Privacy Policy

Effective date: September 1, 2026 Last updated: September 1, 2026

CSD Closets ("CSD Closets," "we," "us," or "our") designs, builds, and installs custom closets, storage solutions, and cabinetry. This Privacy Policy explains what personal information we collect through https://www.csdclosets.com (the "Site") and in the course of serving our clients, why we collect it, who we share it with, and the choices available to you.

We have written this policy to be read, not skimmed past. If anything here is unclear, we would rather you ask: hello@csdclosets.com.

1. A Short Summary

We collect the information you give us — your name, phone number, email address, and details about your project — so that our design team can help you.
Our Site uses an AI-assisted Design Advisor to answer questions and gather project details before you speak with a person. Your conversation is saved and shared with our design team.
We use a small number of trusted service providers to run the Site, our chat, our scheduling, and our client records.
We do not sell your personal information, and we do not share it with advertisers.
Our Site does not use advertising cookies, tracking pixels, or cross-site trackers.
You can ask us to access, correct, or delete your information at any time.

2. Information You Provide to Us

To begin a conversation. Before the Design Advisor opens, we ask for your name, phone number, and email address, and we ask you to confirm that we may contact you about your project. All three are required — we cannot follow up on a project without a way to reach you.

During your conversation. The Design Advisor asks about your project so our team can prepare. This typically includes:

Your city and ZIP code (so we can confirm you are within our service area)
Whether the project is for a home or a business
The space you want transformed (walk-in closet, garage, home office, and so on)
A description, in your own words, of what you envision
Your timeline

The full text of your conversation is saved as part of your project record.

When you book a discovery call. If you schedule a call with our design team, we record the date and time you selected and a reference to the calendar appointment.

Throughout your project. If you become a client, we collect the information needed to design, quote, measure, build, and install your project — including the project address, measurements, design preferences, and our correspondence with you.

What we deliberately do not ask for

We do not ask for your budget. Our design team prepares an estimate from the design and materials after a measurement visit.
We do not collect payment information through this Site. The Site has no payment processor and no checkout.
We do not ask for access details. Gate codes, door codes, alarm codes, and when your home is unoccupied are coordinated directly with a member of our team — never through the chat.
We do not ask for Social Security numbers, government identification numbers, financial account numbers, or health information.

Please do not enter sensitive information into the Design Advisor. The chat is for describing your project. If you need to share something sensitive, please wait to speak with a member of our team.

3. Information Collected Automatically

Analytics. We use Vercel Web Analytics, a privacy-focused, cookieless analytics service, to understand how the Site is used. It records page views and a small number of named events (for example, that a chat was opened, or that a consultation was booked). According to Vercel, it does not use cookies, does not build a profile of you, and does not track you across other websites; visitors are identified by a temporary hash that is discarded after 24 hours. The events we record carry no additional details — no name, no phone number, no message content.

The information collected may include the page visited, the referring page, approximate location (country, region, city), device type, operating system, and browser.

Security and reliability. Our servers process your IP address to apply rate limits, block automated abuse, and secure your chat session. If your browser encounters an error on the Site, we may record diagnostic information — including the error, the page, your browser type, and your IP address — so we can fix it. Diagnostic records are deleted after 90 days.

Bot protection. We use Cloudflare Turnstile to confirm that a real person is starting a chat. Cloudflare receives information from your browser to make that determination and may set its own storage in your browser for that purpose.

4. How We Use Personal Information

We use personal information to:

Respond to your inquiry and provide the information you asked for
Understand your project and prepare our design team before your call
Schedule and confirm your discovery call
Design, quote, measure, coordinate, and install your project
Communicate with you about your project and provide support
Maintain our client records and manage our business relationship
Send you updates, offers, and other marketing communications about our work, where you have not opted out (see Communications and Marketing, Section 11)
Improve the Site, our services, and the client experience
Protect the Site against fraud, abuse, and security threats
Comply with our legal, tax, and regulatory obligations, and to establish or defend legal claims

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

5. The AI-Assisted Design Advisor

The Design Advisor on our Site is an AI-assisted chat. Understanding how it works should not require any technical knowledge, so here is plainly what happens.

