Privacy Policy

1. Scope

This Privacy Policy describes how Central Air Heating, Cooling & Plumbing (“we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit local.centralairpdx.com or interact with us by phone, email, chat, appointment scheduler, or web form. If you visit a website operated by another company, that company’s privacy policy applies.

Your use of optional analytics, advertising, and call/form-tracking technologies is governed by your cookie-banner choices, browser-level privacy signals such as Global Privacy Control (“GPC”), the disclosures described below, and applicable law.

2. Personal Information We Collect

Information you provide directly:

• Name, postal address, email address, and telephone number.
• Service-inquiry and appointment information, including the service requested, property or equipment details, and preferred appointment time.
• Communications content, including emails, submitted forms, scheduler entries, chat messages, and recorded telephone calls where recording is permitted.

Information collected automatically:

• IP address, browser and operating-system information, device type, screen size, referring URL, and approximate city/metro location inferred from IP address.
• Pages viewed, time on page, navigation paths, scroll activity, button clicks, and interactions with our appointment scheduler.
• Cookie, device, session, advertising, analytics, and attribution identifiers, subject to the choices described in this Policy.

Information received from other sources:

• Advertising and lead-attribution data when you click an advertisement or use a tracked telephone number.
• Information needed to verify or fulfill a service request, where permitted by law.

3. How We Use Your Information

1. To respond to inquiries and schedule, provide, and support the services you request.
2. To communicate about appointments, follow-ups, warranties, customer service, and satisfaction.
3. To operate, secure, troubleshoot, measure, and improve local.centralairpdx.com.
4. To attribute leads and measure the effectiveness of advertising we run on third-party platforms.
5. To prevent fraud, spam, abuse, and other security incidents.
6. To comply with legal obligations and respond to lawful requests.

4. How We Share Your Information

We do not exchange personal information for money. Some disclosures to analytics or advertising vendors may nevertheless constitute a “sale,” “sharing,” or “targeted advertising” under certain state privacy laws. Where those definitions apply, you may opt out using the methods in § 8.

We may disclose personal information to:

• Service providers that host, secure, analyze, schedule, route, or support our website and customer-service operations under contractual restrictions.
• Analytics and advertising vendors listed in § 5 for measurement, attribution, and advertising optimization, subject to your consent and opt-out choices.
• Professional advisers, such as attorneys and accountants, subject to confidentiality obligations.
• Government or legal authorities when required by law or reasonably necessary to protect rights, safety, or security.
• Parties to a business transaction, such as a merger, acquisition, financing, or asset sale, subject to appropriate confidentiality protections.

5. Cookies, Targeting & Analytics

local.centralairpdx.com does not display third-party advertising on the website itself. We use the technologies below to operate the site, protect forms, display maps and the appointment scheduler, measure site performance, attribute leads, and measure advertising we run elsewhere.

Vendors currently in use on local.centralairpdx.com:

About the status column. Vendors identified as Service Providers process information for us under contractual restrictions. Vendors identified as Third Parties (advertising) may use online identifiers for advertising-related purposes. Disclosures to those vendors may constitute sale, sharing, or targeted advertising under applicable state law, and the opt-out described in § 8 applies.

Most optional analytics and advertising technologies are loaded through Google Tag Manager or are manually blocked until the applicable Cookiebot category is allowed. The Autobot.ai Scheduler (“AB Scheduler”) is an accepted operational exception: its loader and embedded iframe intentionally initialize on page load before Cookiebot evaluates consent so visitors can open the appointment workflow. This creates requests to storage.googleapis.com, scheduler.autobot.ai, and api.autobot.ai. The scheduler receives the current Cookiebot consent state, page URL, device type, and, when available after consent, analytics identifiers used for attribution. Google Maps embeds are blocked until the visitor allows Preferences cookies. When a valid GPC signal is detected, optional sale, sharing, targeted-advertising, and analytics technologies remain disabled and an opt-out is recorded.

A live, automatically updated list of cookies detected during Cookiebot’s most recent successful scan, including provider, purpose, duration, and category, is available on our Cookie Policy page.

Managing cookie preferences. Use the Cookie Preferences control in the footer of any page to review, change, or withdraw your category-level consent. Necessary technologies cannot be disabled through the banner because they support basic operation, security, or the accepted scheduling functionality described above.

