California & State Privacy Notice

Scope and Application

This California & State Privacy Notice supplements our Privacy Policy and applies to residents of California, Virginia, Maryland, and other U.S. states whose comprehensive privacy laws grant similar rights. It explains the categories of personal information we collect, how we use it, with whom we share it, and the rights you have under your state’s law.

If your state of residence is not specifically named, you may still have rights similar to those described here. Contact us to confirm what applies.

Do Not Sell or Share My Information & Limit Sensitive PI Use

If at any point in the future our practices change, we will update this notice and provide a “Do Not Sell or Share My Personal Information” opt-out link prior to any such sharing or sale.

Categories of Personal Information Collected

In the past twelve months, DreamHome has collected the following categories of personal information from California residents (and similarly from residents of other states):

• Identifiers: name, address, email address, phone number, IP address
• Commercial information: records of services requested, scheduled, or completed; quotes provided
• Internet or other electronic network activity: browsing history on our website, interactions with our advertisements and emails
• Geolocation data: approximate location based on IP address (city/region level)
• Audio and electronic information: recordings of customer-service calls (with notice)
• Professional or employment-related information: only if you apply for a position with us
• Inferences: drawn from the above to identify service interest (e.g., “interested in roof replacement”)

We do not knowingly collect biometric information, genetic information, precise geolocation (within a 1,850-foot radius), racial or ethnic origin, religious beliefs, sexual orientation, citizenship or immigration status, contents of mail/email/text not addressed to us, or other sensitive categories unless you voluntarily provide them and they are relevant to your request.

Sources of Personal Information

Our sources of personal information about you include:

• Directly from you: contact forms, phone calls, text messages, emails, in-person consultations, signed agreements
• From your device: cookies, log files, and analytics scripts when you visit dhremodeling.com
• From service providers: CallRail (call tracking), HubSpot (CRM), Google Analytics
• From referrals: if a current customer refers you, we may receive your name and contact information from them with your permission
• From public sources: property records and address verification (used only to confirm service-area eligibility and dispatch)

Business and Commercial Purposes for Collection

We use the personal information we collect for the following purposes:

• To respond to your inquiries and schedule inspections, estimates, and service visits
• To communicate with you about your project, your contracts, and ongoing service
• To process payments and maintain records of completed work for warranty and insurance purposes
• To improve our website, services, and customer experience
• To detect and prevent fraud, security incidents, and illegal activity
• To comply with legal obligations and respond to lawful requests from authorities
• To send service-related communications (e.g., scheduling reminders, project updates)
• To send marketing communications you have opted into, and only those

Categories of Recipients

We share personal information with the following categories of recipients, and only as needed for the purposes listed above:

• Service providers and processors: hosting (Nexcess, Cloudflare), CRM (HubSpot), call tracking (CallRail), email (Mailgun), forms (HubSpot Forms, Fluent Forms), analytics (Google), payment processing
• Subcontractors and crew: production crew members and subcontractors performing work at your property (limited to information needed to do the job)
• Manufacturers and warranty providers: Owens Corning, Roof Maxx, ProVia, Cedar Ridge, etc., when registering manufacturer warranties on your behalf
• Legal and government recipients: when required by law, subpoena, or to protect our rights
• Successors in interest: in the event of a business sale, merger, or acquisition (with continued protection of your information)

Sensitive Personal Information

We do not collect sensitive personal information (as defined under CPRA) for the purpose of inferring characteristics about you. The categories specified above represent the personal information we collect; we do not use any of it for sensitive-PI purposes such as profiling based on race, religion, sexual orientation, immigration status, or precise geolocation.

Retention Periods

We retain personal information only as long as needed for the purpose for which it was collected. Typical retention periods:

• Lead and inquiry data: 3 years from last interaction
• Contract and project records: 7 years from project completion (to support warranty claims)
• Marketing-consent records: until you opt out, then 1 year for compliance evidence
• Web-analytics data: 14 months (default Google Analytics retention)
• Call recordings: 90 days for routine calls; longer if needed for a documented dispute or warranty case

Retention may be extended where required by law (e.g., insurance regulations, tax records, ongoing litigation).

Your California Privacy Rights (and Comparable State Rights)

California residents are entitled to the following privacy rights under CCPA/CPRA:

• Right to know: request the categories and specific pieces of personal information we have collected about you, the sources, purposes, and recipients
• Right to delete: request that we delete personal information we have collected (subject to legal exceptions, e.g., records we must retain for warranty or tax purposes)
• Right to correct: request that we correct inaccurate personal information we maintain about you
• Right to opt out of sale/share: request that we not sell or share your personal information (we do not engage in these activities, but you may exercise this right preemptively)
• Right to limit use of sensitive PI: request that we limit our use of your sensitive personal information to permitted purposes
• Right to non-discrimination: we will not deny you services, charge different prices, or provide a different level of service because you exercised your privacy rights

If you reside in Virginia, Maryland, or another state with a comprehensive privacy law, you have similar rights. Contact us to exercise them.

How to Exercise Your Rights

You can submit a verifiable request to exercise any of the rights above by:

• Email: info@dhremodeling.com with subject line “Privacy Rights Request”
• Phone: Springfield (703) 650-9067 or Hanover (410) 324-7277
• Mail: Either office address listed at the bottom of this page

To process your request we will need to verify your identity. See Verification Procedures below.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. The agent must provide written authorization signed by you, and we may require you to verify your identity directly with us before fulfilling the request. Authorized-agent requests for known-customer accounts will be acknowledged within ten business days of receipt.

Verification Procedures

Before fulfilling a privacy rights request, we must verify the identity of the person making the request to a reasonable degree of certainty. Verification typically involves matching at least two pieces of personal information you provide in your request with information we already maintain (such as your name, address, phone number, and email).

For sensitive requests (deletion, sale/share opt-out), we may require additional verification, including a signed declaration under penalty of perjury that you are the consumer whose information is the subject of the request.

Response Timeframes

We will confirm receipt of your verifiable consumer request within ten business days. We will respond to your request within forty-five calendar days of receipt, unless we need additional time, in which case we will notify you of the extension and the reason. Total response time will not exceed ninety calendar days.

Non-Discrimination

Exercising your privacy rights will not change how we treat you. Specifically, we will not:

• Deny you services
• Charge you different prices or rates, including through granting discounts or other benefits or imposing penalties
• Provide you a different level or quality of services
• Suggest that you may receive a different price or rate or a different level or quality of services

Contact Us About Privacy

For questions about this notice, to exercise your rights, or to file a complaint about our privacy practices, contact DreamHome Remodeling at one of our offices below. We acknowledge privacy inquiries within ten business days and aim to resolve them within forty-five days.