California Privacy Notice

This California Privacy Notice supplements our general Privacy Policy and applies only to California residents. It explains the categories of personal information we collect about California consumers, the purposes for which we use that information, the rights you have under California law, and how to exercise them.

Scope & Application

This notice applies if you are a California resident and you:

• Visit jdhremodeling.com
• Call, text, or email us
• Request a quote, schedule an inspection, or receive services from us
• Otherwise interact with our online or offline business operations

It is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA), and the implementing regulations of the California Privacy Protection Agency.

Do Not Sell or Share My Information & Limit Sensitive PI Use

Categories of Personal Information Collected

In the 12 months preceding the “Last Updated” date above, we have collected the following categories of personal information about California residents, as defined under Cal. Civ. Code § 1798.140:

Category	Examples	Collected
A. Identifiers	Name, postal address, email, phone, IP address, online identifiers	Yes
B. Customer records	Information from Cal. Civ. Code § 1798.80 — name, signature, address, phone, financial info for projects	Yes
C. Protected classifications	Age, gender, marital status, veteran status	No (only when voluntarily provided)
D. Commercial information	Records of services purchased, considered, or scheduled	Yes
E. Biometric information	Fingerprints, voiceprints, retinal scans	No
F. Internet activity	Browsing history on our site, search history, interactions with ads, marketing click IDs (gclid, fbclid)	Yes
G. Geolocation data	Approximate location derived from IP; precise location only with explicit consent (e.g., autocomplete on address forms)	Yes (approximate)
H. Sensory information	Audio recordings of phone calls, transcripts, photos of your property submitted for quotes	Yes
I. Professional or employment info	Not generally collected from customers	No
J. Education information	Not collected	No
K. Inferences	Inferences drawn from above to characterize predispositions for services or marketing	Yes (limited; marketing only)
L. Sensitive personal information	Driver’s license, financial account information for financing applications, precise geolocation	Yes (only when needed for service)

Sources of Personal Information

We collect personal information from the following sources:

• Directly from you: when you fill out a form, call us, text us, email us, schedule an inspection, sign a contract, or send us photos of your property.
• Automatically: via cookies, pixels, server logs, and analytics tools when you visit our website.
• From service providers: call-tracking and SMS providers (CallRail, Twilio), CRM (HubSpot), project management (JobNimbus), call transcription (AssemblyAI, Deepgram), and analytics (Google, Meta, Microsoft) that operate on our behalf.
• From marketing partners: Google Local Services Ads, lead-aggregation services, and similar advertising platforms that connect you to us based on your search activity or stated interest.
• From public and commercial sources: publicly available property records, weather and insurance-claim data services, and credit-bureau information when you apply for financing through our partners.

Business and Commercial Purposes for Collection

We collect, use, and disclose personal information for the following business purposes:

• Scheduling, conducting, and following up on free inspections and consultations
• Preparing estimates, contracts, invoices, and warranty registrations
• Performing roofing, siding, window, door, gutter, and insulation services at your property
• Responding to customer service requests, complaints, and warranty claims
• Sending marketing communications you have consented to receive (e.g., promotions, newsletters)
• Measuring the performance of our advertising and marketing efforts
• Recording and transcribing calls for quality, dispatch, training, and lead management
• Detecting and preventing fraud, abuse, and security threats
• Complying with legal, tax, warranty, licensing, and recordkeeping obligations
• Internal research, analytics, and continuous improvement of our services

Categories of Recipients

We disclose personal information to the following categories of recipients, all of whom are contractually bound to use the information only on our behalf and for the purposes we authorize:

• Service providers and processors: CRM (HubSpot), project management (JobNimbus), call tracking and SMS (CallRail, Twilio), call transcription (AssemblyAI, Deepgram), AI language models (Anthropic), analytics and advertising (Google, Meta, Microsoft), hosting and content delivery (Vercel, Cloudflare, WordPress hosting), database and storage (Supabase, Cloudflare R2), payment processors, and standard email-delivery providers.
• Financing partners: When you apply for financing, your application data is shared with the lender you select.
• Manufacturer warranty registrars: Owens Corning, ProVia, VELUX, and similar manufacturers receive your name, address, and product information when you elect to register a warranty.
• Professional advisors: Attorneys, accountants, and auditors as needed for our business operations and compliance.
• Government authorities: When required by law, subpoena, or court order, or to protect our legal rights.
• Acquirers: In the event of a merger, acquisition, or sale of substantially all of our assets, subject to notice and opt-out where required by law.