6. Phone-Call and Form Tracking; User-Experience Analytics

Call tracking. Some telephone numbers on local.centralairpdx.com use WhatConverts dynamic-number insertion under account 121750. This allows us to associate a call with the page, campaign, source, or search term that brought the visitor to us. WhatConverts routes the call into our customer-service workflow.

Call recording. Where calls may be monitored or recorded, callers receive an audible disclosure before recording begins. If you do not agree to recording, end the call before the disclosure finishes. Recording practices must follow the law applicable to the caller and call participants.

Form tracking. When you affirmatively submit a form, WhatConverts may record the submitted information together with attribution information such as the source page, campaign, and submission time. WhatConverts is not intended to record abandoned fields, keystrokes, or form content before submission.

Bot prevention. Cloudflare Turnstile evaluates technical device and browser signals to distinguish people from automated submissions. It is used for security and is not intended to receive the substantive contents of a form.

7. Children and Minors

local.centralairpdx.com is intended for adults seeking home services. We do not knowingly collect personal information from children under 13 through this website, and we do not knowingly sell personal data of consumers under 16 or use their personal data for targeted advertising or profiling. Contact privacy@centralairpdx.com if you believe a child submitted information to us.

8. Your Privacy Choices

You may opt out of sale, sharing, or targeted advertising using any of the following methods:

1. Submit the Privacy Request Form, also linked in the website footer as “Do Not Sell or Share My Personal Information.”
2. Send a qualifying Global Privacy Control signal from your browser. We automatically apply the opt-out for the browser/device sending the signal and suppress the consent banner.
3. Email privacy@centralairpdx.com with “Opt Out” in the subject line.
4. Call our privacy line at +1 844-708-4182.

Cookie preferences. Use the Cookie Preferences control in the footer to change or withdraw category-level cookie choices at any time.

Response timing. We process opt-out requests as soon as reasonably practicable and within the period required by applicable law. Other verified privacy requests are generally processed within 45 calendar days, subject to legally permitted extensions.

9. Security

We use reasonable physical, administrative, and technical safeguards designed to protect personal information. No website, transmission, or storage system can be guaranteed completely secure. We provide legally required notifications if we discover a qualifying security incident.

10. Changes to This Policy

We may update this Privacy Policy. The Last Updated date identifies the latest revision. We will provide additional notice when required by law.

11. Contact Us

For privacy questions or to exercise your rights:

• Email: privacy@centralairpdx.com
• Phone: +1 844-708-4182
• Online: Privacy Request Form
• Mail: Central Oregon Heating & Cooling, Inc., dba Central Air Heating, Cooling & Plumbing, 9089 SE Jannsen Road, Clackamas, OR 97015

12. Additional Information for Oregon Residents

If you are an Oregon resident and we are a controller subject to the Oregon Consumer Privacy Act (“OCPA”), this section applies.

12.1 Categories of Personal Data We Process

We do not intentionally request sensitive personal information through local.centralairpdx.com. Do not submit health information, payment-card or bank-account numbers, government identification numbers, precise geolocation, biometric information, or other sensitive information through website forms or the appointment scheduler.

12.1.1 Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, customer support, attribution, security, warranty and recordkeeping obligations, dispute resolution, and legal compliance. Unless a longer period is required or justified, working retention periods are:

• Customer and service records: generally 36 months after the last service or interaction, subject to warranty, tax, legal, and dispute-related needs.
• Website analytics and approximate-location records: generally up to 14 months, subject to vendor configuration.
• Call recordings and communications: generally up to 36 months unless a shorter setting applies or a legal hold requires longer retention.
• Cookiebot consent logs: generally 12 months.
• Privacy-request records: at least the legally required period.
• Advertising audience memberships: generally 90 to 180 days, subject to platform settings.

12.2 Oregon Privacy Rights

Subject to applicable law and exceptions, Oregon residents may have the right to:

• Confirm whether we process their personal data and obtain access.
• Correct inaccurate personal data.
• Delete personal data.
• Obtain a portable copy of personal data.
• Obtain a list of specific third parties to which personal data, or any personal data, was disclosed where the OCPA provides that right.
• Opt out of sale, targeted advertising, and qualifying profiling.
• Appeal a denial of a privacy request.
• Exercise rights without unlawful discrimination.

