Privacy Policy

Com+ Mechanical LLC ("Com+ Mechanical," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have under applicable privacy laws — including the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act, as amended by the CPRA ("CCPA"). It applies to our website, online forms, phone communications, and commercial HVAC services.

1. Information We Collect

We collect only the information needed to provide quotes, schedule service, and communicate with you. Typical information collected through our website forms, phone calls, and service interactions includes:

• Contact details: name, email address, phone number
• Service location: building or property address, suite/unit, access notes
• Service details: equipment type, symptoms, requested service, photos you submit
• Business information: company name, role (property manager, GC, owner), preferred billing contact
• Communication content: messages, emails, SMS, and call recordings (where lawful and disclosed)
• Technical data: IP address, device and browser type, pages visited, referring URLs, and similar analytics data

We do not intentionally collect sensitive personal information, government IDs, or payment card numbers through our website. Payments are processed by PCI-compliant third-party processors; we do not store full card numbers on our systems.

2. How We Use Your Information

We use the information we collect to operate our commercial HVAC business and serve you. Specifically:

• Prepare estimates, proposals, and instant quotes
• Schedule service visits, dispatch technicians, and coordinate access
• Communicate by phone, email, or SMS about your request, appointment, or project
• Invoice, collect payment, and maintain service records
• Provide warranty service and follow-up
• Improve our website, content, and customer experience
• Comply with legal, tax, licensing, and safety obligations
• Protect against fraud, abuse, and unauthorized access

3. Cookies & Tracking Technologies

Our website uses cookies and similar technologies for analytics and basic site functionality only. We do not use cookies to sell your data or to build cross-site advertising profiles. The cookies we use generally fall into these categories:

• Strictly necessary: required for the site to function (e.g., security, form submission)
• Analytics: aggregate usage statistics so we can improve content and performance
• Preferences: remember settings such as cookie consent choices

You can control cookies through your browser settings and, where required by law, through our on-site cookie consent banner. Disabling some cookies may affect website functionality.

4. Third-Party Sharing

We do not sell your personal information. We do not rent or trade it for marketing purposes. We share information only as needed to deliver our services or as required by law, including with:

• Service vendors: hosting, CRM, scheduling, dispatch, email, SMS, analytics, and payment processors acting on our behalf under written agreements
• Subcontractors: licensed HVAC technicians or trades engaged on your specific project
• Professional advisors: attorneys, accountants, and insurers as reasonably necessary
• Legal & safety: when required by law, subpoena, court order, or to protect rights, property, or safety
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality

SMS opt-in data and consent are not shared with any third parties or affiliates for their marketing or promotional purposes.

5. Data Retention

We retain personal information only for as long as needed for the purposes described in this Policy or as required by law. Quote and lead information is typically retained for up to 24 months from last contact; customer service records, invoices, and warranty documentation are retained for at least seven (7) years to support warranty, tax, licensing, and dispute requirements. We securely delete or anonymize information when it is no longer needed.

6. Your Privacy Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete information
• Deletion: request that we delete your personal information, subject to legal exceptions
• Portability: request a portable copy of certain information you provided
• Opt-out of sale/sharing: we do not sell personal information; you may still confirm this in writing
• Non-discrimination: we will not discriminate against you for exercising any of these rights
• Withdraw consent: withdraw consent for marketing emails (unsubscribe link in every email) or SMS (reply STOP)

To exercise any of these rights, contact us using the information in Section 8. We will verify your identity before fulfilling the request and respond within the timeframe required by applicable law (generally 30 days for GDPR; 45 days for CCPA, with one 45-day extension where permitted). You may also designate an authorized agent to submit a request on your behalf.

EU/EEA and UK users may also lodge a complaint with their local data protection authority. The legal bases on which we process personal data under GDPR are: performance of a contract (providing services you request), our legitimate interests (operating and improving our business), consent (where you have given it), and compliance with legal obligations.

7. Google Analytics

We use Google Analytics (GA4), a web analytics service provided by Google LLC, to understand how visitors use our website. Google Analytics uses cookies and similar identifiers to collect aggregated, largely de-identified information such as pages viewed, time on page, device type, approximate geographic region, and referring source. IP addresses are anonymized before being used or stored by Google where supported.

We use this data solely to improve our website, content, and user experience. We do notuse Google Analytics data to build advertising profiles or sell information. Google may process this data on servers located in the United States and other countries, subject to its own privacy obligations.

You can opt out of Google Analytics by installing the official Google Analytics Opt-out Browser Add-on, clearing cookies, using your browser's "Do Not Track" or "Global Privacy Control" signal where supported, or declining analytics cookies through our consent banner where presented.

8. Contact Us About Privacy

To submit a privacy request or ask questions about this Policy, please contact us:

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last Updated" date above and, where appropriate, by additional notice. Your continued use of our website or services after changes are posted constitutes acceptance of the revised Policy.