California Privacy Disclosures

Privacy Policy

Last updated: June 9, 2026 · Effective date: June 9, 2026

This Privacy Policy describes how Aaero HVAC and Sheet Metal, Inc. ("Aaero," "we," "us," or "our") collects, uses, shares, and protects personal information of California residents and other website visitors. This policy complies with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

1. Categories of Personal Information We Collect

In the past 12 months, Aaero has collected the following categories of personal information from California consumers:

2. Purposes · Why We Collect Each Category

• Identifiers, Customer Records, Commercial Info: to schedule service appointments, generate estimates, dispatch technicians, send service-completion documentation, and process payment.
• Internet/Network Activity: to operate, debug, and improve the website; detect security incidents; produce aggregate analytics.
• Geolocation (city-level): to confirm the visitor is within our Marin County / North Bay service area before quoting.
• Professional Information (commercial leads only): to confirm commercial service eligibility and scope quotes appropriately.
• Inferences: to suggest seasonally relevant services (e.g., AC tune-ups before summer, furnace tune-ups before winter).

3. Retention Periods

• Active customer records: retained for the duration of the customer relationship plus 7 years after final service date (consistent with California tax records retention).
• Quotes that did not become customers: 18 months.
• Website analytics: aggregate analytics retained 26 months; individual identifiers anonymized after 90 days.
• Marketing consent records (TCPA logs): 5 years from withdrawal of consent.

4. Third-Party Recipients · Categories We Share

• Payment processors (Stripe / Authorize.Net): card data only, processed under PCI-DSS Level 1.
• Service-dispatch software vendors: name, address, phone, service request for routing.
• Analytics providers (Google Analytics 4): IP-truncated visit data.
• Bot & abuse prevention (Google reCAPTCHA Enterprise): device, browser, and interaction signals collected on pages with forms, used solely to verify submissions are human; governed by Google’s Privacy Policy and Terms of Service.
• Customer review platforms (Google, Yelp, Trustpilot): only with explicit post-service consent.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We honor Global Privacy Control (GPC) signals as opt-out requests per CPRA §1798.135.

5. Sensitive Personal Information

Aaero does not collect or process Sensitive Personal Information as defined in Cal. Civ. Code §1798.140(ae). Because we do not collect SPI, the right to limit use of SPI does not apply to our processing; we mention it here for transparency.

6. Your Rights as a California Consumer

• Right to Know what personal information we have collected, the sources, the purposes, and the recipients.
• Right to Delete personal information we have collected, subject to exemptions in §1798.105(d).
• Right to Correct inaccurate personal information.
• Right to Opt Out of sale or sharing for cross-context behavioral advertising (we do neither, but you may still exercise this right).
• Right to Limit Use of Sensitive Personal Information (n/a as we do not collect SPI).
• Right to Non-Discrimination for exercising any of the above rights.
• Right to Portability, receive a copy of your personal information in a portable, machine-readable format.

7. How to Exercise Your Rights

• Submit a request at aaeroheating.com/do-not-sell
• Call us toll-free: (415) 897-4187
• Email: cmilano@aaeroheating.com
• Mail: 860 Sweetser Ave., Novato, CA 94945

We will acknowledge your request within 10 business days and respond substantively within 45 calendar days (extendable by 45 days with notice). We will verify your identity using at least two pieces of personal information you have previously provided.

8. Authorized Agent Process

You may designate an authorized agent to submit privacy requests on your behalf. The agent must provide:

• Written, signed permission from you authorizing them to act on your behalf;
• Proof of their own identity;
• Direct confirmation from you that you authorized the agent (we may contact you to confirm).

9. Non-Discrimination

Aaero will not deny goods or services, charge different prices, provide different quality, or suggest you will receive a different price or quality, because you exercised any CCPA/CPRA right. We do not offer financial incentives in exchange for your personal information.

10. Global Privacy Control (GPC)

Aaero recognizes the GPC signal as a valid opt-out preference signal. We publish a GPC support manifest at /.well-known/gpc.json. Our backend honors the Sec-GPC: 1 request header as a Do-Not-Sell signal per California AG enforcement guidance.

11. Children Under 16

Aaero does not knowingly collect personal information from children under 16. If we learn that a child under 16 has provided personal information, we will delete it within 30 days. Parents or guardians may contact us at cmilano@aaeroheating.com.

12. Updates to This Policy

We will update this Privacy Policy as needed to reflect changes in our practices or applicable law. Material changes will be posted with a new "Last updated" date at the top of this page. Continued use of our website after a material change constitutes acceptance of the updated policy.

Questions? Contact Our Privacy Team

Aaero HVAC and Sheet Metal, Inc.
Attn: Privacy Officer
860 Sweetser Ave., Novato, CA 94945
Email: cmilano@aaeroheating.com
Phone: (415) 897-4187