We are committed to safeguarding your personal data ("personal data") and taking all necessary measures to protect it. This Privacy Notice ("Notice") provides current information about your privacy rights.
You may be a user, client, potential client, or contractor in relation to us.
User
Any visitor to our website
Client
Individuals who use our services
Potential Client
A user who shows interest in our products or services
Contractor
A person performing services for our clients
What is a Privacy Notice?
A Privacy Notice is a document from us (the Business or Controller) to you (the data subject) detailing how we collect, use, retain, and disclose personal data gathered through http://www.homeshowerexpert.com and our mobile applications.
As data subjects, you have specific privacy rights. To exercise these rights, please email us at homeshowerexpert.com@gmail.com .
Your rights may vary depending on applicable laws, but they may include:
Right to Access
Request an explanation of how your personal data is processed.
California
Virginia
Ohio
Colorado
Nevada
Massachusetts
Minnesota
New York
North Carolina
Pennsylvania
Delaware
Canada
Right to Rectification
Correct or complete inaccurate or incomplete information.
California
Virginia
Colorado
Nevada
Massachusetts
Minnesota
New York
North Carolina
Delaware
Canada
Right to Deletion
Request deletion of your personal data from our systems.
California
Virginia
Ohio
Colorado
Massachusetts
Minnesota
New York
North Carolina
Pennsylvania
Canada
Right to Restriction
Limit or stop processing of your personal data.
California
Massachusetts
New York
Canada
Right to Portability
Request a copy of your data and its transfer to another controller.
California
Virginia
Ohio
Colorado
Massachusetts
Minnesota
New York
North Carolina
Canada
Right to Opt-Out
Prohibit the sharing or selling of your data.
California
Virginia
Ohio
Nevada
Massachusetts
Minnesota
New York
North Carolina
Pennsylvania
Delaware
Colorado
Canada
Right Against Automated Decision Making
Opt out of decisions made solely through automated processes if they significantly affect you.
California
Virginia
Colorado
Massachusetts
Minnesota
North Carolina
New York
Canada
Right to Withdraw Consent
You can withdraw your consent at any time.
By Default
Right to Lodge a Complaint
If your request is not fulfilled, you can file a complaint with the regulatory body.
By Default
Note: Some states do not have specific privacy laws. In such cases, the rights of residents are governed by U.S. federal law. If your state is not listed, please contact homeshowerexpert.com@gmail.com
Oregon (Oregon Consumer Information Protection Act) and Michigan (Identity Theft Protection Act (Act 452 of 2004)) do not have comprehensive privacy laws. However, they do have requirements for privacy and the right for data subjects to opt out of advertising and other intrusive communications.
Note: Depending on the state and legislative requirements, we have 30 to 60 days to process your request, with the possibility of extending this by an additional 30 days.
Data We Process
The data we process is categorized into technical information and data provided by users.
Technical Information.
When you visit our website, some data is automatically collected. This technical data is necessary for the operation, maintenance, and improvement of our website. It includes information such as IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID, and session ID.
Data Provided by Users.
By default, we process only technical information. See more details in the table below:
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID, and session ID.
Ensuring smooth operation of the website
Data Provided by Potential Clients.
We may collect: full name, email, phone number, ZIP code, home address, start time, important features, type of project, and other project-specific data, as well as technical information. Refer to the table for details:
Full name, email, phone number
To contact you
ZIP code, home address
To determine service availability in your area and estimate service costs
Important features, type of project, start time
For proposal creation and contractor sourcing
Other project-specific data
For proposal creation and contractor sourcing
Email, phone
For marketing and follow-up calls
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID, and session ID.
Ensuring smooth operation of the website
Note: To find the best specialists for your order, we share some of your personal data with them, including application date and time, full name, phone number, service type, user ID, and previous order history.
Data Provided by Clients.
