Privacy Policy
Effective date: November 12, 2026
This policy explains how the pahardware.com website handles information. Phoenix Architectural Hardware Group operates the site. We also use the names PA Hardware and Phoenix. The site is for business customers.
Who we are
We are a commercial door-hardware distributor. We sell to businesses, including dealers, contractors, and equipment manufacturers (OEMs). This is not a consumer store.
Our address is 3105 Chamber Drive, Monroe, NC 28110. Phone 866-797-1960. Fax 866-306-4473. Email info@pahardware.com.
This policy is about pahardware.com. Idea Forge Studios builds the site and hosts it for us on its own servers, behind Cloudflare.
What we collect
We collect information in dealer accounts, in quotes and orders, on the contact form, in the activity log, and in server logs.
Accounts
PA Hardware staff create dealer accounts by invitation, for approved business customers only. There is no public self-sign-up. Each account belongs to one company and one pricing program. A dealer sees only that company's prices, quotes, and orders.
We store the user's name, email address, company, and phone number if one was given. We store the password in a form that cannot be turned back into the password. The user record keeps the last sign-in time. The full sign-in history is in the activity log.
For the company we store its name and its pricing program. We store addresses the dealer enters. If we have it, we also store the company's name in PA Hardware's accounting system.
Staff copy an invite link from the staff Customers page and hand it to the customer. The site does not email that link. A password reset link that staff create is handed over, not emailed. Only the self-service "forgot password" reset is emailed to the dealer. Invite links and reset links work once, and they expire.
The database stores an IP address and a browser type for each dealer sign-in and each staff sign-in. It stores them for each invite link and each reset link. An IP address is the numeric address of the connection. Browser type is the browser the person used.
Orders and quotes
A dealer can build a quote, request a quote, or submit an order on account.
An order can include a PO number, a job name, and a ship-to address. It can include an attention name on the ship-to. It can include a requested date, notes, and line items. It can include a fulfillment choice of ship, pickup, or will advise. It can include a billing email.
We keep quotes and orders as business records. Each submitted quote or order also stores an IP address and a browser type.
The site emails our staff at orders@pahardware.com about a submitted quote or order. It emails a confirmation to the dealer who submitted it. It emails the self-service password reset. It does not email invite links or staff-made reset links.
The site sends its email through SendGrid, from noreply@idfs.ai.
Public pages do not show prices. A dealer's prices come from that company's pricing program. Sales tax is calculated on the invoice, not on the site.
Contact form
The contact form collects a name and an email address. Phone is optional. An order number is optional. The form also collects the message. A hidden anti-spam field is on the form.
Each message is stored in the site's form records, together with the sender's IP address. That record is kept for 365 days.
A copy of the submission event goes to our service provider's form receiver, for delivery and for spam review.
Contact messages are emailed to PA Hardware at orders@pahardware.com.
Logs
Server logs can include an IP address, the browser type, the pages requested, and the time. We use them for security and troubleshooting.
The database also stores an IP address and a browser type, as described above. That storage is not limited to server logs.
The activity log covers dealers and staff. It records sign-in and sign-out, and failed sign-in attempts. It records reset requests, adding to a quote, and submitting quotes and orders. It records reorders, document downloads, and contact-detail changes. Each entry records the IP address.
What we do not collect
We do not collect credit card or debit card numbers. The site takes no payment. PA Hardware confirms an order, then invoices it and collects payment outside the website, under the customer's account terms.
We do not collect credit applications online. The site offers a PDF. You fill it in on your own computer, sign it, and send it directly to PA Hardware. The form asks for Social Security numbers and bank account numbers. That is why it stays off the site. Send the completed application to ar@pahardware.com. It is then kept in PA Hardware's own records, not on this website.
Cookies
The site sets only the cookies it needs for sign-in, for form security, and for a header hint. Those cookies are marked Secure. The site does not set advertising cookies. Apart from Google Analytics, described below, public pages set no cookie.
- A dealer sign-in cookie, kept for 7 days.
