Privacy Policy & Advertising Disclosures

This privacy policy took effect on November 10, 2026 (2026-11-10). It applies to all consultations, website visits, and timber inquiries submitted through vintageoake.com from this date forward.

The data controller for this website is Vintageoake, trading at vintageoake.com. Our physical workshop and showroom operate at 838 E 9400 South St, Sandy, Utah 84094, Sandy, Utah, United States. You can reach our workshop desk directly by telephone at 801-523-3553 or by electronic mail at [email protected].

We collect only the technical, advertising, and inquiry details necessary to quote timber specifications and assess showroom interest. We record:

• Inquiry Form Entries: When you submit a project through fidiaf1.php, our system stores your full name, telephone number (if provided), email address (if provided), delivery street address (if provided), the chosen furniture kind, requested timber specifications, notes, and the affirmative consent tick.
• Support Chat Transcripts: When you start a consultation session through ludu8bc.php, our server maintains the conversation text and issues a session token stored locally in your browser so you can resume the dialogue.
• Automated Server Log Data: Our hosting server automatically logs your IP address, browser user-agent string, referring URL, time of render, and time of transmission to ensure network integrity and block automated abuse.
• Advertising Click Identifiers: When you arrive via paid advertising campaigns, incoming URLs carry platform click parameters, specifically gclid, msclkid, or fbclid.

We do not maintain customer accounts, we do not require passwords, and we take zero credit card or billing details through this website. The catalog is inquiry-only; no payment is processed online.

Every piece of data collected has a direct, practical purpose tied to our furniture trade:

• Calculating non-binding timber price estimates and scheduling bench time for custom dining tables, rocking chairs, club chairs, and reclining sofas.
• Contacting prospective buyers to confirm delivery access and discuss solid wood grain variations or upholstery tiers.
• Measuring the effectiveness of search marketing campaigns that direct Intermountain West wood buyers to our Sandy showroom.
• Preventing form spam, malicious intrusion attempts, and fraudulent transmissions through server-side verification.

Under international and US privacy standards, our processing relies on three distinct legal bases:

• Contract and Pre-Contractual Steps: Processing your name, timber preferences, contact details, and delivery address is necessary to prepare an accurate furniture quote and evaluate wood availability at your direct request.
• Consent: Non-essential tracking cookies, advertising identifiers, and analytical cookies run strictly on your affirmative consent given via our consent banner.
• Legitimate Interests: Maintaining server access logs, verifying security honeypots, and monitoring showroom website stability serve our legitimate business interest in operating a secure and reliable online workshop presence.

This website is an active landing destination for paid digital advertising. We receive visitors directed by google ads, microsoft advertising, and Meta Ads campaigns. When you click an advertisement on these networks, the corresponding platform attaches a unique query parameter to the link:

These identifiers allow the advertising network to verify that a real click reached our showroom website without exposing your personal financial data to the ad vendor. Nothing on this website claims that Google, Microsoft, or Meta has reviewed, approved, or verified our business.

Our website implements consent mode v2 in strict present-tense enforcement. Before you make any selection on our consent banner, the four foundational tracking signals are initialized to denied:

• ad_storage: default denied
• ad_user_data: default denied
• ad_personalization: default denied
• analytics_storage: default denied

These signals remain denied until you explicitly click “Allow Storage”. If you select “Decline”, or if you later withdraw your consent through our footer controls, all four signals are immediately locked back to denied, disabling advertising cookies and personal profiling.

We work with a limited set of external processors to deliver our web infrastructure and advertising measurement:

• Google Ireland Ltd / Google LLC: Operates Google Ads and analytical infrastructure receiving Consent Mode v2 status signals and gclid parameters.
• Microsoft Ireland Operations Ltd: Operates Microsoft Advertising and Bing search campaigns receiving msclkid parameters. Review their processing terms at the official Microsoft privacy statement at https://privacy.microsoft.com.
• Meta Platforms Ireland Ltd: Operates Meta Ads receiving fbclid parameters for campaigns delivered across Meta properties.
• Web Infrastructure & Mail Relays: Our contracted web hosting provider hosts the static files and SQLite inquiry database, while our SMTP mail service transfers inquiry notification alerts directly to the workshop owner’s mailbox.

Our workshop, servers, and primary personnel are situated in Utah within the United States. Under governing law of Utah, United States, with disputes heard in the courts of Sandy, inquiries originating from European or non-US visitors are processed on servers in the United States. Where international transfers occur, we rely on standard contractual clauses adopted by the European Commission and participating frameworks of our global infrastructure partners (Google, Microsoft, Meta) to ensure data safeguards match statutory European standards.

