Privacy Policy

Last Updated: December 8, 2025

1. Introduction

All American Works ("Company," "We," "Us," or "Our") operates this website and provides HVAC, plumbing, generator, and general contracting services (the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our client portal, and engage with our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our website or services. By accessing and using our website, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

We collect information in various ways, including information you provide directly and information collected automatically.

2.1 Information You Provide

• Contact Forms: When you submit contact or estimate request forms, we collect your name, email address, phone number, and message content.
• Portal Registration: When you create a client portal account, we collect your full name, email address, phone number, physical address, and password (securely hashed).
• Project Information: For active projects, we collect project details, location information, photos, documents, and communications related to your projects.
• Payment Information: When processing payments, we collect billing address, payment method details (processed through secure third-party payment processors).
• Communications: We collect communications you send through our portal messaging system or email.
• Customer Support: When you contact our support team, we collect the details of your inquiry and communications.
• Optional Information: You may optionally provide additional information such as project preferences, special requests, or additional details about your needs.

2.2 Information Collected Automatically

• Device Information: We collect information about the devices you use to access our website (device type, browser type, operating system, unique identifiers).
• Usage Information: We automatically collect information about your interactions with our website including pages visited, time spent, links clicked, and actions taken.
• Location Information: We may collect general location information based on IP address or GPS coordinates (with your permission).
• Cookies & Tracking Technologies: We use cookies, web beacons, and similar technologies to track website usage and preferences.
• Server Logs: Our servers automatically log IP addresses, access times, referrer pages, and other standard web server information.

3. How We Use Your Information

We use the information we collect for various business purposes, including:

3.1 Service Delivery

• Processing and fulfilling your service requests and estimates
• Managing your client portal account
• Providing, maintaining, and improving our services
• Scheduling appointments and managing your projects
• Processing payments and billing
• Sending service-related notifications and updates

3.2 Communication

• Responding to your inquiries and customer support requests
• Sending transactional emails (confirmations, receipts, password resets)
• Providing project updates and status notifications
• Facilitating team communication through the portal messaging system

3.3 Marketing & Business Development

• Sending promotional emails and newsletters (with your consent)
• Conducting market research and analytics
• Creating personalized service recommendations
• Improving our website and services based on user behavior
• Generating testimonials and case studies (with your permission)

3.4 Legal & Safety

• Complying with legal obligations and court orders
• Protecting against fraud, security threats, and illegal activities
• Enforcing our terms of service and other agreements
• Protecting the rights, privacy, safety, and property of our company, customers, and the public

4. Information Sharing and Disclosure

4.1 When We Share Information

We do not sell, trade, or rent your personal information to third parties. However, we may share information in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who assist us in operating our website, processing payments, sending emails, and managing customer data (under strict data protection agreements).
• Project Team Members: Information about your projects is shared with relevant team members (contractors, supervisors, inspectors) who need access to perform your project work.
• Legal Requirements: We may disclose information when required by law, such as in response to subpoenas, court orders, or government requests.
• Business Transfers: If our company is acquired, merged, or sold, your information may be transferred as part of that transaction (with notice to you).
• Consent: We may share information with your explicit consent for specific purposes you authorize.
• Safety & Protection: We may disclose information to protect against fraud, security threats, or illegal activity.

4.2 Third-Party Links

Our website may contain links to third-party websites and services that are not operated by us. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party websites before providing personal information.

5. Data Retention

We retain your personal information for as long as necessary to provide our services, fulfill the purposes outlined in this Privacy Policy, and comply with legal obligations.

• Contact Form Data: Retained for 1 year for follow-up purposes
• Client Portal Accounts: Retained while your account is active, plus 5 years after account closure (for billing/legal purposes)
• Project Information: Retained for 7 years following project completion (for warranty and legal purposes)
• Marketing Communications: Retained until you unsubscribe
• Payment Records: Retained for 7 years (as required by tax law)
• Website Analytics: Retained for up to 26 months

You may request deletion of your data at any time, subject to legal and contractual obligations. We will securely delete data when retention is no longer necessary.

6. Your Privacy Rights

6.1 General Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: The right to know what personal information we collect and how we use it
• Correction: The right to correct inaccurate or incomplete information
• Deletion: The right to request deletion of your personal information (subject to legal obligations)
• Portability: The right to request a copy of your data in a portable format
• Opt-Out: The right to opt-out of marketing communications and certain data processing activities

6.2 GDPR Rights (European Users)

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information.

6.4 Exercising Your Rights

To exercise any of these rights, please contact us at the information provided in the "Contact Us" section below. We will respond to legitimate requests within 30 days.

7. Security

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, and destruction. These measures include:

• Secure Socket Layer (SSL/HTTPS) encryption for all data transmission
• Password hashing and salting for stored passwords
• Firewalls and intrusion detection systems
• Limited access controls (employees access only necessary information)
• Regular security audits and vulnerability assessments
• Secure payment processing through PCI-DSS compliant processors
• Data encryption for stored sensitive information
• Regular backup and disaster recovery procedures

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use our website.

8.2 Types of Cookies We Use

• Essential Cookies: Required for website functionality (login sessions, CSRF protection)
• Performance Cookies: Help us understand website usage patterns and improve performance
• Marketing Cookies: Allow us to show relevant advertising and track marketing effectiveness
• Analytics Cookies: Track how you interact with our website (Google Analytics)

8.3 Managing Cookies

Most web browsers allow you to control cookies through settings. You can choose to accept or reject cookies, though rejecting them may affect website functionality. You can also use cookie management tools to clear cookies from your device.

8.4 Do Not Track

Some browsers include a "Do Not Track" feature. We do not currently respond to Do Not Track signals, but you can manage your preferences through browser settings or the opt-out links provided.

9. Children's Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will promptly delete such information and terminate the child's account. If you believe we have collected information from a child under 13, please contact us immediately.

10. International Data Transfers

If you are located outside the United States, please note that your information may be transferred to, stored in, and processed in the United States. The United States may not have the same data protection laws as your home country. By using our website and services, you consent to the transfer of your information to the United States in accordance with this Privacy Policy.

For international transfers, we rely on appropriate legal mechanisms such as Standard Contractual Clauses or your explicit consent.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date at the top of this document.

Your continued use of our website and services following the posting of updates constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

13. Additional Information

13.1 California Privacy Rights

California residents have specific rights under the CCPA and CPRA. You have the right to:

• Know what personal information is collected and used
• Delete personal information collected from you (with certain exceptions)
• Opt-out of the "sale" or "sharing" of personal information
• Non-discrimination for exercising your rights
• Correct inaccurate personal information
• Limit use and disclosure of sensitive personal information

13.2 European Privacy Rights

European users have rights under the GDPR, including the right to lodge a complaint with your national data protection authority if you believe our processing of your data violates your rights.

13.3 Sensitive Information

We do not intentionally collect sensitive personal information (such as health information, racial or ethnic origin, political beliefs, religious beliefs, etc.) unless necessary for providing specific services and with your explicit consent.

This Privacy Policy is effective as of December 8, 2025 and applies to all users of our website and services. We recommend reviewing this policy annually for any updates.