Privacy Policy

Effective Date: June 26, 2026

FlameGrower LLC, doing business as Houston Sewing Repair ("Houston Sewing Repair," "we," "us," or "our"), owns and operates the website located at houstonsewingrepair.com (the "Website"). This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our Website, submit a service request, upload photos, sign up for email communications, or otherwise interact with us.

By using the Website, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Website.

---

1. Who We Are

Houston Sewing Repair is a sewing machine and serger repair business operating in Houston, Texas. Our legal entity is:

---

2. Information We Collect

We collect information you voluntarily provide and information collected automatically when you interact with our Website.

2.1 Information You Provide Directly

• Service Request Form: When you submit a repair inquiry or request a diagnostic quote, we collect your full name, email address, phone number, a description of your equipment and the issues you are experiencing, and any photos of your equipment you choose to upload.
• Email Sign-Up: When you subscribe to our email list (e.g., through a footer sign-up form), we collect your email address.
• Direct Communications: When you email, call, or text us, we collect the information you include in those communications.

2.2 Information Collected Automatically

• Server Logs: Our hosting infrastructure (Cloudflare) automatically logs standard technical information about each visit, including your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your visit.
• Cookies and Tracking Technologies: As described in detail in Section 8 (Cookies), we and our service providers may use cookies, pixels, and similar technologies to collect information about your browsing activity.
• Analytics Data: We may use analytics services (such as Google Analytics) that collect aggregated data about traffic patterns, page views, time on site, and similar metrics. We may also use tracking pixels (such as the Facebook Pixel) to measure the effectiveness of advertising.

2.3 Information We Do Not Collect

• We do not process payments on the Website; we do not collect or store credit card numbers, bank account information, or other financial account credentials.
• We do not maintain public user accounts or profiles; there is no customer login feature for the general public.
• We do not knowingly collect sensitive personal information beyond what is necessary to provide repair services (e.g., photos of equipment you submit).

---

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Data Used	Legal Basis
To evaluate your repair needs and provide a diagnostic quote	Name, email, phone, issue description, photos	Legitimate business interest; performance of a requested service
To communicate with you about your repair, schedule appointments, and provide service updates	Name, email, phone	Legitimate business interest; performance of a requested service
To maintain internal business records of services performed	All submitted information	Legitimate business interest; legal record-keeping obligations
To send marketing or promotional emails (only if you have opted in)	Email address	Consent
To analyze Website usage and improve our services	Aggregated analytics data; server logs	Legitimate business interest
To protect the security and integrity of our Website and business	Server logs; IP addresses	Legitimate business interest; legal obligation

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

---

4. How We Share Your Information

We share personal information only as necessary to operate our business and provide our services. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

4.1 Service Providers

We engage the following categories of service providers who may have access to personal information solely to perform services on our behalf:

• Hosting and Infrastructure: Cloudflare, Inc. — hosts our Website via Cloudflare Pages and Cloudflare Workers, processes form submissions, and stores data in D1 (Cloudflare's SQLite-based database). Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
• Object Storage: We use an S3-compatible object storage service to store photos you upload via our service request form.
• Email Services: We use an email service provider to send and receive email communications, including marketing emails to subscribers who have opted in.
• Analytics Providers: We may use analytics services (such as Google Analytics) and advertising measurement tools (such as the Facebook Pixel) that collect data about Website visitors. These providers may use cookies and similar technologies. Their use of your data is governed by their respective privacy policies:
  • Google Analytics: policies.google.com/privacy
  • Meta (Facebook): facebook.com/privacy/policy

4.2 Legal and Compliance Disclosures

We may disclose your information if required to do so by law, regulation, or legal process (such as a court order, subpoena, or government request), or if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation.
• Protect and defend our rights or property.
• Prevent or investigate possible wrongdoing in connection with the Website.
• Protect the personal safety of users of the Website or the public.
• Protect against legal liability.

4.3 Business Transfers

If FlameGrower LLC is involved in a merger, acquisition, asset sale, or similar transaction, your personal information may be transferred as part of that transaction. We will provide notice on our Website or by other reasonable means before your information is transferred and becomes subject to a different privacy policy.

4.4 No Sale of Personal Data

We do not sell personal data as that term is defined under applicable state privacy laws, including the Texas Data Privacy and Security Act and the California Consumer Privacy Act (CCPA). We have not sold personal data in the preceding twelve (12) months, and we have no plans to do so.

