Legal
Privacy Policy
What we collect, why we collect it, who we share it with, and the choices you have. Plain language, no dark patterns.
1. Who we are
Martin's Budget Painting, Bothell, Washington 98011, is the controller of personal information collected through this website. Contact: [email protected].
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Contact information | Name, phone, email, property address | To prepare an estimate, schedule work and communicate with you |
| Project information | Rooms, surfaces, colors, notes and photos you send us | To scope and price the work accurately |
| Booking information | Selected date, package, confirmation reference | To reserve and manage your appointment |
| Payment information | Amount, date, last four digits, payment status | To process deposits and invoices |
| Technical data | IP address, browser type, pages visited, referring page | Security, abuse prevention and understanding which pages are useful |
We do not receive or store your full card number. Card details are entered directly on a payment page hosted by Stripe, Inc. and never touch our servers.
3. How we use it
- To respond to your request, prepare an estimate and schedule your project
- To process deposits and final payments
- To send transactional messages — confirmations, reminders, schedule changes, invoices and warranty follow-ups
- To meet legal, tax, insurance and contractor recordkeeping obligations
- To protect the site against fraud and abuse
- With your consent, to send occasional maintenance reminders or seasonal offers — you can opt out at any time
We do not sell your personal information, and we do not share it with third parties for their own marketing.
4. Service providers we use
| Provider | Purpose | Data involved |
|---|---|---|
| Cloudflare, Inc. | Website hosting, security and delivery | Technical data, form submissions in transit |
| Stripe, Inc. | Payment processing for deposits and invoices | Name, email, billing details, card data (handled by Stripe) |
| Email/SMS provider | Sending confirmations and updates | Name, email address, phone number |
These providers process data on our behalf under their own terms and privacy policies. We may also disclose information when required by law, to enforce our agreements, or in connection with a sale of the business.
5. Text messages
If you give us your mobile number, we may text you about your estimate, schedule and crew arrival. Message and data rates may apply. Reply STOP to opt out of non-essential messages or HELP for help. Opting out of marketing texts does not stop essential transactional messages about work in progress.
6. Cookies and analytics
This site uses only what is necessary to function and to keep it secure. We do not run third-party advertising trackers or sell audience data. If we add analytics in the future, this policy will be updated and we will honor browser Global Privacy Control signals where required.
7. How long we keep it
- Inquiries that do not become projects: up to 24 months
- Project records, contracts and invoices: at least 7 years, for tax, insurance, warranty and lien-related recordkeeping
- Payment records: as required by our processor and applicable law
- Server and security logs: typically 30–90 days
8. Your rights
You may request access to the personal information we hold about you, ask us to correct it, ask us to delete it (subject to records we are legally required to keep), opt out of marketing communications, and ask how we shared it. Email [email protected] and we will respond within 30 days. We will not discriminate against you for exercising these rights.
Washington residents: the My Health My Data Act gives additional rights regarding health-related data. We do not knowingly collect health data. If you tell us about a health need — a chemical sensitivity, an allergy, a respiratory condition affecting product choice — we use it only to select appropriate products and schedule the work, we do not sell it, and you may ask us to delete it at any time.
9. Security
The site is served over HTTPS. Payment data is handled by a PCI-DSS Level 1 processor. Access to customer records is limited to people who need it. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted over the internet.
10. Children
This site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided information, contact us and we will delete it.
11. Changes
We will update this page when our practices change and revise the effective date at the top. Material changes affecting how we use your information will be communicated directly where we have your contact details.
This is a template privacy policy and not legal advice. Have it reviewed against your actual data practices and the providers you really use before launch. If you add analytics, advertising pixels, a CRM or call tracking, this policy must be updated to disclose them.
Email [email protected] before you pay a deposit or sign a contract. We would rather answer it now.