Privacy Policy
At Surface Depot, we value your trust and are committed to protecting your personal information and privacy.
Data Protection
GDPR & CCPA Compliant
Transparency
Clear data usage practices
Secure Storage
Encrypted data protection
Your Rights
Full control over your data
This Privacy Policy details our practices regarding the collection, storage, and use of your personal data and sets out your rights under legislation, including the Data Protection Act 2018, General Data Protection Regulation (GDPR) (EU) 2016/679, and California Consumer Privacy Act (CCPA).
Surface Depot is registered as a Data Controller and is committed to protecting and respecting your privacy. This Privacy Policy lets you know what to expect when we process your personal information, what information we hold about you, how we use it, and your rights in relation to your data.
Contact Information:
Data Protection Officer
Email: orders@surface-depot.com
Address: 4301 Pleasantdale Road, Suite F, Doraville, GA 30340
What is Personal Data?
Personal data is any information that directly relates to and/or identifies you – whether directly (e.g., your name and address in our system) or indirectly (e.g., your browsing behavior on our website, security camera footage in our facilities).
Information We Collect
Contact and Account Information
- Name, email address, phone number, and mailing address
- Company name and business information (for trade accounts)
- Account credentials and preferences
- Communication history and customer service interactions
Transaction Information
- Purchase history and order details
- Payment information (processed securely through third-party providers)
- Shipping and delivery information
- Product preferences and saved lists
Technical Information
- IP address, browser type, and device information
- Website usage data and analytics
- Cookies and similar tracking technologies
- Location data (with your permission)
How We Use Your Information
Order Fulfillment
To process and deliver your orders, communicate order status, and provide customer support (legal basis: contract fulfillment)
Account Management
To create and manage your account, maintain purchase history, and provide personalized experiences (legal basis: contract fulfillment and legitimate interests)
Marketing Communications
To send promotional emails, newsletters, and product updates with your consent (legal basis: consent, which you can withdraw at any time)
Fraud Prevention and Credit Assessment
To conduct credit reference searches and minimize fraud risk for our business and customers (legal basis: legitimate interests and legal obligations)
Website Improvement
To analyze usage patterns, improve user experience, and optimize website performance (legal basis: legitimate interests)
Legal Compliance
To comply with legal obligations, enforce our terms, and protect our rights and safety (legal basis: legal obligations and legitimate interests)
Cookies and Tracking Technologies
We use cookies and similar technologies to improve your browsing experience, analyze site traffic, and serve personalized content. You can control cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.
Sharing Your Information
We do not sell or rent your personal information to third parties. We may share your information with:
- Service Providers: Payment processors, shipping carriers, and email service providers who assist in business operations
- Manufacturers: For warranty fulfillment, direct-ship orders, and product safety recalls
- Credit Agencies: For credit assessment when you apply for trade accounts
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In the event of a merger, acquisition, or sale of assets
Data Security
We implement industry-standard security measures to protect your personal information:
- SSL encryption for data transmission
- Secure servers with restricted access
- Regular security audits and updates
- Employee training on data protection
- Third-party security assessments
Data Retention
We retain your personal information only as long as necessary for:
- Contractual requirements and ongoing business relationships
- Product warranty and guarantee claims
- Legal, accounting, and tax compliance (typically 7 years)
- Fraud prevention and dispute resolution
Your Rights
Under data protection laws, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Correct inaccurate or incomplete personal data
Right to Erasure
Request deletion of your personal data (subject to legal exceptions)
Right to Restrict Processing
Limit how we use your personal data
Right to Data Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests or for marketing purposes
Right to Withdraw Consent
Withdraw consent for processing where consent is the legal basis
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: privacy@surfacedepot.com
- Subject Line: "Data Subject Request"
- Include: Your name, contact information, and specific request
We will respond to your request within 30 days. We may require proof of identity before processing your request.
Marketing Preferences
You can opt out of marketing communications at any time by:
- Clicking the "unsubscribe" link in our emails
- Updating your account preferences
- Contacting us at unsubscribe@surfacedepot.com
Note: You will still receive transactional emails (order confirmations, shipping updates, etc.) even after unsubscribing from marketing.
International Data Transfers
Surface Depot is based in [Country]. If you access our services from outside this region, your data may be transferred to and processed in [Country]. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequate security measures.
Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a prominent notice on our website. The "Last Updated" date at the bottom indicates when the policy was last revised.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local supervisory authority:
UK - Information Commissioner's Office (ICO)
Website: https://ico.org.uk/concerns/
Helpline: 0303 123 1113
EU - European Data Protection Board
Website: https://edpb.europa.eu/
US - Federal Trade Commission
Website: https://www.ftc.gov/
Last Updated: December 2024
Questions About Your Privacy?
We're committed to transparency and protecting your personal information. Contact us with any privacy concerns.
Contact Privacy Team