HVAC Rescue Privacy Policy

Effective Date: August 13, 2026
Last Updated: August 25, 2026 Version: CPK-WEB-LEGAL-2026.4-HVAC_RESCUE

This Privacy Policy explains how CPK Home Services, Inc. (“CPK,” “Company,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when operating HVAC Rescue, and describes privacy choices and rights that may be available to you.

This policy applies to https://www.hvacrescue.com, its subdomains and landing pages, brand telephone numbers, forms or planners when offered, email and text communications, and related call-routing, request-recording, advertising, analytics, and support systems (collectively, the “Site”).

CPK operates HVAC Rescue as a nationwide HVAC information and inbound-call connection service. CPK is not an HVAC contractor and does not perform the underlying work. A Site form saves a service request in CPK's CRM; it does not post the request to a buyer or provider network, and nobody will call the consumer as part of the Site funnel. To connect with an HVAC professional, the consumer must initiate the telephone call. An independent provider may have separate privacy practices after that consumer-initiated connection.

Notice at Collection and Brand-Specific Practices

Brand and operator. HVAC Rescue is a brand operated by CPK Home Services, Inc. This policy applies to https://www.hvacrescue.com, related landing pages, telephone numbers displayed for the brand, forms or interactive tools when offered, and brand communications.

How the Site may collect information. Depending on the feature you use, the Site may process contact details, ZIP code, system or service information, heating or cooling symptoms, timing, request details, call information, consent records, device information, and advertising or conversion attribution data.

At or before collecting personal information, we use the information for the purposes described below and retain it only for as long as reasonably necessary for those purposes, legal compliance, security, fraud prevention, dispute resolution, and the establishment or defense of claims. The examples are illustrative; we do not necessarily collect every example in every interaction.

We may receive compensation when a consumer initiates a call and connects with an independent provider or referral partner. Under some state privacy laws, a compensated call connection or the use of online identifiers for targeted advertising may be treated as a “sale,” “sharing,” or targeted advertising. You can review and exercise applicable choices in the Your Privacy Choices section below.

Privacy at a Glance

• We collect information you provide, such as your name, telephone number, email address, service location, property or project information, and communications.
• We automatically collect device, browser, usage, approximate-location, advertising, and attribution information when you use the Site.
• We use information to operate the Site, save requests in CPK's CRM, route consumer-initiated calls, communicate about saved requests, prevent fraud, improve performance, and measure advertising and call outcomes.
• A Site form is not posted to a buyer or provider network. We disclose form information to operational vendors such as our CRM processor, and information may be disclosed to an independent provider during a connection the consumer initiates. CPK may receive compensation for qualified inbound calls, appointments, transactions, advertising, or other events.
• Some disclosures associated with call connections or online identifiers may be treated as a “sale,” “sharing,” or “targeted advertising” under certain state privacy laws, even when no money is paid specifically for the personal information. You may use the Your Privacy Choices / Do Not Sell or Share My Personal Information link in the Site footer to go to the Your Privacy Choices section of this Policy, or email info@cpkhome.com.
• We do not knowingly sell or share personal information of consumers under 16 years old, and the Site is not directed to children.
• We do not sell mobile numbers or text-message opt-in records for third parties’ unrelated marketing.

This summary is an overview. The sections below provide the complete policy.

1. Scope and Roles

This Privacy Policy covers personal information CPK controls through the Site, including information collected online, through telephone calls and call-tracking numbers, by text or email, through customer-service communications, and from vendors or referral partners that support the Site.

For purposes of applicable privacy law, CPK may be called a “business,” “controller,” or similar term. Vendors that process information only for CPK may be called “service providers,” “contractors,” or “processors.” Independent home-service providers, marketplaces, referral networks, advertising companies, and other third parties may determine their own purposes and means of processing and may be separate businesses or controllers.

This Privacy Policy does not govern:

• an independent provider’s collection, use, or disclosure after it receives or independently collects your information;
• a third-party website, app, financing product, insurer, utility, manufacturer, social network, or service linked from the Site;
• personal information processed solely in an employment or workforce context, except where applicable law requires otherwise; or
• deidentified or aggregated information that applicable law does not treat as personal information, provided we maintain and use it in deidentified form as required by law.