We may collect: full name, email, phone number, ZIP code, home address, insurance information, estimate recipient details (name, email), property type, start time, order status, important features, type of project, and other project-specific data, as well as technical information. See the table for details:
Full name, email, phone number
To contact you and provide services
ZIP code, home address
To assess service availability and average service costs in your area
Insurance information
To provide accurate quotes
Estimate details: name, email
Property type
To ensure proper billing
Start time, order status
To fulfill the contract
Other project-specific data
Proposal writing and contractor sourcing
To perform the work, write proposals, and find contractors
Email, phone
For marketing and order status notifications
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID, and session ID.
Ensuring smooth operation of the website
Data Provided by Contractors.
We may collect: name, registration number, contact details, position, business information, advertising preferences, payment information, and technical data. See the table for details:
Name, registration number, contact details
To conclude and perform the contract
Name of representative, contact details, position, business information
To conclude and perform the contract
Payment information
To process contract payments
Advertising preferences
To configure advertising campaigns
IP address, UTM parameters, geolocation, device type, browser type, cookies, user agent, user ID, and session ID.
Ensuring smooth operation of the website
Note: Some contractor information is collected offline.
We retain data during the contract performance (while you use our service) and for 36 months afterward or until you withdraw your consent (if applicable). In this case, your data will be deleted from our servers within 30 days of your request.
Note: We do not knowingly process personal data of users under the age of 16 without consent from their legal representative(s). If you are such a user or a legal representative, please notify us by email.
Why Do We Collect Data?
We are committed to protecting your privacy. We use the information we collect to:
Provide, maintain, and enhance our website and services;
Offer troubleshooting and customer support;
Ensure the safety of our service for all users;
Contact you.
Sale of Data
We do not sell your information. However, we may transfer your personal data to our contractors as part of providing our services. Learn more in the following section.
Data Sharing and Transfers
Your personal data is stored on our servers, located in the US (Michigan, Ohio, Virginia, Oregon, California), Brazil, and Canada. We may transfer your data to employees for contract fulfillment and for other reasons such as:
Consent. We transfer personal data based on your explicit consent.
Compliance with the Law.
We will not disclose your personal data to third parties unless necessary:
to comply with legal requirements, such as government requests or court orders;
to prevent illegal use of our website;
to defend against third-party claims;
to assist in preventing or investigating fraud.
Transfer to Third Parties
We transfer your personal data to third parties based on a public offer or terms of service for processing on our behalf, with appropriate technical and organizational measures to protect your data.
We share your data with service providers who assist us with the following:
operating, developing, and enhancing the features and functionality of our website.
advertising
providing their services
processing your payment transactions
addressing your support requests
communicating with you as detailed elsewhere in this Privacy Notice
In Detail:
Employees and Contractors
Contract performance
Contacting you
Support
Marketing
Processing your payment transactions
Operating, developing, and improving our website and business
Depending on their role, the type of personal data accessed by contractors or employees may vary. We implement necessary organizational and technical safeguards. For more details, refer to the Security section.
Advertising Contractors
Advertising and promotion of services
We transmit only aggregated data. Processing is done strictly according to our instructions, with necessary organizational and technical safeguards. A data transfer agreement may be used if necessary. For more information, refer to the Security section.
We use the following service providers:
Facebook
Website customization and user experience
Data transmitted is purpose-limited and protected.
Learn more about how Facebook handles personal data here
Yahoo
and AOL (Yahoo product)
Online services and electronic bulletin boards
Data transmitted is purpose-limited and protected.
Learn more about how Yahoo handles personal data here
Taboola
Detection and native advertising
Data transmitted is purpose-limited and protected.
Learn more about how Taboola handles personal data here
Google
Advertising, online promotion, and analytics
Data transmitted is purpose-limited and protected.
Learn more about how Google handles personal data here
Hotjar
Understanding, consolidating, and addressing user needs
Data transmitted is purpose-limited and protected.
