Privacy Policy & Cookie Policy

About This Policy

This Privacy Policy and Cookie Policy applies to all information collected by or provided to JW Roofing and Construction, LLC ("Company," "we," "us," or "our") through:

• Our website and any related subdomains, microsites, or digital properties ("Website");
• Service inquiries, quotes, and communications submitted by you through any channel;
• Service Agreements and ongoing business relationships with homeowners, property owners, contractors, and other clients ("Clients");
• Any other interaction between you and JW Roofing and Construction, LLC, whether online or offline.

This Policy is designed to meet or exceed the transparency and disclosure requirements of applicable United States federal law, Florida state law, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR) and UK GDPR, the CAN-SPAM Act, the Children's Online Privacy Protection Act (COPPA), and applicable guidance from the Federal Trade Commission (FTC) regarding online tracking and data practices.

Who We Are & How to Contact Us

JW Roofing and Construction, LLC is a limited liability company organized under the laws of the State of Florida, operating as a residential roofing and construction service provider serving residential and commercial clients throughout Florida.

For all privacy-related inquiries, data subject requests, cookie opt-out requests, or concerns about this Policy, please contact us in writing:

Information We Collect

We collect several categories of personal information, depending on how you interact with us. The categories below reflect classifications used under the CCPA/CPRA and similar frameworks.

A. Identifiers

Name, email address, phone number, mailing address (where voluntarily provided), IP address, device identifiers, cookie identifiers, and similar online identifiers.

B. Commercial and Transactional Information

Service inquiry details, quote requests, Service Agreement information, billing records, payment history, invoices, and records of services provided or considered.

C. Professional and Organizational Information

Job title, company or organization name, property or community name and address, unit count, and related information provided in the context of a business or property management relationship.

D. Internet and Electronic Network Activity

Browsing history on our Website, pages viewed, links clicked, search terms used to find our Website, referring URLs, session duration, scroll depth, device type, browser type and version, operating system, screen resolution, and similar technical data collected automatically when you visit our Website.

E. Geolocation Data

General geographic location data at the city or regional level, inferred from your IP address by analytics tools. We do not collect precise GPS-level geolocation data through our Website.

F. Communications Data

The content of emails, messages, inquiry forms, and other communications you send to us, including any information you voluntarily include in those communications.

G. Inferences and Analytics Data

Aggregate data and inferences drawn from the above categories, used to understand how visitors use our Website, which pages are most effective, and how we can improve our services and marketing.

H. Sensitive Personal Information

We do not intentionally collect sensitive personal information such as Social Security numbers, financial account numbers, precise geolocation, racial or ethnic origin, religious beliefs, health information, or biometric data through our Website or standard service operations. See Section 23 for additional detail.

How We Collect Information

Information You Provide Directly

We collect information you provide voluntarily when you:

• Submit a contact form, quote request, or service inquiry on our Website;
• Send us an email or other direct communication;
• Enter into a Service Agreement or other contractual arrangement with us;
• Respond to a survey or provide feedback;
• Register for an account or portal (where available).

Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies, server logs, pixels, and similar technologies, including:

• Your IP address and approximate geographic location;
• Browser type, version, and language settings;
• Device type, operating system, and screen resolution;
• Pages visited, time spent on each page, and navigation paths;
• Referring website or URL and exit page;
• Date, time, and duration of your visit;
• Links clicked and interactive elements engaged.

Information from Third Parties

We may receive information about you from third parties, including:

• Analytics providers (such as Google Analytics) that process data about traffic to our Website;
• Advertising and marketing platforms that provide aggregated audience data;
• Business partners, referral sources, or property management networks;
• Publicly available sources, such as business directories or LinkedIn, in the context of a legitimate business inquiry.

Legal Bases for Processing

Depending on your jurisdiction, we are required to identify a lawful basis for each category of personal data processing we conduct. The following legal bases apply to our processing activities:

Where we rely on legitimate interests as the legal basis for processing, we have assessed that our interests do not override your fundamental rights and freedoms, taking into account the nature of the data, the reasonable expectations of individuals, and the safeguards we apply. You may object to processing based on legitimate interests; see Section 15 for your rights.

Where we rely on consent, you may withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

How We Use Your Information

We use the personal information we collect for the following purposes:

Service Delivery and Operations

• To respond to service inquiries, provide quotes, and enter into Service Agreements;
• To provide, manage, schedule, and improve our valet trash collection services;
• To communicate with Clients and property managers regarding service schedules, changes, and operational updates;
• To process payments, issue invoices, and manage billing and collections.

Communications

• To send transactional emails and notifications related to your account or services;
• To send service-related announcements, holiday schedule notices, or operational alerts;
• To send marketing and promotional communications, where you have consented or where permitted by applicable law.

Website and Product Improvement

• To analyze aggregate Website usage data to improve content, navigation, and user experience;
• To identify and fix technical issues, errors, or security vulnerabilities;
• To test new features, pages, or service offerings.

Legal, Security, and Compliance

• To comply with applicable federal, state, and local laws and regulations;
• To enforce our Terms and Conditions and Service Agreements;
• To detect, investigate, and prevent fraud, abuse, or unauthorized access;
• To respond to legal process, court orders, or government requests;
• To establish, exercise, or defend legal claims.

Business Operations

• To maintain business records for tax, accounting, and audit purposes;
• To evaluate the performance of our services and personnel;
• To support potential mergers, acquisitions, or corporate restructuring.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you without your explicit consent, except as required by law.

