Cares for your personal data (“personal data”) and does everything possible to protect it. This Privacy Notice ("Notice") is a document that contains up-to-date information related to your privacy rights.
In relation to us, you can be either a user, client, potential client and contractor.
User
This is any visitor to our website
Client
People who use our services
Potential client
It is the user who shows interest in our product or service
Contractor
This is the performer of our clients' orders
What is a Privacy Notice?
Privacy Notice is a document, practically a statement of us as a Business (Controller) to you (data subject) that describes how we collect, use, retain and disclose personal data that we gather via http://www.homeshowerexpert.com and our mobile application(s).
You, as subjects of personal data, have some specific privacy rights. To exercise them, write us an email at homeshowerexpert.com@gmail.com
Your rights vary depending on the laws that apply to you, but may include:
Right to access
You can request an explanation of the processing of your personal data.
California
Virginia
Ohio
Colorado
Nevada
Massachusetts
Minnesota
New York
North Carolina
Pennsylvania
Delaware
Canada
Right to rectification
You can change the information if it is inaccurate or incomplete.
California
Virginia
Colorado
Nevada
Massachusetts
Minnesota
New York
North Carolina
Delaware
Canada
Right to deletion
You can send us a request to delete your personal data from our systems.
California
Virginia
Ohio
Colorado
Massachusetts
Minnesota
New York
North Carolina
Pennsylvania
Canada
Right to restriction
You may partially or completely prohibit us from processing your personal data.
California
Massachusetts
New York
Canada
Right to portability
You can request all the data that you provided to us, as well as request to transfer data to another controller.
California
Virginia
Ohio
Colorado
Massachusetts
Minnesota
New York
North Carolina
Canada
Right to Opt-Out
The right to prohibit the sharing or selling of your data.
California
Virginia
Ohio
Nevada
Massachusetts
Minnesota
New York
North Carolina
Pennsylvania
Delaware
Colorado
Canada
Right Against Automated Decision Making
You have the right not to be subject to a decision based solely on automated means, if the decision produces legal effects concerning you or significantly affects you in a similar way.
California
Virginia
Colorado
Massachusetts
Minnesota
North Carolina
New York
Canada
Right to withdraw your consent
You can withdraw your consent at any time.
by default
Right to lodge a complaint
If your request was not satisfied, you can file a complaint to the regulatory body.
by default
Note:Some states do not have their own privacy laws. The rights of residents of such states are governed by U.S. federal law. If your state is not on the list, please contact homeshowerexpert.com@gmail.com
The state of Oregon(Oregon Consumer Information Protection Act)and state of Michigan(Identity Theft Protection Act (Act 452 of 2004)) do not currently have full-fledged privacy laws. However, they do have privacy requirements and the right of the data subject to opt out of advertising and other intrusive calls/messages.
Note:Depending on the state and legislative requirements we have from 30 to 60 days to exercise your request with the right to postpone it for 30 days more.
Data we process
The data we process is divided into categories: technical information and data that is provided to us.
Technical information.
When you visit our website, some data is collected automatically. We need technical data to operate, maintain, and improve our website. This includes data such as IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID and data about your interaction with the website - session ID.
Data provided by User.
By default we process only technical information. See more in table:
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID and data about your interaction with the website - session ID.
Smooth operation of the website
Data provided by Potential Client.
We can collect: full name, email, phone number, ZIP code, home address, start time; important features, type of project, other data that we can collect based on your individual project, technical information. See the example in table:
Full name, email, phone number
Contact you
ZIP code, home address
Understand if we can provide services in your area, search for information about the average cost of similar services in your region
Important features, type of project, start time
Proposal writing, finding contractors for services
Other data that we can collect based on your individual project
Proposal writing, finding contractors for services
Email, phone
Marketing, hot calls
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID and data about your interaction with the website - session ID.
Smooth operation of the website
Note:We are looking for the best specialists for your order. So that the specialists can contact you in order to take into account all your preferences, we give them some of your personal data: date and time of your application, full name, phone number, type of service, user ID, previous order history
Data provided by Client.
