Privacy Policy

1. Introduction and Scope

Byron Peay Drain Cleaning LLC, operating within the Computer Systems Design and Related Services industry, is committed to protecting the privacy and security of every individual who interacts with our digital platforms, requests our drain cleaning and plumbing services, or otherwise engages with our organization. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard information about you. It applies to all websites, mobile applications, online forms, telephone communications, email correspondence, in-person service visits, and any other channel through which you may provide personal data to us.

We have designed this policy to comply with applicable privacy laws and regulations in the United States, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Virginia Consumer Data Protection Act, and other state-level privacy frameworks. We also strive to align our practices with internationally recognized privacy principles, including transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision contained herein, you should discontinue use of our services and refrain from providing personal information. We encourage you to review this policy periodically because we may update it from time to time to reflect changes in our practices, operational needs, or legal obligations.

This policy applies to all users, including homeowners, property managers, commercial clients, subcontractors, job applicants, vendors, and website visitors. Our data handling obligations extend to information collected through our primary website, any subdomains, mobile-responsive web applications, online scheduling tools, email marketing platforms, customer relationship management systems, payment processing gateways, social media pages, and offline service documentation. Regardless of the collection channel, we treat all personal data with the same high standard of care and respect.

The organization responsible for your personal data is Byron Peay Drain Cleaning LLC, headquartered at 870 N 300 E, Pleasant Grove, Utah, 84062-1708, United States. If you have any questions about this policy or wish to exercise your rights as described below, please contact us using the details provided in the Contact Information section at the end of this document.

We recognize that privacy is a fundamental right and that transparency is the foundation of trust. This policy is written to provide clear, detailed explanations of every aspect of our data handling practices. We avoid legalese wherever possible and strive to communicate in plain language that is accessible to all readers, regardless of their technical or legal background. If any part of this policy remains unclear after your review, our team is available to provide clarification and answer your questions personally.

In our capacity as a Computer Systems Design and Related Services provider, we also handle technical data, system logs, infrastructure metadata, and related operational information that may be generated during the delivery of our technology consulting or systems integration work. This policy covers all such data categories equally, with specific provisions addressing technical data where relevant.

Our privacy program is overseen by the company principal, Byron Peay, who serves as the designated privacy contact for all inquiries, complaints, and data subject requests. Byron Peay has implemented administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These safeguards are reviewed and updated on a regular basis to address evolving threats and to maintain alignment with industry best practices.

The scope of this policy extends to third-party service providers who process personal data on our behalf. We require all such providers to enter into binding data processing agreements that mandate compliance with privacy obligations consistent with those described in this policy. We conduct due diligence on all third-party vendors before engagement and periodically review their compliance with contractual privacy commitments.

This policy does not apply to information that is publicly available through government records, information that has been anonymized or aggregated such that it can no longer be associated with an identifiable individual, or information that is governed by separate privacy notices provided at the point of collection for specific programs or services. Where separate notices apply, those notices will take precedence over this general policy for the specific data processing activities they describe.

2. Information We Collect

We collect various categories of information to provide, improve, and personalize our drain cleaning and plumbing services, as well as our computer systems design consulting offerings. The specific types of information we collect depend on your interactions with us, the services you request, and the channel through which you engage. Below we describe each category in detail so that you have a comprehensive understanding of our data collection practices.

The information we collect can be broadly categorized into information you provide directly, information collected automatically through technology, information we receive from third parties, and inferences we draw from the data we process. Each of these categories is addressed in its own subsection to provide clarity on the sources, types, and purposes of collection.

2.1 Personal Identifiers and Contact Information

When you contact us for service inquiries, schedule a drain cleaning appointment, request a plumbing estimate, subscribe to our newsletter, participate in a promotion, or communicate with us through any channel, we may collect your full name, email address, mailing address, billing address, telephone number, mobile phone number, business name, job title, and any other identifiers you choose to provide. This information is essential for us to communicate with you, confirm appointments, dispatch technicians, provide service updates, process payments, and deliver the services you have requested.

If you engage with us as a commercial client or property management company, we may also collect company registration numbers, tax identification numbers, credit references, trade license information, insurance certificates, and authorized signatory details. This information is necessary to establish and maintain a business relationship, verify credentials, and comply with legal and regulatory obligations applicable to business-to-business transactions in the plumbing and drain cleaning industry.

For job applicants and prospective employees, we collect resumes, cover letters, employment history, educational background, professional certifications, references, and any other information you include in your application materials. We use this information solely for recruitment and hiring purposes and retain it in accordance with applicable employment laws.

2.2 Service and Transaction Information

To perform and document our drain cleaning and plumbing services, we collect information about the properties where services are performed, including property addresses, access instructions, gate codes, alarm system details, location of main water shutoff valves, septic tank locations, cleanout locations, and other site-specific information that enables our technicians to work safely and efficiently. We also collect detailed service records describing the nature of each job, the work performed, parts and materials used, time on site, technician notes, before-and-after photographs or video inspections, equipment readings, and any follow-up recommendations provided to the customer.

