Privacy Policy

1. Scope

Sukkah Mart ("we," "us") operates sukkahmart.net, an e-commerce site selling bamboo schach mats, sukkah kits, murals, assembly services, and (Chicago-only) rentals. Delivery is limited to zip codes in Greater Chicago, IL and Greater Lakewood, NJ; customers outside those zones can select in-store pickup. This policy covers personal information collected through the site, checkout, and customer support channels.

This policy is written for Mitzvah Mart LLC, operating in Illinois and New Jersey. It is governed by U.S. federal law and applicable Illinois and New Jersey law.

2. Information We Collect

• Account/order info: name, email, phone, delivery or pickup address, zip code, order contents.
• Payment info: When you pay by card, Stripe collects and stores your card details directly - we never see or store full card numbers. When you pay by Zelle, we collect the name/email or phone number you send the Zelle payment from (for order matching) and your order number; we do not have access to your bank account or bank credentials.
• Live chat: If you use our chat widget (tawk.to), your messages, name/email if provided, and technical data (IP address, browser type) are collected and stored by tawk.to on our behalf. See Section 6.
• Usage data: pages visited, referring site, device/browser type, and similar analytics collected via cookies or similar technology.
• Communications: emails you send us, and transactional emails we send you (order receipts, payment confirmations) via Resend.

3. How We Use Information

• Process and fulfill orders, calculate applicable sales tax, and schedule delivery, pickup, or assembly.
• Verify and reconcile Zelle payments against submitted orders.
• Send transactional emails (order receipts, payment status, delivery updates).
• Respond to customer support inquiries, including via live chat.
• Monitor and fix site errors (Sentry).
• Maintain accurate, current pricing and inventory records (Google Sheets).
• Comply with tax, accounting, and legal obligations in Illinois and New Jersey.

We do not use your information for targeted advertising, and we do not sell personal information to third parties.

4. Payment Processing

• Card / Wallet: Card and wallet payments are processed by a PCI-DSS compliant third-party payment processor. We never see or store full card numbers - we receive only order status and non-sensitive metadata.
• Zelle: Zelle payments are sent bank-to-bank directly by you; we do not process or store banking credentials. We ask that you include your order number in the payment memo so we can match your payment to your order.

5. Live Chat

Our site uses a third-party live-chat widget for customer support. When you use the chat widget, your messages, any contact info you volunteer, and standard technical data (IP address, browser, device) may be collected and stored by the chat provider on our behalf. The chat provider may set cookies to maintain your session. Live chat is for customer support only; do not send payment or banking credentials through chat.

6. Cookies & Tracking

We use strictly necessary cookies (cart/session state, checkout) and may use chat-session cookies set by our live-chat provider. We do not currently use advertising or third-party tracking cookies.

7. Third-Party Service Providers

We use trusted third-party service providers to help operate the site, including for payment processing, email delivery, live chat, error monitoring, data storage, and hosting. These providers receive only the information necessary to perform their specific function on our behalf. We do not sell personal information. We may disclose information if required by law, subpoena, or to protect against fraud.

8. Your Privacy Rights

Illinois: Illinois does not currently have a comprehensive consumer data privacy statute comparable to California's. You retain rights under the Illinois Consumer Fraud and Deceptive Business Practices Act to accurate representations about how your data is used, which this policy is intended to satisfy.

New Jersey: The New Jersey Data Privacy Act (NJDPA) grants NJ residents rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale of data, or profiling, for businesses that meet certain consumer-volume thresholds. Regardless of whether those thresholds are met, we voluntarily extend the following rights to all customers:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate information.
• Deletion: request deletion of your personal information, subject to our need to retain order/tax records as required by law.
• Portability: request your data in a portable format.

To exercise any of these rights, email sukkahmart613@gmail.com. We will respond within 45 days.

9. Data Retention

We retain order and tax-related records as required by Illinois and New Jersey recordkeeping and tax law. Chat transcripts are retained per our chat provider's retention settings. You may request earlier deletion of non-required data per Section 8.

10. Children's Privacy

Sukkah Mart is not directed to children, and you must be at least 18 to place an order. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us at sukkahmart613@gmail.com and we will delete it.

11. Data Security

We use industry-standard safeguards (encrypted connections, restricted access controls, PCI-compliant payment processing) to protect your information. No system is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this policy as our practices, product lines, or legal obligations change. Material changes will be reflected by an updated "Last Updated" date at the top of this page.

13. Contact Us

Questions about this policy or your data: sukkahmart613@gmail.com

Mitzvah Mart LLC