Privacy Policy

Effective Date: October 15, 2026

Last Updated: October 15, 2026

This Privacy Policy explains how Star Creations Inc., d/b/a AJ Madison (“AJ Madison,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information, and the choices and rights you have. It applies when you visit ajmadison.com or any site that links to this policy, shop in our showrooms, call or chat with us, receive our emails or texts, or otherwise interact with us (together, the “Services”).

Quick link: Your Privacy Choices

1. Who We Are and Scope

AJ Madison is a New York-based retailer of home appliances, plumbing, and related products, selling online and through our showrooms. We are the business (or “controller”) responsible for the personal information described here.

This policy does not cover:

Information about our employees, job applicants, and contractors.
Information about business customers and vendor contacts collected solely in a business-to-business context, except where state law requires otherwise.
Third-party websites, apps, or services, including manufacturer websites, financing providers, and social media platforms, even if you reach them through our Services. Their own privacy policies apply.

Our Services are intended for users in the United States. If you access them from outside the United States, your information will be processed in the United States.

2. Personal Information We Collect

We collect personal information directly from you, automatically when you use the Services, and from other sources. What we collect depends on how you interact with us.

Information you give us

Account and contact details: name, email address, phone number, billing and delivery addresses, and account password. We create an account automatically when you make a purchase online or in a showroom.
Order and transaction details: products purchased, order history, returns, warranty and protection-plan purchases, delivery and installation instructions, and site details you provide (for example, access notes or appliance dimensions).
Payment information: card or other payment details, which are collected and processed by our payment processors. We receive a token and limited details, such as card type and last four digits, not your full card number.
Financing applications: if you apply for financing through a partner, the partner collects the information it needs and makes the credit decision. We receive the result and limited application details.
Communications: messages, emails, chat transcripts, call recordings (where you are notified), and the contents of customer-service conversations, including conversations with our AI-assisted support tools.
Reviews, Q&A, and other content you post: ratings, reviews, photos, and your display name. Content you post publicly can be seen by others.
Marketing preferences and program information: email and text-message subscriptions, Subscribe & Save enrollment, survey responses, and sweepstakes or contest entries.
Business and trade customer information: company name, title, resale or tax-exemption certificates, and project details for trade, builder, or designer customers.

Information collected automatically

Device and connection data: IP address, browser type and settings, device type, operating system, and cookie and advertising identifiers.
Usage data: pages and products viewed, searches, items added to cart, links and ads clicked, referring URLs, time spent, and similar interaction data.
Session and interaction recordings: tools that record how you move through our site, such as pages viewed, clicks, scrolling and mouse movements. These tools mask what you type and never capture payment details.
Approximate location: city, state, or ZIP code inferred from your IP address or provided by you, used for delivery availability, pricing, and tax. We do not collect precise geolocation.
Showroom information: video recorded by security cameras in our showrooms and warehouse facilities.

Information from other sources

Service providers and partners: delivery, installation, and haul-away partners (delivery confirmations, photos, and notes); payment and fraud-prevention providers; financing partners.
Manufacturers and brands: information needed for warranty registration, rebates, and product recalls.
Advertising and analytics partners: information about your interactions with our ads and with other sites.
Social media platforms: information you make available to us when you interact with our pages or sign in through a social account.
Data providers and public sources: address verification.
Other customers: if someone sends a gift, a wish list, or a referral to you.

Sensitive personal information

The only sensitive personal information we collect is account log-in credentials (your account email and password). We use log-in credentials only to provide the Services, secure your account, and prevent fraud, which are uses permitted without a “limit” right under California law. We do not use sensitive personal information to infer characteristics about you.