---

5. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Service Request Submissions: Information you submit through our service request form (including name, contact details, issue descriptions, and uploaded photos) is retained as part of our business records for as long as reasonably necessary to provide services, resolve disputes, and comply with legal obligations. We generally retain service records for at least the duration of any applicable warranty period plus a reasonable period thereafter.
• Photos: Photos of equipment you submit may be retained with your service record. If your photo contains metadata (such as EXIF data from a smartphone), we do not extract or use that metadata beyond the image itself.
• Email Subscribers: We retain your email address until you unsubscribe. You may unsubscribe at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
• Server Logs: Automated logs are retained for a limited period consistent with industry standards for security monitoring and operational purposes, typically thirty (30) days.

When personal information is no longer needed, we will securely delete or anonymize it.

---

6. Legal Basis for Processing

We process your personal information on the following legal bases:

• Legitimate Business Interest: We process your information to operate our repair business, respond to your service inquiries, provide quotes, schedule appointments, maintain business records, improve our services, and protect the security of our Website. We balance our legitimate interests against your data protection rights.
• Consent: We process your email address for marketing communications only with your affirmative consent. You may withdraw consent at any time by unsubscribing or contacting us.
• Performance of a Requested Service: When you request a diagnostic quote or repair service, we process your information to fulfill that request.
• Legal Obligation: We may process information to comply with applicable laws, regulations, or legal process.

---

7. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information. We will honor all verifiable requests to the extent required by applicable law.

7.1 Right to Know / Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collection, and the categories of third parties with whom we share the information.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you. If you believe any information we have is incorrect, please contact us using the details in Section 12.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. We may deny your deletion request if retaining the information is necessary for us to:

• Complete the transaction or provide the service for which the information was collected.
• Detect security incidents or protect against malicious, deceptive, fraudulent, or illegal activity.
• Comply with a legal obligation.
• Make other internal and lawful uses of the information that are compatible with the context in which you provided it.

7.4 Right to Data Portability

You may have the right to receive a copy of the personal information you provided to us in a structured, commonly used, and machine-readable format.

7.5 Right to Opt Out of Marketing Communications

You may opt out of receiving marketing emails from us at any time by clicking the "unsubscribe" link included in each email. You may also contact us directly to request removal. Opting out of marketing communications does not affect our ability to contact you regarding an active or pending service transaction.

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide a different level of service because you exercised a right under this Privacy Policy or applicable law.

7.7 Texas-Specific Rights

Under the Texas Data Privacy and Security Act (TDPSA), Texas residents have the rights to confirm whether we process their personal data, access their data, correct inaccuracies, delete their data, and obtain a portable copy of their data. We provide these rights as described throughout this Section 7. Texas residents also have the right to opt out of the sale of personal data and targeted advertising — we do not engage in either activity.

7.8 California Privacy Rights (CCPA/CPRA)

Although Houston Sewing Repair is a Texas-based business that does not meet the revenue or volume thresholds of the California Consumer Privacy Act, we voluntarily extend CCPA-like transparency and rights to all customers. California residents (and all of our customers) may request the categories and specific pieces of personal information we collect, the purposes for collection, and the categories of third parties with whom we share it, and may request deletion of their data subject to legal exceptions. Requests under this section shall be processed in the same manner as those described in Sections 7.1 through 7.4.

7.9 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using the information in Section 12. We will respond to verifiable requests within the timeframes required by applicable law (typically 45 days, with the possibility of a 45-day extension when reasonably necessary). We may need to verify your identity before processing your request, which may require you to provide information sufficient to confirm you are the person about whom we collected information.

If we deny your request, we will explain the reasons for the denial. If you are dissatisfied with our response, you may have the right to appeal. To appeal a decision, contact us and state that you are appealing a privacy rights decision.

---

8. Cookies and Tracking Technologies

8.1 What Cookies Are

Cookies are small text files stored on your device by a web browser. They are widely used to make websites function, improve user experience, and provide information to website operators. Cookies may be "session cookies" (deleted when you close your browser) or "persistent cookies" (retained until they expire or you delete them).

8.2 Cookies on Our Website

The cookies set on our Website fall into the following categories:

• Essential / Operational Cookies: Our Website is hosted on Cloudflare, which may set a __cf_bm cookie for security and bot detection purposes. This is a session cookie necessary for the Website to function reliably and is not used for tracking or advertising. Cloudflare may also use a __cflb cookie for load balancing.
• Analytics Cookies: When you opt in to Analytics cookies via our consent banner, we enable Google Analytics (GA4), which sets cookies (such as _ga, _gid, and _gat) to collect information about how visitors use our Website. These cookies track page views, session duration, and navigation patterns. The data is aggregated and does not directly identify individual visitors.
• Marketing / Engagement Cookies: When you opt in to Marketing cookies, we may load Mautic tracking scripts that set cookies to track pages visited and actions taken on our Website for email marketing engagement purposes. We do not currently use the Facebook Pixel (Meta Pixel).