Payment-related information, including credit card numbers, debit card numbers, bank account details, and billing addresses, is collected when you pay for our services. We process payments through PCI-DSS compliant third-party payment processors and do not store full payment card numbers or CVV codes on our own systems. We retain only truncated card numbers and transaction identifiers necessary for reconciliation, refund processing, and audit purposes.

In the course of our Computer Systems Design and Related Services work, we may collect system specifications, network topology information, software configurations, user access logs, infrastructure diagrams, operational metrics, performance data, and related technical documentation that is relevant to the consulting engagement. Such information is handled with the same privacy protections applied to all other categories of personal data.

2.3 Communications and Interaction Data

When you communicate with us by email, telephone, text message, web form, live chat, social media messaging, or any other communication channel, we collect the content of your messages, the date and time of the communication, the channel used, and any attachments or supporting materials you provide. Telephone calls to our business line may be recorded for quality assurance, training, and dispute resolution purposes, and you will be notified of such recording at the beginning of the call where required by law. We retain communication records to maintain a complete history of our interactions, ensure continuity of service, resolve disputes, and improve our customer support operations.

If you engage with our social media pages on platforms such as Facebook, Instagram, LinkedIn, Nextdoor, or Google Business Profile, we may collect information about your public profile, comments, reactions, shares, messages sent to our page, and other interactions. This information is governed by both this Privacy Policy and the privacy policies of the respective social media platforms. We encourage you to review the privacy settings on each platform to control what information is visible to us and others.

2.4 Automatically Collected Technical Data

When you visit our website, we automatically collect certain technical information through server logs, cookies, web beacons, pixels, and similar tracking technologies. This information includes your Internet Protocol address, browser type and version, operating system, device type and manufacturer, screen resolution, referring URL, exit URL, pages visited on our site, date and time of each visit, time spent on each page, clickstream data, scroll depth, mouse movements, keystroke patterns in form fields, and other browsing behavior metrics. This data helps us understand how visitors interact with our website, identify technical issues, optimize site performance, improve user experience, and inform our marketing strategies.

We also collect device and connection information such as Internet service provider, mobile network carrier, approximate geographic location derived from your IP address, language preference settings, time zone, and installed fonts. This information is used to deliver content in the appropriate language, format pages correctly for your device, provide location-relevant service information, and ensure compatibility with your browsing environment.

For users who access our online scheduling tools or client portals, we may collect login timestamps, feature usage analytics, error logs, session duration, and authentication events. This information supports functionality, security monitoring, and continuous improvement of our digital service delivery infrastructure.

2.5 Location Data

We may collect precise geolocation information from your mobile device if you grant permission through your device settings or browser. Precise location data enables us to provide location-based service availability information, estimate travel time for our technicians to reach your property, and optimize dispatch routing for emergency drain cleaning calls. We only collect precise geolocation data with your explicit consent, and you may withdraw that consent at any time by adjusting your device or browser settings. If you decline to share precise location data, you can still use our website and request services by manually entering your address.

Additionally, we derive approximate location information from your IP address for purposes such as displaying region-specific pricing, service area availability maps, and compliance with state-specific privacy rights disclosures. Approximate location derived from IP addresses does not identify your precise physical location and is used for general regional targeting only.

2.6 Information from Third Parties

We may receive information about you from third-party sources to supplement the data we collect directly. These sources may include public records databases, marketing data providers, business directories, social media platforms, credit reporting agencies, and analytics services. Third-party data may include updated contact information, demographic attributes, property ownership records, business affiliation data, and interest or preference segments. We use this information to maintain accurate records, identify potential customers who may benefit from our services, and tailor our marketing communications to relevant audiences.

If another individual refers you to our services—for example, a friend, family member, neighbor, or real estate agent—we may receive your name and contact information from that referrer. We rely on referrers to obtain your consent before sharing your information with us. Upon first contact, we will inform you of the referral source and provide you with this Privacy Policy.

When we engage subcontractors or partner companies to assist with service delivery, we may receive information about your satisfaction with the service, completion status, and any issues encountered during the job. This information is used for quality control, performance evaluation of our service partners, and continuous improvement of our service delivery processes.

2.7 Inferences and Derived Data

Through analysis of the information described above, we may draw inferences about your preferences, characteristics, service needs, and likelihood to engage with our offerings. For example, if you have previously scheduled drain cleaning services for a residential property, we may infer that you are a homeowner interested in preventive maintenance and may benefit from periodic reminder communications. If your browsing behavior on our website indicates interest in commercial plumbing services, we may infer that you represent a business or property management entity and tailor subsequent communications accordingly.

