Privacy Policy

Last updated: April 22, 2026

Great Lakes Shafts ("we," "us," or "our") operates greatlakesshafts.com. This policy explains what information we collect and how we use it.

What We Collect

We collect only what's necessary to provide our services:

• Email address — When you sign in or contact us
• Order information — Product specifications, shipping details, and purchase history when you place an order
• Payment information — Processed and stored entirely by Stripe; we never see or store your card details

How We Use It

• To process and fulfill your orders
• To communicate with you about your orders
• To improve our services

We don't sell your information. We don't send marketing emails unless you ask for them.

Data Retention

We retain order data for seven years to support warranty claims, tax requirements, and reorder convenience. You can request deletion of your account and personal data at any time, though we may retain transaction records as required by law.

Security

We use industry-standard encryption (TLS/SSL) for all data transmission. Your data is stored on secure, access-controlled infrastructure. We regularly review our security practices to protect your information. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Third Parties

We use a small number of services to operate:

• Stripe — Payment processing (card and ACH)
• Plaid — Bank account verification for ACH payments (shown at checkout if you choose to pay by bank transfer)
• Infrastructure provider — Authentication, database, hosting, and content delivery
• Email delivery service — Transactional email (order confirmations, password resets)
• CRM provider — Customer relationship management (email address, name, and order metadata)
• Shipping carriers — Parcel delivery (shipping address and contact phone as required to ship your order)
• Accounting provider — Bookkeeping and tax compliance (customer name and transaction amounts; no payment card data)

Each has their own privacy policy. We choose partners who take privacy seriously.

Cookies and Local Storage

We use cookies and browser local storage for authentication and session management — to keep you signed in and remember your cart. No tracking cookies. No advertising cookies. We do not track users across third-party websites and do not respond to Do Not Track browser signals because we do not engage in tracking.

Children's Privacy

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly.

Your Rights

You can request a copy of your data in a common electronic format, or ask us to delete it. Email orders@greatlakesshafts.com and we'll take care of it within 30 days. California residents: we do not sell personal information. You have the right to request access to or deletion of your data under the CCPA.

Changes

If we make significant changes to this policy, we'll update the date at the top. For major changes, we'll notify you by email.

Contact

Questions? Email orders@greatlakesshafts.com.