Legal review
Privacy notice
Information the storefront handles
When a buyer begins checkout, the application can receive the buyer's name, email, company, phone number, shipping and billing addresses, requested products and quantities, delivery or local-pickup choice, freight access requirements, and an optional order note. The order system also records prices, order status, selected freight details, and the operational history needed to review and fulfill an order. A custom quote request can also include project type, dimensions, weight, destination ZIP code, handling requirements, requested timing, project details, and affirmative consent to receive a response.
Payments
When Stripe payment is enabled, payment-card fields are provided by Stripe Elements and card details are sent directly to Stripe. The BoscoWood application records the payment amount, status, and provider reference needed to reconcile the order; it is not designed to receive or store full card numbers. Payment capture is disabled in the staging review environment.
Freight and fulfillment
The application uses order dimensions, weight, destination, and requested accessorials to prepare freight quote requests. When the UShip connection is enabled, those shipment details are intended to be sent to UShip for rating. A selected quote, carrier details, tracking information, and fulfillment updates may be retained with the order so BoscoWood staff can coordinate delivery or pickup. Live outbound freight actions are disabled during review.
How the information is used
- Calculate server-authoritative product totals and prepare a draft order.
- Request, select, and manually book freight or coordinate local pickup.
- Process and reconcile payment after a verified provider response.
- Manage production, disposition, shipment, support, and order-history records.
- Review and respond to a buyer's custom quote request.
- Protect checkout actions from duplicates or unauthorized order access.
Browser storage
The current storefront uses local browser storage to keep cart contents and session storage to continue the active checkout safely. That checkout data can include an order identifier, a temporary order-access token, and duplicate-request protection keys. Clearing browser storage removes this local continuity data. The reviewed application does not include an advertising tracker or analytics integration; any analytics or marketing technology added later must be covered by the final notice and consent configuration.
Providers and disclosures
The application is designed to disclose only the information needed for payment processing, freight rating and booking, hosting, database operation, and order fulfillment. Stripe and UShip process information under their own terms when their integrations are enabled. The final policy must identify the approved providers and confirm whether BoscoWood has other disclosure, legal-compliance, or marketing practices outside this application.
Retention, access, and security
The application includes restricted operations access, checkout capability tokens, signed provider webhooks, rate limits, and operational audit records. No website can promise absolute security. Record-retention periods and the process for access, correction, or deletion requests have not yet been approved; they must be added before launch and aligned with BoscoWood's accounting, fulfillment, and legal obligations.
Questions
Questions about this draft or a BoscoWood order can be sent to info@boscowood.com, or mailed to BoscoWood Ventures, Inc., 7425 Industrial Parkway Drive, Lorain, OH 44053.