What it does. It answers general questions about our work, asks about your project, confirms we serve your area, and helps you book a discovery call. It is a preparation tool — every project is designed by a person.

How it processes your conversation. Your messages are sent to Anthropic, our AI provider, which generates the responses you see. Anthropic processes this information on our behalf as a service provider. Anthropic states that it does not use data submitted through its commercial API to train its models by default; we have not enrolled in any program that would change this.

What it can and cannot see. The Design Advisor can see only the conversation you are having with it. It has no ability to look up records — not your past projects, not other customers, not our client database, not anything in our CRM. It can record what you tell it about your project; it cannot retrieve information about anyone.

Where your conversation goes. Your conversation is stored with your project record and shared with our design team through our CRM so they arrive at your call already understanding your project. A written summary of the conversation may be generated to help our team prepare.

Please keep sensitive information out of the chat. The Design Advisor is designed never to ask for sensitive details, and it is instructed to decline them if offered. Even so, please do not enter Social Security numbers, payment card or financial account numbers, health information, passwords, or home access codes into the chat.

6. Cookies and Similar Technologies

Our Site uses a deliberately small number of browser technologies, and none of them are used for advertising.

Chat session (strictly necessary). Secures your chat session so your conversation stays yours. Set only when you begin a chat, restricted to our chat endpoints, and readable only by our server — never by JavaScript. Expires after a period of inactivity.
Bot protection (strictly necessary). Cloudflare Turnstile storage, which confirms a real person is starting a chat.
Language preference (functional). Remembers whether you chose English or Spanish.
Page-reload flag (functional). Helps recover if a page fails to load fully.

We do not use advertising cookies, retargeting pixels, social media trackers, session recording, heat mapping, or any third-party cross-site tracking technology. Our analytics provider does not set cookies.

You can block or delete browser storage through your browser settings. Blocking strictly necessary items will prevent the chat from working.

Content loaded from other services. Some elements of our Site are delivered by third parties — web fonts from Google Fonts, certain images from Unsplash, and a display component from Cloudflare's public code CDN. When your browser loads these, those providers receive your IP address and basic browser information as a normal part of delivering the file. They do not receive your name, your messages, or any information you submit to us.

We share personal information only in these circumstances:

With service providers. We use the vendors listed in Section 8 to operate the Site and our business. They may process your information only to provide services to us.

Within our team. Our design, sales, and installation staff access client information to do their work.

With subcontractors and installers, where a project requires it — limited to what is needed to complete the work.

For legal reasons. When required by law, subpoena, or legal process; to enforce our agreements; or to protect the rights, property, or safety of CSD Closets, our clients, or others.

In a business transaction. If CSD Closets is involved in a merger, acquisition, financing, or sale of assets, client information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not trade, rent, or provide client lists to third parties for their own marketing.

8. Service Providers

These are the third parties that actually process information on our behalf:

Vercel — website hosting, application infrastructure, and cookieless analytics. Involves site traffic and aggregated, non-identifying usage data.
Supabase — the database where leads, conversations, and project records are stored. Involves all information you submit, including chat conversations.
Anthropic — the AI provider powering the Design Advisor and conversation summaries. Involves your chat messages and our responses.
HubSpot — client relationship management and discovery-call scheduling. Involves your name, phone, email, city, ZIP, project details, chat transcript, and appointment details.
Twilio — text messaging, where applicable. Involves your phone number and message content.
Resend — email delivery, including appointment confirmations. Involves your email address and message content.
Cloudflare — bot protection (Turnstile) and content delivery. Involves browser and network signals, including IP address.

We also use internal operational and alerting tools that may incidentally receive limited technical information in the course of monitoring our systems for errors.

We select providers that offer appropriate security and contractual protections, and we require them to use information only to provide services to us.

9. Data Security

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These include encryption of data in transit, access controls restricting who can reach client records, authenticated and rate-limited interfaces, automated bot protection, and monitoring for errors and abuse. Our chat sessions are protected by tokens that your browser's JavaScript cannot read, which limits the damage a malicious script could do.

