Privacy policy.

1. Who we are

TrueCraft Millwork LLC, operating as TrueCraft Millwork & Stone (“TrueCraft,” “we,” or “us”), is responsible for the information described in this policy. This policy covers truecraftmillwork.com and inquiries you send through the website or its contact details.

2. Information we collect

• Contact and project information: your name, email address, optional phone number, requested service, project description, and information you include in correspondence.
• Files you provide: drawings, specifications, photographs, and other attachments, together with their filenames, file types, sizes, and submission details.
• Request and security information: the page a request came from, submission time, form timing, IP address, and technical request or error information used to deliver the site and prevent abuse.
• Your choices and settings: cookie preferences, their version and time, applicable regional settings, a detected Global Privacy Control signal, and whether you ask to receive news or special offers. With each accepted inquiry, we record the choices and settings available at submission, an inquiry ID, and notification delivery status. A regional default is not recorded as your agreement.
• Limited measurement: in the US regions described below, where measurement is permitted and a category is off, we send Google limited signals about page visits and interactions such as a received quote request, together with the category’s settings. These signals do not use analytics or advertising cookies for the category you have turned off. Browser connections also transmit technical information, including an IP address and browser information; measurement without cookies is not a promise of anonymous data.
• Analytics with cookies: when both Analytics and Marketing allow cookies under the regional settings or your choices, page visits, general device and browser information, approximate location, referral information, and interactions such as a successful quote request or a phone or email link click.
• Advertising with cookies: when Marketing is enabled under the regional settings or your choice, Google advertising cookies and identifiers, ad-click information, page and browser information, and interactions used to measure advertising and reach past visitors with relevant ads.

Please provide only information and files you are authorized to share and that are relevant to your project.

3. How we use information

We use inquiry information to review your scope, prepare estimates, answer questions, coordinate projects, and keep records of our communications. We also use technical information to operate the website, troubleshoot problems, and detect spam or duplicate requests.

We keep an internal inquiry register even when optional tracking is declined. It helps our team respond to requests, retry failed email notifications, and compare inquiry counts with aggregate advertising reports. Recording your inquiry does not grant permission for tracking cookies or send your contact details to Google Ads or Analytics.

If you select the optional news and offers checkbox, we record that preference so our team may send relevant updates. You can ask us to stop those messages at any time. Requesting a quote does not require this choice or permission for analytics or advertising cookies.

We use Google Analytics and Google Ads to measure site use and advertising results. When a category is off and measurement is permitted in the US regions described below, limited measurements without that category’s cookies can help Google estimate overall activity and conversions. They do not guarantee that a particular inquiry will appear in Google’s reports. When Analytics cookies are allowed, they also help Google Analytics recognize a browser across visits.

When Marketing is enabled, Google Ads can use advertising cookies and identifiers for conversion measurement and remarketing, including relevant TrueCraft ads for people who have visited our website. Google and other vendors may show these ads on sites and services across the internet. When both Analytics and Marketing are enabled, we also use Google Analytics advertising features to create audiences for Google Ads, such as recent visitors who have not requested a quote. Linking these services allows advertising and analytics information to pass between them for these purposes.

We do not send the contact details, message text, or file contents from your quote form to Google Analytics or Google Ads. Enhanced conversions and customer-list uploads are not enabled. When measurement is cookieless, those events also omit our inquiry ID and ad-click identifiers. Limited measurements can include the page path, the site’s published page title, and basic referral information. We limit the page addresses shared with these tools to exclude personal details. Google’s code may add technical measurement fields and browser request information.

4. Services that process information

Our team uses service providers to operate the website and handle requests:

• Netlify hosts the website, processes form requests, and stores inquiry records, uploaded files, notification status, and technical logs. New inquiry records and uploads are stored privately; our team receives files as email attachments. Files submitted before this register was introduced may have download links. Anyone with one of those older download links can access that file, so treat those links as confidential.
• Cloudflare Turnstile checks quote submissions for automated abuse. Your browser connects to Cloudflare for this security check, which processes technical browser and device signals and your IP address. Verification operates independently of optional analytics and marketing choices. We do not send your project text or uploaded files to Turnstile.
• Google email services deliver inquiry notifications and correspondence. We may also organize contact details, project information, attachment links, and follow-up records in Google Sheets.
• Anthropic’s Claude service may help prepare draft replies. When used for an inquiry, it processes the contact details and project text provided in that request. This website’s reply-drafting feature does not send uploaded file contents to Claude or send its draft replies automatically.
• Google Analytics, Google Ads, and Google Tag Manager support the limited measurement, cookie use, and personalized advertising described in this policy. Google may collect, receive, and use information sent by your browser under its applicable terms and privacy policies.

The website also uses Google Fonts and a Google Maps embed on the contact page. When these resources load, your browser connects to Google and may share your IP address, browser information, and referring page information. The map may also use Google cookies. These font and map connections are separate from the optional analytics controls described below.

Learn more from Netlify’s privacy statement, Cloudflare’s privacy policy, Google’s privacy policy, how Google processes information from its business partners, Google’s information for visitors to partner sites, and Anthropic’s privacy information.

We may also disclose relevant information when required by law or when reasonably necessary to protect our rights, address fraud, or resolve a dispute. Our business operates in the United States; service providers may process information in the United States and other countries.

