Privacy policy
Privacy Policy
Effective date: January 1, 2022 Last updated: January 1, 2026
Zargar Corporation, which operates the McMillan Floors™ brand ("McMillan Floors," "we," "us," or "our"), runs mcmillanfloors.com (the "Site") and sells flooring and flooring samples to consumers and to trade, contractor, and dealer customers in the United States and Canada.
This policy explains what personal information we collect, why, who we disclose it to, how long we keep it, and the rights you have over it. It covers the Site, our online store, our trade and dealer channels, and the communications we send you.
McMillan Floors™ is a trademark of Zargar Corporation. This policy applies only to the McMillan Floors brand and mcmillanfloors.com. Other businesses under separate ownership or incorporation operate under their own privacy policies, and we do not share your personal information with them for their own purposes.
1. How to contact us
Zargar Corporation (operating as McMillan Floors™) 2301 Santiago Ct, Unit A Oxnard, CA 93030 United States
Email: info@mcmillanfloors.com Toll-free: (800) 208-0667
Privacy Officer: Karina Barajas, Operations, reachable at info@mcmillanfloors.com or at the address above.
2. Notice at collection — summary
The short-form notice California and other state laws require at or before collection. Details follow in Section 3.
| Category we collect | Why | Sold or shared? | How long we keep it |
|---|---|---|---|
| Identifiers (name, email, phone, billing and shipping address, IP address, account and cookie identifiers) | Fulfill orders, provide support, send communications you asked for, prevent fraud | Shared for cross-context behavioral advertising | Order records: 7 years. Marketing contacts: until you unsubscribe, plus 24 months |
| Customer records (contact and delivery details tied to a purchase) | Process, ship, and invoice your order | No | 7 years from the transaction |
| Commercial information (orders, samples requested, products viewed, purchase history) | Fulfill orders, recommend products, measure advertising | Shared for cross-context behavioral advertising | 7 years from the transaction |
| Internet and network activity (pages viewed, search terms, clicks, referring site, chat transcripts, session recordings) | Operate and improve the Site, provide chat support, diagnose problems, measure advertising | Shared for cross-context behavioral advertising | Analytics: up to 14 months. Advertising identifiers: up to 24 months. Chat and session recordings: up to 12 months |
| Approximate geolocation (derived from IP address — we do not collect precise location) | Show relevant products and shipping options; fraud screening | Shared for cross-context behavioral advertising | Same as internet activity above |
| Professional or business information (company name, role, trade or contractor license, dealer or contractor application details, resale and tax-exemption certificates) | Evaluate dealer and trade applications, verify eligibility, administer trade accounts and orders | No | Duration of the relationship, plus 7 years. Declined applications: 24 months |
| Account login credentials | Let you sign in to your account | No | Duration of the account, plus 24 months |
| Inferences (audience segments and product preferences derived from the above) | Personalize marketing and measure advertising | Shared for cross-context behavioral advertising | Until you unsubscribe or opt out, plus 24 months |
| Warranty registration and claim records | Honor product warranties | No | For the full term of the applicable warranty, plus 7 years |
We do not collect Social Security numbers, driver's license numbers, passport numbers, financial account numbers, precise geolocation, biometric data, genetic data, health information, or information about your racial or ethnic origin, religious beliefs, union membership, sexual orientation, or philosophical beliefs. We do not offer financing and do not collect credit application data from consumers.
We do not sell your personal information for money. We do "share" it for cross-context behavioral advertising, which California law treats the same as a sale for opt-out purposes. To opt out, see Section 7.
We do not knowingly collect or share the personal information of anyone under 16.
3. What we collect, and where it comes from
Information you give us directly. Your name, email address, phone number, billing and shipping address, and order contents when you buy flooring or request samples. Account credentials if you create an account. The contents of messages you send us by email, contact form, or chat.
Trade, contractor, and dealer applications. If you apply to become a McMillan Floors dealer, or inquire as a contractor or other business customer, we collect your name, business name and address, business email and phone, your role, trade or contractor license details, resale or tax-exemption certificates, and information about your business that you choose to provide. We use this to evaluate your application and administer the relationship. We handle these inquiries in-house and do not pass them to other dealers or third parties.