We can collect: full name, email, phone number, ZIP code, home address, insurance information, for whom to prepare an estimate (name, email), kind of property, start time, status of order, important features, type of project, other data that we can collect based on your individual project, technical information. See more in table:
Full name, email, phone number
Contact you, provide a service
ZIP code, home address
Understand if we can provide services in your area, search for information about the average cost of similar services in your region
Insurance information
To qualify quotes
Estimate details: name, email
Kind of property
To properly bill
Start time, status of order
Performance of a contract
Other data that we can collect based on your individual project
Proposal writing, finding contractors for services
To perform the work, proposal writing, finding contractors for services
Email, phone
Marketing, letters with notification of order status
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID and data about your interaction with the website - session ID.
Smooth operation of the website
Data provided by Contractors.
We can collect: name, registration number, contacts, position, business information, advertising info, payment information, technical data. See more in table:
Name, registration number, contacts
Conclusion and performance of the contract
Name of representative, contacts, position, business information
Conclusion and performance of the contract
Payment information
Contract performance
Advertising preferences
Advertising company settings
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID and data about your interaction with the website - session ID.
Smooth operation of the website
Note:some of the information from contractors we collect offline.
We store the data during the performance of the contract (during your interaction with our service) and 36 months after or until you withdraw your consent (if the processing is based on it). In this case, your data will be deleted from our servers within 30 days of your request.
Note:We do not knowingly process personal data of users under the age of 16 without consent from legal representative(s). If you are such a user, or you are a legal representative of the user, please let us know by email.
Why do we collect data?
We are committed to protecting the privacy of your information. We use the information we collect and receive to:
provide, maintain, and improve our website and service;
provide troubleshooting and customer support;
protect our Service for all our users;
contact you.
Sale of data
We do not sell your information. But we may transfer your personal data to some of our contractors. This is part of providing you with our services. Learn more in the next section.
Sharing and transferring of data
Your personal data is stored in our databases on servers. Our servers are located in the US (Michigan, Ohio, Virginia, Oregon, California), Brazil and Canada. We may transfer your data to our employees for the purpose of fulfilling a contract. We may also transfer your data for the following reasons:
Consent. We transfer your personal data based on your explicit consent.
Compliance with the law.
We won't disclose your personal data to third parties unless it is necessary:
to comply with a government request, court order, or applicable law;
to prevent unlawful use of our website;
to protect against claims of third parties;
to help prevent or investigate fraud.
Transfer to third parties.
We transfer your personal data to third parties on the basis of a public offer/ terms of service for processing on our behalf, subject to technical and organizational measures to protect your personal data.
We share your data with the service providers who, for example, help us:
operate, develop, and improve the features and functionality of our website.
advertise
provide you with their services
complete your payment transactions
fulfill your support requests
communicate with you as described elsewhere in this Privacy Notice
In more detail:
Employees and contractors
Performance of a contract
Contact with you
Support
Marketing
Complete your payment transactions
Operate, develop, and improve our website and business
Depending on the functions performed by the contractor or employee, the set of personal data obtained differs. We apply the necessary organizational and technical safeguards. Read more in the Security section
Advertising contractors
Promotion of services in advertising
We only transmit aggregate data. The treatment is carried out strictly according to our instructions, in which we take into account the necessary organizational and technical protection measures. If necessary, we use a data transfer agreement. Read more in the Security section
We use the following service providers:
Facebook
Customization and ease of use of the website
The data we transmit is limited in purpose and protected.
You can read about how Facebook processes personal data here
Yahoo
and AOL (Yahoo product)
Using online services and electronic bulletin boards
The data we transmit is limited in purpose and protected.
You can read about how Yahoo processes personal data here
Taboola
Detection and native advertising
The data we transmit is limited in purpose and protected.
You can read about how Taboola processes personal data here
Google
Advertising, promotion on the Internet and for analytics
The data we transmit is limited in purpose and protected.
You can read about how Google processes personal data here
Hotjar
Discovering, consolidating, and communicating user needs
The data we transmit is limited in purpose and protected.
You can read about how Hotjar processes personal data here
TikTok
Attracting new customers, advertising services
The data we transmit is limited in purpose and protected.
