Trust & Security
This page explains how Yard Haven protects customer information, digital files, and payments.
01Business identity and support
Customers should be able to recognize Yard Haven and reach us about a purchase or project.
- Business name: Yard Haven LLC.
- Website: outdoorspaceliving.com.
- Support email: hello@outdoorspaceliving.com.
- Support phone: +1 (681) 284-1515.
- Mailing address: 105 Simmons St, Bramwell, WV 24715, USA.
02Payment security
Online card checkout is not active today. The planned boundary keeps card entry away from Yard Haven systems.
- After you approve a written quote, a future online card option is intended to redirect you to a full-page Stripe-hosted Checkout page. Until that account and flow are configured and verified, this website does not accept online card payments.
- Card details must be entered only on Stripe's hosted page. They must not pass through Yard Haven's website, D1 database, email, live chat, logs, analytics, or support tools.
- Stripe states that it is assessed annually as a PCI Level 1 service provider. That status applies to Stripe's service and does not certify Yard Haven or remove Yard Haven's own obligations.
- Yard Haven does not claim completed PCI DSS validation. The applicable assessment, attestation, and scanning duties will be confirmed against the real production architecture and completed before live card acceptance.
- Any later checkout must derive the approved scope, amount, and USD currency from a controlled server-side quotation record, redirect only to a Stripe-created hosted URL, and rely on verified, idempotent server-side confirmation rather than a browser success page.
- Refunds will return to the original payment method when possible after payment is introduced.
03Planned payment operations
The future payment launch remains disabled until its account, technical, and validation gates pass.
- Production secrets must stay in encrypted platform storage with least-privilege access, MFA, access review, rotation, and compromise procedures.
- The eventual Stripe webhook must verify the unmodified request body and signature, check amount, currency, environment, and internal reference, and handle duplicate or out-of-order events idempotently.
- The checkout-start page and its scripts, dependencies, monitoring, failure behavior, and incident process must be reviewed before live mode.
- A browser return page will never be treated as proof of payment or authorization to fulfill an order.
04Consent controls
Cookie Settings and Your Privacy Choices are available in the footer.
- Cookie Settings lets you manage Performance, Analytics, and Marketing categories.
- Your Privacy Choices opens directly to Marketing controls and opt-out wording.
- If your browser sends Global Privacy Control, Marketing remains off for that browser.
05Website and data safeguards
We use practical safeguards for a small online design business.
- HTTPS for website connections.
- Limited access to customer project details and files.
- Use of reputable service providers for hosting, email, files, payments, and business operations.
- Strong passwords and restricted access for business accounts.
- We ask only for information relevant to quotes, design work, delivery, payment, support, or records.
06Incident response
If a security incident affects personal information, we investigate and take appropriate steps.
If a security incident affects personal information, Yard Haven will investigate, contain the issue, preserve appropriate evidence, and provide notices when required by law. Where the GDPR applies and a breach is likely to risk people's rights and freedoms, the responsible supervisory authority is generally notified without undue delay and, where feasible, within 72 hours after awareness. If you believe you found a security issue involving Yard Haven, contact hello@outdoorspaceliving.com.
07Customer responsibilities
Please help protect your project and payment information.
- Do not email full card numbers, card security codes, passwords, government ID numbers, or unrelated sensitive data.
- Do not send card or bank credentials through the website form, email, phone messages, live chat, SMS, or social media. Use only the future Stripe-hosted page after Yard Haven confirms it is active.
- Use trusted contractors and qualified local professionals before implementing any design work.
- Keep copies of your final digital deliverables in a secure place.