Trust & Security

01Business identity and support

You should be able to tell who you are paying and how to reach a person about a project.

• Business name: Yard Haven LLC.
• Formed in: Wyoming, USA.
• Operates from: 105 Simmons St, Bramwell, WV 24715, USA.
• Mailing address for notices: 105 Simmons St, Bramwell, WV 24715, USA.
• Website: outdoorspaceliving.com.
• Support email: hello@outdoorspaceliving.com.
• Support phone: +1 (681) 284-1515.

02Payment security

Cards are entered on Stripe's page, not on ours. Stripe's PCI status is Stripe's, not a Yard Haven certification.

• Fixed-price packages are paid on a full-page Stripe-hosted checkout page linked from the package page. For custom work, we email a Stripe-hosted payment page after you approve the written quote. Card details are entered there, directly with Stripe.
• Card details must be entered only on Stripe's hosted page. They must not pass through Yard Haven's website, D1 database, email, live chat, logs, analytics, or support tools.
• Stripe states that it is assessed annually as a PCI Level 1 service provider. That status applies to Stripe's service and does not certify Yard Haven or remove Yard Haven's own obligations.
• Yard Haven does not claim PCI DSS certification. Card details stay with Stripe.
• Your card statement shows the charge as YARD HAVEN, or as the YRDHAVEN prefix with the product name after the asterisk; your bank may format that text differently.
• Each payment derives the approved scope, amount, and USD currency from a controlled server-side quotation record, uses only a Stripe-created hosted URL, and is confirmed by verified, idempotent server-side notification rather than a browser success page.
• Refunds are sent back to the original payment method.

03Payment operations

Payments run under account, technical, and validation controls that are reviewed before any change.

• Production secrets stay in encrypted platform storage with least-privilege access, MFA, access review, rotation, and compromise procedures.
• The Stripe webhook verifies the unmodified request body and signature, checks amount, currency, environment, and internal reference, and handles duplicate or out-of-order events idempotently.
• Checkout-related scripts, dependencies, monitoring, failure behavior, and the incident process are reviewed before any payment change goes live.
• A browser return page is never treated as proof of payment or authorization to fulfill an order.

04Consent controls

Cookie Settings and Your Privacy Choices stay in the footer on every page.

• Cookie Settings lets you manage Performance, Analytics, and Marketing categories.
• Your Privacy Choices opens Marketing controls and opt-out wording.
• Optional Marketing technologies stay off unless you accept them.

05Website and data safeguards

We use practical safeguards for a small online design studio, not a bank-grade security theater.

• HTTPS for website connections.
• Limited access to customer project details and files.
• Use of reputable service providers for hosting, email, files, payments, and business operations.
• Strong passwords and restricted access for business accounts.
• We ask only for information relevant to quotes, design work, delivery, payment, support, or records.

06Incident response

If something goes wrong with personal information, we investigate, contain it, and notify people when the law says we must.

If a security incident affects personal information, Yard Haven will investigate, contain the issue, preserve appropriate evidence, and provide notices when required by law. Where the GDPR applies and a breach is likely to risk people's rights and freedoms, the responsible supervisory authority is generally notified without undue delay and, where feasible, within 72 hours after we become aware of it.

If you believe you found a security issue involving Yard Haven, contact hello@outdoorspaceliving.com.

07Customer responsibilities

Please do not email card numbers, and keep a copy of your finished files.

• Do not email full card numbers, card security codes, passwords, government ID numbers, or unrelated sensitive data.
• Do not send card or bank credentials through the website form, email, phone messages, live chat, SMS, or social media. Card payments happen only on Stripe-hosted payment pages — linked from fixed-price package pages, or emailed after you approve a custom quote.
• Use trusted contractors and qualified local professionals before implementing any design work.
• Keep copies of your final digital deliverables in a secure place.