Privacy Policy

Introduction

Welcome to Ayala Construction and Restoration, Inc. ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with us — whether through our website, phone, email, or in person.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our services. By using our services or providing your personal information, you acknowledge that you have read and understood this Privacy Policy.

We may update this Privacy Policy from time to time. The most current version will always be indicated by the effective date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

Information We Collect

We collect information that you voluntarily provide to us as well as information that is automatically collected when you interact with our business. The categories of personal information we may collect include:

• Full Name — to identify you and personalize our communications.
• Email Address — to send you quotes, confirmations, updates, and marketing communications.
• Phone Number — to contact you regarding your project, appointments, and service updates, and, if you have opted in, to send you SMS text messages.
• IP Address — automatically collected when you visit our website to help us analyze traffic, diagnose technical issues, and maintain security.
• Cookies and Tracking Data — we use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and analyze website performance. See Section 5 for full details.
• Project and Service Information — details about your construction or restoration project, property address, scope of work, and any other information you provide when requesting a quote or communicating with our team.
• Communication Records — records of correspondence between you and us, including emails, phone call notes, and text messages.

We only collect personal information that is reasonably necessary for the purposes outlined in this Privacy Policy. We do not knowingly collect personal information from children under the age of 13.

How We Use Your Information

We use the personal information we collect for legitimate business purposes, including but not limited to:

• Providing, operating, and improving our construction and restoration services.
• Responding to your inquiries, requests, and project quotes.
• Sending appointment reminders, project updates, and service notifications.
• Sending marketing and promotional communications about our services, where you have consented to receive them.
• Processing and fulfilling service agreements and contracts.
• Communicating important account or service-related information.
• Analyzing website usage and improving the functionality of our online presence.
• Detecting, preventing, and addressing technical issues, fraud, or security incidents.
• Complying with applicable legal obligations, regulations, and court orders.
• Enforcing our terms, conditions, and policies.

We will not use your personal information for purposes that are incompatible with those described in this Privacy Policy without first obtaining your consent or unless otherwise required or permitted by law.

SMS / Text Messaging Opt-In

Ayala Construction and Restoration, Inc. offers SMS text messaging communications to customers who choose to opt in. The following terms govern our SMS messaging program:

Message frequency may vary depending on your interactions and service activity. Standard message and data rates may apply based on your mobile carrier plan. To opt out of SMS communications at any time, reply STOP to any text message you receive from us. For help, reply HELP or contact us directly using the information in Section 10.

Cookie & Tracking Practices

Our website uses cookies and similar tracking technologies to enhance your experience, understand how visitors interact with our site, and deliver relevant content. A cookie is a small text file stored on your device by your web browser. We use the following categories of cookies:

• Essential Cookies — These cookies are strictly necessary for the website to function and cannot be disabled in our systems. They are typically set in response to actions made by you, such as filling in forms or setting privacy preferences.
• Analytics Cookies — These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us understand which pages are the most and least popular and how visitors navigate our website. All information collected is aggregated and anonymous.
• Marketing Cookies — These cookies may be set through our site by our advertising partners to build a profile of your interests and show you relevant advertisements on other sites. They do not directly store personal information but are based on uniquely identifying your browser and internet device.

How to Disable Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling certain cookies may affect the functionality of our website. For more information on managing cookies, visit your browser's help documentation or www.allaboutcookies.org.

We may also use web beacons, pixel tags, and similar technologies in our emails to understand engagement and improve our communications.

Data Security and Handling

We take the security of your personal information seriously and implement a variety of technical and organizational measures designed to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• SSL Encryption — Our website uses Secure Socket Layer (SSL) technology to encrypt data transmitted between your browser and our servers, protecting your information in transit.
• Secure Servers — Personal data is stored on secure servers with restricted access. We employ firewalls, access controls, and authentication measures to safeguard stored information.
• Access Limitations — Access to personal information is restricted to authorized personnel who require it to perform their job functions and who are bound by confidentiality obligations.
• Regular Reviews — We regularly review and update our security practices to address emerging threats and maintain compliance with applicable standards.

Data Breach Notification: In the event of a data breach that is likely to result in a risk to your rights and freedoms, we are committed to notifying affected individuals and, where required by applicable law, the relevant supervisory authorities within 72 hours of becoming aware of the breach. Notification will include the nature of the breach, the categories of data affected, likely consequences, and the measures taken or proposed to address the breach.

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

Third-Party Sharing

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We value your privacy and are committed to responsible data handling.

We may share your information in the following limited circumstances:

• Service Providers and Subcontractors — We may share your information with trusted third-party vendors, subcontractors, and service providers who assist us in operating our business and delivering services to you (e.g., scheduling tools, customer service platforms, payment processors). These parties are contractually obligated to protect your information and may only use it to perform services on our behalf.
• Legal Requirements — We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Ayala Construction and Restoration, Inc., our customers, or others.
• Business Transfers — In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
• With Your Consent — We may share your information with third parties when you have given us your explicit consent to do so.

As noted in Section 4, SMS opt-in data and consent information will not be shared with any third parties for marketing or promotional purposes.

Your Rights — CCPA & GDPR

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.

California Residents (CCPA / CPRA): Under the California Consumer Privacy Act, California residents have the following rights:

• Right to Know — You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete — You have the right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Opt Out of Sale — You have the right to opt out of the sale of your personal information. We do not sell personal information.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.
• Right to Correct — You have the right to request correction of inaccurate personal information we hold about you.

European Residents (GDPR): If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

• Right to Access — You have the right to obtain a copy of the personal data we hold about you and information about how it is processed.
• Right to Rectification — You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten") — You have the right to request deletion of your personal data under certain circumstances.
• Right to Restrict Processing — You have the right to request that we limit how we use your personal data in certain circumstances.
• Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You have the right to object to the processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent — Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the rights described above, please contact us using the information provided in Section 10. We will respond to verified requests within the timeframes required by applicable law. We may need to verify your identity before processing your request.

Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations, resolve disputes, enforce our agreements, and comply with applicable laws.

The criteria we use to determine retention periods include:

• The duration of our business relationship with you and the nature of the services provided.
• Legal and regulatory requirements that mandate specific retention periods (e.g., tax records, contractor licensing documentation).
• Whether there is an ongoing legal claim, dispute, or investigation that requires us to retain relevant data.
• Our legitimate business interests, such as maintaining records for warranty or service follow-up purposes.

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our internal data disposal procedures. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely isolate the data and protect it from further processing until deletion is feasible.

If you wish to request early deletion of your personal information, please refer to your rights in Section 8 and contact us using the details in Section 10.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please do not hesitate to reach out to us. We are committed to addressing your inquiries promptly and transparently.

We will make every effort to respond to your inquiry within a reasonable timeframe. For requests related to your rights under CCPA or GDPR, please allow up to 45 days for a response, as permitted by applicable law.