Legal & Privacy

Privacy Policy

How we handle the personal information you share with Paint Works Pro — at every step, from first inquiry to final walkthrough.

Effective: August 6, 2026

Introduction

This Privacy Policy describes how Paint Works Pro ("we," "our," or "us") collects, uses, and protects personal information from visitors of paintworks.pro. It applies to every form on our site, every page you visit, and every communication we have with you as a current or prospective customer.

Paint Works Pro is the sole operator of the personal information described here. We store our customer data in a hosted PostgreSQL database (Neon) and process payment transactions through Stripe. We do not sell, rent, trade, or otherwise share your personal information with third-party marketers.

If you have any questions about this policy or how your information is handled, email us at privacy@paintworks.pro or call (619) 715-5718.

Information We Collect

Below is a complete list of personal information we collect, organized by the form or feature that gathers it and where each field is actually stored on our server.

Contact form submissions — /contact

FieldStored inHow it's used
Namecontact_submissions table (db/contact-submissions.js)To address you in replies and owner notifications.
Emailcontact_submissions tableTo reply to your message and send a visitor confirmation copy.
Phone (optional)contact_submissions tableOnly used if you request a phone call back.
Messagecontact_submissions tableStored verbatim so we can address every inquiry individually.

Quote / Photo-upload form — /get-a-quote

FieldStored inHow it's used
Namequote_requests table (db/quote-requests.js)To address correspondence and scheduling.
Phonequote_requests tableSchedule walkthroughs and confirm appointments.
Emailquote_requests tableSend the written quote and follow-up correspondence.
Addressquote_requests tableTravel-distance estimation and service-area coverage check.
Square footagequote_requests tableQuote scoping.
Project notesquote_requests tableEstimator briefing.
Uploaded photosStored on our server from /api/quote-uploadEstimator review and accurate pricing. Photos are referenced from the matching quote_requests row.

Free-estimate form — /estimate

FieldStored inHow it's used
Nameleads table (db/leads.js)Personal follow-up and on-site walkthrough greeting.
Emailleads tableSend the free-estimate email and quote response.
Phoneleads tableSchedule walkthroughs and confirm appointments.
Addressleads tableTravel-distance estimation and service-area confirmation.
Square footageleads tablePreliminary scope sizing.
Service typeleads tableRoutes the lead to the right estimator specialty.
Timelineleads tableScheduling priority.
Urgencyleads tableFlags hot leads for same-day outreach.
Project descriptionleads tableEstimator briefing.
utm_source / utm_medium / utm_campaignleads tableAuto-attributed from the URL; used only for internal marketing-channel reporting. Never shared with third parties.

Google review-request helper — /request-a-review

The /request-a-review page is owner-only (noindex) and does not submit a form. Clicking the "Write a Google review" button on that page is a deep link to Google's review page for our business profile; no information is sent to us. The helper contains three pre-written message blurb templates (short SMS, longer SMS, email subject + body) you can copy and send to a customer yourself.

Aggregate owner-only metrics

For internal owner dashboards only, we log aggregate review counts and dates in the logged_reviews and review_request_log tables. These rows contain no reviewer personal information — just counts and timestamps used to benchmark growth.

Automatically collected

Every non-API, non-asset page request is logged server-side in the page_views table (db/page-views.js) for traffic analytics. We record only the page path, the URL that referred you, your browser's user-agent string, and a one-way SHA-256 hash of your IP address. The raw IP is never stored, and we don't use the hashed IP for marketing, retargeting, or any user-level analysis — only for coarse, aggregate traffic reports.

How We Use Information

We do not sell, rent, trade, or share personal information with third-party marketers. Period.

A small number of carefully selected service providers handle data on our behalf, and only for the specific services they perform:

None of these providers make autonomous decisions affecting your personal information.

Cookies and Tracking

We use a small number of first-party cookies and similar storage for analytics and form functionality. The site does not use advertising cookies and does not share data with advertising networks for cross-site behavioral targeting.

All cookies set by this site are first-party, functional, or analytics. We don't run any advertising or cross-site re-targeting cookies. You can block, delete, or limit cookies through your browser settings without losing access to the site.

Data Retention

Data Security

We use reasonable technical and organizational safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. Specifically:

No method of transmission over the internet, however, is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Children's Privacy

This site is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please email privacy@paintworks.pro and we will delete it promptly.

Changes to this Policy

We may update this Privacy Policy from time to time. The most recent revision date is shown at the top of the page. Substantive changes — anything that expands what we collect, how we use it, or who we share it with — will be reflected here. Continued use of the site after a change is posted indicates acceptance of the revised policy.

Your California Privacy Rights (CCPA)

The California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.) grants California residents specific rights over their personal information. This section enumerates those rights and tells you how to exercise them.

Right to Know / Access

You may request that we disclose the categories of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting the information, and the specific pieces of personal information we have collected about you in the prior 12 months.

Right to Delete

You may request that we delete any personal information we have collected about you, subject to the usual statutory exceptions — for example, records needed to complete a transaction you have already entered into, comply with a legal obligation, detect security incidents, or exercise a legal right.

Right to Correct

You may request that we correct inaccurate personal information we hold about you. If your contact details, address, or any other field stored against your lead or submission is out of date, we will update it.

Right to Opt-Out of Sale or Sharing

You may request that a business stop selling or sharing your personal information for cross-context behavioral advertising. Paint Works Pro does not sell or share personal information for cross-context behavioral advertising. Because we do not perform these activities, the statutory "Do Not Sell or Share My Personal Information" page is intentionally not needed — this disclosure documents that compliance.

Right to Limit Use of Sensitive Personal Information

You may request that a business limit its use of your "sensitive personal information" (SPI) to only what is necessary to perform the services you have requested. Paint Works Pro does not collect SPI — we do not ask for any Social Security number, financial account credentials, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, mail, email, or text contents, genetic data, biometric data, health data, or sex life or sexual orientation data. If we ever do collect SPI in the future, we will honor any "Limit the Use of My Sensitive Personal Information" request as a matter of course.

Right to Non-Discrimination

We will not deny service, charge you a different price, or provide a different level or quality of service because you exercise any of the CCPA rights described above. Your project estimate is the same regardless of whether you ask us to delete, correct, or disclose what we hold about you.

Authorized Agent

California residents may designate an authorized agent to submit a CCPA request on their behalf. The agent will need to provide written authorization signed by you, along with verification of their own identity. Please email privacy@paintworks.pro to start the agent process.

How to Exercise Your Rights

The fastest way to exercise any of the rights above is to email privacy@paintworks.pro with the right you're exercising (e.g., "Right to Know request" or "Right to Delete") and any detail that helps us locate your record (an email or phone number you used on a recent form). Alternatively, call us at (619) 715-5718. We will acknowledge receipt within 10 business days and respond to your request within 45 days as required by Cal. Civ. Code § 1798.130.

Contact Us

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with Paint Works Pro, please contact us:

Paint Works Pro

Email: privacy@paintworks.pro (preferred — quickest response)

Phone: (619) 715-5718

Mailing address: San Diego, CA

Have a project in mind?

Tell us about it — we'll get back to you within 24 hours with a clear, no-pressure quote.

Get a Free Quote