2. Personal Information We Collect

The exact information depends on how you interact with us, the interaction or feature used, the service requested, the devices and settings involved, and the vendors supporting the interaction.

2.1 Categories of Personal Information

The categories below describe the personal information we may collect, along with representative examples and typical sources. The examples are illustrative and do not mean that we collect every item in every interaction.

Identifiers and contact information. Examples include name, telephone number, email address, mailing or service address, city, state, ZIP code, account or request identifier, online identifier, and IP address. Typical sources include you, your device, referral partners, and communications vendors.

Service-request and property information. Examples include requested service, problem description, urgency, project type, property type, ownership or occupancy information, preferred timing, service location, answers to form or quiz questions, and provider preference. Typical sources include you, a person acting for you, call or form records, and referral partners.

Commercial and transaction information. Examples include request history, provider connection, call outcome, appointment or conversion status, quote or purchase indicators reported to us, campaign source, and referral-compensation events. Typical sources include you, providers, call networks, CRM systems, analytics vendors, and attribution vendors.

Internet, device, and network activity. Examples include browser type, device type, operating system, cookie or advertising identifiers, pages viewed, links or buttons selected, referring and exit pages, timestamps, session activity, form interactions, call-click events, and error logs. Typical sources include your browser or device and cookies, pixels, scripts, analytics vendors, and security vendors.

Geolocation information. Examples include approximate location derived from an IP address, city, ZIP code, service area, and the precise service location if you submit a street address or permit device location. Typical sources include you, device settings, and IP-derived location providers.

Communications and audio or electronic information. Examples include call recordings or transcripts, voicemail, text messages, emails, chat or support content, communication preferences, and opt-in and opt-out records. Typical sources include you and call-routing, recording, email, SMS, and customer-service vendors.

User-submitted content. Examples include photographs, videos, documents, project descriptions, reviews, feedback, and other materials you choose to provide. Typical sources include you or a person acting for you.

Professional or business information. Examples include company name, job title, business contact information, service categories, service area, and licensing or insurance information if you contact us as a provider or business representative. Typical sources include you, your employer, public records, and business-data providers.

Inferences and preferences. Examples include likely service category, service-area match, communication preference, request priority, advertising attribution, or inferred interest based on Site activity. Typical sources include the information described above and analytics or routing systems.

Sensitive personal information or sensitive data. Examples may include a precise service location, account credentials if an account feature is offered, and the contents of private communications; other information may be sensitive under a particular state law. The primary source is you.

We do not need and do not intentionally request Social Security numbers, government identification numbers, financial-account credentials, payment-card information, medical records, biometric identifiers, race or ethnicity, religious beliefs, sexual orientation, citizenship or immigration status, or other highly sensitive information for an ordinary home-service request. Please do not include such information in open-text fields, photographs, documents, calls, texts, or emails unless we specifically request it for a lawful and disclosed purpose.

2.2 Information You Provide Directly

We collect information when you:

• submit a quote, availability, service, contact, or help request;
• call a telephone number displayed on the Site;
• request or agree to receive a text message or email;
• answer a multi-step form, quiz, or service-selection flow;
• send photographs, project details, feedback, or support requests;
• exercise a privacy right or communication preference;
• participate in a survey, promotion, review, or testimonial process; or
• contact us as a provider, advertiser, vendor, or business representative.

If you provide information about another person, you represent that you are authorized to do so and to request the communication or service connection.

2.3 Information Collected Automatically

When you use the Site, we and our vendors may automatically collect information through cookies, pixels, tags, software development tools, local storage, call-tracking technology, server logs, and similar technologies. This information may be linked to a browser, device, session, advertising identifier, telephone call, request, or other record.

Automatic collection may include:

• IP address and approximate location;
• browser, device, operating system, screen, language, and network information;
• pages viewed, content interactions, navigation path, referral source, and timestamps;
• form starts, field interactions, submissions, validation errors, and abandonment events;
• telephone-number clicks, call source, call time, duration, routing, recording status, and outcome;
• campaign, affiliate, keyword, ad, UTM, click, and conversion identifiers;
• cookie consent and privacy-choice signals; and
• security, bot-detection, rate-limit, and fraud indicators.

