← Back to App

Legal

Privacy Policy

Effective date: January 1, 2025  ·  Last updated: August 26, 2026

This Privacy Policy describes how TCF Supply LLC ("TCF", "we", "us", or "our") collects, uses, and protects information in connection with TCF Atlas Core — our stone slab inventory management platform available at tcfatlascore.com. By using our platform you agree to the practices described here.

1. Who We Are

TCF Supply LLC (doing business as Texas Counter Fitters) is a natural stone countertop company based in Richardson, Texas. TCF Atlas Core is our internal and client-facing inventory management platform used by our team, corporate clients, and approved partners to browse, reserve, and track stone slab inventory.

This policy applies to all users of the platform, including personnel, corporate clients, and visitors who interact with the public-facing portions of the site.

2. Information We Collect

Information You Provide

  • Account information — name, email address, phone number, job title, and password when you register or are invited to the platform.
  • Corporate account details — company name, business address, and representative information when a corporate account is created.
  • Communications — messages, inquiry forms, notes, and any content you submit through the platform's contact or inquiry features.
  • Safety waivers — your name and digital signature when you complete a warehouse visitor safety waiver.
  • Transaction data — reservation requests, purchase history, quotes, and invoices associated with your account.

Information Collected Automatically

  • Usage data — pages visited, features used, search queries, and actions taken within the platform.
  • Device and browser data — IP address, browser type, operating system, and screen resolution.
  • Session data — authentication session tokens stored in secure, HTTP-only cookies to keep you signed in.
  • Performance data — page load times and error logs used to improve platform reliability.

Information From Third Parties

  • Sign-in forms — information submitted via kiosk or digital sign-in forms when you visit our facility.

3. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your access.
  • Provide inventory browsing, reservation, quoting, and invoicing services.
  • Process and fulfill material orders and delivery requests.
  • Send you transactional notifications — order confirmations, status updates, and account alerts.
  • Respond to inquiries, support requests, and feedback.
  • Maintain safety records, including signed waivers for warehouse visitors.
  • Analyze usage patterns to improve platform features and performance.
  • Comply with applicable legal obligations.
  • Detect and prevent fraud, unauthorized access, or abuse.

We do not use your information to serve third-party advertising or sell your data to data brokers.

4. Sharing Your Information

We do not sell your personal information. We may share it only in the following circumstances:

Service Providers

We work with trusted third-party vendors who process data on our behalf, including cloud hosting (Neon serverless PostgreSQL), object storage, and transactional email delivery. These providers are contractually bound to protect your data and may not use it for their own purposes.

Your Employer or Corporate Account

If your account is associated with a corporate client or employer, relevant transaction history, quotes, and inventory interactions may be visible to your company's designated account representatives within the platform.

Legal Requirements

We may disclose your information when required to do so by law, court order, or to protect the rights, property, or safety of TCF Supply LLC, our users, or the public.

Business Transfers

If TCF Supply LLC is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

  • Active accounts — retained for the duration of your account plus a reasonable period thereafter.
  • Deactivated accounts — account data is soft-deleted and preserved for business continuity. You may request permanent deletion (see Your Rights below).
  • Transaction records — quotes, invoices, and purchase history are retained for a minimum of 7 years to comply with financial record-keeping requirements.
  • Safety waivers — retained for a minimum of 5 years.
  • Usage logs — automatically purged on a rolling basis.

6. Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encrypted connections (HTTPS/TLS) for all data in transit.
  • Password hashing using industry-standard algorithms — we never store plaintext passwords.
  • Role-based access control (RBAC) limiting what each user can see and do.
  • Optional two-factor authentication (2FA) for all user accounts.
  • HTTP-only session cookies not accessible to client-side scripts.
  • Automated backups with point-in-time recovery.

No system is completely secure. If you believe your account has been compromised, please contact us immediately at the address below.

7. Use of Cookies and Other Tracking Technologies

Our website may store or retrieve information on your browser, mostly in the form of cookies. A cookie is a small piece of data (text file) that a website – when visited by a user – places on the user's device to remember information about the user, such as the user's language preference or login information.

This type of cookie is set by us and is referred to as a "first-party cookie." Our website uses first-party cookies primarily to make the website work as you expect it to. For example, we use the information we collect through first-party cookies to allow you to navigate between pages efficiently, analyze how well our website is performing, and understand the content that you spent the most time reviewing. In some cases, we use first-party cookies to store information that we use for targeted advertising.

We also incorporate cookies and similar technologies, such as pixels, tags, and web beacons, from outside our website's domain ("third-party cookies"). Third-party cookies gather information to enable our vendors to provide a range of services to us, including targeted advertising and measuring the success of our advertising campaigns.

Below is a detailed list of the categories of first- and third-party cookies we use on our website. You can prevent the collection of data by non-essential performance, functional, and marketing cookies by clicking on the cookie icon in the lower left of our website and toggling off the related functionality.

