including customer contact information and information collected through advertising technologies, may be considered a "sale," "sharing," or processing for targeted advertising under state privacy laws. Section 5 explains your choices.

Marketing providers and sister brands. We share customer contact information with providers that help us send, deliver, and measure Stone Yard marketing and advertising. We do not share customer contact information with sister brands for their marketing.

We may disclose information in the following circumstances:

• Website and business systems: BigCommerce, Acumatica, and supporting technology providers process contact, account, order, project, and website information needed to operate our store and business systems.
• Payment processing: Authorize.Net and other providers involved in a transaction receive the information needed to process payments, confirm transactions, and help prevent fraud.
• Shipping and delivery: Shipping providers receive the contact, delivery, and order information needed to deliver your purchases.
• Customer communications: Email and support providers process contact details, preferences, and communications to help us respond to you and send our messages.
• Advertising and analytics: Marketing and advertising providers may receive customer contact information, online identifiers, device information, website activity, and related product or transaction information to help us reach relevant audiences, deliver advertisements, measure campaign performance, and understand website use. These providers include platforms such as Google, Meta, and LinkedIn.
• Legal and safety purposes: We may disclose information to comply with legal obligations or lawful requests, protect rights and safety, investigate fraud, resolve disputes, or obtain professional advice.
• Business transactions: Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to applicable law and privacy protections.

Providers processing information on our behalf are subject to applicable contractual and legal restrictions. Some platform, payment, and advertising providers also process information for their own purposes under their privacy notices.

BigCommerce. Our website and online store are hosted by BigCommerce. BigCommerce processes information associated with store use, customer accounts, and transactions to provide its platform and related services. More information is available in the BigCommerce privacy policy.

For information about our credit card payment provider's practices, see the privacy information available through Authorize.Net.

5. Cookies and website tracking

Our BigCommerce website uses cookies, pixels, and similar technologies. We use Google Analytics and BigCommerce reporting to understand website activity, and we advertise through platforms including Google, Meta, and LinkedIn.

We use Osano to provide cookie consent and preference controls.

These technologies may serve the following purposes:

• Required: Support essential functions such as account access, shopping carts, checkout, and security.
• Personalization: Remember preferences and help tailor your experience.
• Analytics: Help us understand website traffic, customer interactions, and opportunities to improve the site.
• Marketing: Help measure advertising and display relevant advertisements on other websites and platforms.

Managing cookies

Use the Osano cookie preferences controls available on our website to review or change your choices for nonessential cookies. Required cookies cannot be disabled through these controls because they support essential site functions.

You can also use your browser settings to block or delete cookies. Blocking cookies may affect account access, shopping carts, checkout, or other features.

For an additional Google Analytics control, see Google's Analytics opt-out browser add-on. This add-on does not replace your choices for other cookies or advertising technologies.

Targeted advertising and privacy signals

We use website activity and customer contact information to support our advertising. Advertising providers may match information we provide with accounts on their platforms and combine it with information from other websites, apps, or their own services to measure advertisements and show relevant ads.

Depending on where you live and which laws apply, you may have the right to opt out of the sale or sharing of personal information or its use for targeted advertising. Use our website's privacy and cookie controls to manage browser-based tracking. You can also contact us using the details in section 7 to request an opt-out covering customer contact information used for advertising.

We honor recognized opt-out preference signals, including Global Privacy Control, where required by applicable law. Such signals communicate a request to opt out of covered sale, sharing, or targeted advertising. Where we can associate a signal with your account or other information we hold about you, we apply it more broadly as required by law.

Cookie-based choices generally apply to the browser or device where they are made. If you use another browser or device, or delete cookies, you may need to make your choices again. Opting out does not eliminate all advertising; you may still see advertisements that are not personalized using the information covered by your choice.

6. Security and other privacy information

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Please use our designated payment process for payment information and avoid sending sensitive information by email. If a security incident requires notification under applicable law, we will provide the required notices.

Children

Our website and products are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share personal information about children under 16.

If you believe a child has provided personal information to us, please contact us using the details in section 7 so we can review and address the matter.

Other websites

Our website may link to websites operated by other businesses, including sister brands. This policy covers Stone Yard. Please review the privacy policy of any other website you visit.

7. Your rights and how to contact us

Privacy rights

Depending on where you live and the laws that apply, you may have the right to:

• Know whether we process your personal information and obtain information about the categories we collect, their sources, our purposes, and the categories of recipients.
• Access your personal information and receive a copy in a portable format.
• Correct inaccurate personal information.
• Request deletion of personal information.
• Opt out of the sale or sharing of personal information and its use for targeted advertising.
• Limit certain uses or disclosures of sensitive personal information, where applicable.
• Opt out of certain profiling or automated decisions that produce legal or similarly significant effects, where applicable.
• Appeal a decision about a privacy request where applicable law provides that right.

These rights are subject to legal conditions and exceptions. We will not discriminate against you for exercising applicable privacy rights.

Submitting a request

To submit a privacy request:

• Call 877-595-9732.
• Email service@stoneyardinc.com with "Privacy Inquiries" in the subject line.
• Submit a request through our Contact Us page and identify your message as a privacy request.

Please describe your request and provide enough information for us to locate the relevant records. Do not include payment card numbers, Social Security numbers, or passwords.

For access, correction, or deletion requests, we may need to verify your identity using information we already hold or additional information reasonably necessary for verification. We do not require identity verification for an opt-out request beyond information needed to apply the request.

We will review the systems and providers relevant to your request and coordinate the actions needed to honor it. For valid deletion requests, this includes notifying applicable service providers, contractors, and other recipients as required by law. We may retain limited records needed to document and honor your request.

You may use an authorized agent where permitted by law. We may request proof of authorization and, for requests requiring verification, confirmation of your identity or the agent's authority.

We will respond within the time required by applicable law. If we deny a request, we will explain the decision as required. Where an appeal right applies, you may appeal using the same contact methods and identifying your message as a privacy appeal. You may also contact your state attorney general or other appropriate privacy regulator.

Keeping information accurate

Please contact us if your name, address, email address, telephone number, or other account details change. You may also update available information through your online account.

Changes to this policy

We may update this policy as our practices or legal requirements change. The current version will be posted at stoneyardinc.com/privacy-policy/ with its updated date. We will provide any additional notice required by law.

Contact

Stone Yard, Inc.
Attn: Privacy Inquiries
Phone: 877-595-9732
Email: service@stoneyardinc.com
Website: stoneyardinc.com