Privacy Policy

1. Information We Collect

Personal Information You Provide

When you place an order, request a quote, or sign up for our waitlist, we collect:

• •Contact Information: Name, email address, phone number
• •Delivery Information: Street address, city, state, ZIP code
• •Order Details: Display selection, extras, delivery preferences, removal service selections
• •Gift Card Information: When purchasing a Grand Gift Card, we collect the buyer's name, buyer's email, recipient's email, optional personal message, and selected display. The recipient's email is used solely to verify and apply the discount at checkout — we do not use it to contact the recipient without consent.
• •Payment Information: Credit card details processed securely through Stripe (we do not store full payment card information on our servers)
• •Stored Payment Method (Deferred Removal): If you authorize deferred removal billing at checkout, we store a Stripe payment method token — not your raw card number — that allows us to charge the agreed removal fee on November 1 of the current season (or the next business day if that falls on a weekend or U.S. bank holiday). This token is used solely for that authorized charge and is not used for any other purpose. You may contact us to remove it before billing occurs.
• •Referral & Porch Points Information: When you share or use a referral code, we record the referral relationship, the code used, and Porch Points earned or applied. We use your email address to notify you when your referral code is successfully used.
• •Communications: Messages you send us via email, contact forms, text message, phone, or social media
• •Photos & Visual Content: Photographs of your completed porch display for marketing purposes (with your consent as outlined in our Terms of Service), and any photos you choose to attach when leaving a review
• •Review & Feedback Submissions: When you use our review page (including any personalized review link sent to you), 4 and 5 star ratings are routed to Google to post a public review under Google's own terms — we receive only what Google publishes. If you give us a 1, 2, or 3 star rating, we collect the star rating, your written feedback, and the name, email, and phone number you choose to provide on the private feedback form, and that information is sent to our team for service follow-up and is not posted publicly by us.
• •Giveaway & Survey Responses: When you enter a Detroit Pumpkin Company giveaway or complete a qualification survey on our site, we collect your contact information, ZIP code, and your answers to the qualification questions (such as porch size and booking interest). If you are selected as a winner, we may collect and verify a delivery address for fulfillment. These responses are used to determine eligibility, contact you about results, and help us improve our offerings.
• •Giveaway Referral Activity: For the 2026 Porch Giveaway referral promotion, we record the personal referral code or link used, the referring and referred entries, the date of the referral, and whether the referred submission was a new, eligible in-area entry. We may review contact details and duplicate or self-referral signals to prevent abuse. Shared-phone matches may be flagged for manual review; we do not use device or IP-based profiling to reject entries. Referral links are attribution-only, do not provide a discount, and referral activity does not create additional giveaway entries or change your odds of winning.
• •Checkout Activity: If you reach our checkout review step but do not complete an order, we record that signal against your CRM record so our team can follow up to answer questions or help you finish your order. We do not store any partial payment card details from an abandoned checkout.

Automatically Collected Information

When you visit our website, we may automatically collect:

• •Device Information: IP address, browser type, operating system
• •Usage Data: Pages visited, time spent on pages, referring website
• •Cookies: Small data files stored on your device to improve functionality and user experience

2. How We Use Your Information

We use the information we collect to:

• •Process and fulfill your orders
• •Schedule deliveries and coordinate removal services
• •Process payments securely through Stripe
• •Issue and track Grand Gift Cards, including verifying recipient eligibility at checkout and managing refund or rollover requests
• •Charge your saved payment method token on November 1 of the current season for the authorized removal fee, as agreed to at checkout
• •Manage referral codes, track Porch Points balances, and notify you by email when your referral code is successfully used by a new customer
• •Process and forward charitable donations made through The Big Mini Promise to the designated local charity partner
• •Send order confirmations, updates, and service communications
• •Communicate with you by phone call and text message (SMS) about your order, delivery scheduling, quotes, and support requests
• •Respond to your questions, comments, and support requests
• •Send waitlist notifications and seasonal availability updates (with your consent)
• •Improve our website, services, and customer experience
• •Display photos of completed installations on our website, social media, and marketing materials (with your consent)
• •Comply with legal obligations and protect our business interests

Phone Calls & Text Messages (SMS)

We use a cloud business-phone service (Quo, powered by OpenPhone) to make and receive phone calls and text messages with our customers. If you provide your phone number, we may call you about your order, delivery scheduling, quote, or support request.

