PHS Lift respects your privacy. This Privacy Policy explains what personal and business information we collect, how we use it, and the rights you have to access, correct, or delete it. We don't sell your data.
The short version: We collect what we need to process orders, ship equipment, and respond to your inquiries — nothing more. We use industry-standard security. We never sell your data to advertisers. You can ask us to delete your data at any time.
1. What We Collect
Information you provide
- Contact details: name, business name, email, phone, shipping/billing address
- Order details: equipment selections, configurations, quotes
- Payment information: processed by Stripe; we never store full card numbers on our servers
- Credit / financing applications: if you apply for Net-30 or financing
- Inquiries: messages submitted via the contact form, chat, or email
Information we collect automatically
- Usage data: pages viewed, time on page, referring URL, browser, OS, device type
- IP address & approximate location (city/region level) — used for fraud prevention and analytics
- Cookies: see Section 4
Information from third parties
- Carriers (FedEx Freight, R+L) — shipment tracking
- Payment processors (Stripe) — payment confirmations
- Financing partners — credit decision results, with your consent
2. How We Use Your Information
- Process orders, accept payments, and ship equipment
- Provide quotes, technical support, and warranty service
- Communicate about your orders (confirmation, shipping updates, delivery)
- Send transactional emails (receipts, tracking, account updates) — these cannot be unsubscribed because they're required for your purchase
- Send marketing emails (newsletter, product updates) — only if you opt in; you can unsubscribe anytime
- Improve our website, products, and services through analytics
- Detect and prevent fraud
- Comply with legal obligations (tax reporting, regulatory)
3. Who We Share Data With
We share data only with service providers who help us run our business, under contractual confidentiality obligations:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Card details, billing address |
| FedEx Freight, R+L Carriers | Shipping | Name, shipping address, phone |
| Resend | Transactional email delivery | Email address |
| Cloudflare | CDN, DDoS protection | IP address, browser info |
| Financing partners | Equipment financing (with consent) | Credit application data |
| Noblelift | Warranty registration, recalls | Name, address, serial number |
We do not sell your personal information. We do not share data with advertisers for ad targeting. We may disclose information if required by law, subpoena, or to protect our rights.
4. Cookies & Tracking
We use a small number of cookies:
- Strictly necessary: session cookies, cart, checkout — required for the site to function
- Analytics: aggregated, anonymized — Cloudflare Web Analytics (no third-party trackers)
- Functional: remembering your preferences (e.g., recently viewed products)
We do not use Google Analytics, Meta Pixel, or third-party advertising cookies. You can disable cookies in your browser; some features (cart, checkout) will not work.
5. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention requirements — see Section 7)
- Export your data in a portable format
- Opt out of marketing emails
- Object to certain processing
To exercise any of these rights, email [email protected]. We respond within 30 days.
6. Data Security
- All traffic encrypted via TLS 1.3
- Passwords hashed using industry-standard algorithms (bcrypt / Argon2)
- Database access restricted to authorized personnel via role-based controls
- Payment data tokenized via Stripe — full card numbers never touch our servers
- Regular security reviews and dependency updates
No system is 100% secure. If we become aware of a breach affecting your personal data, we will notify you and applicable regulators within 72 hours, as required by law.
7. Data Retention
- Order records: 7 years (IRS / tax requirements)
- Account data: until you request deletion
- Marketing emails: until you unsubscribe
- Server logs: 90 days
- Warranty records: equipment lifetime (typically 7–15 years)
8. Children's Privacy
Our site and services are intended for business buyers and adults. We do not knowingly collect data from individuals under 16. If we discover such data, we will delete it.
9. California Residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information
- Right to correct inaccurate information
- Right to opt out of "sale" or "sharing" — though we do not sell or share personal information for targeted advertising
- Right to limit use of sensitive personal information
- Right to non-discrimination for exercising these rights
To make a request, email [email protected].
10. EU / UK Residents (GDPR)
If you are in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation. Our legal basis for processing is (a) contract performance (order fulfillment), (b) legitimate interest (analytics, security), or (c) consent (marketing). You may lodge a complaint with your local supervisory authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via email to active customers and posted at this URL with an updated effective date.
12. Contact
Questions, concerns, or data requests: email [email protected] or use our contact form.