3D Roofs Privacy Policy

Effective Date: August 13, 2026
Last Updated: August 13, 2026
Version: CPK-WEB-LEGAL-2026.3-3D_ROOFS

This Privacy Policy explains how CPK Home Services, Inc. (“CPK,” “Company,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when operating 3D Roofs, and describes privacy choices and rights that may be available to you.

This policy applies to https://www.3droofs.com, its subdomains and landing pages, brand telephone numbers, forms or planners when offered, email and text communications, and related call-routing, request-routing, advertising, analytics, and support systems (collectively, the “Site”).

CPK operates 3D Roofs as a nationwide roofing information, advertising, call-routing, and contractor-connection service. CPK is not a roofing contractor and does not perform the underlying work. Independent providers and referral networks may have separate privacy practices after they receive information or communicate directly with you.

Notice at Collection and Brand-Specific Practices

Brand and operator. 3D Roofs is a brand operated by CPK Home Services, Inc. This policy applies to https://www.3droofs.com, related landing pages, telephone numbers displayed for the brand, forms or interactive tools when offered, and brand communications.

How the Site may collect information. Depending on the feature you use, the Site may process availability selections, property type, timing, ZIP code, call source and routing information, email inquiries, financing-link interactions, device information, and advertising or conversion attribution data.

At or before collecting personal information, we use the information for the purposes described below and retain it only for as long as reasonably necessary for those purposes, legal compliance, security, fraud prevention, dispute resolution, and the establishment or defense of claims. The examples are illustrative; we do not necessarily collect every example in every interaction.

We may receive compensation when we connect a consumer with an independent provider or referral partner. Under some state privacy laws, a compensated disclosure of request information or the use of online identifiers for targeted advertising may be treated as a “sale,” “sharing,” or targeted advertising. You can review and exercise applicable choices in the Your Privacy Choices section below.

Privacy at a Glance

• We collect information you provide, such as your name, telephone number, email address, service location, property or project information, and communications.
• We automatically collect device, browser, usage, approximate-location, advertising, and attribution information when you use the Site.
• We use information to operate the Site, respond to requests, route calls or forms, connect consumers with independent providers, communicate, prevent fraud, improve performance, and measure advertising and call outcomes.
• We may disclose request information to independent home-service providers, referral networks, and vendors. CPK may receive compensation for qualified calls, requests, appointments, transactions, advertising, or other events.
• Some disclosures of lead information or online identifiers may be treated as a “sale,” “sharing,” or targeted advertising under certain state privacy laws, even when no money is paid specifically for the personal information. You may use the Your Privacy Choices / Do Not Sell or Share My Personal Information link in the Site footer to go to the Your Privacy Choices section of this Policy, or email info@cpkhome.com.
• We do not knowingly sell or share personal information of consumers under 16 years old, and the Site is not directed to children.
• We do not sell mobile numbers or text-message opt-in records for third parties’ unrelated marketing.

This summary is an overview. The sections below provide the complete policy.

1. Scope and Roles

This Privacy Policy covers personal information CPK controls through the Site, including information collected online, through telephone calls and call-tracking numbers, by text or email, through customer-service communications, and from vendors or referral partners that support the Site.

For purposes of applicable privacy law, CPK may be called a “business,” “controller,” or similar term. Vendors that process information only for CPK may be called “service providers,” “contractors,” or “processors.” Independent home-service providers, marketplaces, referral networks, advertising companies, and other third parties may determine their own purposes and means of processing and may be separate businesses or controllers.

This Privacy Policy does not govern:

• an independent provider’s collection, use, or disclosure after it receives or independently collects your information;
• a third-party website, app, financing product, insurer, utility, manufacturer, social network, or service linked from the Site;
• personal information processed solely in an employment or workforce context, except where applicable law requires otherwise; or
• deidentified or aggregated information that applicable law does not treat as personal information, provided we maintain and use it in deidentified form as required by law.

