Privacy Policy

Introduction

At Timberline Workshop ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

Information We Collect

Personal Information

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, mailing address
• Project Details: Information about your woodworking projects, custom orders, and workshop preferences
• Payment Information: Billing address and payment method details (processed securely through third-party payment processors)
• Communication Records: Records of our correspondence, including emails, phone calls, and form submissions

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent on pages, referring websites, click patterns
• Cookies and Tracking: Information collected through cookies and similar technologies (see Cookie Policy for details)

How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To process custom orders, workshop bookings, and provide our woodworking services
• Communication: To respond to your inquiries, provide quotes, and maintain ongoing customer relationships
• Marketing: To send newsletters, workshop announcements, and promotional materials (with your consent)
• Improvement: To improve our services, website functionality, and customer experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business (e.g., payment processors, email services)
• Legal Requirements: When required by law or to protect our rights, property, or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to affected users)
• Consent: With your explicit consent for specific purposes

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure data storage systems
• Regular security assessments and updates
• Employee training on data protection practices
• Limited access to personal information on a need-to-know basis

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request a copy of your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us using the information provided below.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Customer Records: 7 years after the completion of services
• Marketing Data: Until you unsubscribe or request deletion
• Website Analytics: 26 months from the date of collection

International Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and provide adequate safeguards for your information.

Children's Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of British Columbia, Canada, and any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of British Columbia.