Skip to main content

Privacy Policy

Effective April 13, 2026 · Last updated April 13, 2026

Your privacy at a glance

  • • We collect only what we need to quote and perform your project.
  • • We do not sell your personal information, do not share it for targeted advertising, and do not use it for profiling.
  • • We use strictly-necessary cookies only (no ad or tracking cookies).
  • • We honor Global Privacy Control and “Do Not Track” signals.
  • • You can ask us to access, correct, or delete your information at any time at Construction@espinoza-chavez.com.
  • • Texas residents have rights under the TDPSA. California residents have rights under the CCPA/CPRA. We honor both for all U.S. residents.

1. Scope of this policy

This Privacy Policy explains how Espinoza Chavez Construction LLC(“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information of visitors to www.ec-construction.com (the “Site”) and customers and prospective customers of our construction services. It applies to all U.S. residents, including residents of Texas and California. We are the controller / business responsible for the personal information covered by this policy.

2. Information we collect

A. Information you give us.

  • Name
  • Phone number
  • Email address (if provided)
  • Service category you are interested in
  • Preferred contact method (call, text, or email)
  • Project details and any other content you include in your message
  • Property address and project-related details you share during the quote or job

B. Information we collect automatically.

  • IP address
  • Coarse location (city, region, country) inferred from your IP — we do not collect precise GPS geolocation
  • Browser type, operating system, and device type (user-agent)
  • Referring URL, pages viewed, and time spent on pages
  • Date, time, and outcome of form submissions

C. Sensitive personal information.We do not ask for, and we do not intentionally collect, “sensitive personal information” as defined by the CCPA/CPRA (such as Social Security number, driver’s license number, financial account credentials, precise geolocation, race, religion, union membership, genetic or biometric data, health information, or the contents of your mail, email, or messages to third parties). Please do not submit this type of information through our forms.

3. Sources of information

  • Directly from you — through our Site forms, phone calls, text messages, and emails.
  • Automatically from your device — through standard server logs and our first-party analytics.
  • From service providers — our hosting, email, and DNS providers generate request logs on our behalf.
  • From public records — occasionally, property records to verify a job site or address accuracy.
  • From referrals — when a past customer, realtor, or partner refers you and shares contact information so we can reach out.

4. CCPA categories (notice at collection)

The table below lists the categories of personal information we collect, as defined in California Civil Code §1798.140, the business purposes for each, and the categories of recipients with whom we disclose the information. We have not sold or shared any of these categories for cross-context behavioral advertising in the preceding 12 months, and we do not intend to.

CCPA categoryExamples we collectBusiness purposeDisclosed to
A. IdentifiersName, phone, email, IP addressRespond to inquiries, schedule work, communicate about your projectHosting, email, and storage providers (Section 7)
B. Customer records (Cal. Civ. Code §1798.80)Name, phone, email, project addressInvoicing, warranty, tax, and legal recordkeepingAccountants, storage provider
F. Internet or network activityBrowser type, pages viewed, referring URLSite analytics, security, debuggingHosting provider
G. Geolocation (non-precise)City/region/country inferred from IPUnderstand where site visitors come from; we do not collect precise GPSIP-lookup provider
K. Inferences (limited)Service you are likely interested in, based on the form you submittedRoute your inquiry to the right tradespersonNone — used internally only

We do not collect categories C, D, E, H, I, or J (characteristics protected under state/federal law, commercial purchase/use history, biometric information, audio/electronic/visual/similar, professional or employment information, or education information) from site visitors.

5. How we use information

  • Respond to your inquiry and provide a quote or estimate
  • Schedule, perform, and invoice the services you request
  • Follow up about your project, warranty, or ongoing work
  • Keep records for tax, warranty, accounting, and legal obligations
  • Operate, maintain, secure, and improve the Site
  • Detect and prevent spam, fraud, and abuse (e.g., rate-limiting, honeypots)
  • Comply with applicable laws and enforce our rights

We do not use your information for targeted advertising, profiling in furtherance of decisions that produce legal or similarly significant effects, or the sale of personal information.

7. Who we share information with

We share limited information only with the providers we use to run the Site and communicate with you:

  • Vercel Inc. — Site hosting and request logs (privacy policy).
  • Cloudflare, Inc. — Domain DNS and email forwarding (privacy policy).
  • Resend, Inc. — Transactional email delivery (privacy policy).
  • GitHub, Inc. — Secure storage of lead records and Site content (privacy policy).
  • ipapi (Kloudend, Inc.) — IP-to-city lookup (privacy policy).
  • Subcontractors you have hired us to coordinate (plumbers, roofers, etc.) receive only the information needed to perform your job.
  • Professional advisors — accountants, attorneys, insurers, under duty of confidentiality.
  • Legal compliance — courts, regulators, or law enforcement if required by subpoena, warrant, or other legal process, or to protect rights, safety, or property.
  • Corporate transactions — a successor in interest in the event of a merger, acquisition, reorganization, or sale of assets, subject to confidentiality obligations.

Each provider is contractually restricted to processing personal information only for the purposes we specify. The providers listed above qualify as “service providers” / “processors” under the CCPA/CPRA and TDPSA.