When you place an order and provide a mobile number, we send automated transactional text messages related to that order, such as an order confirmation, a link to your porch portal, and delivery and scheduling updates. We only send promotional or marketing texts, such as a referral reminder or a note when booking opens for the next season, if you separately opt in by checking the promotional text box at checkout. Standard message and data rates may apply and message frequency varies. You can reply STOP at any time to opt out of texts from us, or HELP for help. We do not sell or share your phone number with third parties for their own marketing.

For the 2026 Porch Giveaway, the entry form uses one combined checkbox for promotional email and text updates. We record that required marketing consent separately from your eligibility confirmation, along with the disclosure shown at entry. You may withdraw marketing consent at any time; doing so does not invalidate an already submitted giveaway entry or an issued reward.

When you check (or leave unchecked) a promotional text box at checkout, we keep a record of your SMS consent choice for our own compliance purposes. That record includes whether you opted in, the date and time the choice was captured, and the exact disclosure text shown next to the box at that time. If you later reply STOP, we record your opt-out and stop sending marketing texts.

When you submit an inquiry, interest-list form, or quote request on our website and provide a mobile number, you may receive follow-up text messages from our team as part of our lead-response and scheduling process. A disclosure of this is shown on the submission form at the time you provide your number. You may reply STOP at any time to opt out of those texts.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We share information with trusted third-party service providers who help us operate our business:

• •Stripe: Payment processing (governed by Stripe's privacy policy)
• •Email Service Providers: To send order confirmations and communications
• •Phone & Text Messaging (Quo / OpenPhone): Our cloud business-phone provider, used to place and receive calls and text messages with customers. Phone numbers and message content are processed by this provider solely to deliver those communications.
• •Hosting Providers: To maintain our website and data storage
• •Affirm: Buy-now-pay-later financing offered as a payment option at checkout. When you choose Affirm, your application and payment plan are governed by Affirm's own terms and privacy policy.
• •Mapbox & Google (Places / Maps): Address autocomplete, ZIP-to-tier resolution, and mapping. Address data you enter at checkout or in lead forms may be sent to these providers solely to validate and complete your address.
• •Meta (Facebook / Instagram) — Pixel & Conversions API: See Section 5 below for details on our use of advertising and analytics tracking technologies.

Legal Requirements

We may disclose your information if required by law, court order, or legal process, or to protect the rights, property, or safety of Detroit Pumpkin Company, our customers, or others.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. This includes:

• •Secure payment processing through Stripe's PCI-compliant platform
• •Encrypted data transmission (SSL/TLS)
• •Limited access to personal information by authorized personnel only
• •Regular security assessments and updates
• •Stored payment method tokens (for deferred removal billing) are managed by Stripe and never stored as raw card numbers on our servers. Only a secure Stripe token is retained, and it is used solely for the authorized November removal charge

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Analytics, Tracking & Advertising

To understand how our website is used, to improve our customer experience, and to deliver and measure advertising on social platforms, we use the following tracking technologies:

• •Meta Pixel (Facebook / Instagram): A small JavaScript snippet that records page views, button clicks, lead submissions, and purchases on our website and shares them with Meta to help us measure ad performance and reach interested audiences.
• •Meta Conversions API (server-side): Depending on the action, we may send an event through the browser-based Pixel, the server-to-server Conversions API, or both. When the same action is sent through both systems, we use a shared deduplication identifier to help Meta avoid counting it twice. The data sent may include hashed customer identifiers where available (such as email, phone number, name, and city/state/ZIP), your IP address and browser user-agent string (sent in the form Meta requires for ad attribution), and event metadata. We do not send payment card numbers or other payment credentials to Meta.
• •AppLovin Pixel: A small JavaScript snippet that records page views, lead submissions, and purchases on our website and shares them with AppLovin to help us measure ad performance and reach interested audiences across AppLovin's advertising network. The data shared includes hashed customer identifiers where available (such as email and phone number), your IP address and browser user-agent string, and event metadata. We do not send payment card numbers or other payment credentials to AppLovin.
• •Engagement & Scroll Events: On select pages we record anonymous engagement signals (such as how far you scroll and how long the page is open) to help our advertising platforms identify interested visitors and to improve page design. These signals are tied only to the same identifiers described above.
• •Cookies & Local Storage: We use cookies and browser local storage to remember your cart, suppress repeat popups (such as the waitlist signup) for visitors who have already converted, store an auto-applied Early Bird discount flag when you visit our Early Bird landing page, and support secure checkout.
• •Email Engagement Tracking: Our marketing and lifecycle emails include a small tracking pixel and link-redirect that allow us to record whether the email was opened and which links inside it were clicked. We use this only to understand which messages are useful, time our follow-ups appropriately, and stop emailing you about something you have clearly already acted on. You can disable open tracking in most email clients by blocking remote images.

Your Choices: You can manage or disable most cookies through your browser settings. You can opt out of personalized advertising from Meta through your Facebook and Instagram ad settings, and from advertising networks generally through industry tools such as the Digital Advertising Alliance's opt-out page (optout.aboutads.info). Disabling cookies may affect site functionality such as checkout and saved cart state.

We Do Not Sell Your Personal Information. We do not sell or rent your personal information to third parties for their own marketing. Sharing of hashed identifiers with Meta for advertising measurement and audience matching, as described above, may be considered a "sale" or "sharing" under certain state laws (such as the CCPA). See Section 7 for your state-specific rights and how to opt out.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order and customer data is typically retained for at least 7 years for tax and business record purposes.

7. Your Privacy Rights

Subject to applicable law, you have the right to:

• •Access the personal information we hold about you
• •Request correction of inaccurate or incomplete information
• •Request deletion of your personal information (subject to legal retention requirements)
• •Opt out of marketing communications at any time using the unsubscribe link in any email
• •Opt out of sharing of identifiers for advertising purposes (see "Your Choices" in Section 5 and the state-specific rights below)
• •Disable cookies through your browser settings (though this may affect website functionality)

California, Other State Residents & "Do Not Sell or Share"

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another U.S. state with a comprehensive privacy law, you have additional rights under that state's law, which may include the rights to: (a) know the categories and specific pieces of personal information we have collected about you and the sources, purposes, and recipients of that information; (b) request that we delete personal information we have collected from you; (c) request correction of inaccurate personal information; (d) opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising; (e) limit our use and disclosure of sensitive personal information; and (f) not be discriminated against for exercising these rights.

As stated in Section 5, we do not sell your personal information in the traditional sense, but our use of advertising tracking technologies (such as the Meta Pixel and Conversions API) may qualify as "sharing" for cross-context behavioral advertising under certain state laws. To opt out of this sharing, you may (i) email us at hello@detroitpumpkinco.com with the subject line "Do Not Share My Info," (ii) enable a recognized opt-out preference signal (such as the Global Privacy Control) in your browser, or (iii) adjust your Facebook / Instagram ad preferences and use the industry opt-out tools referenced in Section 5.

To exercise any of the rights above, please contact us at hello@detroitpumpkinco.com. We will verify your request using the contact information on file with your account or order, and we will respond within the timeframes required by applicable law. Authorized agents may submit requests on your behalf with proof of authorization.

8. Children's Privacy

Our services are not directed to children. We do not knowingly collect personal information from anyone under the age of 13. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us immediately and we will delete it.

9. Third-Party Links

Our website may contain links to third-party websites (such as Instagram). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.