2. Personal Information We Collect

The exact information depends on how you interact with us, the interaction or feature used, the service requested, the devices and settings involved, and the vendors supporting the interaction.

2.1 Categories of Personal Information

The categories below describe the personal information we may collect, along with representative examples and typical sources. The examples are illustrative and do not mean that we collect every item in every interaction.

Identifiers and contact information. Examples include name, telephone number, email address, mailing or service address, city, state, ZIP code, account or request identifier, online identifier, and IP address. Typical sources include you, your device, referral partners, and communications vendors.

Service-request and property information. Examples include requested service, problem description, urgency, project type, property type, ownership or occupancy information, preferred timing, service location, answers to form or quiz questions, and provider preference. Typical sources include you, a person acting for you, call or form records, and referral partners.

Commercial and transaction information. Examples include request history, provider connection, call outcome, appointment or conversion status, quote or purchase indicators reported to us, campaign source, and referral-compensation events. Typical sources include you, providers, call networks, CRM systems, analytics vendors, and attribution vendors.

Internet, device, and network activity. Examples include browser type, device type, operating system, cookie or advertising identifiers, pages viewed, links or buttons selected, referring and exit pages, timestamps, session activity, form interactions, call-click events, and error logs. Typical sources include your browser or device and cookies, pixels, scripts, analytics vendors, and security vendors.

Geolocation information. Examples include approximate location derived from an IP address, city, ZIP code, service area, and the precise service location if you submit a street address or permit device location. Typical sources include you, device settings, and IP-derived location providers.

Communications and audio or electronic information. Examples include call recordings or transcripts, voicemail, text messages, emails, chat or support content, communication preferences, and opt-in and opt-out records. Typical sources include you and call-routing, recording, email, SMS, and customer-service vendors.

User-submitted content. Examples include photographs, videos, documents, project descriptions, reviews, feedback, and other materials you choose to provide. Typical sources include you or a person acting for you.

Professional or business information. Examples include company name, job title, business contact information, service categories, service area, and licensing or insurance information if you contact us as a provider or business representative. Typical sources include you, your employer, public records, and business-data providers.

Inferences and preferences. Examples include likely service category, service-area match, communication preference, request priority, advertising attribution, or inferred interest based on Site activity. Typical sources include the information described above and analytics or routing systems.

Sensitive personal information or sensitive data. Examples may include a precise service location, account credentials if an account feature is offered, and the contents of private communications; other information may be sensitive under a particular state law. The primary source is you.

We do not need and do not intentionally request Social Security numbers, government identification numbers, financial-account credentials, payment-card information, medical records, biometric identifiers, race or ethnicity, religious beliefs, sexual orientation, citizenship or immigration status, or other highly sensitive information for an ordinary home-service request. Please do not include such information in open-text fields, photographs, documents, calls, texts, or emails unless we specifically request it for a lawful and disclosed purpose.

2.2 Information You Provide Directly

We collect information when you:

• submit a quote, availability, service, contact, or help request;
• call a telephone number displayed on the Site;
• request or agree to receive a text message, email, or callback;
• answer a multi-step form, quiz, or service-selection flow;
• send photographs, project details, feedback, or support requests;
• exercise a privacy right or communication preference;
• participate in a survey, promotion, review, or testimonial process; or
• contact us as a provider, advertiser, vendor, or business representative.

If you provide information about another person, you represent that you are authorized to do so and to request the communication or service connection.

2.3 Information Collected Automatically

When you use the Site, we and our vendors may automatically collect information through cookies, pixels, tags, software development tools, local storage, call-tracking technology, server logs, and similar technologies. This information may be linked to a browser, device, session, advertising identifier, telephone call, request, or other record.