3. How We Use Personal Information

We use personal information for the following purposes:

Provide the Services and fulfill orders: process purchases, payments, and returns; schedule and complete delivery, installation, and haul-away; manage your account; administer Subscribe & Save and other programs; and handle warranty, rebate, and recall matters with manufacturers.
Customer service: respond to questions by phone, email, chat, and text, including through AI-assisted tools that help draft or send responses. You can ask to speak with a person at any time.
Communicate with you: send order confirmations, delivery updates, account notices, and changes to our policies.
Marketing: send promotional emails, texts (with your consent), and mail; show you personalized content and offers on our Services; and measure and target advertising on other sites and platforms, subject to your choices in Section 7.
Personalize and improve: remember preferences and your cart, recommend products, improve search, and analyze how the Services are used so we can fix problems and develop new features.
Security and fraud prevention: verify identity and payment, detect and prevent fraud, abuse, and unauthorized access, and protect our customers, employees, showrooms, and property.
Legal and compliance: comply with laws, tax requirements, and legal process; enforce our Terms of Use and Terms of Sale; and establish or defend legal claims.
Business transfers: evaluate or carry out a merger, acquisition, financing, or sale of assets, as described in Section 4.
Other purposes we describe when we collect the information or with your consent.

De-identified and aggregated data. We may create de-identified or aggregated information that cannot reasonably be linked to you and use it for any lawful purpose. We will keep it in de-identified form and will not try to re-identify it, except as permitted by law.

Artificial intelligence. We use automated tools, including AI, to support customer service, search, product recommendations, and fraud detection. We do not use automated decision-making to make decisions that produce legal or similarly significant effects about you (such as decisions about credit, housing, or employment).

4. How We Disclose Personal Information

We disclose personal information to the following categories of recipients:

Service providers and contractors that act on our behalf under contracts limiting their use of the information, including hosting and cloud providers, payment processors, fraud-prevention services, customer-service and chat platforms (including AI-assisted support), email and text-message platforms, analytics providers, review platforms, and IT and security vendors.
Delivery, installation, and haul-away partners that need your name, address, phone number, and order details to deliver or install your products.
Manufacturers and brands for warranty registration, rebates, product recalls, and safety notices, and where needed to resolve a product issue.
Financing partners if you choose to apply for financing through them.
Advertising and marketing partners, including social media and search platforms, that help us show ads and measure their effectiveness. Some of these disclosures may be a “sale” or “sharing” of personal information, or “targeted advertising,” under state privacy laws. See below.
Affiliate marketing networks that track which partner referred a purchase, so we can credit and pay that partner.
Affiliates under common ownership or control with us, for the purposes in this policy.
Other users and the public when you post a review or other content publicly.
Legal and safety recipients: government authorities, courts, and others when we believe it is required by law or legal process, or needed to protect the rights, property, or safety of AJ Madison, our customers, or others, including to prevent fraud.
Business transaction parties: a buyer, successor, or financing party, and their advisors, in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets. The recipient will be required to honor this policy for information it receives.
Others with your consent or at your direction.

Sale, sharing, and targeted advertising

We do not sell personal information for money. However, we allow advertising partners to collect information through cookies, pixels, and similar technologies on our Services, and we provide certain information (such as hashed email addresses, phone numbers, and purchase or conversion events) to advertising platforms so they can show you our ads on other sites, find similar audiences, and measure results. Under some state laws, this may be a “sale” or “sharing” of personal information, or processing for “targeted advertising.”

In the past 12 months, we may have sold or shared identifiers (such as hashed email, cookie and advertising IDs, and IP address), commercial information (such as products viewed or purchased), and internet activity with advertising networks, social media platforms, retargeting providers, and business data providers. You can opt out as described in Section 7.

The companies we have sold or shared personal information with, or may do so, are: Google, Meta (Facebook and Instagram), Microsoft (Microsoft Advertising and Microsoft Clarity), Pinterest, Amazon Ads, Criteo, ZoomInfo, Audacy, UpSellit, Optiversal, and CJ (Commission Junction).

We do not knowingly sell or share the personal information of consumers under 18.

