Privacy Policy — and marketing group

Draft pending legal review. A lead-generation business transfers consumer data to third parties for value. Under the CCPA/CPRA that is a sale of personal information, and it carries specific notice, opt-out and contractual obligations. Have a US privacy attorney review this before running traffic, and replace every bracketed placeholder.

1. Who we are

[REGISTERED ENTITY NAME], [LLC / Inc.], trading as and marketing group, of [REGISTERED BUSINESS ADDRESS]. For any privacy matter, contact privacy@andgroupmarketing.com.

We operate marketing websites for residential home-improvement services and connect homeowners who request quotes with contractors who perform that work.

2. Information we collect

From homeowners

Contact details — name, phone number, email address, ZIP code.
Project details — the service requested and any qualifying answers you gave.
Consent record — a TrustedForm certificate capturing the page, the time, and the disclosure shown when you submitted.
Technical data — IP address, browser and device information, referring page and advertising identifiers.
Call data — where you call a tracked number: the number dialled, duration, and, where lawful and disclosed, a recording.

From contractors

Name, company name, business phone and email, trades offered and service area.
Billing information, processed by our payment provider. We do not store full card numbers.

3. Why we use it

To connect a homeowner’s request with a contractor who can perform the work.
To verify that a request is genuine and to filter duplicates and invalid records.
To maintain the consent record that accompanies each lead.
To operate, bill and support contractor accounts.
To measure and improve the performance of our advertising.
To comply with legal obligations and to establish or defend legal claims.

4. Who we share it with — and that this is a “sale”

If you are a homeowner who submitted a request, we transfer your information to a contractor. That contractor pays us. Under the California Consumer Privacy Act as amended by the CPRA, and under similar laws in other states, that transfer is a sale of personal information. We tell you this plainly at the point of submission and again here.

We also share information with:

Service providers — hosting, CRM, telephony, consent-capture and analytics vendors acting on our instructions.
Advertising platforms — to measure campaign performance. This may constitute sharing for cross-context behavioural advertising.
Professional advisers and authorities — where required by law or to defend a legal claim.

We do not knowingly sell the personal information of anyone under 16.

5. Your rights

Depending on where you live, you may have the right to:

Know what we hold about you and obtain a copy.
Have it corrected or deleted.
Opt out of the sale or sharing of your personal information.
Limit the use of sensitive personal information.
Not be discriminated against for exercising any of these rights.

To exercise any of them, email privacy@andgroupmarketing.com with the phone number or email address you used. We will verify your identity before acting and respond within the period the applicable law requires.

Opting out does not undo a transfer already made. If a contractor already received your details, contact them directly to have their copy deleted — they are an independent controller of it.

6. Contacting you

When you submit a form, you consent to being contacted about your request by phone, text and email, including by automated technology. Consent is not a condition of purchase. You can withdraw it at any time by replying STOP to a text, asking the caller to remove you, or emailing us.

7. How long we keep it

Lead records and their consent certificates are retained for five years, which reflects the limitation period for TCPA claims — the record protects both the homeowner and the contractor. Call recordings are retained for 90 days. Contractor account records are retained for the life of the account and seven years thereafter for tax and accounting purposes.

8. Security

Data is transmitted over TLS and held with access controls appropriate to its sensitivity. No system is perfectly secure, and we do not claim otherwise; we will notify affected individuals and regulators of a breach where the law requires it.

9. Cookies

We use cookies and similar technologies for site function, measurement and advertising attribution. You can control them in your browser settings; blocking them may affect how the site works.

10. Changes

We will post any change on this page and update the date above. Material changes affecting how we sell or share personal information will be notified more prominently.

Privacy requests and questions: privacy@andgroupmarketing.com