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals without human intervention. All significant decisions regarding service delivery, pricing, or account status involve manual review by qualified personnel. Inferences are used exclusively to enhance the relevance of our communications, improve service recommendations, and optimize operational efficiency.

3. How We Use Information

The information we collect serves multiple essential purposes that enable us to operate our business, fulfill our commitments to you, comply with legal obligations, and continuously improve the services we provide. This section explains each category of use in detail so that you understand precisely why we process your data and the legal bases on which we rely.

We process personal data on the following legal bases: performance of a contract to which you are a party, compliance with legal obligations to which we are subject, pursuit of our legitimate business interests where those interests are not overridden by your rights and freedoms, protection of vital interests in emergency situations, and your consent where we have explicitly requested and obtained it. Where consent serves as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing performed prior to such withdrawal.

3.1 Service Delivery and Customer Support

The primary use of your personal information is to provide the drain cleaning, plumbing, and related computer systems design services you have requested. This includes scheduling appointments, dispatching qualified technicians to your location, performing the agreed-upon work, documenting completed services, processing payments, issuing invoices and receipts, handling warranty claims, managing service guarantees, providing follow-up support, and addressing any questions or concerns that arise before, during, or after service delivery. Without your personal information—particularly your contact details, property address, and description of the service issue—we would be unable to fulfill our service commitments effectively.

For recurring service customers and maintenance plan subscribers, we use your information to track service schedules, send appointment reminders, document ongoing property conditions, generate periodic service reports, and coordinate annual or semi-annual maintenance visits. This proactive approach to service management helps prevent emergency situations, extends the life of plumbing and drainage systems, and provides you with peace of mind through consistent, documented care of your property.

In the context of our Computer Systems Design and Related Services work, we use collected data to develop system architectures, configure software environments, integrate disparate systems, troubleshoot technical issues, document infrastructure configurations, and deliver technical recommendations and reports. The information collected during consulting engagements is essential for delivering accurate, context-aware technical guidance tailored to each client's unique operational environment.

3.2 Communication and Marketing

We use your contact information to communicate with you about your account, services, appointments, billing matters, and responses to your inquiries. Transactional communications—those related directly to services you have requested or accounts you maintain—are sent as necessary to fulfill our contractual obligations and do not require separate marketing consent. These include appointment confirmations, service reminders, technician arrival notifications, invoices, payment receipts, warranty information, and important safety or service-related updates.

With your consent or where permitted by applicable law based on an existing customer relationship, we may send you marketing communications about our services, seasonal promotions, maintenance tips, new service offerings, company news, and relevant industry information. Marketing communications are sent via email, text message, or postal mail based on your stated preferences. Every marketing email includes an unsubscribe link allowing you to opt out of future marketing messages immediately. Text message marketing includes opt-out instructions typically by replying STOP. You may also manage your communication preferences by contacting us directly using the details in the Contact Information section.

We may use your service history and website interaction data to personalize the content and timing of marketing communications. For example, if you recently scheduled a sewer line inspection, we may send you information about trenchless pipe repair options that could be relevant to your situation. Personalization is based on data we already possess and does not involve the collection of additional information beyond what you have provided or what we have automatically collected through your interactions with our digital platforms.

3.3 Business Operations and Analytics

Internally, we use aggregated and anonymized data to analyze business performance, identify service trends, optimize technician scheduling and routing, forecast demand, manage inventory of parts and equipment, evaluate marketing campaign effectiveness, and inform strategic business decisions. These analyses typically involve data that has been stripped of direct identifiers and combined with data from many other customers to generate statistical insights that do not reveal any individual's identity or specific circumstances.

We use analytics tools to understand how visitors interact with our website, which pages are most frequently viewed, how users navigate through our content, where users encounter difficulties or drop off, and which features generate the most engagement. These insights guide website improvements, content development, user interface refinements, and conversion optimization efforts. Analytics data is collected through cookies and similar technologies and is processed in accordance with the Cookies and Tracking Technologies section of this policy.

3.4 Legal Compliance and Security

We process personal data as necessary to comply with applicable laws, regulations, legal processes, and governmental requests. This includes maintaining records required by tax authorities, responding to lawful subpoenas or court orders, complying with financial reporting obligations, meeting occupational safety and health administration requirements for workplace records, maintaining contractor licensing documentation, and fulfilling any other legal obligations that apply to our business operations. We also process data to establish, exercise, or defend legal claims in judicial, administrative, or other proceedings.

Protecting the security of our systems, our premises, our employees, you, and the general public is a fundamental priority. We process personal data to detect, prevent, investigate, and respond to fraud, unauthorized access, security incidents, malicious activity, violations of our Terms of Service, and other potentially harmful or illegal conduct. This includes monitoring network traffic, analyzing access logs, conducting security audits, and implementing authentication and authorization controls that rely on personal identifiers to verify the identity and permissions of individuals accessing our systems.

