Privacy Policy

Last updated: November 7, 2026

Cardinal Hardware (“we,” “us,” or “our”) operates the website cardinalhardwarems.com. This policy explains what information we collect about you, why we collect it, who we share it with, and the choices and legal rights you have. We collect personal information from visitors to this site, and the sections below describe exactly what and how.

1. Information You Give Us

When you fill out a form, request a quote, book an appointment, or otherwise contact us through this site, we collect what you submit. That typically includes:

Your name
Your email address
Your phone number
Your street address or service location, where relevant to the work
Any details you type into a message or notes field

2. Information Collected Automatically

We use analytics tools that collect information about your visit automatically, without you entering anything. This happens only if you accept cookies on this site. It includes:

Usage data — pages viewed, time on each page, clicks, scroll depth, the site or search that referred you, and which buttons and links you interact with.
Device and technical data — device type, screen size, operating system, browser, language, and IP address.
Approximate location — city or region level, derived from your IP address. We do not collect GPS or precise location from this site.
Session recordings and heatmaps — through Microsoft Clarity, an anonymized replay of mouse movement, clicks and scrolling during your visit. Text you type into form fields is masked before the recording is stored.
Cookies and similar technologies — small files and identifiers stored by your browser that let these tools recognize a repeat visit.

3. How We Use This Information

To respond to your inquiry, quote your job, and provide the services you ask for.
To understand how visitors use the site so we can improve the content and layout.
To measure whether our advertising and marketing are working.
To find and fix technical problems, and to protect the site against fraud and abuse.
To meet legal, tax, and recordkeeping obligations.

4. We Do Not Sell or Share Your Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We have not sold or shared personal information in the previous twelve months. We do not knowingly sell or share the personal information of anyone under 16 years of age. We have never received money in exchange for visitor data and do not intend to.

5. Third Parties That Receive or Process Your Data

We use the following third-party service providers. Each one processes data under its own privacy policy, linked below, and we encourage you to read them:

Google Analytics 4 (Google LLC) — website analytics and traffic measurement. Google may process this data on servers in the United States and other countries. See Google’s Privacy Policy and how Google uses data from sites that use its services.
Microsoft Clarity (Microsoft Corporation) — session recording and heatmaps. See the Microsoft Privacy Statement.
Our website hosting, form processing, and customer-management provider — stores this site and receives the contact details you submit through its forms so we can reply to you.
Email and text-message delivery providers — used to send you replies, confirmations, and appointment reminders you have asked for.
Embedded map and font services — if a page shows a map or loads a web font, your browser contacts that provider directly and it may see your IP address.

We may also disclose information when the law requires it, to enforce our agreements, or to protect the rights and safety of our customers and the public.

6. Cookies and Your Choices

The cookie banner. Analytics cookies do not load until you press Accept. Pressing Reject blocks Google Analytics and Microsoft Clarity from loading at all. The site works exactly the same either way.
Changing your mind. You can change your choice at any time using the Cookie settings link, which reopens the banner. Withdrawing consent is as easy as giving it.
Your browser. You can block or delete cookies in your browser settings.
Global Privacy Control. If your browser or extension sends a Global Privacy Control signal, we treat it as a valid opt-out and do not load analytics at all.
Google Analytics opt-out. You can install Google’s opt-out browser add-on, which works across every site you visit.

7. Your California Privacy Rights

This section applies to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

Categories of personal information we collect

In the past twelve months we have collected the following statutory categories:

Identifiers — name, email address, phone number, postal address, IP address.
Sensitive personal information — driver’s license number, collected only from equipment renters and used only to verify identity and administer the rental (Section 16).
Characteristics — date of birth, from equipment renters, used to confirm minimum rental age.
Commercial information — services you inquired about or purchased.
Internet or network activity — browsing and interaction on this site.
Geolocation data — approximate city or region only, from your IP address.
Inferences — general conclusions about what services you may be interested in.