5. Cookies and your choices

The cookie banner offers Accept all, Reject optional, and Preferences. You can change your decision or withdraw consent using Your privacy choices in the footer or the button below. The starting settings depend on the country and state detected for your visit. Your saved rejections take priority over a regional default. We remember each preference separately, but the measurement we allow can be more limited, as described below. A recorded Analytics acceptance does not by itself mean Analytics cookies were enabled. You can still browse and request a quote with optional cookies turned off.

• United States, except Maryland: when we can identify a US state or the District of Columbia, Analytics and Marketing preferences start enabled unless you previously turned them off or a privacy protection blocks measurement. You can reject them at any time. Analytics cookies require both preferences to be enabled. Turning Marketing off keeps both Ads and Analytics measurement cookieless, even if you accepted Analytics. Turning only Analytics off keeps Analytics cookieless while Marketing follows its own setting. Where measurement is permitted, limited signals without the affected cookies continue. We restrict Google Ads’ use of these limited measurements after a Marketing rejection and do not enable personalized advertising for that rejected category.
• Maryland: Google Analytics, Google Ads measurement, and remarketing remain off, including measurement without cookies. Choosing Accept all does not enable them during this hold. This is our current policy while we review these uses.
• Outside the US or location unavailable: all Google measurement starts off and stays off unless you explicitly enable both Analytics and Marketing. If either preference is off, neither service sends measurement signals, including signals without cookies.

Some visits keep all optional Google measurement off to protect privacy. When the preferences show that measurement is off for your visit, accepting cookies does not override that protection. You can still browse and request a quote.

• Preference storage: we save your selection in your browser’s local storage with its time and version. Rejections remain until you change them or clear browser storage, including when we update our preference settings. Accepted choices are refreshed after 180 days or when the tracking purposes change. Clearing browser storage removes your saved choices; the regional defaults then apply again, subject to Global Privacy Control.
• Analytics cookies: when both preferences permit them and no measurement block applies, Google Analytics uses cookies such as _ga and _ga_… to recognize a browser and understand visits. Google describes their duration in its cookie information. Browser settings and subsequent visits can affect how long they remain.
• Marketing cookies and identifiers: when Marketing is enabled, we and Google use first-party cookies, such as Google ad-click cookies, and third-party Google advertising cookies or other identifiers to measure ads and serve personalized ads based on past visits. When you also permit Analytics, Google Analytics cookies and identifiers may be used together with advertising cookies and identifiers for Google Analytics remarketing audiences. Google explains these technologies and their durations in its cookie information.
• Global Privacy Control: a detected browser signal keeps both Analytics and Marketing off. We block Google Analytics, Google Ads measurement, and personalized advertising, including measurement without cookies, even if you previously accepted or choose Accept all. Your Analytics and Marketing preferences are remembered separately; their effect on measurement follows the rules above.
• Other advertising services: Meta and LinkedIn advertising tags are not currently active on this website.

Turning a category off stops future cookie-based tracking for that category and clears tracking cookies the website can remove. Limited measurements without those cookies can continue, only in the US regions described above and subject to Global Privacy Control. This does not automatically erase information already received by a provider. Your browser’s controls can remove additional cookies, including those set by other domains.

You can also manage Google personalized advertising in Google Ads Settings and through your device’s advertising settings. Google provides an Analytics opt-out browser add-on for supported browsers. These controls are separate from this website’s choices; opting out of personalization does not prevent all advertising.

Traditional browser “Do Not Track” settings do not change this website’s behavior. Use our cookie preferences to control analytics cookies and personalized advertising; Global Privacy Control is handled as described above.

6. How long we keep information

• Inquiries that do not become projects: our retention period for quote correspondence and related attachments is 24 months after our last substantive contact. We then delete or anonymize those records unless a documented legal or dispute-related reason requires longer retention.
• Project and business records: if an inquiry becomes a project, relevant records may be retained for the project and for applicable contract, warranty, accounting, tax, or legal requirements. The period depends on the record and obligation.
• Analytics: our current Google Analytics settings retain event-level data for two months and user-level data for 14 months. New activity can restart the user-level retention period. Aggregated reports may remain available longer; these settings are separate from the lifetime of browser cookies.
• Security logs and provider copies: retention depends on the operational need and the provider’s settings, backup cycles, and legal requirements. We do not promise that removal from an active record immediately removes every backup copy.

You can contact us to ask about a particular record or request earlier deletion where applicable.

7. Your privacy requests

Email info@truecraftmillwork.com to request access to, correction of, or deletion of information you have provided, or to stop optional marketing messages. Include enough information to identify your inquiry; do not send identity documents or sensitive information unless we specifically need them to verify a request.

Depending on where you live and the laws that apply, you may have additional rights to receive a copy of your information, object to or limit certain uses, withdraw consent, or appeal a decision. We may need to verify your identity and may retain records where permitted or required by law. Contact us with questions about a response or to request an applicable appeal; you may also contact the relevant privacy regulator.

8. Other important details

This website is intended for business and project inquiries, not children under 13. If you believe a child has submitted personal information, contact us so we can review and remove it as appropriate.

External websites have their own privacy practices. This policy does not cover information you provide directly to another website. We may update this policy as our services or practices change and will revise the effective date above. Where required, we will provide additional notice or request consent before applying a material change.

9. Contact us