4. Data Sharing and Disclosure

We share personal information only in the specific circumstances and with the categories of recipients described in this section. We do not sell personal information for monetary consideration as the term sell is defined under applicable state privacy laws, including the California Consumer Privacy Act. We do not share personal information with third parties for their own independent marketing purposes without your explicit prior consent. All data sharing is governed by contractual agreements, legal obligations, or legitimate business purposes with appropriate safeguards in place.

4.1 Service Providers and Contractors

We engage carefully vetted third-party companies and individuals to perform functions on our behalf, and these service providers receive access to personal data only as necessary to perform their designated functions. Service providers are contractually bound to use personal data solely for the purpose of providing the contracted services, to maintain confidentiality, to implement appropriate security measures, and to delete or return personal data upon completion or termination of the service agreement. Categories of service providers include payment processors, cloud hosting and storage providers, email and communication platforms, customer relationship management system providers, scheduling and dispatch software vendors, accounting and bookkeeping services, data analytics providers, marketing and advertising platforms, website optimization and hosting services, IT support and security vendors, and professional advisors including attorneys, accountants, and auditors.

We conduct initial due diligence and ongoing monitoring of all service providers to verify their compliance with privacy and security standards. This includes reviewing their privacy policies, security certifications, incident response procedures, and data handling practices. We require all service providers to notify us promptly in the event of a data breach affecting personal data we have entrusted to them, and to cooperate fully with any resulting investigation and notification obligations.

4.2 Business Transfers

If Byron Peay Drain Cleaning LLC is involved in a merger, acquisition, reorganization, sale of all or a portion of its assets, financing transaction, or bankruptcy proceeding, personal data held by us may be among the assets transferred or disclosed as part of that transaction. In such circumstances, we will notify you before your personal data is transferred and becomes subject to a different privacy policy. We will require the recipient organization to agree to honor the commitments in this Privacy Policy with respect to your data for a transitional period, and to provide you with notice of any material changes to their own privacy practices.

4.3 Legal Disclosures and Safety

We may disclose personal data when we have a good faith belief that disclosure is necessary to comply with applicable law, regulation, legal process, or enforceable governmental request; to enforce our Terms of Service, including investigation of potential violations; to detect, prevent, or otherwise address fraud, security, or technical issues; to protect against harm to the rights, property, or safety of Byron Peay Drain Cleaning LLC, our users, our employees, or the public as required or permitted by law; or to respond to an emergency involving immediate danger of death or serious physical injury to any person. We carefully review each disclosure request and challenge requests that we believe are overbroad, vague, or legally insufficient before complying.

4.4 With Your Consent

We may share your personal data for purposes not described in this policy when we have obtained your affirmative, informed consent to do so. Before sharing data based on consent, we will clearly explain the specific data to be shared, the identity of the recipient, and the purpose of the sharing. You may withdraw your consent at any time, and we will cease the consented sharing activity going forward.

4.5 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized data—information that has been processed such that it can no longer be reasonably associated with an identified or identifiable individual—for any lawful purpose, including research, industry analysis, statistical reporting, service improvement, and public communications about our business. We maintain technical and administrative measures designed to prevent re-identification of such data and contractually prohibit recipients from attempting to re-identify individuals from aggregated or de-identified datasets.

5. Cookies and Tracking Technologies

Our website employs cookies, web beacons, pixels, local storage objects, session storage, and similar tracking technologies to provide essential functionality, enhance user experience, analyze website performance, and support our marketing efforts. This section explains what these technologies are, how we use them, the types we deploy, and the choices available to you regarding their use.

A cookie is a small text file placed on your device by a website you visit. Cookies enable websites to remember information about your visit, such as your preferences, login status, and the contents of your shopping cart. Cookies may be session cookies, which expire when you close your browser, or persistent cookies, which remain on your device for a set period or until you manually delete them. First-party cookies are set by the website you are visiting, while third-party cookies are set by a domain different from the website you are visiting, typically for advertising or analytics purposes.

A web beacon, also known as a pixel tag or clear GIF, is a tiny transparent graphic image embedded in a webpage or email that allows the sender to track whether the page has been viewed or the email has been opened. Web beacons are used in conjunction with cookies to understand user engagement and to measure the effectiveness of communications. Local storage and session storage are mechanisms that allow websites to store larger amounts of data on your device, providing capabilities beyond what cookies alone can offer.

5.1 Categories of Cookies We Use

Strictly Necessary Cookies are essential for our website to function properly. They enable core functionality such as page navigation, secure access to protected areas, form submission processing, and session management. These cookies do not gather information about you for marketing purposes and cannot be disabled through our cookie preference controls because the website would not function without them. Examples include cookies that maintain your session state as you navigate between pages, cookies that remember items in your service request queue, and cookies that support security features such as cross-site request forgery protection.