2.4 Information From Other Sources

We may receive personal information from:

• independent home-service providers and referral networks, including whether a call connected, an appointment was scheduled, or a request qualified under agreed criteria;
• advertising, analytics, call-routing, attribution, identity-resolution, fraud-prevention, and communications vendors;
• affiliates, publishers, and marketing partners that refer a consumer to the Site;
• public records, licensing databases, professional directories, and business information sources;
• social networks or third-party services when you interact with our content or choose to share information; and
• parties involved in a corporate transaction, legal process, investigation, or dispute.

3. How We Use Personal Information

We may use personal information for the following business and commercial purposes:

3.1 Provide and Operate the Platform

• display, host, maintain, and secure the Site;
• receive and validate forms and telephone calls;
• determine the apparent service category and geographic area;
• save a completed form in CPK's CRM and route a telephone call the consumer initiates to an independent provider or connection service;
• communicate about an active request;
• provide support and troubleshoot technical issues;
• maintain request, consent, and communication records; and
• administer privacy choices and opt-outs.

3.2 Save Requests and Route Inbound Calls

We save a completed form so the consumer can continue the request by calling. When the consumer initiates that call, we may evaluate information such as service type, location, property type, urgency, time of day, provider capacity, stated service area, call-answering performance, campaign requirements, source restrictions, and commercial arrangements to determine whether and where to route the call. The Site does not post completed forms to a buyer or provider network.

Routing is not a decision that produces legal or similarly significant effects concerning employment, housing, lending, insurance eligibility, education, criminal justice, or access to essential government benefits. We do not use personal information to make such decisions without providing any notice, consent, assessment, or opt-out required by applicable law.

3.3 Communicate

We may use contact information to:

• confirm receipt of a request;
• ask questions needed to route or understand the request;
• explain how the consumer can continue the request by initiating a call;
• provide customer-care or service-status messages;
• request feedback or investigate a complaint;
• send administrative, legal, security, or privacy notices; and
• send request-related and marketing calls, texts, and emails from HVAC Rescue or CPK when the consumer electronically signs the communications disclosure presented with the final request submission.

When a request form presents a communications disclosure immediately above its final submit button, clicking that button records the consumer’s electronic signature and consent for the communications described there. We record the disclosure text and version, consumer-facing brand, timestamp, supplied phone and email, source page, submit-button label, and consent method. This consent applies to HVAC Rescue and CPK, not to independent providers, buyers, or service-partner networks. Recording consent does not itself activate a new messaging campaign.

3.4 Analytics, Attribution, and Improvement

We may use information to understand Site traffic and performance; measure calls, form submissions, appointments, and other outcomes; attribute activity to a publisher, ad, campaign, keyword, or source; calculate or verify compensation; test Site layouts and communications; improve content and routing; and develop aggregate trends.

3.5 Advertising and Marketing

We may use information to deliver, measure, limit, and improve advertising; create audiences; understand whether an ad resulted in the Site visit, call, or request; avoid repetitive ads; and conduct targeted advertising as permitted by law and your choices.

3.6 Safety, Security, Fraud Prevention, and Legal Compliance

We may use information to:

• authenticate requests and detect bots, spam, duplicate or fraudulent leads, malicious activity, and unauthorized access;
• protect consumers, providers, CPK, and others;
• enforce our Terms of Service and contracts;
• investigate complaints and resolve disputes;
• document consent and honor communication preferences;
• comply with subpoenas, court orders, regulatory requests, recordkeeping duties, and applicable law;
• establish, exercise, or defend legal claims; and
• conduct audits, due diligence, and corporate transactions.

3.7 Deidentified and Aggregated Information

We may create and use deidentified or aggregated information for analytics, reporting, forecasting, service-area planning, content development, quality measurement, and other lawful purposes. We will not attempt to reidentify information that applicable law requires us to maintain as deidentified.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described below.