Shine the Light (California). We do not disclose personal information to third parties for their own direct marketing purposes if you have opted out. California residents can opt out, free of charge, through Your Privacy Choices.

5. Cookies, Pixels, and Similar Technologies

We and our partners use cookies, pixels, tags, software development kits, server-to-server connections, and similar technologies (“Technologies”) to collect information automatically. We group them as follows:

Strictly necessary: runs the site: cart, checkout, log-in, security, fraud prevention, and load balancing. You can't turn these off; the site won't work without them.
Functional: remembers preferences such as ZIP code, recently viewed items, and saved lists. You can turn these off through your browser settings. Blocking them may turn off features such as your saved ZIP code.
Analytics and performance: measures traffic and how the site is used (for example, Google Analytics) and helps us diagnose problems, including session replay. If you opt out, analytics continues in a restricted form: it still measures visits and purchases, but ad personalization is off and the data isn't used to show you targeted ads. You can also use Google's opt-out browser add-on.
Advertising: lets advertising and social media partners show our ads on other sites, build audiences, and measure results. These are turned off when you opt out through Your Privacy Choices or a GPC-enabled browser.

Managing Technologies. You can opt out of the sale and sharing of your personal information and of targeted advertising at any time through Your Privacy Choices, linked at the bottom of every page, or by turning on Global Privacy Control in your browser. You can also block or delete cookies in your browser settings, which may affect how the site works. To opt out of interest-based ads from participating companies on other sites, use the Digital Advertising Alliance's WebChoices tool and Google's Ads Settings. These tools save your choice in a cookie, so they work only in the browser where you set them.

Global Privacy Control. We treat the Global Privacy Control (GPC) signal as a request to opt out of the sale and sharing of your personal information and of targeted advertising for that browser and, if you're signed in, for your account. Your Privacy Choices shows when we've honored the signal. We do not respond to other “Do Not Track” signals because there is no common standard for them.

Advertising partners. Advertising companies, including Google, Meta, Microsoft, Pinterest, Amazon and Criteo, place and read cookies, pixels and device identifiers on our Services. They collect information such as the pages you view, the products you look at or buy, your browser and device, and your IP address, on our Services and on other sites over time. They use it to measure our ads and to show ads, including ours, on sites across the internet based on your past visits. This is sharing for cross-context behavioral advertising, or targeted advertising, which you can opt out of as described in Managing Technologies. We use Google Analytics advertising features, including remarketing audiences shared with Google Ads; for these, Google Analytics cookies are used together with Google advertising cookies. You can turn off Google's personalized ads in Google's Ads Settings and stop Google Analytics with Google's opt-out browser add-on. Microsoft collects or receives personal data from you through our use of Microsoft Advertising; see the Microsoft Privacy Statement for how Microsoft uses it.

Social media features. Our Services may include features such as share buttons or embedded content from social media platforms. These platforms may collect information about your visit and are governed by their own privacy policies.

6. Chat, Calls, Session Recording, and Text Messages

Chat and AI-assisted support. When you chat with us, our customer-service provider records and stores the conversation for us so we can answer you and keep a record. Some replies may be drafted with AI, and you can ask for a person at any time. Please don't share payment card numbers or other sensitive information in chat.
Calls. We may monitor or record calls for quality, training, and security. We tell you at the start of the call when it is being recorded.
Session recording. We use Microsoft Clarity to understand how visitors use our site, through heatmaps and recordings of pages viewed, clicks, scrolling and mouse movements. Clarity masks what you type into forms and does not capture payment details. Microsoft collects this data as an independent company and may also use it to provide Microsoft Advertising, as described in the Microsoft Privacy Statement. Clarity does not run for visitors who opt out through Your Privacy Choices or Global Privacy Control. We also use Sentry and New Relic to record a small sample of sessions, and sessions where an error occurs, to diagnose errors and performance problems. These recordings hide all text on the page and everything you type into forms. Sentry and New Relic act as our service providers: they process these recordings only for us and may not use them for their own purposes, including advertising.
Text messages. If you sign up for text messages, you agree to receive recurring automated marketing texts at the number you provide. Consent is not a condition of purchase. Message and data rates may apply. Reply STOP to cancel or HELP for help. We do not sell or share your mobile number or text-message opt-in data with third parties for their marketing. See our SMS Terms.

