1. Information we collect
We collect information that you submit through the website, including your name, email address, phone number, country, province or state, touch-up measurements, texture selection, colour-reference information, scanner notes, physical-sample information, order notes, contact messages, and newsletter subscription.
When an order proceeds to payment, the payment processor may collect billing, shipping, tax, phone, and payment information. StuccoKit does not receive or store your full card number.
Cloudflare and other infrastructure providers may process technical information such as IP address, browser type, security signals, request logs, and approximate region to deliver and protect the website. Essential first-party conversion events are used to operate and secure the order flow. Optional Google Analytics is not loaded until you choose “Allow analytics,” and the site honours an enabled Global Privacy Control signal as an analytics denial.
2. How information is used
- Review and prepare cosmetic stucco touch-up kits.
- Connect uploaded photos and colour information to the correct assessment and order.
- Confirm kit contents, quantity, price, shipping, taxes, and payment.
- Send assessment, order, payment, fulfilment, and customer-service messages.
- Prevent abuse, diagnose errors, secure the website, and meet legal obligations.
- Send product updates only after you request a subscription and confirm control of the email address through double opt-in.
3. Uploaded wall photos
Wall photos are used to understand the cosmetic touch-up location, approximate size, shape, and texture. They are not treated as a reliable colour formula. Photos may incidentally show a home exterior, landscaping, address marker, person, vehicle, or other identifying detail. Crop or avoid unnecessary personal details whenever practical.
Uploaded photos are stored in private object storage and are not intended to be publicly accessible. Authorized StuccoKit personnel and service providers may access them only as needed for assessment, fulfilment, support, security, or legal compliance. Accepted JPEG, PNG, and WebP files are validated, dimension-limited, and stripped of supported location or descriptive metadata before storage. HEIC is not accepted because the current workflow cannot safely normalize it.
4. Service providers and disclosures
Information may be processed by service providers used for website hosting, databases, private file storage, security, email delivery, payment processing, tax calculation, shipping, and analytics. These providers receive only the information reasonably needed to perform their services.
Information may also be disclosed when required by law, to protect users or the business, to investigate fraud or security incidents, or as part of a corporate transaction involving Baltik Group Inc.
Customer information is not sold to third-party advertisers.
5. Retention
Paid order and accounting records are retained for the period required for fulfilment, product traceability, disputes, tax, accounting, and legal obligations. Declined or completed assessments with no order are scheduled for deletion after 365 days unless a shorter or longer period is required for a documented reason. Pending newsletter confirmations are deleted after 30 days. Processed webhook records are deleted after 90 days. Privacy-safe analytics events are deleted after 400 days. Resolved or spam contact messages are deleted after two years. Expired customer sessions and old notification-delivery records are cleaned automatically. Associated private photo objects are deleted when an eligible assessment record is removed.
6. Security
StuccoKit uses access controls, private file storage, encrypted network connections, anti-abuse controls, payment-provider checkout, and restricted administrative access. No internet system can guarantee absolute security. Contact us promptly if you believe your information or assessment link has been exposed.
7. Your choices and requests
You may request access, correction, or deletion of personal information, subject to identity verification and legal retention requirements. Every confirmed marketing subscription includes a signed unsubscribe link. Unsubscribed, bounced, complained, and provider-suppressed addresses are blocked from marketing delivery. Transactional assessment and order messages may still be sent when necessary to complete a request or order.
8. Children
StuccoKit is intended for adults arranging home-maintenance products. It is not directed to children and does not knowingly collect information from children.
9. International processing
Canadian and United States customer information may be processed in either country or another location where a contracted service provider operates. Privacy laws in those locations may differ from the laws where you live.
10. Changes to this policy
We may update this policy as the website, product, or legal requirements change. The date at the top shows the latest revision.
11. Contact
Privacy requests may be sent to [email protected].
StuccoKit
A division of Baltik Group Inc.
Ontario, Canada