Information collected automatically. When you visit the Site we collect your IP address, browser type and version, device type, operating system, time zone, referring page, the pages and products you view, search terms you enter, and how you move through and interact with the Site — collected using cookies, pixels, tags, log files, and similar technologies described in Section 6.
Chat. Our Site chat is staffed primarily by our team, with some automated responses. Chat conversations are visible to us and to Shopify, which provides the chat service and uses message content both to deliver and to improve its services. If you sign in, chat activity may be associated with your account.
Session recording. We use Lucky Orange to record Site sessions and generate heatmaps. These recordings capture pages viewed, mouse movement, clicks, scrolling, and interaction with forms. Lucky Orange is configured to mask sensitive form fields, so payment and password entries are not captured.
Information from third parties. Our payment processor confirms whether a payment succeeded. Our advertising and analytics partners provide aggregated measurement data and audience segments. Shipping carriers provide delivery status.
Payment information. Payments are processed by Shopify Payments. We do not receive or store full payment card numbers. We receive the last four digits, the card type, and whether the transaction succeeded.
4. How we use personal information
- To process, fulfill, ship, and invoice your orders and sample requests
- To create and administer your account
- To evaluate dealer, contractor, and trade applications and administer those relationships
- To respond to inquiries, provide customer support, and handle warranty claims
- To send transactional messages (order confirmations, shipping notices, service updates)
- To send marketing emails and text messages where you have opted in, and to measure how they perform
- To operate, secure, debug, and improve the Site
- To measure and target advertising, and to build audience segments
- To detect, prevent, and investigate fraud, abuse, and security incidents
- To comply with tax, accounting, consumer-protection, warranty, and other legal obligations
We will not use your personal information for a materially different purpose without telling you first.
5. Who we disclose personal information to
Service providers and processors — companies that process information on our behalf under contract:
| Provider | What it does | What it receives |
|---|---|---|
| Shopify | E-commerce platform, hosting, checkout, customer accounts, Site chat | Order, account, device, Site-activity, and chat data |
| Shopify Payments | Payment processing and fraud screening | Payment and billing data |
| Klaviyo | Email and SMS marketing, onsite tracking | Contact details, order history, engagement and browsing data |
| Lucky Orange | Session recording, heatmaps, and site analytics | Site-interaction recordings, device data |
| Amplitude | Product analytics and on-site experimentation | Site-activity and device data |
| Freight carriers and delivery partners | Shipping and delivery of flooring and samples | Name, delivery address, phone number |
Shopify uses chat message content both to provide the chat service and to improve its own services.
Advertising and analytics partners — these receive information for cross-context behavioral advertising and measurement, which California law treats as "sharing":
| Partner | Purpose |
|---|---|
| Meta (Facebook, Instagram) | Conversion tracking, retargeting, audience building |
| Google (Google Ads, Google Analytics 4) | Conversion tracking, remarketing, Site analytics |
We do not disclose consumer inquiries, quote requests, or customer lists to dealers, contractors, or any other third party for their own marketing or sales purposes.
Legal and corporate. We may disclose personal information to comply with applicable law, to respond to a subpoena, warrant, or other lawful request, to enforce our terms, to protect our rights, property, or safety, or in connection with a merger, acquisition, financing, or sale of assets.
6. Cookies and tracking technologies
A cookie is a small file placed on your device when you visit the Site. We also use pixels, tags, SDKs, and local storage, which work similarly. Session cookies expire when you close your browser; persistent cookies remain until they expire or you delete them.
Strictly necessary — cart, checkout, login, security, and your privacy preferences. These cannot be turned off. The Site runs on Shopify, which sets a standard set of operational cookies for these functions; the current list is published at shopify.com/legal/cookies.
Analytics and performance — Shopify analytics, Google Analytics 4, and Amplitude.
Advertising — the Meta Pixel, Google Ads conversion and remarketing tags, and Klaviyo onsite tracking.