Performance and Analytics Cookies collect information about how visitors use our website, including which pages are visited most frequently, how long visitors spend on each page, what links they click, whether they encounter error messages, and how they arrived at our site. This information is aggregated and anonymized to help us understand usage patterns, identify areas for improvement, and measure the performance of our content and features. We use first-party analytics solutions and may also use third-party analytics services that provide similar functionality. Examples include cookies that distinguish unique visitors, cookies that track page load times, and cookies that identify traffic sources.

Functional Cookies allow our website to remember choices you make and provide enhanced, more personalized features. These cookies may be set by us or by third-party providers whose services we have integrated into our pages. Examples include cookies that remember your preferred language, region, or text size; cookies that remember if you have already seen a particular notification or completed a survey; and cookies that remember form field entries to save you time when completing subsequent forms. Disabling functional cookies may result in a less personalized browsing experience.

Targeting and Advertising Cookies are used to deliver advertisements that are more relevant to you and your interests. They are also used to limit the number of times you see a particular advertisement and to help measure the effectiveness of advertising campaigns. These cookies remember that you have visited our website, and this information may be shared with advertising networks and platforms. We may use these cookies to build interest profiles and show you relevant advertisements about our drain cleaning and plumbing services on other websites. We currently minimize the use of targeting cookies, and where they are used, we provide clear opt-out mechanisms.

5.2 Your Cookie Choices

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies, delete existing cookies, or alert you when a cookie is being placed. Each browser provides different methods for managing cookies, typically found in the Settings, Preferences, Privacy, or Security sections. Please consult your browser's help documentation for specific instructions. Please note that if you disable or decline cookies, some features and services of our website may not function properly, and your ability to access certain secure areas may be impaired.

You may also exercise choice regarding certain third-party cookies through industry-developed opt-out programs, including the Network Advertising Initiative Opt-Out Tool and the Digital Advertising Alliance WebChoices Tool. These tools allow you to opt out of interest-based advertising from many participating companies with a single interface. Additionally, many mobile devices provide settings that limit ad tracking or reset advertising identifiers. We honor Global Privacy Control signals sent by your browser as requests to opt out of the sale or sharing of personal information for targeted advertising purposes.

Our website does not respond to Do Not Track signals transmitted by web browsers at this time because there is no industry consensus on how to interpret such signals. We continue to monitor developments in this area and will update our practices if an established standard emerges that provides meaningful privacy protections for consumers. In the interim, we provide the cookie control mechanisms and opt-out options described in this section to give you meaningful choice over tracking technologies.

5.3 Third-Party Analytics and Services

We may use third-party web analytics services such as Google Analytics, which use cookies and similar technologies to collect and analyze information about use of our website and to report on activities and trends. These services may also collect information regarding the use of other websites, apps, and online resources. You can learn about Google's practices by visiting Google's Privacy and Terms page, and you can opt out of Google Analytics by downloading the Google Analytics Opt-out Browser Add-on. We configure analytics services to minimize data collection, including anonymizing IP addresses before they are stored or processed.

Embedded content from third-party platforms—such as maps showing our service area, video demonstrations of our drain cleaning techniques, or social media feeds—may collect data about your interaction with that embedded content in accordance with the third party's privacy practices. We include such embedded content only where it enhances your experience and only from platforms with established privacy practices. Where possible, we use privacy-enhanced embedding options that limit data collection until you actively interact with the embedded content.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. The specific retention period for each category of data is determined by considering the nature and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which the data is processed, whether those purposes can be achieved through alternative means, and applicable legal requirements.

Customer service records, including contact information, service history, invoices, and related correspondence, are retained for a period of seven years following the most recent transaction or interaction. This retention period aligns with tax record-keeping requirements, statute of limitations for contract-related claims, and the practical need to reference historical service information when conducting future work at a property. After the retention period expires, service records are securely deleted or anonymized such that they can no longer be associated with an identifiable individual.

Marketing contact information and communication preferences are retained until you unsubscribe or request deletion, after which point we maintain only the minimum information necessary to honor your opt-out preference—typically an email address or phone number on a suppression list to ensure we do not inadvertently contact you with marketing communications in the future. Suppression list entries are retained indefinitely to ensure continued compliance with your communication preferences.

Website analytics data collected through cookies and similar technologies is typically retained in identifiable form for a period of 26 months, after which it is either deleted or aggregated and anonymized. Aggregated analytics data, which cannot be associated with any individual, may be retained indefinitely for historical trend analysis and business intelligence purposes.

Job applicant data for unsuccessful candidates is retained for a period of three years following the hiring decision to comply with equal employment opportunity record-keeping requirements and to consider candidates for future opportunities where the applicant has consented to such consideration. After this period, applicant data is securely deleted unless the applicant requests earlier deletion.