Automatic collection may include:

• IP address and approximate location;
• browser, device, operating system, screen, language, and network information;
• pages viewed, content interactions, navigation path, referral source, and timestamps;
• form starts, field interactions, submissions, validation errors, and abandonment events;
• telephone-number clicks, call source, call time, duration, routing, recording status, and outcome;
• campaign, affiliate, keyword, ad, UTM, click, and conversion identifiers;
• cookie consent and privacy-choice signals; and
• security, bot-detection, rate-limit, and fraud indicators.

2.4 Information From Other Sources

We may receive personal information from:

• independent home-service providers and referral networks, including whether a call connected, an appointment was scheduled, or a request qualified under agreed criteria;
• advertising, analytics, call-routing, attribution, identity-resolution, fraud-prevention, and communications vendors;
• affiliates, publishers, and marketing partners that refer a consumer to the Site;
• public records, licensing databases, professional directories, and business information sources;
• social networks or third-party services when you interact with our content or choose to share information; and
• parties involved in a corporate transaction, legal process, investigation, or dispute.

3. How We Use Personal Information

We may use personal information for the following business and commercial purposes:

3.1 Provide and Operate the Platform

• display, host, maintain, and secure the Site;
• receive and validate forms and telephone calls;
• determine the apparent service category and geographic area;
• route, transfer, or otherwise connect a request to an independent provider, referral network, call center, or marketplace;
• communicate about an active request;
• provide support and troubleshoot technical issues;
• maintain request, consent, and communication records; and
• administer privacy choices and opt-outs.

3.2 Match and Route Requests

We may evaluate information such as service type, location, property type, urgency, time of day, provider capacity, stated service area, call-answering performance, campaign requirements, source restrictions, and commercial arrangements to determine whether and where to route a request.

Routing is not a decision that produces legal or similarly significant effects concerning employment, housing, lending, insurance eligibility, education, criminal justice, or access to essential government benefits. We do not use personal information to make such decisions without providing any notice, consent, assessment, or opt-out required by applicable law.

3.3 Communicate

We may use contact information to:

• confirm receipt of a request;
• ask questions needed to route or understand the request;
• facilitate a callback, transfer, appointment, or connection;
• provide customer-care or service-status messages;
• request feedback or investigate a complaint;
• send administrative, legal, security, or privacy notices; and
• send marketing communications when permitted and consistent with the consent or choice provided.

3.4 Analytics, Attribution, and Improvement

We may use information to understand Site traffic and performance; measure calls, form submissions, appointments, and other outcomes; attribute activity to a publisher, ad, campaign, keyword, or source; calculate or verify compensation; test Site layouts and communications; improve content and routing; and develop aggregate trends.

3.5 Advertising and Marketing

We may use information to deliver, measure, limit, and improve advertising; create audiences; understand whether an ad resulted in the Site visit, call, or request; avoid repetitive ads; and conduct targeted advertising as permitted by law and your choices.

3.6 Safety, Security, Fraud Prevention, and Legal Compliance

We may use information to:

• authenticate requests and detect bots, spam, duplicate or fraudulent leads, malicious activity, and unauthorized access;
• protect consumers, providers, CPK, and others;
• enforce our Terms of Service and contracts;
• investigate complaints and resolve disputes;
• document consent and honor communication preferences;
• comply with subpoenas, court orders, regulatory requests, recordkeeping duties, and applicable law;
• establish, exercise, or defend legal claims; and
• conduct audits, due diligence, and corporate transactions.

3.7 Deidentified and Aggregated Information

We may create and use deidentified or aggregated information for analytics, reporting, forecasting, service-area planning, content development, quality measurement, and other lawful purposes. We will not attempt to reidentify information that applicable law requires us to maintain as deidentified.

4. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for the purposes described below.

4.1 Independent Home-Service Providers and Referral Networks

When you request a provider connection, we may disclose contact, location, service-request, communication, and related information to one or more independent providers or to a referral network, marketplace, call center, or other intermediary that identifies or connects an available provider.

These recipients use the information to respond, evaluate the request, provide a quote, schedule an appointment, deliver service, measure outcomes, prevent fraud, and administer their own operations. They may be separate businesses or controllers with their own privacy policies.

