Privacy Policy

 

Keystone Ridge Designs, Inc. Privacy Policy

Effective Date: January 1, 2026
Last Updated:  January 1, 2026

Keystone Ridge Designs, Inc. (“Keystone Ridge Designs,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with our website [www.keystoneridgedesigns.com] (the “Site”), purchase our products, or otherwise engage with us.

By using our Site, you consent to the terms described in this Privacy Policy. If you do not agree, please discontinue use of the Site.

1. Definitions

The following definitions apply throughout this Privacy Policy. Where applicable, they align with statutory definitions under the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA) (Cal. Civ. Code § 1798.100 et seq.).

Account – a unique account created for you to access parts of our Site.

Business – Keystone Ridge Designs, Inc., as the legal entity that determines the purposes and means of processing consumers’ personal information.

Commercial Purpose – the use of personal information for our commercial or economic interests, including activities to induce purchases or enable advertising.

Consumer – a California resident, as defined in Cal. Civ. Code § 1798.140(g).

Cookies – small text files placed on your device by our Site to store preferences and track usage.

Do Not Track (DNT) – a browser setting that signals websites not to track online activity.

Global Privacy Control (GPC) – a browser or device signal that communicates your privacy preferences under California law.

Personal Information – information that identifies, relates to, describes, or could reasonably be linked to you.

Sale – selling, renting, releasing, disclosing, or otherwise communicating personal information to a third party for monetary or valuable consideration.

Service – the Site, products, and related services offered by Keystone Ridge Designs.

Service Provider – a vendor that processes personal information on our behalf under a binding contract.

Sharing – disclosing personal information to third parties for cross-context behavioral advertising.

Usage Data – data collected automatically, including device identifiers, IP address, browsing activity, and interaction with our Site.

Verification – the process we use to reasonably confirm your identity when you submit a privacy rights request.

You/Your – the individual using the Site, or the company or other legal entity on whose behalf the Site is accessed.

2. Information We Collect

We collect personal information in three ways: directly from you, automatically through technology, and from third-party sources.

(a) Information You Provide – Contact details, transaction details, account details, and communications.

(b) Information We Collect Automatically – Device/technical data, usage data, cookies, and tracking technologies.

(c) Information from Third Parties – Advertising partners, analytics providers, payment processors, shipping providers, and marketing platforms.

(d) Categories of Personal Information (California Residents) – As defined in Cal. Civ. Code § 1798.140(v)(1)(A)–(K), in the past 12 months we may have collected: Category A (Identifiers), Category B (Customer Records), Category C (Protected Classifications), Category D (Commercial Information), Category E (Biometric Information), Category F (Internet/Network Activity), Category G (Geolocation Data), Category H (Sensory Data), Category I (Professional/Employment Information), Category J (Education Information), Category K (Inferences).

3. How We Use Your Information

We use personal information for: order processing, customer support, marketing, analytics, compliance, fraud prevention, and site improvement.

4. Cookies, Tracking, and Advertising

Our Site uses cookies and tracking technologies, including essential, analytics, and advertising cookies.

Advertising and Remarketing
We may partner with vendors such as Google, Facebook, and LinkedIn to deliver personalized advertising and measure performance. These vendors may use cookies, pixel tags, or non-cookie technologies to understand usage across devices.

Your Choices:
- Manage cookies through browser settings.
- Opt out of targeted ads at: NAI Opt-Out, DAA Opt-Out, Your Online Choices.
- We honor Global Privacy Control (GPC) signals.

5. Sharing of Information

We do not sell personal information.

We may share with service providers, internal teams, legal authorities, and in business transfers.

Vendors are contractually bound to protect your information.

6. Data Retention and Mapping

We retain personal information only as long as needed to fulfill the purposes described in this Policy or to comply with law.

We maintain records describing: - Categories of personal information collected;
- Sources of information;
- Business purposes;
- Third parties with whom information is shared;
- Retention schedules and deletion procedures.

7. Data Security and Accountability

We maintain a comprehensive information security program designed to safeguard personal information from accidental loss, unauthorized access, use, alteration, or disclosure. Our program includes:

·        Technical Safeguards: encryption of data in transit (TLS) and at rest, intrusion detection, multi-factor authentication for administrative access, and regular penetration testing.

·        Administrative Safeguards: mandatory employee privacy and cybersecurity training, background checks where appropriate, and strict role-based access controls.

·        Physical Safeguards: secure data centers, visitor access controls, and monitoring systems.

·        Vendor Management: service providers must pass due diligence reviews and contractually commit to confidentiality, minimum-security standards, and breach notification duties.

·        Incident Response: a formal incident response plan that ensures prompt investigation, containment, notification, and remediation of security events.

While no system can be 100% secure, we regularly audit and update our security measures to align with industry standards.

8. Your Rights

Depending on your location, you may have rights regarding your personal information, including:

·        Access & Portability: receive a copy of the personal information we hold about you in a portable format.

·        Correction: request corrections to inaccurate or incomplete information.

·        Deletion: request deletion of personal information, subject to legal or contractual exceptions.

·        Opt-Out: opt out of sales, targeted advertising, or profiling for automated decision-making.

·        Restriction/Objection (where applicable): limit or object to certain uses of your personal information.

·        Non-Discrimination: you will not be denied goods or services, charged different prices, or offered different service quality for exercising your rights.

How to Submit a Request
You (or an authorized agent) can submit a verifiable request by email at [email protected] or by phone at 1-800-284-8208. We will verify your identity using reasonable methods (e.g., confirming account information or requesting additional documentation).

We acknowledge requests within 10 business days and respond within 45 days (extendable once by another 45 days if necessary, with notice). If we deny your request, we will explain why.

If you are dissatisfied with our response, you may appeal by contacting our Privacy Officer at the same contact details above.

9. U.S. State Privacy Rights

Residents of California, Colorado, Connecticut, Virginia, Utah, and Montana may have additional rights: - Right to Know and Access
- Right to Correct
- Right to Delete
- Right to Data Portability
- Right to Opt-Out of sales, targeted advertising, or profiling

Submit requests via [email protected] or 1-800-284-8208.

10. International Privacy Rights (GDPR and Other Jurisdictions)

If you are located in the EEA, UK, or other jurisdiction with data protection laws, you may have rights including access, correction, deletion, restriction, objection, portability, and withdrawal of consent.

Legal Basis: contract, legal obligation, legitimate interests, or consent.
Cross-Border Transfers: Personal information may be stored in the U.S. We use safeguards such as standard contractual clauses where required.

11. Children’s Privacy

Our Site is not intended for individuals under 18. We do not knowingly collect from children under 13 (COPPA).

California Minors: Under Cal. Bus. & Prof. Code §22581, minors under 18 may request removal of publicly posted content by contacting us at [email protected].

We do not sell or share personal information of minors under 16.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be: - Posted on our Site with a revised “Last Updated” date.
- Announced via banner or pop-up notice.
- Communicated by email (if applicable).

We will seek express consent for retroactive changes that materially affect your rights.

13. Contact Us

Keystone Ridge Designs, Inc.
670 Mercer Road
Butler, PA 16001
Phone: 1-800-284-8208
Fax: 724-284-1253
Email: [email protected]