Chat and session recording — Shopify's chat service and Lucky Orange.
| Name / technology | Provider | Purpose | Duration |
|---|---|---|---|
_fbp, fr, Meta Pixel |
Meta | Ad delivery, conversion tracking, retargeting | Up to 90 days |
_ga, _ga_*
|
Analytics — distinguishing users and sessions | Up to 24 months | |
_gcl_au, Google Ads tag |
Conversion tracking and remarketing | Up to 90 days | |
__kla_id, Klaviyo onsite tracking |
Klaviyo | Identifying subscribers, abandoned-cart and browse triggers | Up to 24 months |
_lo_uid, _lo_v, _lo_rid and related _lo_* cookies |
Lucky Orange | Session recording, heatmaps, visitor identification | Up to 12 months |
AMP_*, AMP_MKTG_*, EXP_*
|
Amplitude | Product analytics and on-site experimentation | Up to 12 months |
Managing cookies. You can accept or reject non-essential cookies and tracking technologies using the privacy preferences control on the Site, and you can change your choice at any time. You can also block or delete cookies through your browser settings, though parts of the Site may stop working. Blocking cookies does not by itself stop all information sharing with our advertising partners — to stop that, use the methods in Section 7.
7. Your advertising choices
To opt out of sale or sharing, email info@mcmillanfloors.com or call (800) 208-0667 and tell us you want to opt out of the sale and sharing of your personal information. You can also use the privacy preferences control on the Site to reject advertising cookies.
Global Privacy Control. We honor the Global Privacy Control (GPC) and other opt-out preference signals sent by your browser or extension. If we detect a GPC signal we treat it as a request to opt out of sale and sharing for that browser, and — if you are signed in — for your account. See globalprivacycontrol.org.
Platform and industry opt-outs.
- Meta: facebook.com/adpreferences
- Google: adssettings.google.com
- Digital Advertising Alliance (US): optout.aboutads.info
- Digital Advertising Alliance of Canada: youradchoices.ca/choices
- Network Advertising Initiative: optout.networkadvertising.org
8. Email and text message marketing
We send marketing email and SMS only to people who have opted in. Every marketing email includes an unsubscribe link. For SMS, reply STOP to any message to opt out and HELP for assistance. Message and data rates may apply. Message frequency varies. Opting out of marketing does not stop transactional messages about orders you have placed.
Canadian recipients. We send commercial electronic messages to Canadian recipients only with consent meeting Canada's Anti-Spam Legislation (CASL). Every message identifies McMillan Floors, gives our mailing address, and includes an unsubscribe mechanism we honor within 10 business days. We keep records of consent.
9. How long we keep information
Retention periods are in the Section 2 table. In general we keep information as long as we need it for the purpose we collected it, then for as long as tax, accounting, warranty, consumer-protection, and product-liability obligations require.
Warranty records are a deliberate exception. Because flooring warranties can run for decades, we retain warranty registration and claim records for the full term of the applicable warranty plus seven years, even if you ask us to delete other information. We will tell you when we rely on this exception.
When a retention period ends we delete the information or de-identify it so it can no longer be linked to you.
10. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and vendor due diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your information occurs we will notify you and the relevant regulators as required by law.
11. Your California privacy rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended:
- Right to know what personal information we have collected, the sources, the purposes, the categories of third parties we disclose it to, and the specific pieces we hold
- Right to delete personal information we collected from you, subject to legal exceptions
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing for cross-context behavioral advertising
- Right to limit the use of sensitive personal information. The only sensitive personal information we collect is account login credentials, used solely to provide your account — a purpose the law permits without a limit option. We do not use sensitive personal information to infer characteristics about you.
- Right to non-discrimination. We will not deny you goods or services, charge a different price, or provide a different level of quality because you exercised a privacy right.
How to submit a request. Use either method:
- Email info@mcmillanfloors.com
- Call our toll-free number, (800) 208-0667
Verification. We will ask for information matching what we already hold so we can confirm your identity. For requests for specific pieces of information we require a signed declaration under penalty of perjury. We respond within 45 days and may extend once by another 45 days, telling you if we do.
Authorized agents. You may designate an agent to submit requests on your behalf. We will ask the agent for written permission signed by you and may ask you to verify your identity directly.
