Privacy Policy
Welcome to https://cedarrapidsphc.com (the “Site”). We understand that privacy online is important to users of our Site, especially when conducting business. This statement governs our privacy policies with respect to those users of the Site (“Visitors”) who visit without transacting business and Visitors who register to transact business on the Site and make use of the various services offered by Cedar Rapids Plumbing, Heating & Cooling (collectively, “Services”) (“Authorized Customers”).
“Personally Identifiable Information”
Definition of Personally Identifiable Information (PII)
“Personally Identifiable Information” (PII) refers to any data that identifies—or can be used, directly or in combination with other information, to identify, contact, or locate—a specific individual. This includes, but is not limited to:
-
Identifiers: full name, mailing address, email address, phone number, IP address.
-
Financial information: billing address, payment account numbers (when provided, though we do not collect financial data via our Site).
-
Online activity: interactions with our Site or communications.
PII does not include information that has been aggregated or de-identified such that an individual can no longer be reasonably identified.
What Personally Identifiable Information is collected?
We may collect basic user profile information from all of our Visitors. We collect some or all of the following additional information from our Authorized Customers: the name, email address, phone number, address, billing address, IP address, and URL form submissions are sent from
How does the Site use Personally Identifiable Information?
We use Personally Identifiable Information (PII) collected from Visitors and Authorized Customers for the following purposes:
-
Service Delivery: process and fulfill service requests, schedule appointments, dispatch technicians, and send confirmations or reminders via email or SMS.
-
Customer Support: respond to inquiries, troubleshoot issues, manage warranties, and provide ongoing maintenance or follow-up services.
-
Billing & Payments: generate invoices, process credit card or ACH transactions through our secure payment gateway, and maintain accurate billing records.
-
Marketing & Promotions: with your consent, send newsletters, special offers, seasonal reminders (e.g., annual maintenance), and satisfaction surveys.
-
Security & Fraud Prevention: verify identities, detect and prevent unauthorized access or fraudulent activity, and enforce Site policies.
-
Analytics & Improvement: analyze aggregate usage patterns and performance metrics (using tools like Google Analytics) to optimize Site functionality, navigation, and content.
-
Legal Compliance: fulfill legal obligations, respond to governmental or regulatory requests, and defend our rights in disputes or litigation.
We retain and use your PII only as long as necessary for these purposes or as required by law, after which it is securely deleted or anonymized.
With whom may the information may be shared?
Cedar Rapids Plumbing, Heating & Cooling shares Personally Identifiable Information (PII) only as necessary to deliver our Services and comply with legal requirements. Recipients may include:
-
Service Technicians & Contractors: To schedule, dispatch, or coordinate in-home plumbing, heating, or cooling services, we share your name, address, and contact details with our employed or contracted technicians.
-
Payment Processors: When you pay for services online or via credit/debit card, we share billing information with our trusted payment gateway (e.g., Stripe) solely to authorize and settle transactions.
-
Third-Party Service Providers: We engage vendors—such as CRM systems, email/SMS delivery platforms, and analytics providers—to help manage customer records, send service reminders, and analyze Site performance. Each is contractually bound to use your PII only for the tasks we specify.
-
Local Regulatory or Licensing Authorities: If required by law or regulation (e.g., for building permits, code compliance, or safety inspections), we may disclose your name, address, or service details to relevant municipal or state agencies.
-
Emergency Responders: In rare cases where we believe there is an imminent threat to life or property (for example, a gas leak), we may share your location and contact information with emergency services.
-
Affiliates & Business Partners: With your consent, we may share limited information (e.g., name and service preferences) with affiliated companies or partners for promotions or joint service offerings.
-
Legal & Compliance: To comply with a subpoena, court order, or other legal process, or to protect our rights and safety (or those of our customers), we may disclose PII to law enforcement, courts, or legal counsel.
In all cases, we limit disclosures to the minimum information required, and we ensure that any third party with whom we share your data maintains appropriate confidentiality and security measures.
How is Personally Identifiable Information stored?
Personally Identifiable Information collected by Cedar Rapids Plumbing, Heating & Cooling is securely stored and is not accessible to third parties or employees of Cedar Rapids Plumbing, Heating & Cooling except for use as indicated above.
How does the Site keep Personally Identifiable Information secure?
We take the security of your data seriously and employ multiple layers of protection to safeguard your Personally Identifiable Information (PII). All data you submit via our contact and service request forms is handled through Gravity Forms, which transmits your entries over an encrypted HTTPS connection (TLS). We do not collect any highly sensitive payment or financial data through these forms—only basic contact details (name, email, phone, address) and non-sensitive service preferences.
Once received, form entries are stored in our secure WordPress database, protected by:
-
Encrypted Transit & Storage: All data in transit is encrypted via TLS, and database backups are encrypted at rest.
-
Access Controls: Only authorized team members with unique login credentials and role-based permissions can access PII.
-
Regular Updates & Patching: Gravity Forms, WordPress core, themes, and plugins are kept up to date to mitigate known vulnerabilities.
-
Server-Level Security: Our hosting provider enforces firewalls, malware scanning, and intrusion detection to shield our servers from unauthorized access.
-
Routine Audits: We perform periodic security reviews and vulnerability scans to identify and remediate potential risks.
Because we do not collect credit card numbers, Social Security numbers, or other high-risk data through our forms, the above measures ensure that your information remains as secure as possible while we provide you our Services.
How can Visitors correct any inaccuracies in Personally Identifiable Information?
Visitors and Authorized Customers may review, update, or correct their Personally Identifiable Information at any time by calling us at (319) 899-4381
When we receive your request, we will first verify your identity to protect the security of your data. Once verified, we will make the requested changes in our systems as soon as reasonably possible, and no later than 30 days from the date of your request. If we are unable to comply (for example, if we believe the request is unlawful), we will explain the reasons for our decision.
Your rights
These are summarized rights that you have under data protection law
- The right to access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to object to processing
- The right to data portability
- The right to complain to a supervisory authority
- The right to withdraw consent
Children’s Privacy
Compliance With Laws
Disclosure of Personally Identifiable Information to comply with the law may occur when Cedar Rapids Plumbing, Heating & Cooling determines in good faith that such disclosure is reasonably necessary to:
-
Respond to legal processes: comply with valid subpoenas, court orders, warrants, or other legally binding requests from governmental authorities;
-
Protect rights and safety: investigate, prevent, or take action regarding suspected fraud, illegal activities, potential threats to the safety of any person, or violations of our Terms of Service;
-
Cooperate with law enforcement: assist law enforcement agencies in the detection, prevention, or investigation of criminal offenses or national security matters;
-
Defend legal claims: establish or exercise our legal rights or defend against legal claims brought against us.
In all cases, we will limit disclosure to the minimum PII required to satisfy the specific legal obligation and, where permissible, will seek to notify you or obtain protective orders to preserve the confidentiality of your information.
What happens if the Privacy Policy Changes?
We will let our Visitors and Authorized Customers know about changes to our privacy policy.
Links
https://cedarrapidsphc.com contains links to other websites for your convenience and information. When you click on one of these links, you will leave our Site and be directed to a third-party site. We do not control—and are not responsible for—the privacy practices, content, or security of those external websites. We encourage you to review the privacy policy, terms of use, and security measures of any site you visit before providing any personally identifiable information.
Contact Us
If you have any questions about this Privacy Policy, please contact us at (319) 899-4381.
Last Updated: May 9, 2025