Corporate & Event Privacy Notice

Supplement to the Hammer & Stain Tampa Privacy Policy

EFFECTIVE DATE: August 22, 2026

PRIMARY POLICY: hammerandstaintampa.com/policies/privacy-policy

In brief. When a company or event organizer gives us participant information so we can prepare or ship DIY projects, we use that information only to provide the program, protect the transaction, and meet applicable legal obligations. We do not sell that information or use it for unrelated marketing.

1. About this notice

This Corporate & Event Privacy Notice applies when Hammer & Stain Tampa LLC ("Hammer & Stain Tampa," "we," "us," or "our") receives personal information in connection with a corporate, employee, association, school, church, community, private, or similar group program. It supplements our primary Privacy Policy, which continues to govern our website, online store, customer accounts, cookies, analytics, advertising, and other online activity.

If a written agreement with a corporate client contains stronger or more specific privacy or security terms, that agreement will control for the covered program.

2. Information we may receive

A corporate client, event organizer, participant, or authorized coordinator may provide information such as:

Name, shipping or delivery address, email address, and telephone number;

Employer, organization, team, or event affiliation;

Project selection, personalization details, attendance or registration information, and delivery instructions; and

Communications about the event, order, shipment, replacement, or support request.

Please do not send us sensitive personal information—such as Social Security numbers, financial account credentials, medical information, or government identification—unless we specifically request it and agree on appropriate handling in writing.

3. How we use corporate and event information

We use this information only as reasonably necessary to:

Plan and administer the program, confirm participation, and communicate necessary event details;

Prepare, personalize, package, ship, deliver, track, replace, or support DIY projects and supplies;

Maintain accurate business records, prevent fraud or misuse, resolve disputes, and protect our rights; and

Comply with tax, accounting, legal, insurance, safety, and contractual obligations.

When we process information on behalf of a corporate client, we act as a service provider or processor and follow the client’s documented instructions, subject to applicable law. The client or organizer is responsible for having authority to provide the information and for giving participants any notices or choices required by law.

4. Marketing, sale, and targeted advertising

We do not sell corporate or event participant information, and we do not use it for targeted advertising. We will not add a participant to unrelated promotional email or text-message marketing solely because the person took part in a corporate or group program. A participant may separately choose to subscribe to our marketing and may unsubscribe at any time.

5. When we share information

We may share only the information reasonably needed with service providers that help us operate the program—for example, ecommerce and order-management providers, cloud or email providers, address-validation services, project-production partners, and shipping or delivery carriers. These providers may use the information only to perform services for us or as otherwise permitted by law.

We may also disclose information when required by law; to protect participants, our business, or others; in connection with a business transaction; or with the direction or consent of the corporate client or individual.

6. Data minimization and retention

We ask corporate clients and organizers to provide only the information needed for the program. We generally delete or de-identify working participant and recipient lists within 90 days after confirmed delivery or program completion. Limited information may remain longer in order records, accounting or tax files, dispute or insurance records, and routine backups when reasonably necessary for legal, contractual, security, or business-record obligations. Backup copies are removed on their normal cycle.

7. Security and incident response

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information, including limiting access to people and providers who need it for the program. No system is completely secure, and we cannot guarantee absolute security.

If we learn of a security incident involving corporate or event information, we will investigate, take reasonable steps to contain and address it, and notify the corporate client or affected individuals without unreasonable delay when required by applicable law or contract. We will reasonably cooperate with the client’s response efforts.

8. Individual requests

A participant may ask to access, correct, or delete information we hold, subject to applicable law and legitimate recordkeeping needs. Because a corporate client may control the participant list or determine the purposes of processing, we may refer the request to or coordinate with that client. We may need to verify identity before completing a request.

9. Children and group programs

Our services are not directed to children under 13. For a school, youth, or family program, information about a child should be provided only by a parent or legal guardian, or by an organization authorized to provide it and obtain any required permissions. We ask organizers to avoid providing more information about minors than is necessary to fulfill the program.

10. Contact us

Questions or privacy requests may be sent to Hammer & Stain Tampa LLC at info@hammerandstaintampa.com or 813-766-7468. Please identify the corporate client or event, if applicable, so we can locate the correct records.