You can read about how TikTok processes personal data here
Nextdoor
Advertising, service offerings
The data we transmit is limited in purpose and protected.
You can read about how Nextdoor processes personal data here
Security
We use both physical and electronic means as well as procedural security measures to protect personal data we process. We have put in place reasonable operational and technical measures to restrict access to your data:
Data is stored on the server and is available to Kohler LuxStone employees who have access to the admin panel. Contractors may have limited access to some information.
Developed internal instructions.
implemented encryption TLS/SSL, firewall and other security measures to ensure security of your data.
Such measures will help to protect your personal data from loss, unauthorized access, disclosure, alteration or destruction. If you have reason to believe that your interaction with us no longer secure, please notify us immediately by contacting us in writing at homeshowerexpert.com@gmail.com
The use of cookies
We use cookies necessary for the functioning of the website. By using cookies, we receive the technical information specified in section “Data we process” and our Cookie Policy.
If you want to disable cookies, then you can find instructions for managing your browser settings at these links:
Operators can also be liable under DOPPA if, despite not directing their services or platforms to children, they have actual knowledge that children are accessing the services or platforms. In such an event, an operator cannot knowingly use, disclose, or compile the personal information of that child, nor can an operator allow another to do the same. An operator that provides a covered service or platform cannot advertise or market content that is inappropriate for children. In this regard, DOPPA provides an enumerated list of prohibited content, including alcohol, tobacco, firearms, fireworks, tanning equipment and facilities, lotteries and gambling, tattoos, drug paraphernalia, and pornography. It should be noted that an operator need not monitor the foregoing if it is using an advertising service and it ensures that such service is complying with DOPPA.
Do-not-track requests.
Delaware residents visiting our websites may request that we do not automatically gather and track information pertaining to their online browsing movements across the Internet. Such requests are typically made through web browser settings that control signals or other mechanisms that provide customers the ability to exercise choice regarding the collection of personal information about an individual customer's online activities over time and across third-party websites or online services. We currently do not have the ability to honor these requests. We may modify this Notice as our abilities change.
Nevada Legislation
We put here information for residents of Nevada to provide you with more information about legislation and your privacy rights granted by Nevada privacy law Senate Bill 220.
Opt-out of the sale.
Nevada allows consumers to opt-out of the sale of “covered information” collected through a website or online service. Under the law, “covered information” includes:
A first and last name.
A home or other physical address, which includes the name of a street and the name of a city or town.
An electronic mail (email) address.
A telephone number.
A social security number.
An identifier that allows a specific person to be contacted either physically or online.
Any other information concerning a person collected from the person through the operator’s Internet website or online service and maintained by the operator in combination with an identifier in a form that makes the information personally identifiable.
Do-not-sell request.
Nevada does not require entities to include a “Do Not Sell My personal data” button or link on their websites. Instead, it mandates that entities provide consumers with an email address, a toll-free telephone number, or an Internet website to submit verified opt-out requests.
Response time.
Upon receiving a “verified consumer request” a business has 45-days, with a possible 90-day extension when “reasonably necessary” and by providing notice to the consumer, for a total of 135 days
Privacy legislation
This Privacy Notice is created and governed by applicable privacy laws. We have also referred to legislation in individual states that has not yet been enacted or has not yet entered into force to indicate your rights. You can see a list of these laws here:
state of California — California Consumer Privacy Act and California Privacy Rights Act;
state of Virginia — Consumer Data Protection Act;
state of Ohio — Ohio Personal Privacy Act*;
state of Colorado — Protect Personal Data Privacy;
state of Nevada — Nevada Privacy Law;
state of Massachusetts— Massachusetts Information Privacy Act*;
state of Minnesota — Minnesota Consumer Data Privacy Act*;
state of New York — New York Privacy Act*, Digital Fairness Act*;
state of North Carolina— Consumer Privacy Act*;
state of Pennsylvania— Pennsylvania House Bill 1126*;
state of Delaware — Online and Personal Privacy Protection;
Canada — Personal data Protection and Electronic Documents Act 2000 and Canada's Anti-Spam Legislation.