Where a consumer intentionally selects or asks to interact with a particular provider, a disclosure to that provider may be treated under applicable law as a consumer-directed disclosure rather than a sale. Other compensated lead transfers may be treated as a sale under certain state laws. See Section 5.

4.2 Service Providers, Contractors, and Processors

We may disclose information to vendors that perform services for us, including:

• website hosting, cloud storage, database, content delivery, and security;
• form processing, CRM, customer support, and workflow automation;
• call tracking, routing, recording, transcription, analytics, and quality assurance;
• telephone, SMS, email, and communication delivery;
• analytics, attribution, reporting, testing, and fraud detection;
• consent management and privacy-request processing;
• professional services such as legal, accounting, insurance, compliance, and auditing; and
• data deletion, archiving, backup, and disaster recovery.

We seek to contractually restrict these recipients to processing information for specified purposes and to require appropriate confidentiality, security, deletion, and compliance obligations where required.

4.3 Advertising and Analytics Partners

We may permit advertising, analytics, and social-media partners to collect or receive internet activity, identifiers, approximate location, campaign data, and inferences through cookies, pixels, tags, APIs, or similar technology. They may use the information to measure ads, provide attribution, prevent fraud, create or match audiences, and deliver targeted advertising.

Some of these disclosures may be considered a sale, sharing, or targeted advertising under applicable law. See Sections 5 and 6.

4.4 Affiliates and Business Partners

We may disclose information among entities under common control, future affiliated entities, publishers, advertisers, and business partners for operations, referral administration, analytics, security, legal compliance, and other purposes consistent with this Privacy Policy.

4.5 Legal, Safety, and Compliance Recipients

We may disclose information to government agencies, regulators, law enforcement, courts, litigants, insurers, attorneys, auditors, or other parties when we reasonably believe disclosure is necessary to comply with law or legal process; protect rights, safety, property, or security; investigate fraud or misuse; enforce agreements; or establish, exercise, or defend claims.

4.6 Corporate Transactions

We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, bankruptcy, receivership, sale of assets, corporate restructuring, or transfer of all or part of the Platform. A recipient will be required to handle personal information consistently with applicable law and any notice or choice that continues to apply.

4.7 At Your Direction or With Your Consent

We may disclose information to a recipient you select, identify, authorize, or direct us to contact, or for another purpose disclosed when you provide the information.

5. Sale, Sharing, Targeted Advertising, and Lead Transfers

State privacy laws define “sale,” “sharing,” and “targeted advertising” differently. A disclosure may fall within one of these definitions even when CPK does not sell a traditional list of names and even when compensation is based on a qualified call, request, appointment, transaction, or advertising event rather than on the personal information itself.

5.1 Lead and Request Disclosures

When CPK receives compensation for transmitting a consumer’s contact and service-request information to an independent provider, marketplace, or referral network, the disclosure may be considered a sale under some laws. Categories potentially involved include:

• identifiers and contact information;
• service-request and property information;
• commercial or request history;
• approximate or submitted service location;
• communications information reasonably necessary to respond; and
• related inferences or attribution data.

An opt-out of sale does not prevent a disclosure that applicable law permits because it is necessary to fulfill a transaction or specific request you make, or because you intentionally direct us to disclose information to a provider you select or ask to contact you. We will structure request flows and disclosures to honor applicable opt-out rights while still allowing consumer-directed connections.

5.2 Online Advertising Disclosures

Advertising cookies, pixels, device identifiers, internet activity, approximate location, and audience data disclosed for cross-context behavioral or targeted advertising may be considered sale or sharing. You can opt out through the Your Privacy Choices section below, by emailing info@cpkhome.com, or through a legally recognized browser-based opt-out preference signal as described below.

