Privacy Policy

Olivya Stone (Harper House LLC, doing business as Olivya Stone) is a furniture company in Los Angeles, California, selling exclusively to the trade. This policy explains what information this website collects, why, and the choices you have. Questions any time: design@olivyastone.com or (424) 738-0161.

Most of what we hold, you give us through the site's forms: your name, email address, phone number, firm name, and, where relevant, an address, resale certificate number, website, and the content of your message. That happens when you apply for a trade account, request a quote or contact us, request a showroom appointment, order finish samples, or sign in to a trade account.

The site also notes how you arrived. If you came from a link we are measuring (an advertisement, a social post, or another website), we record which link, campaign or site it was and the page you first landed on, and keep that with your application or request if you later send one (see Cookies, below). The advertising tags described below also see which pages of the public site you view. We do not buy data about you, and we do not collect information from data brokers.

When you are signed in to a trade account, we also record a short list of actions you take on the site: which pieces you view, tear sheets you download, pieces you add to a project, sample requests, and quote requests. This is kept on our own systems, tied to your account, and used only so your design associate can help you. It is not shared with anyone else. Ask us any time and we will tell you what is held against your account, or delete it.

To do the thing you asked: review your application, answer your enquiry, price your quote, confirm your appointment, ship your samples, and operate your trade account. We may also email you about your account or your requests. We do not send marketing email lists, and we never sell or rent your information to anyone.

Our own cookies. When you sign in, a session cookie keeps you signed in to your trade account. When you arrive from a link we are measuring (an advertisement, a social post, or another website), we set up to three more cookies of our own: one remembering where your first visit came from, one remembering where your most recent visit came from, and a small flag saying that the visit came from an advertisement. They record the link's campaign and ad labels, the referring website, the page you landed on, and the click reference the advertising platform added to the link. They hold no name, no address and no browsing history, and they expire after ninety days. If you later apply for an account or send a request, that information is kept with it, so we know which advertisement or post earned it.

Advertising tags. We advertise on Meta (Facebook and Instagram), Pinterest and ChatGPT (OpenAI), and the public pages of this site load a small measurement tag from each of them: the Meta pixel, the Pinterest tag and the OpenAI Ads pixel. These tags tell each platform which pages you view, which pieces you look at, and when you submit a form, so that we can see which advertisements are worth running and show our work to people who have already shown interest. The Meta, Pinterest and OpenAI tags may also send contact details you type into our forms, such as your email address, to that platform, converted into a coded form (a hash) in your browser before it is sent, so the platform can match the visit to an account on its service for ad measurement. Each platform sets its own cookies to do this (for example _fbp and _fbc for Meta, _pin_unauth and _epik for Pinterest, and __oppref and __obref for OpenAI). The tags load after the page and only on public pages: never on our private resale upload pages or on private client links (shared projects, approvals and invoices).

Visit statistics. We count visits with Vercel Analytics, which uses no cookies and does not identify individual visitors.

Global Privacy Control. If your browser sends a Global Privacy Control signal, none of the advertising tags load, no advertising cookie is set, and our own source cookies are not set. The site works exactly the same either way.

Like most websites, we run on professional infrastructure: our site host, our database provider, our invoicing system, and our email delivery service process data on our behalf to make the site work. They are bound to use it only for that.

Our advertising platforms are the one place information goes further, and we would rather say so plainly than bury it. Besides what their tags see in your browser (see Cookies), when you submit a trade application, a quote request, a contact form or an appointment request, our server may tell Meta, Pinterest and OpenAI that a submission of that kind happened, so we can tell which advertisements are worth running. What we send is: the kind of submission and when it happened; the page it came from; your email address and phone number, each converted into a coded form (a SHA-256 hash) before it leaves our server; a reference number for the submission, also hashed; the click or browser reference the platform itself created; and your IP address and browser type. We do not send your name, your firm, your message, your resale certificate or your address. We send this whether or not you arrived from an advertisement, because people often see an advertisement and come back later on their own. We send nothing at all if your browser sends a Global Privacy Control signal, or if you have asked us not to.

Beyond that, your information goes to no one, except where the law requires it.

Account information stays for as long as the account is active. Applications, enquiries, quotes, appointment and sample requests stay in our records so we can serve you across a project's life. Ask us to delete something and, unless we are legally required to keep it, we will.

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. California residents have these rights under the CCPA and CPRA, and we extend them to everyone: email design@olivyastone.com with your request and we will act on it promptly, and never treat you differently for asking.

We never sell your personal information for money. The advertising tags on this site, and the reports of form submissions we send to Meta, Pinterest and OpenAI, may count as sharing personal information for cross-context behavioural advertising under California law, so we treat them as though they do. To opt out of all of it, turn on Global Privacy Control in your browser: we honour it automatically, and it requires nothing from you beyond a setting. You can also email design@olivyastone.com and we will stop sending any report about submissions made with your email address. Because the tags run in your browser before we know who you are, Global Privacy Control is the way to stop those as well.

Passwords are stored hashed, never in plain text; connections to the site are encrypted; and pricing and account areas require sign-in. No system is perfect, but the site is built so that the sensitive parts hold the least possible data. The site is intended for design professionals and is not directed at children under 16, and we do not knowingly collect their information.

If this policy changes, the new version appears on this page with a new effective date. This version is effective October 21, 2026, and replaces the August 2026 version: it now names every advertising tag on the site and every platform we report form submissions to, and makes Global Privacy Control switch all of it off.