Privacy Policy
Privacy Policy
Last updated: May 8, 2026
This Privacy Policy explains how Gerhards Kitchen Bath & Lighting Store ("Gerhards", "we", "us") collects, uses, and protects information when you visit gerhardsstore.com (the "Site").
1. Information We Collect
- Information you provide: name, email, phone, shipping/billing address, payment details (processed by our payment provider — we do not store full card numbers), saved projects, order history.
- Automatic information: IP address, browser type, device, pages viewed, referrer, search terms, and similar analytics data.
- Cookies: session cookies for sign-in, preference cookies, and analytics cookies. You can disable non-essential cookies in your browser.
2. How We Use Information
- Process and fulfill orders, including communication with our distribution and shipping partners.
- Provide customer support and respond to inquiries.
- Send transactional emails (order confirmations, shipping updates, password resets).
- Send marketing emails only if you opt in; you may unsubscribe at any time.
- Improve the Site through analytics and usage measurement.
- Detect, prevent, and respond to fraud or security incidents.
3. Sharing of Information
We do not sell your personal information. We share data with:
- Payment processors and tax-calculation providers necessary to complete transactions.
- Shipping carriers to deliver your orders.
- Service providers (email, hosting, analytics) bound by confidentiality agreements.
- Legal authorities if required by law or to protect our rights.
4. Data Retention
We retain account and order information as long as your account is active and as needed to comply with legal, tax, and accounting obligations. You may request deletion of your account at any time via your account settings.
5. Your Rights
You may request access to, correction of, or deletion of your personal data. California residents have additional rights under CCPA, including the right to know what categories of data we collect and to opt out of any sale (we do not sell). Contact us at the email below to exercise these rights.
6. Security
We use industry-standard technical and organizational measures: encrypted connections (TLS), hashed passwords (Argon2id), restricted access to systems holding personal data, and regular security review. No method of transmission over the internet is 100%% secure, but we work to protect your information.
7. Children
The Site is not directed to children under 13. We do not knowingly collect information from children under 13.
8. Changes
We may update this Policy. The "Last updated" date above reflects the most recent revision.
9. Contact
Questions about your privacy? Email privacy@gerhardsstore.com or use our contact page.
Authentication provider
We use Clerk, Inc. (a U.S. company) to verify your email address and manage your sign-in session. When you sign in, your email address, a one-time 6-digit code, and basic session metadata (IP address, browser, timestamp) are sent to Clerk and stored on Clerk's systems in the United States. We do not share your purchase history, project data, or payment information with Clerk. Clerk acts as our data processor under a signed Data Processing Agreement. You can request deletion of your Clerk-stored data by emailing privacy@gerhardsstore.dev.