7. Your Choices and Privacy Rights

Choices available to everyone

Marketing emails: click “unsubscribe” in any marketing email or update your account preferences. We will still send transactional and account messages.
Text messages: reply STOP.
Phone and mail: ask us to add you to our internal do-not-call or do-not-mail list. We process these requests within the time required by law.
Advertising and cookies: use Your Privacy Choices, linked at the bottom of every page, or a GPC-enabled browser. If you're signed in when you opt out, your choice also applies to your account, on every device where you sign in.

State privacy rights

Depending on where you live, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, you may have the right to:

Know and access the personal information we have about you, including the categories, sources, purposes, and recipients, and get a copy in a portable format.
Correct inaccurate personal information.
Delete personal information we collected from or about you.
Opt out of the sale of personal information, “sharing” for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects.
Limit the use of sensitive personal information, where applicable. As explained in Section 2, we use sensitive personal information only for permitted purposes.
Obtain a list of the specific third parties to which we have disclosed personal information (Oregon, Minnesota, and Connecticut residents) or categories of third parties (other states).
Question a profiling decision and learn the reasons behind it (Minnesota residents), if applicable.
Not be discriminated against for exercising these rights. We will not deny you goods or services, charge different prices, or provide a different level of service because you exercised a right, except as permitted for financial incentive programs (see Section 11).

These rights are subject to exceptions. For example, we may keep information needed to complete a transaction, comply with a legal obligation, prevent fraud, or defend legal claims.

How to submit a request

Opt out of sale, sharing, and targeted advertising: Your Privacy Choices, or a GPC-enabled browser. Opt-outs take effect right away and don't require verification.
Email: privacy@ajmadison.com
Toll-free: 1-800-570-3355

Verification. To protect you, we verify access, correction, and deletion requests by matching information you provide (such as your name, email, phone number, and a recent order number) with our records. If you have an account, we may ask you to sign in. We may ask for more information if needed and will use it only for verification.

Authorized agents. You may use an authorized agent to submit a request. We may require the agent to show signed written permission and may ask you to verify your identity directly with us, unless the agent has a valid power of attorney.

Timing. We will confirm receipt of your request within 10 business days and respond within 45 days. If we need more time, we may extend by up to 45 more days and will tell you why. We respond to opt-out requests as soon as feasibly possible and no later than 15 business days.

Appeals. If we decline your request, you may appeal by emailing privacy@ajmadison.com with “Privacy Appeal” in the subject line within 45 days of our decision. We will respond in writing within the time required by your state's law (generally 45 or 60 days) and explain our decision. If you are not satisfied, you may contact your state Attorney General.

8. Data Retention

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including providing the Services, honoring warranties and returns, meeting tax, accounting, and legal requirements, resolving disputes, and preventing fraud. Retention for each category appears in the California Notice at Collection below. When information is no longer needed, we delete or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor security requirements. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law. Please keep your account password confidential and contact us if you think your account has been compromised.

10. Children and Teens

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not knowingly sell or share, or use for targeted advertising, the personal information of anyone under 18. If you believe a child has given us personal information, contact us at privacy@ajmadison.com and we will delete it.

If you are a California resident under 18 and have posted content on our Services, such as a product review, you can ask us to remove it by emailing privacy@ajmadison.com. Removal may not be complete, for example if someone else has copied or reposted the content.