8.3 Cookie Consent Banner

When you first visit our Website, a cookie consent banner appears at the bottom of the screen. This banner allows you to control which categories of non-essential cookies are set on your device:

• Essential Cookies: Always active. These include Cloudflare security cookies (__cf_bm) necessary for the Website to function reliably. They cannot be disabled through the banner.
• Analytics Cookies (Opt-in): Google Analytics (GA4) cookies that help us understand how visitors use our Website. These are only set if you opt in.
• Marketing Cookies (Opt-in): Mautic tracking scripts for email marketing engagement. These are only set if you opt in.

Your consent preferences are stored in your browser's localStorage and are not transmitted to our servers. You can change your preferences at any time by clearing your browser's localStorage for our domain, which will cause the consent banner to reappear on your next visit.

8.4 How to Manage or Disable Cookies Through Your Browser

You can control and delete cookies through your browser settings. Most browsers allow you to:

• View cookies stored on your device and delete them individually or in bulk.
• Block third-party cookies.
• Block all cookies.
• Clear all cookies when you close your browser.
• Set "Do Not Track" preferences.

Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Apple Safari: Preferences → Privacy → Cookies and website data
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data

You may also opt out of certain analytics and advertising cookies through industry tools:

• Google Analytics Opt-Out Browser Add-On: tools.google.com/dlpage/gaoptout
• Network Advertising Initiative Opt-Out: optout.networkadvertising.org
• Digital Advertising Alliance Opt-Out: optout.aboutads.info
• Meta Ad Preferences: facebook.com/adpreferences

Please note that blocking or deleting cookies may affect the functionality of certain parts of our Website.

8.5 Do Not Track Signals

Our Website does not currently respond to browser "Do Not Track" signals in a standardized way. We do not track our visitors across third-party websites to serve targeted advertising. The analytics and measurement tools we use are configured for first-party, on-site measurement purposes.

---

9. Children's Privacy

Our Website is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us using the information in Section 12.

For individuals between the ages of 13 and 18, we require that a parent or legal guardian provide consent before any personal information is submitted through our Website.

---

10. Security

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and our Website is encrypted using TLS (Transport Layer Security). Our Website is served exclusively over HTTPS.
• Infrastructure Security: Our Website is hosted on Cloudflare, which maintains industry-standard physical, technical, and administrative security controls. Cloudflare's security certifications include ISO 27001, SOC 2 Type II, and PCI DSS Level 1 compliance. For details, see cloudflare.com/trust-hub/compliance-resources.
• Access Controls: Access to personal information is limited to authorized personnel who require it to perform their job functions. Our admin dashboard is protected by authentication and accessible only to staff members.
• Data Storage: Customer data is stored in Cloudflare D1 (a serverless SQLite database) and S3-compatible object storage. Cloudflare D1 does not natively provide encryption at rest at the storage layer — data is stored as plaintext in D1's SQLite-based storage. We rely on Cloudflare's infrastructure security, TLS encryption in transit for all data moving between systems, and strict access controls to protect stored data. Our S3-compatible object storage provider may offer server-side encryption; consult that provider's documentation for details. We do not store payment card data, social security numbers, or government-issued ID documents.

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You use our Website and submit information at your own risk.

---

11. International Users

Our Website is operated in the United States. If you access our Website from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers and central database are located. The data protection laws of the United States may differ from those of your country of residence.

By using our Website or submitting personal information, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with cross-border data transfer restrictions, the transfer of your data to the United States is based on your explicit consent and/or the necessity to perform a service you have requested.

---

12. Contact Us

For questions about this Privacy Policy, to exercise your privacy rights, or to raise a concern about our data practices, please contact us:

We will acknowledge and respond to privacy-related inquiries within the timeframes required by applicable law. If you believe we have not adequately addressed your concerns, you may have the right to file a complaint with the Texas Attorney General's Office or the attorney general in your state of residence.

---

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will:

• Post the updated Privacy Policy on this page.
• Update the "Effective Date" at the top of this page.
• If the changes are material, provide a prominent notice on our Website for a reasonable period before the changes take effect.

Your continued use of the Website after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

---

14. Additional Disclosures

14.1 No Financial Incentives

We do not offer financial incentives, including price or service differences, in exchange for the collection, retention, or sale of personal information.

14.2 Sensitive Data

We do not collect or process sensitive personal data as defined under applicable privacy laws (such as social security numbers, government-issued ID numbers, precise geolocation, biometric data, or health information). Photos you submit are of equipment, not people, and we ask that you not submit images that contain people.

14.3 Third-Party Links

Our Website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party websites you visit. We are not responsible for the privacy practices or content of third-party sites.

14.4 Data Breach Notification

In the event of a data breach involving your personal information that poses a risk of harm, we will notify affected individuals and relevant authorities as required by applicable law, without unreasonable delay.