5.3 Additional Limits on Our Practices

• We do not knowingly sell or share personal information of consumers under 16 years old.
• We do not sell account credentials or use them for advertising.
• We do not use sensitive personal information to infer characteristics about you, and we do not use precise device-derived geolocation or the contents of private communications for targeted advertising.
• A submitted service address, problem description, photograph, message, or other request detail may be disclosed to an independent provider or referral network to fulfill the request, and CPK may receive compensation. Depending on the applicable law and how the disclosure is structured, that transfer may be treated as a sale. We honor applicable opt-out rights, subject to exceptions for disclosures you intentionally direct or that are reasonably necessary to fulfill your request.
• We do not sell or disclose mobile numbers or SMS opt-in records for third parties’ unrelated marketing.

5.4 How to Opt Out

Use the Your Privacy Choices / Do Not Sell or Share My Personal Information link in the Site footer to return to this section, use the on-page browser or device opt-out control when displayed, or email info@cpkhome.com with the subject “Privacy Opt-Out.” You may also use the methods in Section 10.

Where required, we process recognized opt-out preference signals, including the Global Privacy Control (“GPC”), as a request to opt out of sale, sharing, and targeted advertising for the browser or device sending the signal and any profile we can reasonably associate with it. A browser-level signal may not identify you for offline records; the request method in Section 10 allows you to provide information needed to apply the request more broadly.

If the Site offers cookie controls, those controls may allow granular technology choices, but the Your Privacy Choices section governs legal opt-outs concerning sale, sharing, and targeted advertising. We do not require you to create an account to submit an opt-out request and will not ask for information beyond what is reasonably necessary to process it.

6. Cookies and Similar Technologies

We and our vendors use cookies and similar technologies for the following categories of purposes:

6.1 Strictly Necessary

These technologies support core Site functions, security, network management, fraud prevention, load balancing, form submission, privacy preferences, and call or request routing. Disabling them may prevent the Site from functioning properly.

6.2 Functional

These technologies remember selections, language, location, form progress, and other preferences and may support enhanced Site features.

6.3 Analytics and Performance

These technologies help measure traffic, page performance, errors, navigation, form interactions, call-click events, and aggregate use so we can improve the Site.

6.4 Advertising and Attribution

These technologies help attribute visits, calls, and requests to campaigns or publishers; limit and measure ads; create or match audiences; and support targeted advertising.

You can manage non-essential technologies through any controls offered on the Site, through browser settings, and through the Your Privacy Choices section. Blocking cookies may not block all technologies, and choices may need to be repeated for each browser or device unless we can associate them with you.

Because there is no uniform industry standard for every browser Do Not Track signal, the Site may not respond to ordinary Do Not Track settings. We do honor legally recognized opt-out preference signals such as GPC where required.

7. Calls, Call Tracking, Recording, Text Messages, and Email

7.1 Call Tracking and Routing

Telephone numbers displayed on the Site may be tracking or routing numbers. We and our call-technology vendors may collect the calling number, dialed number, date and time, duration, routing path, referral source, campaign information, call disposition, and whether the call connected or qualified under applicable criteria.

7.2 Call Recording and Transcription

Calls may be monitored, recorded, or transcribed for routing, customer service, quality assurance, training, fraud prevention, analytics, attribution, consent documentation, dispute resolution, and legal compliance. Where law requires all-party consent or another specific notice, we intend to provide an audible or other legally sufficient notice before recording.

7.3 Text Messages

When you opt in or request text communication, we collect the mobile number, message content, time and delivery information, program or brand, consent disclosure, consent method, opt-in timestamp, form or page source, and opt-out status.

Message frequency varies and message and data rates may apply. Reply STOP to opt out of CPK text messages and HELP for help. We may retain a suppression record after an opt-out so we can avoid sending future messages.

Mobile numbers and SMS consent records are used to provide requested communications and may be disclosed to vendors that operate messaging for us and to a specifically identified or consumer-selected provider as needed to fulfill the request or document consent. We do not sell or disclose mobile numbers or SMS opt-in records to third parties for unrelated marketing.