4.1 Consumer-Initiated Provider Connections

The Site does not post completed form submissions to an independent provider, buyer, marketplace, or referral network. Form submissions are saved in CPK's CRM and handled by service providers acting for CPK. To connect with an HVAC professional, you must initiate a telephone call. During that consumer-initiated connection, we may disclose contact, location, service-request, communication, and related information to an independent provider or a call-routing intermediary that connects the call.

An independent provider receiving information through that call may use it to evaluate the request, provide a quote, schedule an appointment, deliver service, measure outcomes, prevent fraud, and administer its own operations. It may be a separate business or controller with its own privacy policy.

Where a consumer intentionally calls to interact with a provider, a disclosure associated with that connection may be treated under applicable law as a consumer-directed disclosure rather than a sale. A compensated call connection may be treated as a sale under certain state laws. See Section 5.

4.2 Service Providers, Contractors, and Processors

We may disclose information to vendors that perform services for us, including:

• website hosting, cloud storage, database, content delivery, and security;
• form processing, CRM, customer support, and workflow automation;
• call tracking, routing, recording, transcription, analytics, and quality assurance;
• telephone, SMS, email, and communication delivery;
• analytics, attribution, reporting, testing, and fraud detection;
• consent management and privacy-request processing;
• professional services such as legal, accounting, insurance, compliance, and auditing; and
• data deletion, archiving, backup, and disaster recovery.

We seek to contractually restrict these recipients to processing information for specified purposes and to require appropriate confidentiality, security, deletion, and compliance obligations where required.

4.3 Advertising and Analytics Partners

We may permit advertising, analytics, and social-media partners to collect or receive internet activity, identifiers, approximate location, campaign data, and inferences through cookies, pixels, tags, APIs, or similar technology. They may use the information to measure ads, provide attribution, prevent fraud, create or match audiences, and deliver targeted advertising.

Some of these disclosures may be considered a sale, sharing, or targeted advertising under applicable law. See Sections 5 and 6.

4.4 Affiliates and Business Partners

We may disclose information among entities under common control, future affiliated entities, publishers, advertisers, and business partners for operations, referral administration, analytics, security, legal compliance, and other purposes consistent with this Privacy Policy.

4.5 Legal, Safety, and Compliance Recipients

We may disclose information to government agencies, regulators, law enforcement, courts, litigants, insurers, attorneys, auditors, or other parties when we reasonably believe disclosure is necessary to comply with law or legal process; protect rights, safety, property, or security; investigate fraud or misuse; enforce agreements; or establish, exercise, or defend claims.

4.6 Corporate Transactions

We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, receivership, sale of assets, corporate restructuring, or transfer of all or part of the Platform. A recipient will be required to handle personal information consistently with applicable law and any notice or choice that continues to apply.

4.7 At Your Direction or With Your Consent

We may disclose information to a recipient you select, identify, authorize, or ask to connect with during a call you initiate, or for another purpose disclosed when you provide the information.

5. Sale, Sharing, Targeted Advertising, and Call Connections

State privacy laws define “sale,” “sharing,” and “targeted advertising” differently. A disclosure may fall within one of these definitions even when CPK does not sell a traditional list of names and even when compensation is based on a qualified inbound call, appointment, transaction, or advertising event rather than on the personal information itself.

5.1 Inbound Call Connections

CPK does not transmit a Site form as a lead to a buyer or provider network. When a consumer initiates a telephone call and CPK receives compensation for connecting that call to an independent provider or call-routing intermediary, an associated disclosure may be considered a sale under some laws. Categories potentially involved include:

• identifiers and contact information;
• service-request and property information;
• commercial or request history;
• approximate or submitted service location;
• communications information reasonably necessary to respond; and
• related inferences or attribution data.

An opt-out of sale does not prevent a disclosure that applicable law permits because it is necessary to fulfill a transaction or specific request you make, or because you intentionally direct us to disclose information during a call you initiate. We will structure call connections and disclosures to honor applicable opt-out rights while still allowing consumer-directed connections.

