Kelsey Road LLC (“Kelsey Road”, “we”, “us”) of Upland, California runs kelseyroad.com. This policy explains what information we collect when you visit the site or place an order, how we use it, who we share it with, and the choices you have. We keep it short on purpose: we collect what it takes to sell you ornaments and send them to your door, and not much else.
What we collect
Information you give us
- Order details — your name, email address, shipping address, phone number (optional) and the items you buy.
- Payment details — entered directly into Stripe’s secure payment form. Your card number never touches our servers; we receive only a confirmation, the last four digits and the card brand.
- Email sign-ups — your email address when you join “Letters from Kelsey Road”.
- Messages — anything you send us at [email protected], including photos of a damaged piece.
Information collected automatically
- Your cart and Tree Builder design are stored in your own browser (local storage and the page address), not on our servers, until you check out or share a design link.
- Analytics — we use Google Analytics 4 to understand which pages and collections people look at and whether the site works well. Google Analytics sets cookies and records pages viewed, approximate location (IP addresses are anonymised), device and browser type, and shop events such as adding an item to the cart. We have turned off Google’s advertising and personalisation features. Google’s own policy is at policies.google.com/privacy.
- Server and security logs — our hosting and content-delivery providers record IP addresses, request times and user-agent strings to keep the site up and to block abuse.
How we use it
- To process, ship and support your order, including order confirmations and shipping notices.
- To charge sales tax correctly, which depends on your shipping address.
- To answer your questions and resolve breakage claims.
- To send our occasional letters if you signed up — every one has an unsubscribe link.
- To understand how the site is used so we can improve it.
- To prevent fraud and meet our legal and accounting obligations.
We do not sell your personal information, and we do not share it with other companies for their own marketing.
Who we share it with
Only the services that run the shop, each bound to use your data solely to provide their service to us:
- Stripe — payment processing and fraud screening.
- WooCommerce / WordPress — our order and catalog system, hosted on DigitalOcean.
- DigitalOcean and Cloudflare — hosting, content delivery and security.
- Google Analytics — site analytics, as described above.
- Shipping carriers — your name, address and phone number so a parcel can reach you.
- Email service providers — to deliver order emails and, if you opted in, our letters.
We may also disclose information when the law requires it, or to protect our rights, our customers or the public.
Cookies and similar technologies
The shop itself works without cookies: your cart lives in your browser’s local storage. Google Analytics sets its own cookies to tell one visit from the next; you can block or clear them in your browser settings, or install Google’s opt-out add-on, and the site will work exactly the same. Stripe sets cookies on the checkout page for fraud prevention.
How long we keep it
Order records are kept for as long as tax and accounting law requires (generally seven years). Email sign-ups are kept until you unsubscribe. Analytics data is retained by Google for 14 months. Support emails are kept for as long as they are useful to resolve your question.
Your choices and rights
You can ask us at any time what personal information we hold about you, ask us to correct it, or ask us to delete it (we may need to keep order records we are legally required to keep). If you are a California resident, the California Consumer Privacy Act gives you the rights to know, to delete, to correct, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in California law, so there is nothing to opt out of. To make a request, email [email protected] from the address on your order; we will verify it is you before we act, and we will respond within 45 days.
We honour browser Global Privacy Control signals as a request to opt out of the sale or sharing of personal information, which, as above, we do not do.
Children
The site is for adults. We do not knowingly collect information from anyone under 16; if you believe a child has given us information, email us and we will delete it.
Security
Every page is served over HTTPS. Payments are handled by Stripe, which is PCI DSS Level 1 certified. Access to order data is limited to the people who need it to fill your order. No system is perfectly secure, but we take reasonable care with yours.
Changes to this policy
If we change how we handle your information we will update this page and the date at the top. Material changes to how we use information we already hold will be announced by email to affected customers.
Contact
Kelsey Road LLC, Upland, California. Email [email protected]. See also our Terms of Sale and FAQ.