We collect these from you directly, and automatically from your device through the analytics providers named in Section 5. We use them for the business purposes listed in Section 3, and we keep them as described in Section 9. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

Your rights

Right to know what personal information we have collected about you, where we got it, why we collected it, and who we disclosed it to.
Right to delete the personal information we hold about you, subject to legal exceptions such as completing a transaction or complying with the law.
Right to correct inaccurate personal information we hold about you.
Right to opt out of the sale or sharing of your personal information. As stated in Section 4, we do not sell or share it, so there is nothing to opt out of — but the right stands, and the cookie banner and Global Privacy Control are both honored.
Right to limit the use of sensitive personal information. We do not use or disclose sensitive personal information beyond the purposes permitted by law.
Right to non-discrimination. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised any of these rights.

How to exercise your rights

Use the contact details in Section 17. We will need to verify your identity before acting, usually by confirming information you have already given us. You may use an authorized agent, who must provide written proof of your permission. We will confirm receipt within 10 business days and respond within 45 calendar days, and will tell you if we need the additional 45 days the law allows.

Do Not Sell or Share My Personal Information

We do not sell or share personal information, so no opt-out link is required. If you want your choice recorded anyway, press Reject on the cookie banner, enable Global Privacy Control in your browser, or contact us using Section 17 and we will log the request.

8. Other State Privacy Rights

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, or another state with a comprehensive privacy law, you have broadly similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising and profiling. We honor these requests through the same contact route in Section 17, and we do not process personal information for targeted advertising or profiling that produces legal effects. Where your state gives you a right to appeal a refused request, you may appeal by replying to our decision, and we will respond within the time your state allows.

9. Data Retention

Google Analytics: 14 months.
Microsoft Clarity: up to 90 days.
Form submissions and customer records: kept while we are working with you and afterwards for as long as needed for warranty, tax, and legal recordkeeping, then deleted.
Cookie choice: stored in your own browser until you clear it or change it.
Equipment rental records: at least seven years after the rental, as described in Section 16.

10. Data Security

We use reputable providers that maintain administrative, technical, and physical safeguards, and this site is served over an encrypted HTTPS connection. No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security. Please do not send sensitive information such as payment card or Social Security numbers through a website form.

11. Children’s Privacy

This site is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

12. Text Messages and Phone Calls

If you give us your phone number through a form on this site, you agree that we may contact you about your inquiry by phone or text message. Message and data rates may apply, and message frequency varies. Reply STOP to any text to opt out, or HELP for help. Consent to receive texts is not a condition of buying anything from us. We do not sell, rent, or share mobile phone numbers or text-message consent with third parties for their own marketing.

13. Third-Party Links

Our site may link to other websites we do not control. This policy does not cover them, and we are not responsible for their privacy practices. Please read their policies before giving them information.

14. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top always reflects the current version. Material changes will be announced on this page.

15. Online Orders

We operate an online shop for Old Row apparel at oldrow.cardinalhardwarems.com, where orders are placed and paid for online and collected in store. When you place an order there we collect your name, email address, phone number and billing address so we can prepare the order, email your receipt and contact you about it, together with a record of what you bought, the amount paid and the date.

Card payments are processed by Stripe, Inc.

Your card number is entered directly into Stripe’s own payment form and is never seen, transmitted or stored by Cardinal Hardware. We receive only the last four digits and the card brand. Stripe’s handling of your information is governed by its privacy policy at stripe.com/privacy.

Order records from the shop are retained for seven years for accounting, tax and returns. We do not sell this information and we do not use it for advertising. Full terms of sale, returns and shop-specific privacy terms are published at oldrow.cardinalhardwarems.com/legal.

16. Equipment Rentals

We take equipment rental bookings online and at the counter through our rental system at rentals.cardinalhardwarems.com. Renting equipment takes more information than the rest of this site, because our rental agreement, the law and our insurance require us to know who has our equipment and how to reach them. This section applies to every rental booking, whether it is made online or in the store. You must be at least 18 to rent equipment, and at least 21 for heavy equipment.