How We Use Cookies

We make use of cookies under the following circumstances and for the following reasons:

  • Provide you with services available through the website and to enable you to use some of its features
  • Authenticate users and prevent fraudulent use of user accounts
  • Identify if users have accepted the use of cookies on the website
  • Compile data about website traffic and how users use the website to offer a better website experience
  • Understand and save visitor preferences for future visits, such as remembering your login details or language preference, to provide you with a more personal experience, or to avoid you having to re-enter your preferences every time you use the website
  • Track your browsing habits to enable us to show advertising which is more likely to be of interest to you, including advertising by third parties on our website

Essential Cookies

Essential cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. The Google-managed hosting layer may also set an essential GAESA cookie for request routing and session affinity. This cookie is not used for analytics or advertising and may persist for up to 30 days. You can set your browser to block or alert you about these cookies, but blocking them may prevent the website from working correctly or at all.

Non-Essential Cookies

Non-Essential cookies are not essential to the website functionality but serve some other unique purpose in three subcategories:

  1. "Performance" cookies (sometimes referred to as static cookies) collect information about the user's behavior on the website without collecting Personal Information, for example:
    • Pages the user visits.
    • Ads the user views.
    • Ads or site features that the user clicks.
  2. "Functional" cookies (sometimes called preference cookies) track and remember the user's preferences and past choices on the website to provide a personalized user experience. For example, functional cookies can collect:
    • Usernames
    • Passwords
    • Regions
  3. "Targeting" cookies (sometimes called preference cookies) can track:
    • Content the user views or "likes"
    • Links the user follows
    • The user's browser and device information and IP address

    Please note: Organizations can use targeting cookies to track and influence users by building user profiles or displaying advertisements.

Information on Some of the Cookies in Use on our Site

For information on some of the cookies we use on our site and apps, please review the policies from some of our vendors:

Cookie Management

You can control and manage cookies associated with your browser. If you are interested in controlling and managing cookies from your browser including any set by our website, please refer to allaboutcookies.org for information on different ways to configure your browser's cookie settings.

If you want to clear all cookies left behind by the websites you have visited, here are links where you can download three third-party programs that clean out tracking cookies:

You may delete cookies from your web browser at any time or block cookies on your equipment, but this may affect the functioning of or even block the website. Below you can find browser-specific guidance:

Do Not Track (DNT) is a privacy preference that users can set if they do not want web services to collect information about their online activity. We do not respond to DNT signals (with the exception of Global Privacy Controls as explained above in the section of this policy on "Opt-Out Preference Signals").

You can adjust your advertising preferences on mobile devices through your device settings. Below you can find some guidance based on your type of mobile device:

DAA

Many advertising companies that collect information for interest-based advertising are members of the Digital Advertising Alliance (DAA) which maintains self-regulatory programs along with websites where people can opt out of interest-based advertising from their members. To opt-out of website interest-based advertising visit the DAA's opt-out portal available at optout.aboutads.info. To opt-out of data collection for interest-based advertising across mobile applications by participating companies, download the DAA's AppChoices mobile application opt-out offering found at youradchoices.com/appchoices.

Non-Participant Opt-Out Options

  • Some of our vendors do not participate in the DAA self-regulatory program for online behavioral advertising or have developed their own processes for allowing consumers to opt-out: branch.app.link/optout
  • Some devices and apps do not have access to web-based browser cookie opt-outs. To learn more about the advertising opt-outs provided by your mobile device's operating system (like iOS and Android) or the device manufacturer, please refer to your device's help documentation.

8. Global Privacy Control

Global Privacy Control (GPC) is a browser-level signal that tells websites not to sell or share your personal information. It is supported by browsers such as DuckDuckGo and Firefox, as well as browser extensions that implement the GPC specification.

When your browser or extension sends a GPC signal, TCF Atlas Core automatically:

  • Treats it as a "Do Not Sell or Share My Personal Information" request under applicable privacy laws, including the Texas Data Privacy and Security Act (TDPSA) and the California Consumer Privacy Act (CCPA/CPRA).
  • Rejects all non-essential cookies and tracking technologies for your session — equivalent to clicking "Reject Non-Essential" on our cookie banner.
  • Suppresses the cookie consent banner entirely, so you are not prompted to make a choice that your browser has already signaled.

You can verify that this site recognizes GPC by visiting /.well-known/gpc.json, which returns our machine-readable GPC declaration. Privacy-focused extensions such as DuckDuckGo Privacy Essentials will display a GPC badge on this site confirming the signal is honored.

GPC applies to public browsing only. Authenticated staff accounts access the platform under separate employment or contractor terms and are not affected by this setting.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access — request a copy of the personal information we hold about you.
  • Correction — request correction of inaccurate or incomplete information.
  • Deletion — request deletion of your personal information, subject to legal retention requirements.
  • Portability — request your data in a machine-readable format.
  • Objection — object to certain uses of your information.

To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

If you are a resident of Texas or another U.S. state with applicable privacy laws, you may have additional rights under those laws. We will honor valid requests consistent with applicable law.

11. Children's Privacy

TCF Atlas Core is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us so we can delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email or by a prominent notice within the platform.

Your continued use of TCF Atlas Core after changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out:

TCF Supply LLC

909 N Bowser Rd
Richardson, TX 75081

Phone: (469) 779-9999

Website: tcfatlascore.com