We also apply data minimization as a security measure: the Design Advisor is built without any ability to look up records, so there is no client database for it to be tricked into revealing.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach of security affecting your personal information occurs, we will notify you and any applicable regulator as required by Florida law and other applicable law.

10. Your Privacy Rights and Choices

Comprehensive state privacy statutes — including the Florida Digital Bill of Rights and similar laws in other states — apply only to businesses that meet specific revenue, data-volume, or business-model thresholds. CSD Closets is a boutique company and does not meet the thresholds that would make those statutes applicable to us. Rather than claim rights we are not obligated to provide, we would rather simply provide them.

As a matter of practice, and regardless of where you live, you may ask us to:

Access the personal information we hold about you
Correct information that is inaccurate or incomplete
Delete your personal information
Receive a copy of the information you provided to us
Stop contacting you, or limit how we contact you

If you reside in a state whose privacy law does apply to us, you may also have the right to appeal a decision we make about your request. In that case, we will provide instructions for doing so in our response.

How to make a request. Email hello@csdclosets.com with "Privacy Request" in the subject line, and a description of what you would like. We may need to verify your identity — typically by confirming details of the phone number or email address associated with your record — before we act, so that we do not disclose or delete someone else's information at another person's request. We will respond within a reasonable period, and generally within 45 days.

Limits. We may decline a deletion request where we are required to retain information by law, or where we need it to complete your project, honor a warranty, maintain accounting records, or resolve a dispute. If we decline, we will tell you why. We will never charge you or provide you a lesser standard of service for exercising these rights.

11. Communications and Marketing

We distinguish between two kinds of messages.

Service communications relate to a project or an inquiry you initiated — consultation confirmations, appointment reminders, questions from your designer, quotes and proposals, measurement and installation coordination, and warranty or service follow-up. These are part of providing the service you asked for. If you have an active project with us, you cannot opt out of essential project communications, though you may ask us to use a different channel.

Marketing communications — promotions, offers, newsletters, and campaigns — are separate. You are never required to accept marketing in order to request a consultation or receive service from us.

Consent. Before your chat begins, we ask you to confirm that we may call, text, or email you about your project, at the phone number and email you provide. Giving that consent is never a condition of purchase. We record the exact wording you agreed to, along with the date, time, and IP address, so that both of us have an accurate record of what was agreed.

Opting out.

Text messages: reply STOP to any message. Message and data rates may apply.
Email: use the unsubscribe link in any marketing email, or email us. We honor opt-out requests promptly and, for commercial email, within 10 business days as required by the CAN-SPAM Act.
Phone: tell us, or email hello@csdclosets.com.

Opting out of marketing does not stop service communications about an active project.

12. Children's Privacy

The Site and our services are directed to adults considering a home or business improvement project. They are not directed to children, we do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16.

If you believe a child has provided us personal information, please contact hello@csdclosets.com and we will delete it.

13. Third-Party Websites

Our Site may link to other websites, including our social media profiles and content published by others. We are not responsible for the privacy practices of sites we do not operate. We encourage you to read the privacy policy of any site you visit.

14. Where Information Is Processed

CSD Closets serves clients in Florida, and our operations are based in the United States. Personal information is processed in the United States. Our service providers may process or store information in other jurisdictions in the course of operating their global infrastructure. The Site is not directed to individuals outside the United States, and we do not offer goods or services to individuals in the European Economic Area or the United Kingdom.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, our technology, or the law. When we do, we will revise the "Last updated" date above. If we make a material change to how we handle personal information, we will provide more prominent notice. We encourage you to review this page periodically.

16. Contact Us

For questions about this Privacy Policy, or to make a privacy request:

Email: hello@csdclosets.com Website: https://www.csdclosets.com

So we can route your message quickly, please write "Privacy Request" in the subject line when your message concerns this Policy or your personal information.

We will do our best to resolve any concern directly. If you are not satisfied with our response, you may contact the Florida Attorney General's office or the Federal Trade Commission.