In certain circumstances, we may retain personal data for longer periods where required by law, regulation, or court order, or where necessary to establish, exercise, or defend legal claims. When data is retained beyond the standard retention period for these purposes, access to such data is restricted to personnel with a specific need to access it, and the data is deleted promptly once the legal purpose for retention has been resolved.

Upon determining that personal data is no longer required for any of the purposes described above, we take steps to securely destroy or permanently de-identify that data. Paper records are shredded using cross-cut shredding equipment. Electronic records are deleted using secure deletion methods that prevent recovery, including multiple-pass overwriting for magnetic media and cryptographic erasure for encrypted data stores. De-identified data that cannot be re-associated with any individual may be retained for analytical, research, and business intelligence purposes.

7. Your Rights and Choices

Depending on your jurisdiction of residence, you may have specific rights regarding your personal data. We respect all applicable privacy rights and provide mechanisms for you to exercise them. This section describes the rights that may be available to you and the process for exercising them. We will not discriminate against you for exercising any of the rights described in this policy.

7.1 Right to Know and Access

You have the right to request that we disclose what personal information we collect, use, disclose, and sell or share. Specifically, you may request the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting, selling, or sharing the information, and the categories of third parties with whom we share the information. You may make a verifiable request for access up to two times in any twelve-month period free of charge. We will provide the requested information in a portable, readily usable format.

7.2 Right to Correction

If you believe that personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct or update that information. We will process correction requests promptly and will communicate any material corrections to third parties with whom we have shared the inaccurate information where feasible and appropriate. In some cases, we may request supporting documentation to verify the accuracy of the corrected information, particularly where the correction involves legally significant data such as name, address, or payment information.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions. Upon receiving and verifying a deletion request, we will delete your personal information from our records and direct our service providers to do the same, unless an exception applies. Exceptions that may permit us to retain your data include completing the transaction for which the information was collected, detecting and preventing security incidents or illegal activity, complying with legal obligations, exercising free speech rights, enabling internal uses reasonably aligned with your expectations, and making other internal and lawful uses compatible with the context in which you provided the information. If an exception applies, we will inform you of the specific basis for retaining your data.

7.4 Right to Opt Out of Sale and Sharing

Under certain state privacy laws, including the California Consumer Privacy Act, you have the right to opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising purposes. As stated earlier in this policy, we do not sell personal information for monetary consideration. To the extent that our use of cookies and similar technologies for analytics or advertising purposes constitutes a sale or sharing under applicable law, you may exercise your right to opt out by managing cookie preferences through our website banner or your browser settings, by enabling the Global Privacy Control signal in your browser, or by contacting us directly using the information in the Contact Information section.

7.5 Right to Limit Use of Sensitive Personal Information

If we collect sensitive personal information—such as precise geolocation data, financial account credentials, or information about health—you have the right to direct us to limit our use of that information to what is necessary to perform the services you have requested, to provide goods within the ordinary course of our business, and for certain other permitted purposes. We do not use or disclose sensitive personal information for purposes beyond those permitted without your consent, and we provide notice and obtain consent before using sensitive personal information for any additional purpose.

7.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you different prices or rates for goods or services including through granting discounts or other benefits or imposing penalties, provide you a different level or quality of goods or services, or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, in each case as a result of your exercise of privacy rights. We may, however, offer financial incentives including payments as compensation for the collection, sale, or retention of personal information where permitted by law and where the incentive is reasonably related to the value of your data, subject to your prior opt-in consent which may be revoked at any time.

7.7 Exercising Your Rights

To exercise any of the rights described above, please submit a verifiable consumer request by emailing us at chat@byronpeay.buzz, calling us at +12624298996, or writing to us at 870 N 300 E, Pleasant Grove, UT 84062-1708, United States. To verify your identity when you make a request, we may ask you to provide information sufficient to confirm that you are the individual about whom we have collected personal information. This may include verifying your name, email address, phone number, or recent transaction details that match our records. We will only use the information you provide for verification to process your request.

You may designate an authorized agent to submit a request on your behalf. To designate an authorized agent, you must provide the agent with written, signed permission to act on your behalf, and we may require you to verify your own identity directly with us and confirm that you have provided the agent with such permission. We may deny a request from an agent who does not submit proof of authorization.

We endeavor to respond to verifiable requests within 45 days of receipt. If we require additional time beyond 45 days to process your request, we will inform you of the reason and the extension period. We will deliver our written response by email or, at your option, by postal mail. If we cannot fulfill your request, we will explain the basis for our refusal.

If you are dissatisfied with our response to your privacy request, you have the right to appeal our decision. To submit an appeal, please contact us using the same channels described above and specify that you are appealing a previous privacy rights decision. We will review your appeal and respond within 60 days, providing a written explanation of our conclusions. If your appeal is denied, we will provide you with information about how to contact your state Attorney General's office or other appropriate regulatory authority to submit a complaint.