7.4 Email

You may unsubscribe from marketing emails using the unsubscribe link in the message. We may continue to send non-marketing communications concerning an active request, security, legal notices, or privacy requests.

7.5 Independent Providers

After information is transmitted to an independent provider, that provider controls its own calls, texts, and emails. Send opt-out requests directly to the provider as well. Where required by law or reasonably feasible, we will notify a recipient of an opt-out, deletion request, or other preference that applies to information we transmitted.

8. Data Retention

We retain personal information only for as long as reasonably necessary and proportionate for the purposes described in this Privacy Policy. The retention period depends on the type of information, the interaction involved, whether a request or provider connection remains active, contractual and accounting needs, consent and suppression-record requirements, security and fraud-prevention needs, applicable limitation periods, and legal obligations.

For example, we may retain request and routing records long enough to administer the connection, document the disclosure and any consent, respond to complaints, reconcile compensation, and establish or defend legal claims. We may retain opt-out and do-not-contact records for as long as needed to honor the preference. Call recordings or transcripts, when created, are retained for a period reasonably necessary for the stated purpose and may be kept longer when subject to a complaint, investigation, legal hold, or legal obligation. Website and advertising-attribution data is retained according to operational needs and applicable settings, subject to privacy choices and legal requirements.

When information is no longer reasonably needed, we delete, deidentify, aggregate, or securely archive it, subject to backup, fraud-prevention, legal-hold, and technical limitations. Information in a backup may remain until the backup is overwritten through the ordinary backup cycle, but it will not be restored to active use except for recovery, security, or legal purposes.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information based on its nature and the risks involved. Measures may include access controls, authentication, encryption in transit, vendor review, logging, monitoring, backups, least-privilege practices, incident response, and employee or contractor confidentiality obligations.

No website, telephone system, transmission, storage system, or security program is completely secure. We cannot guarantee that information will never be accessed, lost, altered, or disclosed without authorization. You should use caution when sending information through open-text fields, email, text, photographs, or recorded calls.

If we determine that a security incident requires notice under applicable law, we will provide notice in the manner and within the time required.

10. Your Privacy Choices and U.S. State Privacy Rights

Depending on your state of residence and whether the applicable law covers CPK or the particular processing, you may have the right to:

• confirm whether we process your personal information;
• access or obtain a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain personal information in a portable format;
• opt out of sale, sharing, or targeted advertising;
• opt out of certain profiling in furtherance of decisions producing legal or similarly significant effects;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent for processing based on consent;
• appeal a denial of a privacy request; and
• receive equal service and not be discriminated against for exercising a privacy right.

These rights are subject to definitions, scope, exceptions, verification, and limitations in applicable law. For example, we may retain information needed to provide a requested service, protect security, prevent fraud, maintain an opt-out, complete a transaction, comply with law, or establish or defend legal claims.

10.1 How to Submit a Request

To submit an access, correction, deletion, portability, appeal, sale/share opt-out, targeted-advertising opt-out, or other privacy request, email info@cpkhome.com with the subject “Privacy Request – 3D Roofs.” Please state the right you want to exercise, the brand involved, and the information reasonably needed to locate the relevant records. For a sale, sharing, or targeted-advertising opt-out, you may also use a recognized opt-out preference signal as described in Section 5.4.

The Site footer includes a clear “Your Privacy Choices / Do Not Sell or Share My Personal Information” link to this section. You do not need to create an account to submit an opt-out request.

10.2 Verification

We will verify requests to the degree required by law and proportionate to the sensitivity of the information requested. Verification may include matching information you provide with our records, confirming control of an email address or telephone number, asking questions about a request, or requesting a signed declaration. We will not request more information than reasonably necessary. Information collected for verification will be used only for verification, security, fraud prevention, and compliance.

We may deny or limit a request if we cannot reasonably verify it, it is fraudulent or abusive, an exception applies, or the law does not require us to honor it. We will explain a denial as required.