We enforce specific retention schedules rather than keeping records indefinitely:

• Timber Inquiries and Notification Emails: Retained for 36 months to reference timber species, finish mixes, and custom sizing if you commission matching chairs or additional cabinetry.
• Support Chat Transcripts: Retained for 6 months, after which session records are purged from the database.
• Web Server and Access Logs: Retained for 60 days for network diagnostic and cybersecurity inspection, after which logs are rotated and deleted.
• Cookie Consent Choices: Your consent preference stored under site_consent_v2 is retained in your browser for 12 months before re-prompting.
• Data Rights Inquiries: Any formal access or deletion request is processed and answered within 5 days of receipt.

All network traffic across vintageoake.com is encrypted using modern Transport Layer Security (TLS 1.3/HTTPS). Inquiry submissions are filtered through server-side validation routines and hidden honeypot parameters to intercept malicious payloads. Database storage on our server is protected with strict filesystem permissions and isolated from public web directories. No payment card data or banking credentials ever touch our servers.

If you visit our site from the European Economic Area or the United Kingdom, the gdpr provides you with specific enforceable rights regarding your personal information:

• Right of Access: You may request a complete copy of any inquiry data or correspondence associated with your email address.
• Right to Rectification: You may request that incorrect contact details, addresses, or specifications be updated immediately.
• Right to Erasure: You may request that we erase your inquiry records and chat transcripts from our active databases.
• Right to Restrict Processing: You may ask us to halt active use of your details while a dispute is evaluated.
• Right to Data Portability: You may obtain your inquiry history in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing based on legitimate business interests.
• Right to Withdraw Consent: You can withdraw cookie consent at any time via the “Manage Cookies” button in our footer.

Under comprehensive US state privacy statutes — including the California Consumer Privacy Act as amended by the California Privacy Rights Act (ccpa), and the Utah Consumer Privacy Act (UCPA) — residents hold the right to know what personal data categories are collected, request disclosure of information shared with third parties, and demand prompt deletion of personal records. Vintage Oak Furniture does not sell personal information and does not share your records for cross-context behavioral advertising without affirmative consent. We do not discriminate against any consumer who exercises their statutory privacy rights.

Yes. Our website listens for the global privacy control header (Sec-GPC) broadcast by privacy-focused web browsers. When this signal is detected, our script automatically treats it as a persistent, valid request to opt out of advertising tracking, holding Consent Mode v2 signals denied without prompting you again.

No. Vintage Oak Furniture is an adult retail destination for solid hardwood home furnishings and bespoke millwork. We do not intentionally solicit, collect, or store personal data from individuals under 18 years of age. If a minor has submitted an inquiry form, a parent or legal guardian may contact us to have the record deleted immediately.

If you believe our workshop has mishandled your personal records, you have the right to lodge a formal complaint with supervisory regulatory authorities. United States consumers may contact their state Attorney General (such as the Utah Office of the Attorney General) or the California Privacy Protection Agency (CPPA) in California. Residents in the European Union may file a complaint with their local national Data Protection Authority.

To request an export of your inquiry history, update an erroneous contact number, or demand the complete erasure of your consultation file, submit a written request to our workshop data desk:

Please specify your full name, the email address used during consultation, and the nature of your request (Access, Rectification, or Deletion). A data request is answered within 5 days of receipt at zero charge to you.

If we alter our advertising partnerships, adjust Consent Mode configurations, or update our retention practices, changes will be published directly on this page with an updated effective date at the top. We encourage visitors to review this page periodically when placing custom timber commissions.

For immediate answers regarding your privacy or workshop records, speak directly with our team:

Vintage Oak Furniture
838 E 9400 South St, Sandy, Utah 84094, Sandy, Utah, United States
Telephone: 801-523-3553
Email: [email protected]

Vintage Oak Furniture is committed to ensuring that our online catalog and showroom information are accessible to all visitors, including individuals with visual, motor, or cognitive disabilities. We align our markup with the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards.

Key accessibility features built into vintageoake.com include:

• High-contrast text tokens exceeding 9.3:1 for muted text and 15.2:1 for primary headlines against our dark ground.
• Full keyboard navigation with distinct visual focus rings and a dedicated skip-to-content mechanism.
• Semantic HTML5 landmark tags, single H1 headers, descriptive image alt text, and ARIA attributes across all interactive drawers and chat dialogs.
• Fluid typographic clamp formulas supporting zoom levels up to 200% without horizontal document scrolling.
• Respect for the prefers-reduced-motion system setting, disabling parallax and scroll-linked animations for motion-sensitive users.

If you encounter any difficulty accessing any portion of this website, please call us at 801-523-3553 or email [email protected]. We will gladly provide timber specifications or quote details through your preferred communication method.