Privacy Policy

01Scope

This policy explains how OPENNODE INC, 236 Nix Loop SE, Fairmount, GA 30139 (“we”), handles personal information on lordscancard.com and in the course of quoting, printing, encoding and shipping card orders. LORDS CARD is our product brand; the company is the data controller.

It does not cover third-party sites we link to, or a customer’s own membership system after cards are delivered.

02What we collect

We collect what we need to answer a quote request and complete an order:

• Contact and company details — name, job title, company or club, email, phone, billing and shipping addresses.
• Quote and order details — card type, chip, quantity, finishes, artwork files, reader model, deadlines.
• Variable data you send us — member names, photos, numbers, barcodes and URLs when you ask us to print or encode them.
• Payment and credit records — invoices, purchase order numbers, ACH or wire references, credit application details. Card numbers are entered on our processor’s page; we do not store them.
• Site and correspondence data — IP address, browser and device type, pages viewed, referring link, and the content of emails or form submissions.

If you send us member data for printing or encoding, you are the controller of that data and we act as your processor. We use it only to produce, encode and ship your order, and we do not use it for our own marketing.

03How we use it

• Prepare quotes, confirm specifications and produce, encode and ship orders.
• Invoice, collect payment, calculate sales tax, and keep accounting records.
• Handle warranty, reprint and damage claims, and answer support questions.
• Prevent fraud and verify that an order is from the organization it claims to be from.
• Meet legal, tax and record-keeping obligations, and respond to lawful requests.
• Send occasional product or stock notices — only where you have opted in, and every message carries an unsubscribe link.

We do not use your information for automated decision-making that produces legal effects, and we do not build advertising profiles.

04Cookies and signals

This site is a static marketing site. We use only what is necessary for it to function — a small amount of local storage for interface state — plus aggregate analytics that count page views and referrers without building a cross-site profile of you.

We do not run advertising pixels or retargeting tags. Blocking cookies or local storage will not stop you reading the site; it may reset preferences.

Where our analytics stack supports it, we treat a Global Privacy Control signal from your browser as an opt-out of analytics. We do not currently act on legacy Do-Not-Track headers, because there is no agreed standard for them.

05Who we share with

We share personal information only with providers who need it to do a job for us, under contract and only for that job:

• Hosting and email providers that run this site and our inbox.
• Payment processors and banks that take and settle payment.
• Carriers and freight brokers that deliver your order — name, address and contact number, plus the packing list where one is required.
• Accounting, ERP and legal advisers, for invoicing, tax and disputes.
• Authorities or courts where we are legally required to respond, or where we must establish or defend a legal claim.
• A successor entity in a merger, acquisition or sale of assets, under the same protections.

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising. We do not sell the member data lists customers send us.

06How long we keep it

• Quote enquiries that do not become orders — up to 24 months, so we can pick up the conversation where it stopped.
• Order files, artwork and encoding data — 36 months after delivery, so a reorder or warranty claim can be reproduced exactly; then deleted.
• Invoices, tax and accounting records — 7 years, as required for U.S. tax and audit purposes.
• Marketing contacts — until you unsubscribe, then suppressed for 12 months so we do not re-add you.
• Server and security logs — up to 12 months.

07Security

Access to order and customer data is limited to staff who need it. The site is served over HTTPS, files are stored on access-controlled systems, and customer data lists are handled separately from marketing contact lists. Staff are bound by confidentiality.

No system is perfect. If you suspect that information you sent us has been compromised, email [email protected] with “Security” in the subject line and we will investigate and respond.

08Your rights and choices

Subject to applicable law, you can ask us to:

• Confirm and disclose what personal information we hold about you, and where it came from.
• Correct inaccurate details, including an address or contact name on file.
• Delete information we no longer need — records we must keep for tax or warranty purposes are excepted.
• Stop marketing email at any time, by the unsubscribe link or by asking us.
• Obtain a portable copy of the data you gave us, where the law provides for it.

California residents

Under the CCPA as amended by the CPRA you have the right to know the categories and specific pieces of personal information we collect, the right to delete, the right to correct, the right to opt out of sale or sharing (we do neither), the right to limit use of sensitive personal information, and the right not to be discriminated against for exercising these rights. You may use an authorized agent; we will ask for proof of authorization.

Other U.S. states

Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas and Oregon — have comparable rights to access, correct, delete and opt out of targeted advertising and profiling. We do not engage in either.

Visitors in the EU or UK

We process your information to perform a contract with you, to comply with law, for our legitimate interests in running a card business, and with consent for marketing. You may object to processing, ask for portability, or complain to your local supervisory authority.

How to exercise a right: email [email protected] with the subject “Privacy request”, tell us what you want and which email or order it concerns. We acknowledge within 10 business days and substantively respond within 45 days, which we may extend once by a further 45 days with notice. We verify identity by matching the request to an email address or order number we already hold.

09Children

This site and our card programs are aimed at businesses and organizations. We do not knowingly collect personal information from anyone under 16. If you believe a child’s information has reached us — for example through a family membership list — contact us and we will delete it.

10Visitors outside the U.S.

We operate in the United States and process information here. If you contact us from another country, your information will be transferred to and stored in the U.S., where privacy rules may differ from your own. Where a transfer requires safeguards, we rely on standard contractual clauses or an equivalent mechanism with our providers.

11Changes

We will update this policy when our practices change or the law requires it. The effective date at the top of the page always reflects the current version. If a change materially affects how we use information you have already given us, we will post a notice on the site before it takes effect.

12Contact

Privacy questions and requests: [email protected], subject line “Privacy request”. Postal: OPENNODE INC, 236 Nix Loop SE, Fairmount, GA 30139, United States. Related documents: Terms & Conditions and Payment Policy.

OPENNODE INC · 236 Nix Loop SE, Fairmount, GA 30139 · United States