Privacy policy

Information we collect

When you request a quote or schedule an approved service, we collect the contact details, service address, lighting preferences, appointment type, requested date and arrival window, project notes, timing, and optional property photo you choose to provide. Customer project records may also include mockups, quotes, appointment status and history, approvals, and service requests. When you place a supply order, we collect your name, email, phone number, shipping address, cart contents, order totals, and fulfillment history. If you request a welcome offer, we store the normalized email address, offer expiration and delivery status, a protected hash and last four characters of the code, and whether and where the offer was redeemed.

How we use it

We use this information to prepare and deliver custom lighting services, communicate about projects and orders, fulfill and support purchases, maintain tax and business records, prevent misuse, and protect the operation of the website.

Card and digital-wallet payments

Store card details are tokenized by Authorize.net, and Apple Pay can provide wallet payment, contact, billing, and delivery information that you approve in the wallet sheet. Your full card number and security code do not pass through or get stored by TX Merry Lights. We receive limited payment and wallet results needed to create and reconcile an order, such as approved contact and address details, a transaction identifier, status, authorization result, card brand, and masked last four digits. Authorize.net and Apple process information under their own privacy and security practices.

Property photos and secure project links

Property photos are stored for project design and service purposes. A customer project is accessed through an unguessable secure link. Anyone with that link may be able to view the project, so keep it private and contact us if you believe it has been shared unintentionally.

Scheduling and calendar invitations

The public scheduling calendar displays only open arrival windows and never displays another customer's name, address, service, or appointment. When you reserve or update an appointment, we use your contact and property information to coordinate the crew and send calendar invitations. The private team calendar contains customer and project details needed for operations and is protected by authenticated admin access or a confidential subscription URL.

Address suggestions and mapping

Address suggestions are provided by Google Maps Platform. Text entered into the address field and the selected place may be processed by Google to return matching locations. Google handles that information under the Google Privacy Policy.

Website analytics and advertising audiences

To measure referrals from recognized AI assistants such as ChatGPT and Perplexity, we keep a privacy-safe first-party count using the recognized source, public page paths, time, and a randomized session identifier stored as a one-way hash. We also count product views, cart additions, checkout starts, and broad checkout-error categories. These events do not store names, email addresses, IP addresses, message content, payment details, or form entries. A non-secret order reference may connect a checkout session to its paid order to measure completed purchases. The source label may also be stored with the order to report attributed revenue and products. Browser session storage keeps this measurement within the current browsing session; it does not track you across unrelated sites.

We use Google Analytics 4 on public marketing pages and shop catalog pages to understand which services, service areas, and products visitors find useful. On the quote planner, Google Analytics is enabled only to record a valid quote start and a successfully submitted request; it does not record quote-page views. After a paid store order is confirmed, we send one purchase event containing the order reference, product identifiers, quantities, and order amounts so we can measure product sales and avoid counting the same transaction twice. If Google Ads conversion measurement is configured, a successful quote or paid order may also be recorded to measure and improve paid advertising. When a visitor arrives from an advertisement, we may retain allowlisted Google click identifiers and campaign labels in first-party session storage, save them with a resulting order, and include only the Google click identifier with the conversion event so the request can be attributed to the correct advertisement. If advertising storage is allowed, this attribution may remain in first-party local storage for up to 90 days.

Microsoft Clarity is used on public marketing, shop, cart, and checkout pages to help us understand product discovery and checkout friction through interaction analytics, heatmaps, performance information, and session replay. The Clarity project uses Strict masking, all checkout and quote forms are explicitly masked, and input and dropdown values are not uploaded as readable content. Clarity is stopped or not loaded on quote, scheduling, account, invoice, customer-project, project-materials, administrative, and API routes so secure links and private records are outside this measurement scope. We send only generalized events such as product view, product search, add to cart, begin checkout, payment outcome, and purchase; we do not identify visitors to Clarity by name or email.