11. Notice of Financial Incentive

We may offer discounts or benefits in exchange for personal information, such as a discount for signing up for emails or texts and Subscribe & Save pricing. The personal information involved typically includes your name, email address, phone number, and purchase history. You opt in by signing up through the offer and agreeing to its terms. Participation is optional, and you can withdraw at any time by unsubscribing or canceling. We estimate the value of your personal information to be reasonably related to the value of the discount or benefit offered, based on our expected revenue from marketing to subscribers, less the cost of the program. Terms of each program are provided when you sign up.

12. Changes to This Policy

We review this policy at least once a year and update it when our practices change. We'll post the updated policy here with a new “Last Updated” date. If we make a material change, we'll tell you on our site, by email, or both. Before we use information we already have in a materially different way, we'll ask for your consent.

13. Contact Us

Star Creations Inc., d/b/a AJ Madison

Attn: Privacy

3605 13th Avenue, Brooklyn, NY 11218

Email: privacy@ajmadison.com

Toll-free: 1-800-570-3355

If you have a disability, you can access this policy in an alternative format by contacting us.

California Notice at Collection

This notice describes our collection in the past 12 months and serves as our notice at collection. “Service providers” means the recipients in Section 4 that act on our behalf.

Identifiers

Examples: name, email, phone, address, account ID, IP address, cookie and ad IDs
Sources: you; your devices; partners
Business purposes: orders, service, marketing, security
Disclosed to: service providers, delivery and installation partners, manufacturers, ad partners
Sold or shared: yes, to advertising networks and social media platforms
Retention: while your account is open, then as long as needed for warranties, returns, taxes, accounting, and legal claims

Customer records (Cal. Civ. Code 1798.80)

Examples: name, address, phone, limited payment details
Sources: you; payment processors
Business purposes: orders, payments, fraud prevention
Disclosed to: service providers, payment processors, financing partners
Sold or shared: no
Retention: while your account is open, then as long as needed for warranties, returns, taxes, accounting, and legal claims

Commercial information

Examples: purchases, returns, cart, warranties, Subscribe & Save
Sources: you; your devices
Business purposes: orders, service, personalization, marketing
Disclosed to: service providers, manufacturers, ad partners
Sold or shared: yes, to advertising networks and social media platforms
Retention: while your account is open, then as long as needed for warranties, returns, taxes, accounting, and legal claims

Internet activity

Examples: pages viewed, searches, clicks, session recordings
Sources: your devices
Business purposes: analytics, personalization, security, advertising
Disclosed to: service providers, ad partners
Sold or shared: yes, to advertising networks and social media platforms
Retention: as long as needed for analytics, security, and the purposes above, then deleted or de-identified

Approximate location

Examples: city, state, and ZIP code from your IP address or from you
Sources: you; your devices
Business purposes: delivery availability, tax, personalization
Disclosed to: service providers
Sold or shared: no
Retention: as long as needed for analytics, security, and the purposes above, then deleted or de-identified

Audio and visual

Examples: call recordings, showroom security video, review photos
Sources: you; our systems
Business purposes: service quality, security, reviews
Disclosed to: service providers; law enforcement where required
Sold or shared: no
Retention: call recordings as long as needed for quality and training review; showroom video is overwritten on a routine cycle unless needed for an investigation; review photos while the review is posted

Professional information

Examples: company, title, tax-exemption certificates (trade customers)
Sources: you
Business purposes: trade accounts, tax compliance
Disclosed to: service providers
Sold or shared: no
Retention: while your account is open, then as long as needed for warranties, returns, taxes, accounting, and legal claims

Inferences

Examples: product interests and preferences
Sources: our analysis; partners
Business purposes: personalization, marketing
Disclosed to: service providers
Sold or shared: no
Retention: as long as needed for analytics, security, and the purposes above, then deleted or de-identified

Sensitive personal information: account log-in

Examples: account email and password
Sources: you
Business purposes: account access, security
Disclosed to: service providers
Sold or shared: no
Retention: while your account is open

We do not collect biometric information or precise geolocation.