Privacy policy

Last reviewed April 27, 2026

This policy explains what information Demo HVAC LLC (“Demo HVAC,” “we,” “us”) collects through this website, why we collect it, who we share it with, how long we keep it, and the choices you have. By using this site or submitting the lead form, you agree to the practices described below.

1. What we collect

We collect only what is needed to respond to your service request and run our business. The categories below are described in plain language; in California Consumer Privacy Act (CCPA / CPRA) terms they map to “identifiers,” “customer records,” “commercial information,” “internet or other electronic network activity,” and “geolocation data.”

  • Information you give us — your name, phone number, zip code, and any message you choose to include when you submit the lead form, request a quote, or call our office.
  • Automatically collected — IP address, browser user-agent, page URL, and approximate timestamps for security, spam prevention, and our consent audit trail.
  • Cookies and similar technologies— strictly necessary cookies that keep the site working. If we enable analytics or advertising tags in the future, we will list them in Section 5 and update the “Last reviewed” date above.

We do not knowingly collect Social Security numbers, driver license numbers, financial account numbers, health information, or precise GPS location through this site. Do not include any of those in the lead-form message field.

2. How we use it

  • To respond to your service request and schedule work.
  • To call or text you with quotes, scheduling updates, and related offers (subject to your express consent — see Section 3).
  • To prevent spam, abuse, and fraud, and to enforce our Terms.
  • To meet legal, tax, and regulatory obligations (Florida Information Protection Act, recordkeeping rules, etc.).
  • To improve the site and our services in the aggregate (we do not profile individuals beyond what is needed to provide service).

We do notsell your personal information for money, and we do not engage in “sharing” for cross-context behavioral advertising as those terms are defined under CCPA / CPRA. If that ever changes, we will say so in this policy and surface a “Do Not Sell or Share My Personal Information” control in the footer.

3. Phone calls and SMS (TCPA / FTSA)

When you submit the lead form with the consent disclosure shown below the submit button, you authorize us to contact you at the phone number provided by phone, autodialed or prerecorded calls, and SMS text messages about your service request and related offers, even if the number is on a do-not-call list. Consent is not a condition of purchase. Message and data rates may apply. You can reply STOP to any text to opt out, or call us at (954) 555-0100 to be removed from our calling and texting lists. We honor opt-outs across channels.

We keep a record of each consent — the wording you saw, the time, the IP address, and the page — for at least four years to comply with the federal TCPA (47 U.S.C. § 227) and the Florida Telephone Solicitation Act (F.S. 501.059). If you ask us to delete your information, we will retain only the consent or opt-out record itself for that period.

4. Who we share it with

We share personal information only with vendors that help us run this site and serve you (“service providers” or “processors” under CCPA / CPRA). Each is bound by contract to use the data only for the purpose we specify and to protect it with reasonable security. Our current sub-processors:

  • Vercel — Website hosting and edge delivery. Processed in United States. Privacy details.
  • GoHighLevel — CRM that receives lead-form submissions for follow-up. Processed in United States. Privacy details.
  • Upstash — Rate limiting and TCPA / FTSA consent audit trail storage (Redis). Processed in United States (us-east-1 by default). Privacy details.
  • Google — Maps embed, Fonts (Inter / Space Grotesk), and — when enabled — Analytics 4. Processed in United States. Privacy details.

We may also disclose information when required by law, in response to valid legal process, or to protect the rights, property, or safety of Demo HVAC, our customers, or the public.

5. Cookies and analytics

The site uses a small number of strictly necessary cookies that keep forms and security features working. Where the site is configured with Google Analytics, we set IP-anonymization and disable advertising features by default, and the analytics scripts only load after the page is interactive so they never block you from reaching us.

We do not use Meta Pixel, Google Ads remarketing, or any other cross-site behavioral advertising tag on this site at the time this policy was last reviewed. If that changes, we will update this section and add a clear “Do Not Sell or Share” control in the footer.

6. How long we keep it

We retain lead and customer records for 24 months from your last contact with us, unless a longer period is required by law (for example, tax records, contractor recordkeeping, or our TCPA / FTSA consent log, which is retained for at least four years). After the retention period expires, we delete or anonymize records on a rolling basis.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete personal information we no longer need to keep for the legal reasons described above.
  • Opt out of sale or sharing for cross-context behavioral advertising. As noted in Section 2, we do not sell or share personal information today.
  • Limit use of sensitive personal information.
  • Be free from retaliation for exercising any of these rights.

To make a request, email service@demohvac.com from the address associated with your record or call (954) 555-0100. We will respond within 45 days (CCPA / CPRA timeline) and may verify your identity before disclosing or deleting information. You can designate an authorized agent in writing.

8. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS), tightly scoped access controls, and vendors that maintain SOC 2 or equivalent certifications. No internet transmission is ever 100% secure; we cannot guarantee absolute security.

If a breach affecting personal information occurs, we will notify affected Florida residents in accordance with the Florida Information Protection Act (F.S. 501.171) — generally within 30 days of discovery — and notify the Florida Department of Legal Affairs if more than 500 residents are affected.

9. Children

This site is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16 without parental consent. If you believe we have done so, contact service@demohvac.com and we will delete the information.

10. California-specific notice

The categories of personal information we collect, the sources, the business purposes, and the categories of recipients are described in Sections 1, 2, and 4. We have not sold or shared personal information for cross-context behavioral advertising in the past 12 months. Your CCPA / CPRA rights and how to exercise them are listed in Section 7.

11. Updates

We review this policy at least once a year and whenever we change a material practice. The “Last reviewed” date at the top of this page reflects the most recent change. If a change materially expands how we use your information, we will give reasonable advance notice (for example, by email or a prominent banner on the site).

12. Contact

Questions about this policy or your information?