Privacy Policy

Last Updated: December 13, 2025

This Privacy Policy explains how Sheltering Hills Design, LLC (“we,” “us,” or “our”) collects, uses, discloses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Sheltering Hills Design, LLC
  • Address: PO Box 1596, Bloomington, Indiana, 47402
  • Email: info@shelteringhills.net

  1. Personal Data We Collect

We collect and process the following categories of personal data:

2.1 Information You Provide

  • Contact information (name, email address, phone number, postal address)
  • Account credentials (username, password)
  • Payment information (credit card details, billing address)
  • Profile information (preferences, interests)
  • Communications (messages, feedback, support requests)

2.2 Information We Collect Automatically

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent, click patterns)
  • Cookies and tracking technologies
  • Location data (if you grant permission)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you have given explicit consent for specific processing activities
  • Contract Performance: To fulfill our contractual obligations to you
  • Legal Obligation: To comply with legal requirements
  • Legitimate Interests: To pursue our legitimate business interests while respecting your rights

4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • To provide and maintain our services
  • To process transactions and send related information
  • To communicate with you about our services
  • To improve and personalize user experience
  • To send marketing communications (with your consent)
  • To detect and prevent fraud and security issues
  • To comply with legal obligations

5. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Third-party vendors who perform services on our behalf
  • Business Partners: With your consent or as necessary to provide services
  • Legal Authorities: When required by law or to protect our rights
  • Business Transfers: In connection with mergers, acquisitions, or asset sales (though we do not plan to do this)

We do not sell your personal data to third parties.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods include:

  • Account information: Until account deletion plus 30 days
  • Transaction records: 7 years (legal requirement)
  • Marketing data: Until consent is withdrawn
  • Cookies: As specified in our Cookie Policy

8. Your Rights Under GDPR

Under GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data (“right to be forgotten”)
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise these rights, please contact us at info@shelteringhills.net.

We will respond within one month.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and preferences
  • Analyze website traffic and user behavior
  • Deliver targeted advertising
  • Improve security and prevent fraud

You can control cookies through your browser settings and our cookie consent tool. Please see our separate Cookie Policy for detailed information.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data to the best of our ability, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication
  • Employee training on data protection
  • Incident response procedures

While we strive to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

11. Children’s Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we discover we have collected data from a child, we will delete it promptly. Parents or guardians who believe we may have collected information from a child should contact us immediately.

12. Automated Decision-Making and Profiling

We may use automated decision-making and profiling for [specify purposes, e.g., fraud detection, personalized recommendations]. You have the right to:

  • Be informed about the logic involved
  • Contest automated decisions
  • Request human intervention

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending you an email notification
  • Displaying a prominent notice on our services

Your continued use of our services after changes indicates acceptance of the updated policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

  • Data Protection Officer: Rhonda Baird
  • Email: info@shelteringhills.net
  • Address: PO Box 1596, Bloomington, IN 47402

15. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority. For a list of supervisory authorities in the EU, please visit:

https://edpb.europa.eu/about-edpb/about-edpb/members_en


>