Learn more about how Hotjar handles personal data here
TikTok
Attracting new customers, advertising services
Data transmitted is purpose-limited and protected.
Learn more about how TikTok handles personal data here
Nextdoor
Advertising and service offerings
Data transmitted is purpose-limited and protected.
Learn more about how Nextdoor handles personal data here
Security
We employ physical, electronic, and procedural security measures to protect personal data. We have implemented reasonable operational and technical measures to restrict access to your data:
Data is stored on servers and is accessible only to Kohler LuxStone employees with admin panel access. Contractors may have limited access to specific information.
Developed internal guidelines.
Implemented encryption (TLS/SSL), firewalls, and other security measures to ensure data protection.
These measures help protect your personal data from loss, unauthorized access, disclosure, alteration, or destruction. If you believe that your interaction with us is no longer secure, please notify us immediately by contacting us in writing at homeshowerexpert.com@gmail.com
Use of Cookies
We use cookies that are necessary for the functioning of the website. By using cookies, we collect technical information as specified in the “Data We Process” section and our Cookie Policy.
If you wish to disable cookies, you can find instructions for managing your browser settings at the following links:
This Privacy Notice, as well as the relationships covered by it, are governed by the GDPR and privacy laws in the United States, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act, the Consumer Data Protection Act (Virginia), the Protect Personal Data Privacy Act (Colorado), and Delaware's Online and Personal Privacy Protection laws. As laws and requirements regarding personal data processing can change, we are committed to keeping you informed of any updates to this Notice by posting the revised document on our website. To ensure you stay updated, please check back regularly.
California Legislation
We provide information for California residents regarding the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act to ensure you understand your privacy rights under these laws.
Opt-Out of Disclosure for Direct Marketing Purposes
California laws allow residents to request information about entities that have received their personal data for marketing purposes, including the categories of information disclosed. To make such a request, please contact us via email at homeshowerexpert.com@gmail.com
Please note that opting out of marketing disclosures does not prevent us from sharing personal data for purposes other than direct marketing. The data we process and share may include your name, address, email address, and telephone number.
Automatic Data Collection
We collect data you provide online and through websites operated by unaffiliated third parties.
Automatic Data Collection by Third Parties
When you visit our websites, third parties may collect personal data about your online activities over time and across different websites related to your use of our and other websites.
Minors
A business must not sell the personal information of customers if it knows the customer is under 16, unless the customer is at least 13 and under 16, or the customer's parent or guardian, in the case of customers under 13, has consented to the sale of the customer's personal information. A business that knowingly disregards the customer's age will be deemed to have known the customer's age. This right is referred to as the "right to opt-in." If consent to sell a minor's personal information is not received, the business must refrain from selling the information unless explicit authorization is later given by the customer.
Do Not Track Requests
California residents visiting our websites may request that we refrain from automatically collecting and tracking their online browsing activities across the Internet. Such requests are typically made through browser settings that control signals or other mechanisms allowing users to opt-out of the collection of personal data about their online activities over time and across third-party websites or services. Currently, we are unable to honor these requests, but we may update this Notice as our capabilities change.
Data Protection Rights for California Residents
The California Consumer Privacy Act ("CCPA") and California Privacy Rights Act provide California residents with the following additional rights:
Right to Know
You have the right to request disclosure of certain information about the personal data we have collected, used, disclosed, and sold about you in the past 12 months. This includes a request for any or all of the following:
The categories of personal information collected about you;
The categories of sources from which we collected your personal information;
The categories of personal information that we have sold or disclosed about you for business purposes;
The categories of third parties to whom your personal information was sold or disclosed for business purposes;
Our business or commercial purposes for collecting or selling your personal information;
The specific pieces of personal information we have collected about you.
Data Portability
You have the right to request a copy of personal information we have collected and maintained about you over the past 12 months.
