Privacy Policy

1. Information collected

• Directory/listing and public-source data, including quarry names, locations, materials, MSHA/public-record identifiers, operator information, generated descriptions, maps, photos, and related metadata.
• Information users provide through contact, sourcing-help, quote-request, claim, account, support, or newsletter forms, such as name, email, phone number, company, role, requested materials, message text, and listing-claim details.
• Account/authentication data from Clerk or Payload admin where configured, including identifiers, email addresses, profile details, organization/listing access, and session metadata.
• Billing and subscription metadata if approved commercial features are enabled, including Stripe customer/subscription identifiers, checkout/portal metadata, invoice/payment metadata handled by Stripe, and plan status. Full card details are intended to be handled by Stripe, not stored by StoneQuarries.net.
• Technical and usage data such as device/browser metadata, IP address, approximate location from network data, requested pages, referrers, security/rate-limit signals, logs, diagnostics, and cookies/local storage described in the Cookie Policy.

2. How information is used

Information is used to operate, secure, improve, and maintain the directory; display quarry listings and sourcing guides; respond to contact and sourcing-help requests; verify or manage listing claims where approved; prevent spam and abuse; support CMS/admin operations; measure aggregate site usage after consent; troubleshoot reliability issues; and comply with legal obligations.

If quote routing, lead forwarding, subscriptions, billing, or outreach are later approved, the privacy policy must be updated to reflect the approved production workflow before those features are activated or externally committed.

3. Analytics, cookies, and third-party providers

The current codebase includes Google Analytics measurement, Google Maps embeds, Google reCAPTCHA form protection, Clerk authentication, Payload CMS, Neon/PostgreSQL data storage, Vercel hosting/platform logs, Vercel Toolbar in non-production, Vercel Blob-compatible storage, Resend email infrastructure, Stripe payment infrastructure for approval-gated commercial flows, and Sentry diagnostics when configured.

StoneQuarries.net uses the EXC-279 consent categories: necessary, preferences, analytics, and marketing. Google Analytics is categorized as analytics and should only load after analytics consent. No marketing pixel or advertising/retargeting cookie provider is currently approved in the codebase.

4. How information is shared

Information may be shared with service providers that operate the product, authenticate users, host pages, store app/CMS data, deliver email, process approved payments, provide maps/anti-abuse/analytics/error-monitoring services, comply with law, protect rights and safety, complete a business transfer, or act with user consent.

Contact, claim, quote, or sourcing-help submissions may be shared with relevant quarry operators or service providers only when an approved workflow supports that routing. StoneQuarries.net is not intended to sell personal information in the ordinary sense of selling a customer list for money.

5. Retention

Directory source records and listing metadata may be retained while needed to operate the directory and maintain auditability. Account, claim, contact, support, quote, billing, logs, backups, and diagnostics should be retained only as long as needed for support, reliability, security, accounting, legal, and compliance purposes. Final retention windows must be approved before public launch of final legal text.

6. Children's privacy and sensitive information

StoneQuarries.net is a B2B directory and is not directed to children. Users should not submit children's personal information, medical records, legal/financial advice requests, emergency information, regulated safety records, or other sensitive information unless a later approved workflow explicitly supports that data.

7. Choices and rights

Users may request access, correction, deletion, export, or restriction of certain personal information by contacting privacy@stonequarries.net. Users may also manage cookie categories through the cookie preferences control where non-essential cookies are used.

8. Security, international processing, and changes

The product uses reasonable administrative, technical, and organizational safeguards, but no internet service can be guaranteed completely secure. Information may be processed in locations where the operator and service providers operate. This draft policy should be updated when product features, providers, retention practices, or legal requirements change.