PRIVACY POLICY.

1. Who We Are

Propane Shack is the business responsible for the personal information described in this policy. If you have any questions or wish to exercise your privacy rights, contact us using the details above.

2. Information We Collect

We collect only the information we need to sell propane and related products, fulfill and deliver your orders, process payments, run our in-store point-of-sale and loyalty program, comply with tax and other legal obligations, and support you as a customer.

Information you provide to us

• • Account information: your name, email address, phone number, and a password (which we store only in a securely hashed form, never in plain text).
• • Order and address information: billing and shipping names, street address, city, state, ZIP code, phone number, company name (if any), and any special delivery instructions you add to an order.
• • Delivery request form: if you request propane delivery through our website, we collect your name, company (if any), address, phone number, email address, and details about your tank and delivery needs so we can arrange service. You do not need an account to submit this form.
• • Loyalty program information: if you join our in-store loyalty program, we keep your phone number, name, and email (if provided) along with your propane fill history and reward balance so we can track and apply your rewards.
• • Customer communications: information you share when you email, call, or otherwise contact us.

Payment information

When you pay us, your card details are handled by our payment processors, not by our own servers. See Section 4 for what we do and do not store.

Information collected automatically

• • IP addresses and sign-in activity: for security and fraud prevention, our system records the IP addresses and timestamps associated with account sign-ins and with orders.
• • Cookies: we use essential cookies to keep you signed in and to maintain your shopping session. See Section 6.

Veteran & military discounts

If you receive a veteran or military discount at our register, that discount is recorded simply as a price adjustment on the sale. We do not collect or store your military ID, service records, or veteran status in connection with the discount.

3. How We Use Your Information

We use the information we collect to:

• ✓ Process, fulfill and deliver your orders and propane deliveries;
• ✓ Take payment and issue receipts, refunds and returns;
• ✓ Calculate applicable sales tax based on your address;
• ✓ Create and manage your account and loyalty rewards;
• ✓ Communicate with you about your orders, deliveries and account (transactional messages such as order confirmations and receipts);
• ✓ Provide customer service and respond to your inquiries;
• ✓ Protect our website, prevent fraud and secure our systems;
• ✓ Comply with our legal, tax and recordkeeping obligations.

4. How Payments Are Handled

We use trusted third-party payment processors to handle card payments. Your full card number and security code (CVV) are entered directly into the processor’s secure systems and are never stored on Propane Shack’s servers.

Our payment processors handle card payments made on our website, at our in-store terminal, and in the field during propane deliveries.

For our own records — to match refunds and returns to the original sale — we retain only limited, non-sensitive payment details: the card type, a masked version of the card number (the first six and last four digits only), an approval code, and a processor transaction reference. We never retain your full card number, expiration date, or security code. Our payment processors each maintain their own privacy practices governing the card data they process.

5. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising.

We share personal information only with service providers who help us operate our business, and only as needed for them to perform their services for us:

We may also disclose personal information when required to comply with the law, respond to lawful requests or legal process, enforce our agreements, or protect the rights, safety and property of Propane Shack, our customers or others. If our business is involved in a merger, acquisition or sale of assets, customer information may be transferred as part of that transaction.

6. Cookies and Tracking

We use essential cookies that are necessary for the website to function — for example, to keep you signed in and to remember the contents of your cart during your session.

Some third-party features on our site set their own cookies: the embedded map on our homepage and the bot-protection feature on our delivery-request form are provided by third parties and may set their own cookies and receive your IP address when those features load.

We do not currently use analytics, advertising or retargeting cookies. If we introduce them in the future, we will update this policy and, where required, provide you the ability to opt out (see Section 9).

7. Marketing Communications

We send transactional messages — such as order confirmations, receipts, delivery updates, and account or password emails — which are necessary to complete your orders and manage your account.

We also send marketing communications, such as promotions and news, by email and/or text message — but only to people who have opted in to receive them. Every marketing message includes a way to opt out (for example, an unsubscribe link, or replying STOP to a text). Opting out of marketing will not affect the transactional messages needed to complete your orders.

8. Data Retention

We keep personal information for as long as it is needed for the purposes described in this policy — to maintain your account, service your orders and loyalty rewards, and meet our legal, tax and recordkeeping obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it. You may ask us to delete your information at any time, as described below.

9. Your Privacy Rights

Depending on where you live, privacy laws in your state may give you some or all of the following rights regarding your personal information:

• • Access: confirm whether we are processing your personal data and obtain a copy of it;
• • Correct: ask us to fix inaccuracies in your personal data;
• • Delete: ask us to delete personal data we hold about you;
• • Data portability: obtain your data in a portable format, where technically feasible;
• • Opt out: opt out of the sale of your personal data, targeted advertising, and certain profiling. (As noted above, we do not sell personal data or conduct targeted advertising.)

How to exercise your rights

To make a request, contact us at info@propaneshack.com or by phone at 303.663.3609, or write to us at the address in Section 1. We will respond within the time required by applicable law (generally within 45 days, which we may extend when reasonably necessary and will let you know if we do). We may need to verify your identity before fulfilling your request.

Appeals. If we decline your request, you may appeal by replying to our decision or contacting us at info@propaneshack.com. If you have concerns about the outcome of your appeal, you may contact your state’s attorney general or consumer-protection office. We will not discriminate against you for exercising any of these rights.

10. How We Protect Your Information

We use reasonable technical and organizational safeguards to protect your information, including:

• ✓ Encrypted connections (HTTPS) for our website;
• ✓ Securely hashed account passwords;
• ✓ Tokenized card payments, so full card numbers never reach our servers;
• ✓ Filtering of sensitive data (such as card and personal details) out of our system logs;
• ✓ Rate limiting and account lockout to defend against unauthorized access.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to limit access to those who need it to serve you.

11. Children’s Privacy

Our website and services are intended for adults. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and, for material changes, take additional steps to notify you where appropriate. Your continued use of our website or services after an update means you accept the revised policy.