Shine the Light. Under California Civil Code § 1798.83, California residents may request information about personal information disclosed to third parties for those third parties' own direct marketing purposes in the prior calendar year. We do not make such disclosures.
12. Rights in other US states
Residents of states with comprehensive privacy laws — including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling. Some states also provide a right to appeal a denied request. Use the methods in Section 11 and tell us which state you live in. If we deny your request you may appeal by replying to our decision; if we deny the appeal we will tell you how to contact your state attorney general.
Nevada residents may submit a verified request that we not sell their covered information, using the contact details in Section 1.
13. Canada
We handle personal information of Canadian residents in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law.
Accountability. Our Privacy Officer, Karina Barajas (Operations), is accountable for our compliance and can be reached at info@mcmillanfloors.com or at the mailing address in Section 1.
Consent. We collect, use, and disclose personal information with your knowledge and consent, except where the law permits otherwise. You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice; we will tell you what withdrawing means for the services we can provide.
Access and correction. You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate or incomplete. We respond within 30 days.
Cross-border storage. Personal information of Canadian residents is stored and processed in the United States by us and by our service providers. While it is there it is subject to the laws of the United States and may be accessible to US courts, law enforcement, and national security authorities.
Complaints. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
14. Québec
If you are a Québec resident, the following applies in addition to Section 13, under the Act respecting the protection of personal information in the private sector as amended by Law 25.
Person in charge of the protection of personal information. Karina Barajas (Operations), contactable at info@mcmillanfloors.com or the mailing address in Section 1.
Consent. We ask for your consent separately for each purpose, in clear and simple terms, and we do not use pre-checked boxes. Consent to marketing is never a condition of purchase.
Technology that identifies, locates, or profiles you. You can accept or reject cookies and similar technologies used for profiling, advertising, or location using the privacy preferences control on the Site, and you can change or withdraw that choice at any time. If you would like us to confirm or change your preferences directly, contact us at info@mcmillanfloors.com or (800) 208-0667.
Your rights. You may access the personal information we hold about you, have it corrected, withdraw your consent, ask us to stop disseminating it or de-index it where the law allows, and — for computerized information you provided to us — receive it in a structured, commonly used technological format or have it transmitted to another organization.
Automated decisions. If we ever make a decision about you based exclusively on automated processing, we will tell you at the time of the decision, explain the personal information and principal factors used, and give you the opportunity to submit observations to a member of our staff who can review it. We do not currently make such decisions — see Section 15.
Privacy impact assessments. We conduct privacy impact assessments before communicating personal information outside Québec and before deploying new systems involving personal information.
Language. A French-language version of this policy is available on request at info@mcmillanfloors.com.
Complaints. You may file a complaint with the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.
15. Automated decision-making and profiling
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. We do not use automated systems to decide credit, financing, employment, housing, insurance, education, or access to essential services. Dealer, contractor, and trade applications are reviewed by our staff, not by an automated system.
We use automated processing in two limited ways:
Fraud screening. Shopify and Shopify Payments use automated fraud detection, including temporarily blocking IP addresses associated with repeated failed transactions and temporarily blocking payment cards associated with those addresses. These blocks are short-lived. If an order is declined by fraud screening, contact us and a person will review it.
Marketing personalization. We group customers into audience segments based on purchase and browsing behavior to decide which products and promotions to show. This affects the marketing you see and nothing else. You can opt out through Section 7.
16. Children
The Site is not directed to children. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
17. "Do Not Track"
Some browsers send a "Do Not Track" signal. There is no common industry standard for responding to it, so we do not currently respond to DNT signals. This is separate from the Global Privacy Control, which we do honor — see Section 7.
18. Changes to this policy
We may update this policy to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date at the top, and we review this policy at least once every 12 months. If we make material changes we will provide additional notice, such as an email or a notice on the Site.
19. Complaints
Contact us first using Section 1 — we would rather resolve it directly. You may also contact:
- California: California Privacy Protection Agency, cppa.ca.gov, or the California Attorney General at oag.ca.gov/privacy
- Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca
- Québec: Commission d'accès à l'information, cai.gouv.qc.ca
- Other US states: your state attorney general