- A signed-in hint cookie, kept for 7 days. The page script can read it. It holds no login. It only tells the page header that a sign-in may exist.
- A staff sign-in cookie, kept for 12 hours.
- A security token on the sign-in, reset, and staff pages. It ends when the browser closes.
- A contact-form security cookie on the contact page, kept for 24 hours.
Google Maps on the contact page, and YouTube on the videos page, come from Google. They may set their own cookies under Google's policies. The videos page loads clips from a privacy-enhanced YouTube address when the page opens.
We use Google Analytics 4 on the public pages to see how the site is used. It does not run on the dealer sign-in and account pages, the quote pages, the staff pages, or the contact page. Google Analytics sets its own cookies, and Google receives the visitor's IP address and the pages viewed.
Third parties the pages load
Your browser contacts other companies for some page features. Those companies can receive an IP address and related request data.
Cloudflare provides content delivery and security in front of the site, so it sees visitors' IP addresses and requests.
Google Fonts load from Google on every page. Google receives the visitor's IP address.
The videos page loads product videos from YouTube when the page opens. It uses a privacy-enhanced YouTube address. Use of those videos is subject to Google's terms and Google's privacy policy. YouTube may set its own cookies.
The contact page embeds Google Maps. Google may set its own cookies from that map.
SendGrid sends the site's email, from noreply@idfs.ai. Staff receive order and quote notices. The dealer who submitted receives a confirmation. The dealer receives the self-service password reset. Invite links are not emailed.
Public pages load Google Analytics 4, as described under Cookies.
Pages also link to Facebook and to our web provider. The page does not load those sites unless you follow the link.
How we use information
We use account details to open dealer accounts and to limit each dealer to its own company. We use quotes and orders to take those requests and to keep business records. We use the contact form to receive the message, to store it, and to check it for spam. We use logs for security and troubleshooting.
We email staff about a submitted quote or order. We email a confirmation to the dealer who submitted it. We email a password reset only after the dealer uses "forgot password." Staff hand over invite links. Staff also hand over reset links they create. Those links are not emailed.
The activity log records the dealer and staff events listed above. The site does not send marketing email. The site is not used for targeted advertising.
If you contact us, PA Hardware staff may reply by phone or by email. Our company email runs on Microsoft 365.
Sharing
We do not sell personal information. We share information with service providers that host the site, deliver and protect pages, send email, and receive form events.
Cloudflare sees requests in front of the site. Google receives data when Fonts, Maps, YouTube, or Google Analytics load. The email provider receives a message when the site sends one. Our service provider's form receiver gets a copy of each contact-form submission.
One dealer is not shown another company's prices, quotes, or orders.
We may share information to answer a legal request.
Security
The site stores each password in a form that cannot be turned back into the password. Invite links and reset links work once, then expire. The site's own cookies are marked Secure. The signed-in hint holds no login. Sign-in and reset pages use a security token. The contact page sets a security cookie for 24 hours. The contact form has a hidden anti-spam field. Cloudflare provides delivery and security in front of the site. The activity log records dealer and staff events, and each entry includes an IP address.
Retention
Quotes, orders, and account information are kept as PA Hardware's business records.
Contact-form records, including the sender's IP address, are kept for 365 days.
Server logs are kept for security and troubleshooting.
Your choices and requests
You may browse the catalog, Typical Sets, resources, videos, and the finish and color guide without an account. Typical Sets are common door hardware sets. You do not have to use the contact form.
Decline an invitation if you do not want an account. If you have one, ask us to correct it or to close the login.
You may ask what we hold about your account, quotes, orders, or a contact message, and you may ask us to correct it.
The site has no marketing list to opt out of.
Children
The site is for businesses. We do not knowingly create accounts for children. Staff open a dealer account only for an approved business customer.
Changes
We may update this policy. We will change the effective date when we do.
If we add another third party to the pages, we will update this policy to match.
Contact us
Questions about this policy:
Phoenix Architectural Hardware Group
3105 Chamber Drive
Monroe, NC 28110
Phone 866-797-1960
Fax 866-306-4473
Email info@pahardware.com