5.2 Online Advertising Disclosures

Advertising cookies, pixels, device identifiers, internet activity, approximate location, and audience data disclosed for cross-context behavioral or targeted advertising may be considered sale or sharing. You can opt out through the Your Privacy Choices section below, by emailing info@cpkhome.com, or through a legally recognized browser-based opt-out preference signal as described below.

5.3 Additional Limits on Our Practices

• We do not knowingly sell or share personal information of consumers under 16 years old.
• We do not sell account credentials or use them for advertising.
• We do not use sensitive personal information to infer characteristics about you, and we do not use precise device-derived geolocation or the contents of private communications for targeted advertising.
• A submitted service address, problem description, photograph, message, or other form detail is saved through CPK's CRM processor and is not posted from the Site to a buyer or provider network. Information may be disclosed to an independent provider during a connection you initiate. Depending on the applicable law and how that disclosure is structured, the call connection may be treated as a sale. We honor applicable opt-out rights, subject to exceptions for disclosures you intentionally direct or that are reasonably necessary to fulfill your request.
• We do not sell or disclose mobile numbers or SMS opt-in records for third parties’ unrelated marketing.

5.4 How to Opt Out

Use the Your Privacy Choices / Do Not Sell or Share My Personal Information link in the Site footer to return to this section, use the on-page browser or device opt-out control when displayed, or email info@cpkhome.com with the subject “Privacy Opt-Out.” You may also use the methods in Section 10.

Where required, we process recognized opt-out preference signals, including the Global Privacy Control (“GPC”), as a request to opt out of sale, sharing, and targeted advertising for the browser or device sending the signal and any profile we can reasonably associate with it. A browser-level signal may not identify you for offline records; the request method in Section 10 allows you to provide information needed to apply the request more broadly.

If the Site offers cookie controls, those controls may allow granular technology choices, but the Your Privacy Choices section governs legal opt-outs concerning sale, sharing, and targeted advertising. We do not require you to create an account to submit an opt-out request and will not ask for information beyond what is reasonably necessary to process it.

6. Cookies and Similar Technologies

We and our vendors use cookies and similar technologies for the following categories of purposes:

6.1 Strictly Necessary

These technologies support core Site functions, security, network management, fraud prevention, load balancing, form submission, privacy preferences, request recording, and inbound-call routing. Disabling them may prevent the Site from functioning properly.

6.2 Functional

These technologies remember selections, language, location, form progress, and other preferences and may support enhanced Site features.

6.3 Analytics and Performance

These technologies help measure traffic, page performance, errors, navigation, form interactions, call-click events, and aggregate use so we can improve the Site.

6.4 Advertising and Attribution

These technologies help attribute visits, calls, and requests to campaigns or publishers; limit and measure ads; create or match audiences; and support targeted advertising.

You can manage non-essential technologies through any controls offered on the Site, through browser settings, and through the Your Privacy Choices section. Blocking cookies may not block all technologies, and choices may need to be repeated for each browser or device unless we can associate them with you.

Because there is no uniform industry standard for every browser Do Not Track signal, the Site may not respond to ordinary Do Not Track settings. We do honor legally recognized opt-out preference signals such as GPC where required.

7. Calls, Call Tracking, Recording, Text Messages, and Email

7.1 Call Tracking and Routing

Telephone numbers displayed on the Site may be tracking or routing numbers. We and our call-technology vendors may collect the calling number, dialed number, date and time, duration, routing path, referral source, campaign information, call disposition, and whether the call connected or qualified under applicable criteria.

7.2 Call Recording and Transcription

Calls may be monitored, recorded, or transcribed for routing, customer service, quality assurance, training, fraud prevention, analytics, attribution, consent documentation, dispute resolution, and legal compliance. Where law requires all-party consent or another specific notice, we intend to provide an audible or other legally sufficient notice before recording.

7.3 Text Messages

When you opt in or request text communication, we collect the mobile number, message content, time and delivery information, program or brand, consent disclosure, consent method, opt-in timestamp, form or page source, and opt-out status.

Message frequency varies and message and data rates may apply. Reply STOP to opt out of CPK text messages and HELP for help. We may retain a suppression record after an opt-out so we can avoid sending future messages.