10.3 Authorized Agents

Where permitted, an authorized agent may submit a request for you. We may require proof of the agent’s authority and may ask you to verify your identity or directly confirm permission. An opt-out preference signal does not require separate written authorization where applicable law treats the signal itself as the consumer’s request.

10.4 Appeals

If we deny a request and your state provides an appeal right, you may appeal by emailing info@cpkhome.com with the subject “Privacy Appeal” and explaining why you believe the decision should be reconsidered. We will respond within the period required by applicable law. If an appeal is denied, we will provide information about any right to contact your state attorney general or another regulator.

10.5 Timing and Fees

We will respond within the period required by applicable law, generally within 45 days after receiving a verifiable request, subject to any lawful extension. We ordinarily do not charge a fee. We may charge a reasonable fee or decline repetitive, manifestly unfounded, or excessive requests where applicable law permits.

11. California Privacy Disclosures

This section supplements the rest of the Privacy Policy for California residents and is intended to provide disclosures under the California Consumer Privacy Act, as amended (“CCPA”). Terms defined by the CCPA have the same meaning in this section.

11.1 Notice at Collection

The Notice at Collection above describes the categories of personal information collected, purposes, categories of recipients, whether certain disclosures may be treated as sale or sharing, and the criteria used to determine retention. Additional details appear in Sections 2, 3, 5, and 8.

11.2 Categories Collected, Disclosed, Sold, or Shared in the Preceding 12 Months

The categories below reflect personal information we may have collected and disclosed during the preceding 12 months. Actual practices depend on the interaction, the feature used, and the technologies enabled.

Identifiers. Examples collected include name, telephone number, email address, address, IP address, and online or request identifiers. Business-purpose recipients may include providers and referral networks and hosting, CRM, communications, analytics, security, legal, and other vendors. Sale or sharing recipients may include providers or referral networks for compensated lead transfers and advertising or analytics partners through online technology.

California customer-record information. Examples collected include name, address, telephone number, and email address. Business-purpose recipients may include providers and referral networks and operational or professional-service vendors. Sale recipients may include providers or referral networks for compensated lead transfers.

Commercial information. Examples collected include service requests, request history, provider connections, and appointment or conversion indicators. Business-purpose recipients may include providers and referral networks and CRM, analytics, attribution, legal, and audit vendors. Sale or sharing recipients may include providers or referral networks and advertising or analytics partners where applicable.

Internet or other electronic-network activity. Examples collected include browsing, page and form interactions, referral source, and cookie or device identifiers. Business-purpose recipients may include hosting, analytics, security, testing, attribution, and advertising vendors. Sharing recipients may include advertising and analytics partners for cross-context behavioral advertising or attribution.

Geolocation data. Examples collected include approximate IP-derived location and a submitted service location. Business-purpose recipients may include providers and referral networks and routing, mapping, security, and analytics vendors. Approximate location may be shared with advertising partners, and a submitted location may be sold as part of a compensated lead transfer.

Audio, electronic, visual, or similar information. Examples collected include call recordings or transcripts, messages, emails, and submitted photographs. Business-purpose recipients may include call, communications, customer-service, legal, security, and selected-provider recipients. This category is not ordinarily sold or shared for cross-context behavioral advertising.

Professional or employment-related information. Examples collected include business contact information and provider role or company information. Business-purpose recipients may include business, compliance, legal, and operational vendors. This category is not ordinarily sold or shared.

Inferences. Examples collected include service interest, likely service-area match, and communication or advertising preferences. Business-purpose recipients may include routing, analytics, advertising, and selected-provider recipients. Sale or sharing recipients may include advertising partners and providers or referral networks where the inference is part of a compensated lead.

Sensitive personal information. Examples collected may include precise device-derived geolocation if you enable it, account credentials if an account feature is offered, and the contents of private communications. Business-purpose recipients may include selected providers at your direction and communications, security, and operational vendors. We do not use these categories to infer characteristics or for cross-context behavioral advertising. A submitted service address and request description are addressed in the identifiers, geolocation, and communications categories above and may be transferred as part of compensated request routing as described in Section 5.