What we collect

Contact and identity details — your full name, company and title if you rent for a business, street address, phone number and email address.
Driver’s license details — license number, issuing state, expiration date and date of birth. We use your date of birth to confirm you meet the minimum age for the equipment, and our staff check your photo ID against these details before equipment leaves the store.
Your signed rental agreement — your typed name, initials, drawn signature, the date and time you signed, and the network (IP) address and device and browser information recorded when you signed.
Rental and payment records — the equipment, dates and rates, deposits, any fees (such as late return, fuel, cleaning or damage), payments, refunds, and notes our staff add to your rental.
Screening answers — any answers you give to equipment screening questions, such as your experience with a machine.
A returning-customer code — after you book online, your browser keeps a random code so the booking page can fill in your details next time. It never brings back your license number. You can remove it with “Not you? Clear” on the booking page or by clearing your browser’s storage.

Cards, deposits and charges after return are processed by Stripe, Inc.

Your card number is entered directly into Stripe’s own payment form and is never seen or stored by Cardinal Hardware or by our rental software provider. We receive only the card brand, the last four digits and Stripe’s reference for the payment. When you book online, or agree at the counter to keep a card on file, the card is saved with Stripe for that rental so the refundable deposit can be held, or charged and refunded, and so amounts owed under your rental agreement — such as a late return, fuel, cleaning or damage — can be charged after you return the equipment. Stripe’s handling of your information is governed by its privacy policy at stripe.com/privacy.

How we use it

To take and manage your booking, prepare your rental agreement for signature, verify your identity and age, and hand over and check in equipment.
To hold, charge, settle and refund deposits, and to collect amounts owed under your rental agreement.
To email booking confirmations, reminders, receipts, your copy of the signed agreement and other rental notices.
To recover equipment that is not returned, to resolve damage claims and disputes, and to meet our legal, tax, insurance and recordkeeping obligations.
To protect our equipment, staff and customers against fraud and theft.

We do not sell rental information and we do not use it for advertising.

Who receives it

Stripe, for card payments, deposits and charges, as described above.
Our rental software provider, SiteHelper LLC, and the hosting, database and email services it uses. They store and process rental records on our behalf and under our instructions so the system can run. SiteHelper provides the booking software only: it is not a party to your rental agreement, does not own or rent the equipment, does not decide who may rent, and does not use rental information for its own purposes. Cardinal Hardware is responsible for the rental information we collect.
Law enforcement, our insurers, attorneys and collection agencies, when equipment is not returned, is damaged or stolen, money is owed, or the law requires it. Notices about unreturned equipment may be sent to the address you give us when you rent.

How it is protected

License numbers are encrypted when stored. Our staff see only the last four digits unless they are allowed to view the full number, and each time a full number is viewed it is logged. Signed agreements are stored with a digital fingerprint that shows whether the document has been altered. As Section 10 explains, no method of storing or sending data is completely secure.

How long we keep it

We keep rental records, including signed agreements, license details and payment records, for at least seven years after the rental, and longer when they are needed for an unresolved claim, dispute, damage, unreturned equipment or a legal requirement. Stripe keeps its own records under its own policy.

Your requests

You may ask to see or correct the rental information we hold about you. Because rental records support a signed contract, payments and our legal obligations, we may keep them after a request to delete them where the law allows. Questions and requests about a rental go to Cardinal Hardware directly — at the store, 104 S Laurel Street, Summit, MS 39666, by phone at (601) 600-2106, or by email at [email protected]. Your rental agreement governs the rental itself, and nothing in this policy changes it.

17. Contact Us

To ask a question about this policy, or to exercise any of the rights described above:

Cardinal Hardware
Privacy requests for this site are handled by our website operator. Requests about an equipment rental go to Cardinal Hardware directly, as described in Section 16.

SiteHelper LLC
2031 MS-44
McComb, MS 39648
sitehelper.co/contact