Microsoft Advertising Universal Event Tracking is used after advertising consent on eligible customer-facing pages to measure Microsoft ad visits and build product audiences. It receives a sanitized page path and generalized commerce events such as product search, product view, add to cart, checkout progress, and a confirmed paid purchase. Product events include Wintergreen feed SKU identifiers, quantities, prices, United States dollars, and—only for a paid purchase—the order reference and total revenue. We do not send Microsoft Advertising customer names, email addresses, phone numbers, service or shipping addresses, payment details, private project tokens, or arbitrary URL query strings.

If you select “Continue” in our analytics and advertising privacy choices, Google Ads, Microsoft Advertising UET, the Meta Pixel, and Meta Conversions API may use advertising cookies or similar identifiers across known customer-facing pages—including marketing, shop, quote, account, customer-project, cart, checkout, and order-status pages—to add your browser to organized website-visitor audiences, measure advertising, and show more relevant ads. Clarity may use analytics storage to connect eligible page interactions into a continuous shopping session. For a paid product order, we may also send normalized contact and shipping details approved during checkout to Google's enhanced-conversion service; Google hashes this customer-provided data before using it to improve conversion matching. The Meta Pixel and Conversions API record matching, deduplicated product views and searches, cart and checkout progress, paid purchases, and successful leads. For a successful quote request or paid purchase, normalized contact and general location fields are one-way hashed on our server before being sent to Meta to improve conversion matching; card or payment credentials are never included. Customer-project paths are reduced to a generic project path before advertising measurement. Internal administrative traffic is not included.

Selecting “Block” prevents Meta Pixel, Meta Conversions API, and Microsoft Advertising UET event delivery and prevents advertising storage, advertising user data, ad personalization, and enhanced-conversion customer data through our Google tag. It also keeps Clarity analytics storage off; Clarity may still collect limited cookie-free page views and basic interactions as separate, fragmented sessions. Recognized Global Privacy Control signals are treated as a block. Your choice is stored in first-party local storage and a first-party consent cookie, and can be changed through the “Privacy choices” control in the site footer. You can also manage personalized advertising through Google My Ad Center and Meta Ad Preferences. Learn more about how Google handles business advertising data, how Meta handles information, and Microsoft's privacy practices.

Except for the consent-gated enhanced-conversion and hashed conversion-matching data described above, we do not send Google or Meta your service address, contact or form entries, card or payment credentials, property photos, secure project links or tokens, arbitrary URL query strings, or other customer-project details. Google Analytics page-view measurement remains disabled on the cart, checkout, account, customer-project, order-status, and administrative pages; those customer-facing paths may provide only the sanitized advertising audience signal described above when advertising consent is granted. A payment hold or authorization that has not been captured does not trigger purchase measurement. Google, Meta, and Microsoft process the limited event and technical information under their respective privacy policies.

Customer reviews

After a paid store order, Google Customer Reviews may invite you to opt in to a delivery survey. To display that choice and, if accepted, send the survey at the appropriate time, we provide Google the order reference, email address, delivery country, estimated delivery date, and available product GTINs. Google processes this information under its own privacy practices.

Service providers

We may use hosting, storage, mapping or aerial-imagery, communications, payment, analytics, customer-review, product-fulfillment, and shipping providers to operate the service. A fulfillment supplier and its carriers receive the order contents, contact details, and delivery address needed to ship a store purchase directly to you. Providers receive information only as needed for those functions and are subject to their own privacy and security obligations.

Email offers, retention, and choices

Welcome-offer emails deliver the requested code and may be followed by occasional TX Merry Lights offers. One welcome offer is available per email address; the code expires after two hours and can be redeemed once. You may unsubscribe by replying “unsubscribe” or contacting team@txmerrylights.com. We retain offer, project, and order information only as long as reasonably needed for offer enforcement, quoting, service, fulfillment, customer support, fraud prevention, tax and accounting obligations, and other business records. Where applicable, you may ask us to update or delete information by emailing team@txmerrylights.com or calling (832) 302-3311. Some records may need to be retained when required by law or for legitimate business purposes.

Business contact

TX Merry Lights LLC is an insured Tomball business owned by Carlton E Bynum II, located at 25435 FM 2978 Rd, Suite 116, Tomball, TX 77375. The team is available daily, 9 am–5 pm at (832) 302-3311 or team@txmerrylights.com.

Policy updates

We may update this policy as our services or legal obligations change. The latest revision date will appear above.