We do not intentionally collect protected classification characteristics, biometric information, education information, or highly sensitive government, financial, or medical information through ordinary consumer service-request flows.

11.3 Business and Commercial Purposes

The business and commercial purposes for collection, use, disclosure, sale, or sharing are described in Sections 3 through 7. They include providing and routing requests, communicating, analytics, attribution, advertising, security, fraud prevention, legal compliance, and corporate transactions.

11.4 California Rights

California residents may have the right to know, access, correct, delete, and obtain information about collection, disclosure, sale, and sharing; opt out of sale or sharing; limit use or disclosure of sensitive personal information when it is used beyond permitted purposes; and receive non-discriminatory treatment.

Submit requests using Section 10. To opt out, use the footer link to /privacy#your-privacy-choices, email info@cpkhome.com, or use a recognized opt-out preference signal. We will provide a way to confirm that an opt-out has been processed.

We use sensitive personal information only for purposes reasonably necessary to provide requested services, protect security, prevent fraud, process communications, and comply with law. We do not use it to infer characteristics or for purposes that require a separate Limit the Use of My Sensitive Personal Information link. If our practices change, we will provide the required notice and choice.

11.5 No Financial Incentives

We do not currently offer a financial incentive or price or service difference in exchange for retaining, selling, or sharing personal information. If we offer one in the future, we will provide a separate notice describing the material terms and obtain any required opt-in consent.

11.6 Consumers Under 16

We do not knowingly sell or share the personal information of consumers under 16 years old and do not have actual knowledge that we do so.

11.7 California “Shine the Light”

California Civil Code Section 1798.83 may allow certain residents to request information about disclosures of personal information to third parties for their own direct-marketing purposes. Send a request to info@cpkhome.com with the subject “California Shine the Light Request.” This law has separate definitions and exceptions from the CCPA.

12. Nevada and Other State-Specific Requests

Nevada residents may submit a request to opt out of a covered sale under Nevada law by using the methods in Section 10. Even when a state law defines sale more narrowly than this Privacy Policy, we will process applicable requests consistent with that law.

Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable comprehensive privacy laws may use the same request methods. The rights and appeal process available to a particular resident depend on the law in effect and whether it applies to CPK or the processing at issue.

13. Children’s Privacy

The Site is intended for adults seeking home-service information and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. We also do not knowingly sell or share personal information of anyone under 16.

If you believe a child provided personal information, contact info@cpkhome.com. We will investigate and delete information as required. A parent or guardian should not submit a child’s contact information as the callback number for a home-service request.

14. Third-Party Websites and Independent Providers

The Site may link to or integrate with third parties. After you leave the Site or intentionally engage an independent provider, that party’s terms and privacy policy govern its processing.

CPK does not control a provider’s privacy, security, communications, recording, payment, or retention practices. A request concerning data held by a provider may need to be directed to that provider. Where required or reasonably feasible, CPK may forward the request, but the provider remains responsible under applicable law.

15. International Use

The Site is directed to U.S. users and home-service requests. Access from another country may result in transfer to and processing in the United States, where privacy laws may differ. We do not represent that the Site is appropriate outside the United States.

16. Changes to This Privacy Policy

We may update this Privacy Policy as law, technology, vendors, practices, services, or operations change. The “Last Updated” date identifies the latest revision.

If a change materially affects how we use or disclose personal information, we will provide notice and obtain consent where required. We will not use previously collected information for a materially different, unrelated, or incompatible purpose without the notice or consent required by applicable law.

17. Contact Us

CPK Home Services, Inc.
Attn: Privacy Department
Email: info@cpkhome.com

For service help, use the contact method displayed on the applicable brand Site. Do not send emergencies or unnecessary sensitive information to a legal or privacy inbox.