Mobile numbers and SMS consent records may be disclosed to vendors that operate messaging for CPK only as needed to provide consented communications, document the consent, or honor an opt-out. Submitting a request after the displayed communications disclosure records the consent but does not itself activate a new messaging campaign. We do not sell or disclose mobile numbers or SMS consent records to independent providers or other third parties for their unrelated marketing.

7.4 Email

You may unsubscribe from marketing emails using the unsubscribe link in the message. We may continue to send non-marketing communications concerning an active request, security, legal notices, or privacy requests.

7.5 Independent Providers

After you initiate a call and provide information during a connection with an independent provider, that provider controls its own subsequent calls, texts, and emails. Send opt-out requests concerning that provider's communications directly to the provider as well.

8. Data Retention

We retain personal information only for as long as reasonably necessary and proportionate for the purposes described in this Privacy Policy. The retention period depends on the type of information, the interaction involved, whether a request or provider connection remains active, contractual and accounting needs, consent and suppression-record requirements, security and fraud-prevention needs, applicable limitation periods, and legal obligations.

For example, we may retain request and routing records long enough to administer the connection, document the disclosure and any consent, respond to complaints, reconcile compensation, and establish or defend legal claims. We may retain opt-out and do-not-contact records for as long as needed to honor the preference. Call recordings or transcripts, when created, are retained for a period reasonably necessary for the stated purpose and may be kept longer when subject to a complaint, investigation, legal hold, or legal obligation. Website and advertising-attribution data is retained according to operational needs and applicable settings, subject to privacy choices and legal requirements.

When information is no longer reasonably needed, we delete, deidentify, aggregate, or securely archive it, subject to backup, fraud-prevention, legal-hold, and technical limitations. Information in a backup may remain until the backup is overwritten through the ordinary backup cycle, but it will not be restored to active use except for recovery, security, or legal purposes.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information based on its nature and the risks involved. Measures may include access controls, authentication, encryption in transit, vendor review, logging, monitoring, backups, least-privilege practices, incident response, and employee or contractor confidentiality obligations.

No website, telephone system, transmission, storage system, or security program is completely secure. We cannot guarantee that information will never be accessed, lost, altered, or disclosed without authorization. You should use caution when sending information through open-text fields, email, text, photographs, or recorded calls.

If we determine that a security incident requires notice under applicable law, we will provide notice in the manner and within the time required.

10. Your Privacy Choices and U.S. State Privacy Rights

Depending on your state of residence and whether the applicable law covers CPK or the particular processing, you may have the right to:

• confirm whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain personal information in a portable format;
• opt out of sale, sharing, or targeted advertising;
• opt out of certain profiling in furtherance of decisions producing legal or similarly significant effects;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent for processing based on consent;
• appeal a denial of a privacy request; and
• receive equal service and not be discriminated against for exercising a privacy right.

These rights are subject to definitions, scope, exceptions, verification, and limitations in applicable law. For example, we may retain information needed to provide a requested service, protect security, prevent fraud, maintain an opt-out, complete a transaction, comply with law, or establish or defend legal claims.

10.1 How to Submit a Request

To submit an access, correction, deletion, portability, appeal, sale/share opt-out, targeted-advertising opt-out, or other privacy request, email info@cpkhome.com with the subject “Privacy Request – HVAC Rescue.” Please state the right you want to exercise, the brand involved, and the information reasonably needed to locate the relevant records. For a sale, sharing, or targeted-advertising opt-out, you may also use a recognized opt-out preference signal as described in Section 5.4.

The Site footer includes a clear “Your Privacy Choices / Do Not Sell or Share My Personal Information” link to this section. You do not need to create an account to submit an opt-out request.

10.2 Verification

We will verify requests to the degree required by law and proportionate to the sensitivity of the information requested. Verification may include matching information you provide with our records, confirming control of an email address or telephone number, asking questions about a request, or requesting a signed declaration. We will not request more information than reasonably necessary. Information collected for verification will be used only for verification, security, fraud prevention, and compliance.

We may deny or limit a request if we cannot reasonably verify it, it is fraudulent or abusive, an exception applies, or the law does not require us to honor it. We will explain a denial as required.