Right to Deletion
You have the right to request that we delete the personal information we have collected from you and maintained, subject to certain exceptions. Please note that if you request deletion of your personal information, we may deny your request or retain certain elements of your information if necessary for us or our service providers to:
Complete the transaction for which the personal information was collected, provide a requested good or service, or perform a contract between us;
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
Debug to identify and repair errors that impair existing intended functionality;
Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided by law;
Comply with the California Electronic Communications Privacy Act;
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest, adhering to applicable ethics and privacy laws, if deletion would impair such research, provided you have given informed consent;
Use the information internally in ways reasonably aligned with your expectations based on your relationship with us;
Comply with a legal obligation;
Otherwise use the personal information in a lawful manner consistent with the context in which you provided it.
Right to Opt-Out/In:
You have the right to opt-out of having your personal information sold. Conversely, you also have the right to opt-in to the sale of your personal information. However, please note that we do not sell your personal information.
Right to Non-Discrimination:
You have the right to not be subjected to discriminatory practices as a result of exercising your privacy rights under the CCPA. Unless allowed by the CCPA, we will not:
Deny you goods or services.
Charge different prices or rates for goods or services, including discounts, benefits, or penalties.
Provide a different level or quality of goods or services.
Suggest that you might receive a different price, rate, level, or quality of goods or services.
Please note that the CCPA has specific requirements regarding the exercise of these data protection rights. Consequently, we may:
Respond to your request within forty-five (45) days of receipt;
Provide you with the personal information we collected about you no more than twice in a 12-month period, including categories and specific pieces of information, business purposes, sources of collection, and categories of third parties with whom the information is shared;
Not provide personal information if we cannot verify your identity. You will need to provide sufficient information for us to verify you as the person about whom we have collected information. However, requests made through your Account will be considered sufficiently verified.
Not transmit your personal information to another entity.
Additionally, we may retain personal information even after deletion requests as allowed by the CCPA, for purposes such as detecting security incidents, correcting errors, complying with legal obligations, or completing transactions.
We will not discriminate against you if you choose to exercise your rights under the CCPA. We are also accessible to customers with disabilities. Users with disabilities may contact us by email to request an alternative format of this Privacy Notice.
Virginia Legislation
We provide information for Virginia residents about the Virginia Consumer Data Protection Act (VCDPA) and your privacy rights under this legislation.
The VCDPA requires certain businesses to allow consumers to access and control the personal data collected about them.
Minors:
Businesses that comply with COPPA's verifiable parental consent requirements will also be considered compliant with any parental consent obligations under the CDPA.
A parent or legal guardian of a known child may exercise rights on behalf of the child regarding the processing of their personal data.
No Discrimination:
A business must not process personal data in violation of state and federal anti-discrimination laws, nor discriminate against a customer for exercising their rights under the CDPA.
Access Requests:
Businesses are required to provide a secure and reliable method for customers to submit requests to exercise their rights. The method should consider how customers interact with the business, the need for secure communication, and the ability to authenticate requests.
Businesses cannot require customers to create a new account to exercise their rights but may require the use of an existing account.
Response Time:
Businesses must respond to customer requests within 45 days, with an option to extend this period by an additional 45 days if necessary.
No Charge for Information:
Businesses must provide information in response to customer requests free of charge up to twice a year. A reasonable fee may be charged or the request may be declined if it is manifestly unfounded, excessive, or repetitive. The burden of proving that a request is manifestly unfounded, excessive, or repetitive lies with the business.
Right to Opt-Out:
Virginia residents visiting our website may request to opt-out of targeted advertising, the sale of personal data, or profiling. Virginia laws allow residents to learn which entities received their personal data for marketing purposes and the categories of information disclosed. You can request such information by contacting us via email at homeshowerexpert.com@gmail.com.
Colorado Legislation
We provide information for Colorado residents about the Colorado Privacy Act and your privacy rights under this legislation.
Minors:
A business must not process the personal data of a known child without first obtaining consent from the child's parent or lawful guardian.