We do not sell or share personal information for cross-context behavioral advertising.

Sensitive Personal Information

We collect a limited set of sensitive personal information (SPI) only when needed to provide our services or comply with the law:

• Driver’s license or government ID: only when identity verification is required for a financing application or contract execution.
• Financial account information: only when you apply for financing, make a payment, or arrange direct billing.
• Precise geolocation: only with your explicit consent (e.g., when an address-autocomplete field is used on a quote form).

We do not use or disclose sensitive personal information for any purpose other than those permitted under Cal. Civ. Code § 1798.121(a) and CPRA regulations, which include performing the services you requested, preventing fraud, ensuring security, and complying with legal obligations. We do not infer characteristics about consumers from sensitive personal information.

Retention Periods

We retain each category of personal information only as long as necessary for the purpose for which it was collected, plus any period required by law. Specifically:

• Project, warranty, and contract records: retained for the life of the warranty plus the applicable statutory limitations period (typically 7–15 years).
• Call recordings and transcripts: retained up to 24 months unless legally required longer.
• Marketing data and inferences: deleted promptly upon opt-out, except for suppression-list entries needed to honor your opt-out.
• Website analytics: retained per the defaults of our analytics providers, typically 14–26 months in aggregate form.
• Sensitive personal information: retained only for the duration necessary to complete the specific service (e.g., a financing application) and then deleted or returned to the provider.

Your California Privacy Rights

If you are a California resident, you have the following rights under CCPA/CPRA:

1. Right to Know: Request that we disclose the categories and specific pieces of personal information we collected about you, the sources, the business purposes, and the categories of third parties we shared it with.
2. Right to Delete: Request that we delete personal information we collected from you, subject to certain exceptions (such as records required for active warranties, completing a transaction, complying with legal obligations, or detecting security incidents).
3. Right to Correct: Request that we correct inaccurate personal information we maintain about you.
4. Right to Opt Out of Sale or Sharing: Direct us not to sell or share your personal information. As noted above, we do not engage in either practice, but you may submit a request to formalize your opt-out.
5. Right to Limit Use and Disclosure of Sensitive Personal Information: Direct us to limit our use of your sensitive PI to purposes permitted under CPRA § 1798.121(a). As noted above, we already limit use to those purposes.
6. Right to Non-Discrimination: Not be denied service, charged a different price, or provided a different level or quality of service because you exercised your privacy rights. See Non-Discrimination below.
7. Right to Data Portability: Receive a copy of the personal information we maintain about you in a portable, readily usable format.

How to Exercise Your Rights

You may submit a verifiable consumer request to exercise any of the rights above through one of the following channels:

• Email: Info@JDHremodeling.com — please put “California Privacy Rights Request” in the subject line.
• Phone: (443) 241-7356 — ask for the privacy contact.
• Mail: JDH Remodeling, Attn: Privacy Contact, 4821 St Leonard Rd Suite 201, St Leonard, MD 20685.

To help us process your request quickly, please include: your full name, the email and phone number you have used with us, the property address (if any) associated with services we provided, and a clear description of the right you are exercising.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We require:

• A signed written authorization from you specifically permitting the agent to submit the request, OR a valid power of attorney under Cal. Probate Code §§ 4000–4465.
• Verification of the agent’s identity.
• Direct confirmation from you that you provided the agent with permission to submit the request.

Verification Procedures

To protect your information, we verify the identity of the requestor before fulfilling a Right to Know, Delete, Correct, or Portability request. Verification methods may include matching the information in the request against the information we already have on file (such as your name, email, phone, and property address), and requesting a declaration under penalty of perjury for higher-risk requests. We will never ask for sensitive information (Social Security number, driver’s license number, payment card number) that we do not already have on file for the purpose of verifying you.

Response Timeframes

We confirm receipt of verifiable consumer requests within 10 business days and respond substantively within 45 calendar days. We may extend the response period by an additional 45 days when reasonably necessary, with notice to you of the extension and the reason.

If we cannot verify your identity or otherwise fulfill your request, we will explain why in writing.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. Specifically, we will not:

• Deny you goods or services
• Charge different prices or rates, including through discounts or other benefits
• Provide a different level or quality of goods or services
• Suggest that you may receive a different price or quality based on exercising your rights
• Retaliate against an employee, applicant, or independent contractor for exercising their rights under CCPA/CPRA