Privacy Policy

Oak & Ember Millwork Co. (“Oak & Ember”, “we”, “us”) operates the website at xxienanpur.anpur.org.br. This policy explains what information we collect when you visit this website or contact our workshop, why we collect it, how long we keep it, and the choices you have. We have written it in plain English on purpose.

1. Who is responsible for your data

The data controller is Oak & Ember Millwork Co., a millwork business operating from 2634 Nash Street, Detroit, MI 48219. Our owner, William Nussbaum, is the point of contact for all privacy questions and can be reached at back-up@xxienanpur.anpur.org.br or 806-873-7390.

2. Information we collect

2.1 Information you give us voluntarily

• Contact details — your name, email address and telephone number when you email us, call the shop, or use the estimate request form.
• Project information — the city, room dimensions, budget range, timeline and any photos or drawings you choose to send us.
• Billing information — if you become a client, the billing address and payment method needed to invoice you. Card numbers are processed by our payment provider and are never stored on this website.

2.2 Information collected automatically

• Server logs — our hosting provider records IP address, browser user agent, requested URL, referring page and timestamp for every request, for security and troubleshooting.
• Cookies and similar technologies — see our Cookie Policy. Only strictly necessary storage is used unless you opt in to analytics.

2.3 Information we do not collect

We do not knowingly collect information from children under 13. We do not collect health data, biometric data, government identifiers, precise geolocation, or any special-category personal information. We do not build advertising profiles and we do not operate a login area on this website.

3. How the estimate form works

The estimate request form on our Contact page does not transmit data to a database or to a third-party lead service. When you press send, your browser opens your own email application with the details pre-filled, and you choose whether to send the message. That means the information reaches us only as an ordinary email, held in our business mailbox.

4. Why we use your information

• To answer your enquiry and prepare an estimate (our legitimate interest in responding to a request you made).
• To perform a contract if you engage us: scheduling, drawings, delivery and invoicing.
• To meet legal obligations such as tax and accounting record-keeping under Michigan and federal law.
• To keep the website secure and to diagnose faults.
• With your consent only, to understand aggregate website usage through anonymous analytics.

We do not send marketing newsletters, and we never sell, rent or trade personal information to anyone.

5. Who we share information with

We share the minimum necessary with a small number of service providers who act on our instructions:

• Our web hosting provider, which stores this website and its server logs.
• Our email provider, which delivers and stores business correspondence.
• Our accountant and payment processor, for invoicing clients.
• Where a project requires it, and only with your knowledge, trades such as countertop fabricators or electricians working on your job.

We may also disclose information where required by law, court order, or to protect the rights and safety of people and property.

6. How long we keep it

• Enquiries that do not become projects: up to 24 months, then deleted.
• Project records, drawings and correspondence: 7 years after completion, so we can honour warranty claims and match materials for future work.
• Financial records: 7 years, as required for tax purposes.
• Server logs: typically 30–90 days, depending on our host’s configuration.

7. Your rights and choices

Wherever you live, you may ask us to:

• tell you what personal information we hold about you;
• correct anything that is inaccurate or out of date;
• delete information we no longer need to keep;
• stop using your information for a particular purpose;
• provide a copy of what you sent us in a portable format.

Michigan residents, and residents of states with comprehensive privacy statutes such as California, Colorado, Connecticut and Virginia, may exercise the rights their laws provide, including the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in those laws, and we do not engage in targeted advertising. If you are in the EU or UK, the GDPR rights of access, rectification, erasure, restriction, portability and objection apply, and you may complain to your local supervisory authority.

To exercise any right, email back-up@xxienanpur.anpur.org.br with the words “privacy request” in the subject line. We respond within 30 days and will never charge you or treat you differently for asking. We may need to verify your identity, usually by replying to the email address we already hold.

8. Do Not Track and global privacy signals

This website honours the Global Privacy Control (GPC) and browser Do Not Track signals: when one is detected, optional analytics storage is not enabled, regardless of any previous choice.

9. Security

The site is served over HTTPS with a valid TLS certificate. Business email is protected with multi-factor authentication, and project files are stored on encrypted drives with restricted access. No system is perfectly secure, but we keep the amount of personal data we hold deliberately small, which is the most effective safeguard available to a shop our size.

10. Third-party links

Where we link to another website — a hardware manufacturer, for example — that site’s own privacy policy applies. We are not responsible for the content or practices of external sites.

11. Changes to this policy

If we change this policy we will update the “last updated” date at the top of the page and, for material changes, post a notice on the home page for at least 30 days.