12.3 Exercising Oregon Rights

Use the Privacy Request Form, email privacy@centralairpdx.com, or call +1 844-708-4182. We may request information reasonably necessary to verify the request. Appeals may be submitted through the same methods with “Appeal” clearly identified.

12.4 Universal Opt-Out Mechanisms

Beginning January 1, 2026, covered Oregon controllers must recognize qualifying universal opt-out mechanisms. When local.centralairpdx.com detects a qualifying GPC signal, we treat it as an opt-out of sale and targeted advertising for the browser/device sending the signal and apply the opt-out automatically.

12.5 California Residents

If we are a business subject to the California Consumer Privacy Act (“CCPA”), California residents may have rights to know/access, delete, correct, obtain a portable copy, opt out of sale or sharing, limit certain uses of sensitive personal information, use an authorized agent, and exercise rights without unlawful discrimination. We honor qualifying opt-out preference signals, including GPC, as a sale/sharing opt-out for the browser/device sending the signal.

California residents may also submit a request concerning disclosures for third parties’ direct-marketing purposes under California Civil Code § 1798.83 by emailing privacy@centralairpdx.com with “Shine the Light Request” in the subject line.

12.6 California Invasion of Privacy Act Notice

Nature and scope. This section is provided for transparency and as a conditional consent-capture provision. It is not an admission, concession, stipulation, or waiver that a technology described in this Policy constitutes a wiretap, interception, eavesdropping device, pen register, trap-and-trace device, or other instrumentality regulated by the California Invasion of Privacy Act (“CIPA”) or an analogous law.

Ordinary business purposes. The technologies described in §§ 5–6 are used for ordinary business purposes, including operating and securing the website, measuring site performance, attributing leads, measuring advertisements, preventing spam and fraud, displaying maps, enabling appointment scheduling, routing calls, and supporting customer-service communications.

Consent in the alternative. Solely if a court or regulator determines that a disclosed technology falls within a law requiring consent, then, subject to applicable law, continuing to use the relevant feature after receiving the applicable notice constitutes consent for the disclosed purposes and retention periods. You may withdraw consent by ending the interaction, changing Cookie Preferences, sending a qualifying GPC signal, using the methods in § 8, or declining to continue a call after a recording disclosure.

12.7 Notice at Collection

At or before collection, we may collect the following categories for the purposes described in §§ 2–5: identifiers; customer and commercial records; internet/electronic-network activity; approximate geolocation; communications and, where disclosed, call audio; and inferences used for attribution. We disclose information to the service providers and third parties identified in §§ 4–5 and retain it as described in § 12.1.1.

Some online-identifier disclosures may constitute sale, sharing, or targeted advertising under applicable state laws. Use the choices in § 8 to opt out. Do not provide sensitive personal information through website forms or the scheduler.

Short notice to place adjacent to each form:

We collect the personal information you enter on this form, including your name, contact details, service-request information, and basic device data, to respond to your request and provide the services you request. Some disclosures may constitute “sale,” “sharing,” or targeted advertising under applicable state privacy laws. Please review our Privacy Policy. To opt out, use Do Not Sell or Share My Personal Information. Please do not submit health information, payment-card details, government identification numbers, or other sensitive information.

13. Other U.S. State Privacy Rights

Residents of other states with comprehensive privacy laws may have rights to access, correct, delete, or obtain a copy of personal information; opt out of sale, targeted advertising, or qualifying profiling; appeal a denial; and exercise rights without unlawful discrimination. Rights and coverage thresholds vary by state. Use the methods in §§ 8 and 11. Where applicable law recognizes a qualifying universal opt-out mechanism, we honor it for the purposes required by that law.

14. EEA, UK, and Switzerland Visitors

We are based in Oregon and primarily serve Oregon customers. We do not intentionally market to or monitor people in the European Economic Area, United Kingdom, or Switzerland. If the GDPR, UK GDPR, or Swiss data-protection law applies, you may have rights of access, correction, deletion, restriction, portability, and objection.

For visitors detected in those jurisdictions, optional analytics, advertising, and similar non-essential technologies must remain disabled until affirmative consent is provided. Depending on the processing, potential lawful bases include consent, contractual necessity, legitimate interests, and legal obligations. Contact privacy@centralairpdx.com to exercise applicable rights.