Access Requests:
Customers may exercise their rights by submitting a request using a method specified by the business in its privacy notice. The method should consider:
How customers typically interact with the business;
The need for secure and reliable communication regarding the request;
The ability of the business to authenticate the identity of the customer making the request.
Controllers are not permitted to require customers to create a new account to exercise their rights. However, a controller may require customers to use an existing account.
Response Time
In brief: 45 days to respond. Controllers must inform customers of any actions taken on their requests within 45 days. In some cases, this response time may be extended by an additional 45 days.
No Charge for Information
Controllers are required to provide requested information free of charge once per year. For additional requests within a 12-month period, controllers may charge a fee.
Justification for Failure to Act
If a controller does not take the requested action, they must inform the customer within 45 days of receiving the request, providing reasons for the inaction and instructions for appealing the decision.
Denial of Requests
Controllers are not obligated to comply with a request if they are unable to authenticate it with reasonable efforts. They may request additional information necessary for authentication.
Right to Appeal
Controllers must have an internal process allowing customers to appeal a refusal to act on their requests. Customers should appeal within a reasonable time after being notified of the denial. The appeal process must be clearly available and user-friendly.
Responding to Appeals
Controllers must inform customers of the appeal outcome and provide a written explanation of the reasons for the decision within 45 days of receiving the appeal. This 45-day period may be extended by an additional 60 days in certain circumstances.
Delaware Legislation
This section provides information for Delaware residents about the Delaware Online Privacy and Protection Act (DOPPA) and your privacy rights under this legislation.
Advertising to Children
DOPPA applies to operators of services or platforms primarily directed at children. It does not cover services merely linking to or referring to child-directed platforms.
Operators may also be liable under DOPPA if they have actual knowledge that children are using their services, even if those services are not directed at children. Operators must not knowingly use, disclose, or compile personal information from children. DOPPA prohibits the marketing of certain content to children, including alcohol, tobacco, firearms, and other specified items. Operators are not required to monitor this if using an advertising service that complies with DOPPA.
Do-Not-Track Requests
Delaware residents can request that we do not automatically track their online activities. These requests are typically made through browser settings that control tracking signals. Currently, we cannot honor these requests but may update this Notice as our capabilities change.
Nevada Legislation
This section provides information for Nevada residents about privacy rights under Senate Bill 220.
Opt-Out of the Sale
Nevada law allows consumers to opt out of the sale of "covered information" collected through websites or online services. "Covered information" includes:
First and last name
Home or other physical address, including street name and city or town
Email address
Telephone number
Social security number
Identifier allowing contact either physically or online
Any other personal information collected from the individual and combined with an identifier making it personally identifiable
Do-Not-Sell Request
Nevada does not require a "Do Not Sell My Personal Data" button or link on websites. Instead, businesses must provide an email address, toll-free telephone number, or website for submitting verified opt-out requests.
Response Time
Upon receiving a "verified consumer request," a business has 45 days to respond, with a possible 90-day extension if reasonably necessary, totaling up to 135 days.
Privacy Legislation
This Privacy Notice is created and governed by applicable privacy laws. It also references upcoming or enacted legislation in various states to inform you of your rights. You can find a list of these laws here:
state of California — California Consumer Privacy Act and California Privacy Rights Act;
state of Virginia — Consumer Data Protection Act;
state of Ohio — Ohio Personal Privacy Act*;
state of Colorado — Protect Personal Data Privacy;
state of Nevada — Nevada Privacy Law;
state of Massachusetts— Massachusetts Information Privacy Act*;
state of Minnesota — Minnesota Consumer Data Privacy Act*;
state of New York — New York Privacy Act*, Digital Fairness Act*;
state of North Carolina— Consumer Privacy Act*;
state of Pennsylvania— Pennsylvania House Bill 1126*;
state of Delaware — Online and Personal Privacy Protection;
Canada — Personal data Protection and Electronic Documents Act 2000 and Canada's Anti-Spam Legislation.