10.3 Authorized Agents

Where permitted, an authorized agent may submit a request for you. We may require proof of the agent’s authority and may ask you to verify your identity or directly confirm permission. An opt-out preference signal does not require separate written authorization where applicable law treats the signal itself as the consumer’s request.

10.4 Appeals

If we deny a request and your state provides an appeal right, you may appeal by emailing info@cpkhome.com with the subject “Privacy Appeal” and explaining why you believe the decision should be reconsidered. We will respond within the period required by applicable law. If an appeal is denied, we will provide information about any right to contact your state attorney general or another regulator.

10.5 Timing and Fees

We will respond within the period required by applicable law, generally within 45 days after receiving a verifiable request, subject to any lawful extension. We ordinarily do not charge a fee. We may charge a reasonable fee or decline repetitive, manifestly unfounded, or excessive requests where applicable law permits.

11. California Privacy Disclosures

This section supplements the rest of the Privacy Policy for California residents and is intended to provide disclosures under the California Consumer Privacy Act, as amended (“CCPA”). Terms defined by the CCPA have the same meaning in this section.

11.1 Notice at Collection

The Notice at Collection above describes the categories of personal information collected, purposes, categories of recipients, whether certain disclosures may be treated as sale or sharing, and the criteria used to determine retention. Additional details appear in Sections 2, 3, 5, and 8.

11.2 Categories Collected, Disclosed, Sold, or Shared in the Preceding 12 Months

The categories below reflect personal information we may have collected and disclosed during the preceding 12 months. Actual practices depend on the interaction, the feature used, and the technologies enabled.

Identifiers. Examples collected include name, telephone number, email address, address, IP address, and online or request identifiers. Business-purpose recipients may include hosting, CRM, communications, analytics, security, legal, call-routing, and other vendors, as well as a provider connected through a call the consumer initiates. Sale or sharing recipients may include a provider or call-routing intermediary associated with a compensated inbound-call connection and advertising or analytics partners through online technology.

California customer-record information. Examples collected include name, address, telephone number, and email address. Business-purpose recipients may include operational or professional-service vendors and a provider connected through a call the consumer initiates. Sale recipients may include a provider or call-routing intermediary associated with a compensated inbound-call connection.

Commercial information. Examples collected include service requests, request history, consumer-initiated provider connections, and appointment or conversion indicators. Business-purpose recipients may include CRM, analytics, attribution, legal, call-routing, and audit vendors, as well as a provider connected through an inbound call. Sale or sharing recipients may include a provider or call-routing intermediary associated with a compensated inbound-call connection and advertising or analytics partners where applicable.

Internet or other electronic-network activity. Examples collected include browsing, page and form interactions, referral source, and cookie or device identifiers. Business-purpose recipients may include hosting, analytics, security, testing, attribution, and advertising vendors. Sharing recipients may include advertising and analytics partners for cross-context behavioral advertising or attribution.

Geolocation data. Examples collected include approximate IP-derived location and a submitted service location. Business-purpose recipients may include CRM, routing, mapping, security, and analytics vendors, as well as a provider connected through a call the consumer initiates. Approximate location may be shared with advertising partners, and a submitted location may be disclosed during a compensated inbound-call connection the consumer initiates.

Audio, electronic, visual, or similar information. Examples collected include call recordings or transcripts, messages, emails, and submitted photographs. Business-purpose recipients may include call, communications, customer-service, legal, security, and selected-provider recipients. This category is not ordinarily sold or shared for cross-context behavioral advertising.

Professional or employment-related information. Examples collected include business contact information and provider role or company information. Business-purpose recipients may include business, compliance, legal, and operational vendors. This category is not ordinarily sold or shared.

Inferences. Examples collected include service interest, likely service-area match, and communication or advertising preferences. Business-purpose recipients may include routing, analytics, advertising, and selected-provider recipients. Sale or sharing recipients may include advertising partners and a provider or call-routing intermediary where the inference is part of a compensated inbound-call connection.