8. Security Measures

Protecting your personal information is a responsibility we take seriously. We have implemented and maintain a comprehensive information security program that incorporates administrative, technical, and physical safeguards designed to protect the personal data in our possession against unauthorized access, alteration, disclosure, destruction, and misuse. Our security program is designed with reference to recognized frameworks, including the National Institute of Standards and Technology Cybersecurity Framework and industry best practices for small and medium-sized businesses.

Administrative safeguards include written information security policies and procedures reviewed annually; employee and contractor confidentiality agreements; a privacy and security training program provided to all personnel upon hire and annually thereafter; role-based access controls that limit data access to employees and contractors with a legitimate business need; formal onboarding and offboarding procedures to manage access throughout the employment lifecycle; incident response procedures tested annually; vendor risk management processes; and regular management review of security posture and compliance.

Technical safeguards include encryption of personal data during transmission using Transport Layer Security protocols; encryption of sensitive personal data at rest using industry-standard encryption algorithms; firewalls, intrusion detection systems, and endpoint protection deployed across our network; multi-factor authentication for access to systems containing personal data; automated patch management to address software vulnerabilities promptly; regular vulnerability scanning and penetration testing; logging and monitoring of access to personal data with automated alerts for suspicious activity; secure backup and disaster recovery procedures with regularly tested restoration capability; and secure development practices for any custom software or systems integration work.

Physical safeguards include secured facilities with access controls; monitored alarm systems; locked filing cabinets and secure storage for physical records; visitor logging and escort procedures; secure disposal of physical media through cross-cut shredding; and environmental controls to protect hardware from damage. Our principal place of business at 870 N 300 E, Pleasant Grove, Utah, is equipped with physical security measures proportionate to the sensitivity of the data we handle.

While we implement and maintain these safeguards, no method of transmission over the Internet or method of electronic storage is one hundred percent secure. We cannot guarantee absolute security of your personal data against all possible threats, including those that are unknown or unforeseeable. However, we are committed to promptly notifying affected individuals and relevant authorities in accordance with applicable law if we discover a security breach that compromises personal information.

In the event of a data breach, we have established incident response procedures that include immediate containment and eradication of the threat, forensic investigation to determine the scope and cause of the breach, notification to affected individuals without unreasonable delay and in accordance with legal requirements, cooperation with law enforcement and regulatory authorities as appropriate, implementation of measures to prevent recurrence, and post-incident review to identify lessons learned and strengthen our security posture.

You also play a critical role in protecting your personal information. We recommend that you use strong, unique passwords for online accounts, keep your devices and software updated with the latest security patches, exercise caution when using public Wi-Fi networks to transmit sensitive information, be alert to phishing attempts and other social engineering tactics, and notify us promptly if you become aware of any unauthorized access to your account or any suspicious activity involving our services or communications.

9. Children's Privacy

Our services, including our drain cleaning and plumbing services and our computer systems design consulting work, are directed at adults and are not intended for children under the age of 16. We do not knowingly collect, use, or disclose personal information from children under the age of 16 without verifiable parental consent. If we learn that we have collected personal information from a child under age 16 without verified parental consent, we will take immediate steps to delete that information from our systems and records.

If you are a parent or guardian and believe that your child under the age of 16 has provided us with personal information without your consent, please contact us immediately using the information provided in the Contact Information section of this policy. We will work with you to identify and delete the relevant data and to address any concerns you may have about our privacy practices. We take children's privacy seriously and are committed to complying with the Children's Online Privacy Protection Act and similar laws.

We do not sell or share for cross-context behavioral advertising the personal information of consumers we actually know to be less than 16 years of age without affirmative authorization. We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age, as our service model is directed toward adult property owners, property managers, and business clients. In the rare circumstance where a minor might visit our website, our automatic data collection is limited to the technical information described in our Cookies and Tracking Technologies section and does not involve the collection of data that would be considered personal information for purposes of children's privacy statutes.

10. California Privacy Rights

This section supplements the information contained in the rest of our Privacy Policy and applies solely to residents of the State of California, as defined under Section 17014 of Title 18 of the California Code of Regulations. We provide this section to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and any implementing regulations.

Under California law, California residents have the right to know what personal information is being collected about them, to access that information, to know whether their personal information is sold or disclosed and to whom, to say no to the sale of personal information, to request deletion of their personal information, to correct inaccurate personal information, to limit the use and disclosure of sensitive personal information, and to not be discriminated against for exercising these rights. Each of these rights is described in detail in Section 7 of this policy, and the instructions for exercising these rights apply equally to California residents.

