Privacy Policy

1. Introduction

STL Masons Supply Co., LLC (“STL Masons,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what personal information we collect through our website, in the course of doing business with Masonic lodges, and through inquiries received from prospective customers.

This policy applies to information collected directly from you (through contact forms, quote requests, and lodge account applications), information collected automatically (via server logs and functional cookies), and information we receive from third parties (such as public Grand Lodge officer directories).

2. Information We Collect

Information you provide directly

When you submit a contact form, request a quote, apply for a lodge account, or place an order, we collect information you give us. This typically includes:

• Name and title (Worshipful Master, Secretary, Treasurer, etc.)
• Lodge name and Grand Lodge affiliation
• Phone, email, and mailing address
• Tax-exempt certificate copies (for lodge accounts)
• Message content and order details
• Custom jewel design requirements and preferences

Information collected automatically

Server logs collect limited technical information:

• IP address, browser type, and device information
• Pages visited, referrer URL, and timestamps
• Functional cookies for form-submission protection (no tracking cookies)

Information from third parties

From time to time we may consult publicly-published Grand Lodge officer directories to verify a lodge account application or route a specific inquiry to the correct officer at a specific lodge. This information is used only for that verification purpose.

3. How We Use Your Information

We use personal information described above to:

• Respond to inquiries, quote requests, and account applications
• Prepare and deliver quotes for regalia, ritual equipment, and custom jewels
• Send order confirmations, shipping notifications, invoices, and monthly statements to active lodge accounts
• Coordinate custom jewel design proofs and specialty regalia orders
• Send occasional product bulletins and Grand Lodge notices to opted-in subscribers
• Comply with tax-exemption documentation requirements for lodge accounts
• Improve our website and internal processes
• Comply with legal obligations

4. Legal Bases for Processing

Where GDPR, UK GDPR, or similar laws apply, we rely on these legal bases:

• Consent: for opt-in product bulletins
• Contract necessity: for active lodge account fulfillment
• Legitimate business interest: for security, prospect follow-up, business operations
• Legal obligation: for tax filings and record retention

5. Sharing Your Information

We do not sell personal information. We do not share it with anyone for their independent marketing purposes.

We share personal information only with the following categories of processors, and only as necessary for the purposes described in this policy:

• Shipping providers (UPS, LTL freight carriers)
• Email service providers (Mailgun, Amazon SES, or comparable)
• Payment processors (for credit card and ACH transactions)
• Tax, accounting, and legal advisors
• With explicit authorization: Grand Lodge coordinators for account verification
• As required by law or valid legal process

6. Data Retention

• Lodge account records: life of the account plus seven (7) years (Missouri tax record requirement)
• Contact form submissions: three (3) years from last interaction
• Custom jewel design records: ten (10) years for potential re-order reference
• Email subscription records: until unsubscribed, then indefinitely on suppression list
• Server logs: twelve (12) months

7. Your Rights

Subject to applicable law, you have the following rights with respect to your personal information:

• Access: request a copy of information we hold about you
• Correction: ask us to correct inaccurate or incomplete information
• Deletion: ask us to delete your personal information, subject to legal retention obligations
• Portability: request a machine-readable copy of your information
• Objection: object to certain uses of your information

California residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, to request deletion, to opt out of the sale or sharing of personal information (we do not sell), and to non-discrimination for exercising these rights. We honor Global Privacy Control (GPC) signals as required. To exercise a California privacy right, email privacy@stlmasons.com.

EU/UK residents (GDPR)

Residents of the European Union and United Kingdom have the rights of access, rectification, erasure, restriction, portability, and objection under GDPR and UK GDPR. Contact privacy@stlmasons.com to exercise these rights.

8. Cookies and Analytics

We use only functional cookies for site operation (form submission and CSRF protection). We do not use third-party analytics or advertising cookies. Do-Not-Track and Global Privacy Control signals are honored where legally required.

9. Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. No system is 100% secure and we do not guarantee against breach.

10. Children’s Privacy

Our site is not directed to children under the age of 13, and we do not knowingly collect personal information from minors. If you believe a child under 13 has provided personal information to us, please contact privacy@stlmasons.com and we will take reasonable steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the current version. Material changes will be prominently posted on this page.

12. Contact Us