Privacy Policy
Effective September 7, 2026; Wood Affairs scope updated October 12, 2026. This policy explains how Boring Drawer Company handles customer details, measurements, photographs and order records.
What we collect
We collect the contact, delivery and order information needed to quote, manufacture, ship and support your drawer order. When you use a photographic pathway, we may also collect cabinet, drawer, hardware, measurement, damage, sketch and reference images or files.
Why we collect it
We use this information to identify hardware, verify measurements, assess whether an order can be manufactured safely, prepare quotations, manufacture and ship products, provide support, handle warranty or dispute questions, prevent fraud and meet legal obligations. Photos are not used for advertising, facial recognition or unrelated artificial-intelligence training without separate permission.
Wood Affairs recovery program
We collect batch descriptions, material photos, storage availability, loading access, pickup locations and appointment details to assess, coordinate and document recovery. Material photos are stored privately and are not processed with AI in this program. Pickup addresses and our shop receiving instructions are confirmed privately with the participant. Recovery records distinguish actual reuse, outlet acceptance, residuals and stock. Closed requests are reviewed for removal of unnecessary personal information; active participant details are kept while needed for collection.
Photographs
Please photograph only the drawer, cabinet opening, hardware or other item requested. Avoid including people, children, mail, identification, medication, house numbers, valuables or unrelated areas of your home. If unnecessary personal information is visible, contact us so we can review or remove it.
Consent and choices
Required review photos are necessary only where the selected order pathway depends on photographic verification. One clear acknowledgment covers the photographs submitted with that request or order. Optional photos may be skipped. Withdrawing consent may prevent us from completing a photo-dependent review, but does not require deletion of records we must reasonably retain for an active order, warranty, dispute or legal obligation.
Who handles the information
We do not sell personal information. We disclose it only to personnel and service providers that need it for hosting, secure storage, payment, email, shipping, production support, fraud prevention or legal compliance. Those providers may process information outside Canada, including in the United States, where it may be subject to the laws of that jurisdiction.
How long we keep it
Unsubmitted uploads are intended to be cleared within 30 days. A manual-review request that does not become an order is normally deleted within 90 days after closure. Order photos and measurement evidence are normally deleted within 24 months after delivery or final resolution. Information connected to an active warranty, chargeback, dispute, investigation or legal hold may be kept longer until the matter is resolved. Financial records may be retained separately for the period required by law. When a retention period ends, the information is removed from active records; encrypted service-provider backups may persist temporarily until they are overwritten under the provider’s backup cycle.
Security
We use access restrictions and service-provider security controls intended to protect information against unauthorized access, loss or disclosure. No online system can be guaranteed completely secure. Employees should access customer photos only when required for quoting, production, support or administration.
Access, correction and deletion
You may ask what personal information we hold about you, request a correction, or request deletion of information that is no longer reasonably required. We may need to verify your identity before responding and may retain limited records where reasonably required for an order, warranty, dispute or legal obligation.
Privacy incidents
If a privacy incident creates a real risk of significant harm, we will investigate and provide the notifications required by applicable privacy law.
Privacy questions or requests
Contact the Privacy Officer at orders@boringdrawercompany.com. Include “Privacy Request” in the subject line. Do not email identification unless we ask for a specific verification method.
We may update this policy when our services, providers or legal obligations change. The version shown when consent is given is recorded with the request where supported.