8. No sale, no sharing for targeted advertising

We do not sell personal information for money or other valuable consideration, and we do notshare personal information for “cross-context behavioral advertising” as those terms are defined under the CCPA/CPRA, TDPSA, and similar state laws. We have not done so in the preceding 12 months, and we do not intend to. Because we do not engage in these practices, we have no “Do Not Sell or Share My Personal Information” link to provide, but you may still exercise your opt-out right at any time by contacting us.

9. Cookies and similar technologies

We use the minimum cookies needed to run the Site:

  • Strictly-necessary session cookie — set only for authenticated administrators of our Site, not for ordinary visitors. Expires in 7 days.

We do not currently use third-party advertising cookies, social-media tracking pixels, fingerprinting, or cross-site tracking SDKs. If we add any, we will update this policy and, where required by law, request your consent before they are set. You can control cookies through your browser settings.

10. How long we keep information

We retain personal information only as long as necessary for the purposes described above. Specific retention periods:

DataRetention
Contact form submissions that did not become a projectUp to 2 years, then deleted
Customer records for completed projects7 years (tax / warranty / statute of limitations)
Server request logsUp to 30 days
First-party analyticsUp to 12 months, aggregated thereafter
Administrative session cookies7 days

When a retention period ends, we delete or de-identify the information unless a longer period is required by law or to establish, exercise, or defend legal claims.

11. Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including HTTPS/TLS encryption in transit, access controls on admin systems, salted and hashed credentials, rate limiting, honeypot-based spam protection, least-privilege API keys, and regular dependency updates. No system is perfectly secure; we cannot guarantee that your information will be free from unauthorized access.

12. Your rights and how to exercise them

Depending on where you live, you may have the following rights. We extend these rights to all U.S. residents regardless of state of residence:

  • Right to know / access — what personal information we hold about you, the categories, sources, purposes, and recipients.
  • Right to a copy (portability) — in a portable, machine-readable format where feasible.
  • Right to correct inaccurate personal information.
  • Right to delete personal information we no longer need to keep.
  • Right to opt out of the sale or sharing of personal information and of targeted advertising (we do not engage in any of these).
  • Right to opt out of profiling in furtherance of decisions with legal or similarly significant effects (we do not perform such profiling).
  • Right to limit the use of sensitive personal information (we do not collect it).
  • Right to non-discrimination for exercising any of these rights.

How to submit a request. Email Construction@espinoza-chavez.com with the subject line “Privacy Request,” or call (469) 347-9459. Include the name, phone number, and email we would have on file so we can locate your records.

Verification. To protect your information, we verify your identity before responding by matching the contact details you provide against the information already in our records. If we cannot verify you with reasonable certainty, we may request additional information or, for sensitive requests, a signed declaration under penalty of perjury.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. The agent must provide proof of your written permission and we will still verify your identity directly.

Timing. We respond within 45 days of receiving a verifiable request, with a one-time 45-day extension where reasonably necessary. There is no fee for a first request in a 12-month period.

13. Appeals

If we deny a privacy request, you may appeal by replying to our denial within 30 days. We will respond within 60 days with the result and, if we still deny the request, an explanation. Texas residents may then contact the Texas Attorney General at oag.texas.gov. California residents may contact the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov.

14. Children

The Site is not directed to children. We do not knowingly collect personal information from children under 13 (in line with the Children’s Online Privacy Protection Act) and we do not knowingly sell or share personal information of anyone under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

15. Calls and text messages (TCPA)

When you submit a form, call us, or text us, you expressly consent to be contacted by Espinoza Chavez Construction LLC by phone, text message, and email (including autodialed or prerecorded messages where permitted by law) at the number and email address you provide, regarding your project, quote, or service. Consent is not a condition of purchase. Message frequency varies. Message and data rates may apply. Reply STOP to any text to opt out or HELP for help. You may also ask us by phone or email to stop contacting you at any time.

16. Email (CAN-SPAM)

Any marketing email we send will include clear sender information and a one-click unsubscribe link. Transactional emails (for example, a reply to your quote request) do not contain an unsubscribe link because they are necessary to perform the service you asked for. Our mailing address for CAN-SPAM purposes is provided on request at Construction@espinoza-chavez.com.

17. International transfers

We operate in the United States, and our service providers primarily store data in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States. Laws in the U.S. may differ from those in your country.

18. Global Privacy Control and Do Not Track

Because we do not engage in cross-site tracking, the sale of personal information, or targeted advertising, we treat all visitors the same regardless of Global Privacy Control (GPC) or Do Not Track (DNT) signals sent by your browser. If we ever add features that do require these signals to take effect, we will honor them.

19. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Quotes, scheduling, and customer-service decisions are made by humans.

20. California “Shine the Light”

California Civil Code §1798.83 allows California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures. To confirm, email Construction@espinoza-chavez.com.

21. Accessibility

We strive to make this policy accessible. If you need it in an alternative format, contact us at Construction@espinoza-chavez.com or (469) 347-9459.

22. Security incident notification

In the event of a security incident involving your personal information, we will notify affected individuals and, where required, regulators as soon as reasonably practicable and in accordance with applicable law, including Texas Business & Commerce Code §521.053 and California Civil Code §1798.82.

23. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. Material changes will be announced on the Site at least 30 days before they take effect, and, where required by law, we will seek your consent before applying them to previously collected information.

24. Contact us

If you have questions, concerns, or a privacy request, contact us:

Call NowText UsFree Estimate