Privacy Policy

01 Introduction

Elm & Basalt is a home and kitchen brand owned and operated by Sourcelyft LLC ("we," "us," or "our"), based in the United States. This Privacy Policy describes how we collect, use, and share information when you visit our website, purchase our products, contact us, or otherwise interact with our brand.

By using our website or purchasing from us, you agree to the practices described in this policy. If you do not agree, please do not use our services.

02 Information We Collect

We collect information in three main ways:

Information you give us

When you place an order, create an account, subscribe to our newsletter, or contact us, you may provide us with:

• Contact details — name, email address, phone number, shipping and billing address
• Payment information — credit or debit card details, processed securely through our payment provider (we do not store full card numbers on our servers)
• Order history — products purchased, order dates, and preferences
• Communications — messages you send us via email, contact forms, reviews, or social media

Information collected automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address, browser type, operating system, and device information
• Pages visited, time spent, referring website, and click patterns
• Cookies and similar tracking technologies (see Section 5)

Information from third parties

We may receive information about you from third-party platforms where you interact with us, such as Amazon (when you purchase our products through their marketplace), social media platforms, or marketing partners.

03 How We Use Your Information

We use the information we collect to:

• Fulfill orders — process payments, ship products, handle returns, and provide order updates
• Communicate with you — respond to inquiries, send order confirmations, and provide customer support
• Market our products — send promotional emails, product recommendations, and restock notifications (only if you have opted in — you can unsubscribe at any time)
• Improve our service — analyze site usage, understand customer preferences, and improve the shopping experience
• Prevent fraud — detect suspicious activity, prevent unauthorized access, and protect our business
• Comply with the law — meet tax obligations, respond to legal requests, and enforce our terms

04 Sharing & Disclosure

We do not sell your personal information. We share it only with trusted parties who help us operate our business, and only when necessary.

Service providers

• Payment processors (e.g., Stripe, PayPal, Shop Pay) to securely process transactions
• Shipping carriers (USPS, UPS, FedEx) to deliver your orders
• Email service providers (e.g., Klaviyo, Mailchimp) to send transactional and marketing emails
• Analytics providers (e.g., Google Analytics) to help us understand site usage
• Hosting and website infrastructure providers to keep our site running

Legal requirements

We may disclose information if required by law, subpoena, court order, or to protect our legal rights, safety, or the safety of others.

Business transfers

If our business is sold, merged, or reorganized, your information may be transferred as part of that transaction. We will notify you if this happens.

05 Cookies & Tracking

Our website uses cookies and similar technologies to remember your preferences, keep your cart working, and understand how our site is used.

Types of cookies we use

• Essential cookies — required for basic site functionality, like your shopping cart and secure checkout
• Analytics cookies — help us understand site traffic and user behavior (e.g., Google Analytics)
• Advertising cookies — used by platforms like Meta (Facebook) and Google to show you relevant ads on other websites

How to control cookies

Most browsers let you refuse or delete cookies through their settings. You can also opt out of many advertising cookies via optout.aboutads.info or the NAI opt-out page. Note that blocking essential cookies may prevent parts of our site from working properly.

06 Data Security

We take reasonable technical and organizational measures to protect your information, including:

• SSL/TLS encryption for all data transmitted through our site
• PCI-compliant payment processing (we never store full card numbers on our servers)
• Restricted access to personal information within our team
• Regular security reviews of our systems and third-party providers

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

07 Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request that we delete your personal information (subject to legal record-keeping requirements)
• Opt-out of marketing — unsubscribe from marketing emails at any time using the link in every email
• Opt-out of the sale of personal information — we do not sell your data, but you may still submit a request under CCPA

California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect and to request its deletion. To exercise these rights, contact us at the email below.

European users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including access, rectification, erasure, restriction, and data portability.

To exercise any of these rights, please email us at privacy@elmbasalt.com. We will respond within 30 days.

08 Data Retention

We keep your personal information only as long as needed to:

• Provide the services you have requested
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements

Order and transaction records are typically retained for 7 years for tax purposes. Marketing email lists are retained until you unsubscribe. Account data is retained until you request deletion.

09 Children's Privacy

Our website and products are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10 International Users

Sourcelyft LLC is based in the United States. If you access our website from outside the U.S., your information will be transferred to, stored, and processed in the United States, where our servers and business are located. By using our services, you consent to this transfer.

The laws of the United States may differ from the laws of your home country. We take steps to ensure your information receives an appropriate level of protection wherever it is processed.

11 Third-Party Links

Our website may contain links to third-party websites (for example, Amazon product pages or social media platforms). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our website.

Your continued use of our services after any changes indicates your acceptance of the updated policy.