Sensitive personal information. Examples collected may include precise device-derived geolocation if you enable it, account credentials if an account feature is offered, and the contents of private communications. Business-purpose recipients may include selected providers at your direction and communications, security, and operational vendors. We do not use these categories to infer characteristics or for cross-context behavioral advertising. A submitted service address and request description are addressed in the identifiers, geolocation, and communications categories above. The Site does not post that form data as a lead; information may be disclosed during a consumer-initiated call connection as described in Section 5.

We do not intentionally collect protected classification characteristics, biometric information, education information, or highly sensitive government, financial, or medical information through ordinary consumer service-request flows.

11.3 Business and Commercial Purposes

The business and commercial purposes for collection, use, disclosure, sale, or sharing are described in Sections 3 through 7. They include providing and routing requests, communicating, analytics, attribution, advertising, security, fraud prevention, legal compliance, and corporate transactions.

11.4 California Rights

California residents may have the right to know, access, correct, delete, and obtain information about collection, disclosure, sale, and sharing; opt out of sale or sharing; limit use or disclosure of sensitive personal information when it is used beyond permitted purposes; and receive non-discriminatory treatment.

Submit requests using Section 10. To opt out, use the footer link to /privacy#your-privacy-choices, email info@cpkhome.com, or use a recognized opt-out preference signal. We will provide a way to confirm that an opt-out has been processed.

We use sensitive personal information only for purposes reasonably necessary to provide requested services, protect security, prevent fraud, process communications, and comply with law. We do not use it to infer characteristics or for purposes that require a separate Limit the Use of My Sensitive Personal Information link. If our practices change, we will provide the required notice and choice.

11.5 No Financial Incentives

We do not currently offer a financial incentive or price or service difference in exchange for retaining, selling, or sharing personal information. If we offer one in the future, we will provide a separate notice describing the material terms and obtain any required opt-in consent.

11.6 Consumers Under 16

We do not knowingly sell or share the personal information of consumers under 16 years old and do not have actual knowledge that we do so.

11.7 California “Shine the Light”

California Civil Code Section 1798.83 may allow certain residents to request information about disclosures of personal information to third parties for their own direct-marketing purposes. Send a request to info@cpkhome.com with the subject “California Shine the Light Request.” This law has separate definitions and exceptions from the CCPA.

12. Nevada and Other State-Specific Requests

Nevada residents may submit a request to opt out of a covered sale under Nevada law by using the methods in Section 10. Even when a state law defines sale more narrowly than this Privacy Policy, we will process applicable requests consistent with that law.

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable comprehensive privacy laws may use the same request methods. The rights and appeal process available to a particular resident depend on the law in effect and whether it applies to CPK or the processing at issue.

13. Children’s Privacy

The Site is intended for adults seeking home-service information and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. We also do not knowingly sell or share personal information of anyone under 16.

If you believe a child provided personal information, contact info@cpkhome.com. We will investigate and delete information as required. A parent or guardian should not submit a child’s contact information as the telephone number for a home-service request.

14. Third-Party Websites and Independent Providers

The Site may link to or integrate with third parties. After you leave the Site or intentionally engage an independent provider, that party’s terms and privacy policy govern its processing.

CPK does not control a provider’s privacy, security, communications, recording, payment, or retention practices. A request concerning data held by a provider may need to be directed to that provider. Where required or reasonably feasible, CPK may forward the request, but the provider remains responsible under applicable law.

15. International Use

The Site is directed to U.S. users and home-service requests. Access from another country may result in transfer to and processing in the United States, where privacy laws may differ. We do not represent that the Site is appropriate outside the United States.

16. Changes to This Privacy Policy

We may update this Privacy Policy as law, technology, vendors, practices, services, or operations change. The “Last Updated” date identifies the latest revision.

If a change materially affects how we use or disclose personal information, we will provide notice and obtain consent where required. We will not use previously collected information for a materially different, unrelated, or incompatible purpose without the notice or consent required by applicable law.

17. Contact Us

CPK Home Services, Inc.
Attn: Privacy Department
Email: info@cpkhome.com

For service help, use the contact method displayed on the applicable brand Site. Do not send emergencies or unnecessary sensitive information to a legal or privacy inbox.