Privacy Policy

Effective October 19, 2026

This policy explains what information Mesa Mercantile ("we", "us") collects through this website and online store, why, and the choices you have. It applies to this website only.

What we collect

• Your account. If you create one: your name, email address, optional phone number and a password. We store the password only in scrambled (hashed) form, so nobody here can read it. Your account also keeps the delivery addresses and wish-list items you save.
• Your orders. Name, email, phone number, how you chose to receive the order (pickup, delivery or shipping), the delivery address, any order notes, the items, prices, tax and fees, and the order number.
• Payment. Our checkout never asks for card numbers. While this website shows the demo notice, no payment is taken at all. When online payment is switched on, cards are entered on our payment provider's secure page and we receive only a payment reference.
• Messages and sign-ups. When you use our contact form we receive your name, email address, phone number, the topic, any order number, your message and a record that you agreed to this policy. If you ask for our weekly email we keep your first name, email address and a record of that request.
• Your visit. A session cookie links your browser to your cart, your sign-in, the products you viewed during this visit and a security token. That information is kept on our server, not in your browser. See our Cookie Policy.
• Server logs. Like every website, our server briefly records technical details of each visit: IP address, browser type, the page requested and the time.

How we use it

• To take, prepare, deliver, ship and support your orders, returns and refunds.
• To contact you about your order or your message, by email, phone or text. We do not send marketing calls or texts.
• To send the weekly store email only if you asked for it. Every email has an unsubscribe link.
• To run your account, keep the store secure and prevent fraud and abuse.
• To keep the records tax and accounting rules require.

We do not use your information for targeted advertising, and we never sell it.

Who we share it with

Only with companies that help us run the store, and only what they need for that job: our delivery drivers and shipping carriers (name, address and phone number for your delivery), our payment provider (when online payment is on), and the companies that host this website and our email. We also share information when the law requires it. We do not sell personal information or share it for targeted advertising.

How long we keep it

• Accounts: until you delete your account (you can do that yourself on the Account page) or ask us to.
• Orders: for as long as tax and accounting rules require, normally several years, even if you delete your account.
• Messages: normally no longer than 24 months. Weekly-email sign-ups: until you unsubscribe.
• Session information: until your visit ends. Server logs: normally no more than 90 days.

Your choices and rights

You can see and correct your account details on the Account page, delete your account there, and unsubscribe from our email at any time. You can also ask us to show you, correct or delete the personal information we hold about you: email help@example.com or call (970) 555-0142. We reply within 45 days and may need to confirm who you are first.

Colorado residents. The Colorado Privacy Act applies only to businesses above certain size thresholds. We honor these rights anyway. If we decline a request, you can ask us to reconsider by replying to our answer; if you are still unhappy you can contact the Colorado Attorney General.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as your choice to opt out. We do not sell data or use it for targeted advertising in any case.

Children

This store is not directed to children under 13 and we do not knowingly collect their information. You must be 18 or older to create an account or place an order. If you believe a child has sent us information, contact us and we will delete it.

Security

We use HTTPS, store passwords only in hashed form, limit sign-in attempts, keep messages and orders in private storage that is not publicly reachable, and keep our software up to date. No system is perfectly secure, so please never send card numbers or passwords through the contact form.

Changes to this policy

If we change this policy we will update it here and change the effective date below.

Contact

Mesa Mercantile, 2424 Mesa Crossing Blvd, Grand Junction, CO 81505. Email help@example.com · Phone (970) 555-0142.

Effective date: October 19, 2026.