The categories of personal information we have collected about consumers in the preceding 12 months include identifiers such as name, address, email address, and phone number; customer records information such as billing address and payment card number; characteristics of protected classifications under California or federal law to the extent voluntarily provided; commercial information such as records of services purchased; Internet or other electronic network activity information such as browsing history and interaction with our website; geolocation data such as approximate location from IP address and precise location with consent; and professional or employment-related information for job applicants. The sources of this information and the business purposes for which we collect it are described in Sections 2 and 3 of this policy.

We have not sold personal information in the preceding 12 months as the term sell is defined under California law. We have disclosed personal information to service providers and contractors for business purposes as described in Section 4 of this policy. We do not use or disclose sensitive personal information for purposes other than those permitted under California law and those reasonably necessary to provide our services or as otherwise authorized by applicable regulations.

California residents may submit requests under the CCPA by contacting us through any of the methods listed in the Contact Information section. We will respond to verifiable requests in accordance with the timelines established by California law. If we deny a request, you may appeal the denial by submitting an appeal request to the same contact points, and we will respond to your appeal within the period required by applicable regulation.

If you are a California resident and would like to exercise your rights, including through an authorized agent, please follow the procedures described in Section 7.7 of this policy. We will not discriminate against you for exercising your CCPA rights in any way, and we will treat all California residents with equal respect and consideration in our privacy practices.

11. International Data Transfers

Byron Peay Drain Cleaning LLC is headquartered in the United States, and our services are operated and managed on servers and systems located within the United States. If you are accessing our website or services from outside the United States, please be aware that your personal data will be transferred to, stored, and processed in the United States, where our central operations are located and where our service providers maintain their infrastructure.

The data protection and privacy laws of the United States may not provide the same level of protection as the laws in your country of residence. By using our services, providing information to us, or otherwise engaging with our organization, you acknowledge and consent to the transfer of your personal data to the United States for processing in accordance with this Privacy Policy. We take steps to ensure that your personal data receives an adequate level of protection consistent with applicable law regardless of where it is processed.

Where required by applicable law, we implement appropriate safeguards for cross-border data transfers, which may include standard contractual clauses approved by relevant regulatory authorities, binding corporate rules, or your explicit consent obtained after being informed of the possible risks of such transfers. If you would like more information about the safeguards we use for international transfers, please contact us using the details in the Contact Information section.

We do not target our services to individuals located in the European Economic Area, the United Kingdom, or Switzerland, and we do not intentionally offer goods or services to, or monitor the behavior of, individuals in those jurisdictions. If you are located in these regions and choose to provide us with your personal data, you do so at your own initiative, and we will process that data in accordance with this Privacy Policy to the extent consistent with applicable legal requirements.

12. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data handling practices, operational requirements, legal obligations, or industry standards. When we make changes, we will revise the Last Revised date at the top of this policy and post the updated version on our website. The updated policy will be effective immediately upon posting unless a later effective date is specified.

For material changes—those that significantly affect how we collect, use, or share your personal information, or that materially alter your rights or our obligations under this policy—we will provide additional notice to you. This notice may be in the form of a prominent banner on our website, a direct email to the address we have on file, a text message notification, or another method reasonably calculated to reach you before the material changes take effect. We encourage you to review this Privacy Policy whenever you interact with us to stay informed about our privacy practices.

If we make changes that require your consent under applicable law, we will obtain your consent before applying the changed practices to your personal data. Your continued use of our services after any changes to this Privacy Policy will constitute your acceptance of those changes, to the extent permitted by law. If you do not agree with the updated policy, you should discontinue use of our services and may request deletion of your personal data in accordance with the procedures described in Section 7.

We maintain archived versions of this Privacy Policy so that you can review previous versions and understand how our practices have evolved over time. Archived versions are available upon request by contacting us through the channels listed in the Contact Information section. This transparency supports our commitment to accountability and enables you to track the development of our privacy program.

13. Contact Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our privacy practices, we encourage you to contact us through any of the following channels. We are committed to addressing your concerns promptly and thoroughly, and we welcome the opportunity to resolve any issues directly before you consider escalation to regulatory authorities.

If you believe that we have not adequately addressed your privacy concerns, you may have the right to lodge a complaint with the supervisory authority in your jurisdiction. In the United States, this may include the Federal Trade Commission, your state Attorney General's office, or other regulatory bodies with jurisdiction over privacy matters. We cooperate fully with regulatory inquiries and are committed to resolving any privacy concerns in good faith.

For service of legal process, subpoenas, warrants, or other legal documents related to privacy or data protection matters, please use the physical address listed above and direct your correspondence to the attention of the Privacy Compliance Officer. We accept service by certified mail, return receipt requested, and by personal delivery during regular business hours.

We value your trust and are dedicated to maintaining transparency in all of our data practices. If you have suggestions for how we can improve our privacy program, if you notice any discrepancies in our privacy notices, or if you have general feedback about your experience with our privacy practices, we welcome your input. Your feedback drives our continuous improvement and helps us better serve our community.