Privacy Policy

This policy explains what we collect, why, who we share it with, and how to have it deleted. It applies to hiddenhouses.net and to orders placed there.

Hidden Houses
2308 Newtown Ave
Astoria, NY 11102, United States
support@hiddenhouses.net

---

1. What we collect

Birth details you enter: name or title for the piece, date of birth, time of birth, and city of birth (including the coordinates of that city). We need these to calculate and produce your chart. Without them there is no product.

Order and delivery information: email address, shipping address, gift options, and any gift message you write.

Payment information: handled entirely by Stripe. We receive confirmation that a payment succeeded and the last digits of the card. We never receive or store your full card number.

Messages you send us: the contents of emails you send to support@hiddenhouses.net.

Basic technical information: our hosting provider records standard server logs (IP address, browser type, pages requested) for security and reliability.

We do not run advertising trackers or analytics profiling on this site.

2. What we do with it

• Calculate your chart, produce your piece, and ship it
• Send you order confirmations, production updates, and tracking
• Answer your questions and handle damage, remakes, and refunds
• Keep the accounting and tax records the law requires
• Detect and prevent fraud

We use your birth details for nothing else. They are production data, not marketing data.

We do not sell your personal information, and we do not share it with advertisers.

3. Who else processes your data

• Stripe: payment processing. Your order details, including the birth details needed for production, are stored with the payment record. Stripe also collects device signals from visitors for fraud prevention. See Stripe's privacy policy.
• OpenStreetMap (Nominatim): when you search for a city, that search text is sent to OpenStreetMap's geocoding service to find its coordinates. No name, email, or order data is sent.
• Netlify: website hosting and server logs.
• USPS and Pirate Ship: your shipping address, to print a label and deliver your parcel.
• Google (Gmail) and ImprovMX: email delivery for our support address.

Each of these acts as a service provider for us. We do not authorize them to use your data for their own marketing.

4. Cookies and local storage

We do not use advertising or tracking cookies, and there is no cookie banner because there is nothing to consent to.

Your shopping cart is saved in your browser's local storage so your work isn't lost if you close the tab. It stays on your device, is never transmitted to us until you check out, and is automatically deleted after 30 days. You can clear it anytime by emptying your cart or clearing your browser data.

5. How long we keep it

We keep your information only as long as it is needed for the purposes described above, rather than for a fixed period. In practice that means:

• Order records (including birth details, stored with the payment record at Stripe): kept while we may still need them for support, remakes, warranty claims, chargeback defense, and the accounting and tax records the law requires of us.
• Production files used to print your piece: kept while your order is active and for a reasonable period afterward in case a remake is needed.
• Support emails: kept while they are useful for your order history.

When information is no longer needed for any of these purposes, we delete it.

You can ask us to delete your data earlier. See below.

6. Your rights

Wherever you live, you can email support@hiddenhouses.net to:

• Access the personal information we hold about you
• Correct anything inaccurate
• Delete your information, subject to records we are legally required to keep (for example, completed transactions for tax purposes)
• Object to a particular use

We respond within 30 days and we do not charge for this. We will never treat you differently for exercising these rights.

California residents: under the CCPA/CPRA you have the rights above, plus the right to know the categories of personal information collected, disclosed, or sold in the past 12 months. As stated above, we do not sell or share personal information as those terms are defined by California law, and we do not process sensitive personal information for the purpose of inferring characteristics.

7. Children

This site is not directed at children. We do not knowingly collect personal information from anyone under 16. If you buy a frame as a gift for a child, you are the customer. We collect the child's birth date from you as product data, not from the child. If you believe a child has provided us information directly, email us and we will delete it.

8. Security

Payment data is handled by Stripe under PCI-DSS standards and never touches our systems. The site is served over HTTPS. Our production records are not on a public server, and are not shared.

No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant authorities as required by law.

9. Where your data goes

We operate from the United States and ship only within the United States. Our service providers are U.S. based or operate globally under their own compliance programs.

10. Changes

If this policy changes materially, we will update the date at the top and, when the change affects existing orders, tell you by email.

11. Contact

Questions about privacy, or a request to access or delete your data:

support@hiddenhouses.net
Hidden Houses, 2308 Newtown Ave, Astoria, NY 11102