Privacy Policy

Last updated: March 20, 2026

1. Introduction

Heavenly Pool Supplies (“we,” “us,” or “our”) operates heavenlypoolsupplies.com and related services. This Privacy Policy describes how we collect, use, process, store, share, and dispose of your personal information and any data obtained through third-party integrations, including marketplace platforms.

2. Information We Collect

We collect the following categories of information:

Account information: Name, email address, company name, phone number, and business license information provided during registration.
Order information: Billing address, shipping address, items purchased, payment method type (not full card numbers), and order history.
Usage data: Pages visited, search queries, session duration, browser type, and IP address, collected automatically via server logs and analytics tools.
Communications: Emails, chat messages, or support inquiries you send us.
Marketplace order data: For orders placed through third-party marketplaces, we receive the information necessary to fulfill your order (ship-to address, items ordered, shipping method). This data is received solely for fulfillment purposes.

3. How We Use Your Information

We use collected information to:

Process and fulfill orders
Operate and improve our platform and services
Communicate with you regarding your orders, account, and support requests
Apply applicable sales tax calculations
Detect and prevent fraud and security incidents
Comply with legal obligations

We do not sell your personal information. We do not use your information for targeted advertising.

4. How We Share Your Information

We share your information only as necessary to operate our business:

Fulfillment partners: We transmit order fulfillment details (ship-to address, SKU, quantity) to our fulfillment partner solely to arrange physical delivery of your order.
Payment processors: Payment card data is handled by our PCI-compliant payment processor. We do not store full card numbers.
Tax calculation: We use Avalara to calculate applicable sales tax based on your shipping address and order contents.
Error monitoring: We use Sentry to capture application errors for engineering diagnostics. Error reports are configured to exclude personally identifiable information from log payloads.
Infrastructure providers: Our platform is hosted on Vercel (application) and Supabase (database), both operating on AWS infrastructure in the United States.

We do not share your information with advertising networks, data brokers, or any party for commercial resale.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase on AWS infrastructure in the United States. We implement the following security controls:

Encryption in transit (TLS 1.2+) for all data transfers
Encryption at rest (AES-256) for database storage and backups
Role-based access controls with least-privilege principles
Multi-factor authentication required for all administrative system access
Automated daily backups with point-in-time recovery (PITR) capability
Geographically separated backup storage

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Order records are retained for a minimum of 7 years for tax and accounting compliance. Upon account deletion request, personal information is removed from active systems within 30 days and from backup archives within 90 days.

7. Marketplace Data

When orders are placed through third-party marketplaces, we receive and process only the information necessary to fulfill those orders. Marketplace-sourced customer data is used exclusively for order fulfillment, is not combined with our marketing data, and is disposed of by secure deletion once the fulfillment obligation is complete.

8. Cookies and Tracking

We use essential cookies required for site operation (session management, authentication). We do not use third-party advertising cookies. You may disable cookies in your browser settings; however, certain site features may not function without them.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@heavenlypoolsupplies.com. We will respond within 30 days.

10. Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or a notice on our website. The “Last updated” date at the top of this page reflects the most recent revision.

12. Cookies and Tracking Technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to collect and store information. You can usually choose to set your browser to remove or reject cookies. If you choose to remove or reject cookies, this could affect certain features or services of our website.

13. Do-Not-Track Features

Most web browsers include a Do-Not-Track (DNT) feature you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this privacy notice.

14. California Residents — Specific Privacy Rights

California Civil Code Section 1798.83 permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please contact us using the contact information provided below. If you are under 18 years of age, reside in California, and have a registered account with us, you have the right to request removal of unwanted data that you publicly post on the website.

15. Updates to This Policy

We may update this privacy notice from time to time. The updated version will be indicated by an updated date and will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

16. Contact

For privacy-related questions or requests:

Heavenly Pool Supplies
Email: privacy@heavenlypoolsupplies.com