Last updated September 16, 2026.
Information you give us when you contact us, request a preorder or commission, apply for wholesale or consignment, create an account, approve an invoice, or submit a vendor request — including your name, email, message, business telephone number, business name and entity type, storefront and shipping addresses, business contact information, and request or order details. Contact-form messages are delivered to and retained in our support mailbox as needed to answer the request and maintain ordinary business records. When a business acknowledges account-service contact, we preserve the exact wording and version, its fingerprint, the account, date and time, IP address, and browser identifier so we can demonstrate what was accepted. A consignment signature record similarly includes the agreement version and fingerprint, typed signer name and title, consent, account, date and time, IP address, and browser identifier. Account passwords are stored only as one-way password hashes. For sign-in security and abuse prevention, we temporarily record IP addresses and timestamps for failed logins and rate-limited forms; password-reset and first-run setup links are stored as token hashes and expire after one hour. We do not currently use analytics or advertising cookies on the public website. If that changes, we will update this policy and provide any required choices before the change.
Our contact form uses Cloudflare Turnstile to help distinguish people from automated spam. Cloudflare processes browser and device signals and connection information for this security check. We send the verification token to Cloudflare to validate it; we do not send your name, email address, subject, or message to the verification service. See Cloudflare’s Privacy Policy. Contact forms also use a short-lived session token to prevent repeat submissions.
To review preorder, wholesale, and consignment requests; prepare and preserve partner-specific agreements; operate accounts; authenticate users; prevent abuse; reconcile consigned inventory; fulfill and ship orders; respond to questions; manage commissions; and send operational updates about an account, application, agreement, order, inventory request, or support issue. These operational messages are not marketing. We do not use business telephone numbers for promotional texts or automated promotional calls, and any future marketing program would require a separate choice. We do not sell personal information or use it for targeted advertising.
The website does not collect card details or take payment. If you approve a preorder or custom quote, payment arrangements are provided separately.
Only the service providers that help us operate — including our website and email host, analytics providers, any payment provider used for an approved invoice, and shipping carriers — and only as needed to serve you.
We retain account, business-program, contact-acknowledgement, notification-delivery, preorder, wholesale, consignment agreement, signature, inventory-request, and order records for as long as needed to operate the relationship, keep business records, resolve disputes, and meet legal obligations. Failed-login and form rate-limit records are removed after about 24 hours as later security activity runs. Reset and setup links stop working after one hour; expired reset-link hashes are removed when new reset links are created, and setup-link hashes are removed when setup finishes or a new setup link is issued.
You may opt out of marketing if we ever offer it. Required account and transaction messages may continue while we operate an active application, agreement, order, or business relationship. You can ask to access, correct, delete, or receive a copy of personal data we hold by emailing support@alamocraftingforge.com; we may retain records required for security, contracts, dispute resolution, or law. If we deny a privacy request, reply to the decision to appeal it.
Questions about your privacy? Email support@alamocraftingforge.com.