Cookie Policy

This Cookie Policy forms an integral part of our Privacy Policy. It describes in detail the types of cookies and similar tracking technologies we use, why we use them, and how you can control them.

What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile phone) by a website when you visit it. Cookies allow the website to recognize your device and remember certain information about your visit. Cookies may be set by the website you are visiting ("first-party cookies") or by third parties whose content or tools appear on the website ("third-party cookies").

Cookies can be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a set period or until you delete them).

Similar Technologies

In addition to cookies, we and our service providers may use the following similar technologies:

• Web beacons / pixel tags: Tiny transparent images embedded in web pages or emails that track whether a page or email has been opened and can communicate with cookies;
• Local storage (HTML5): A browser feature that allows websites to store data locally on your device, similar to cookies but with greater storage capacity and no automatic expiration;
• Session storage: Similar to local storage but cleared automatically when your browser session ends;
• Fingerprinting: A technique that collects technical attributes of your browser and device (such as screen resolution, installed fonts, and time zone) to create a unique identifier. We do not actively deploy fingerprinting for tracking purposes, but some third-party tools may use this technique;
• Software Development Kits (SDKs): Embedded code provided by third-party vendors that may collect data about your device and usage activity.

Cookie Categories We Use

Specific Cookies in Use

This table reflects cookies currently known to be in use. As our Website and third-party integrations evolve, additional cookies may be deployed. We update this table as changes are made.

How to Control Cookies

You have several options to control or limit the use of cookies:

• Browser settings: Most browsers allow you to refuse or delete cookies. Instructions vary by browser — consult your browser's help documentation. Note that disabling all cookies may impair Website functionality.
• Google Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout.
• Google Ad Settings: Control Google's use of your data for personalized advertising at adssettings.google.com.
• Network Advertising Initiative (NAI): Opt out of interest-based advertising from NAI member companies at optout.networkadvertising.org.
• Digital Advertising Alliance (DAA): Use the DAA opt-out tool at optout.aboutads.info.
• European Interactive Digital Advertising Alliance (EDAA): For EU/UK residents, use the EDAA opt-out tool at youronlinechoices.eu.
• All About Cookies: For general guidance on managing cookies across browsers, visit allaboutcookies.org.

Cookie Consent

Where required by applicable law (including GDPR for visitors from the EU/UK, and applicable state privacy laws), we will seek your consent before deploying non-essential cookies. Where a consent mechanism (such as a cookie banner) is implemented on our Website, your choices will be respected and recorded. You may withdraw consent at any time by adjusting your browser settings or using the opt-out tools above.

For visitors from jurisdictions that do not require prior consent for analytics cookies (including, as of the effective date of this Policy, most U.S. jurisdictions), non-essential cookies may be set upon your first visit. You retain the right to opt out at any time using the mechanisms described above.

Google Analytics & Advertising Technologies

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics collects information about your use of our Website through cookies and similar technologies. This information is used to compile reports and to help us understand how visitors interact with our Website.

Google Analytics may collect and process the following categories of data:

• Unique user and session identifiers (via the _ga and _gid cookies);
• Pages visited, navigation paths, and time spent on each page;
• Traffic sources (direct, organic search, referral, social, etc.);
• Device type, browser type, operating system, and screen resolution;
• Approximate geographic location (country, region, city — derived from IP address);
• Events and interactions, such as link clicks, form submissions, and scroll depth;
• New vs. returning visitor status and session frequency.

IP Anonymization

We have configured Google Analytics with IP anonymization (also known as IP masking), which truncates IP addresses before they are stored by Google. This means that the last octet of your IP address is anonymized prior to any geographic or user-level processing. In Google Analytics 4 (GA4), IP addresses are not logged or stored by default.

Google's Data Processing

Google processes analytics data on our behalf as a data processor (under GDPR) and as a service provider (under CCPA/CPRA). Google's processing of data collected through Google Analytics is subject to Google's Privacy Policy (policies.google.com/privacy) and Google's Data Processing Amendment for Google Analytics. We have entered into applicable data processing terms with Google where required by law.

Google may also use data collected through our Website for its own purposes, including improving Google products and services, in accordance with Google's terms. We do not control Google's use of such data beyond the configuration settings we apply.

Google Signals

If we enable Google Signals (a feature of Google Analytics 4 that enables cross-device tracking and demographic reporting), Google may associate analytics data with your Google Account if you are signed in and have enabled ad personalization. You can control ad personalization settings through your Google Account at myaccount.google.com/data-and-privacy.

Remarketing and Advertising

We may, from time to time, use Google Ads remarketing features, which allow us to show targeted advertisements to Website visitors on other Google properties and third-party websites that are part of the Google Display Network. Remarketing uses cookies (such as _gcl_au) to recognize returning visitors. You may opt out of Google's interest-based advertising at adssettings.google.com or by using the NAI opt-out tool.

Other Advertising Pixels (Where Deployed)

Depending on our active marketing campaigns, we may deploy the following advertising tracking pixels. Where deployed, each is disclosed below:

Each advertising pixel allows the respective platform to match your visit to our Website with your account on that platform (if you are logged in) and may be used to serve you targeted advertisements and measure ad effectiveness. You may opt out through each platform's own privacy or ad settings, or through the industry opt-out tools listed in Section 7.

Opting Out of Google Analytics

To prevent Google Analytics from collecting data about your visits to our Website, you may:

• Install the Google Analytics Opt-Out Browser Add-On, available at tools.google.com/dlpage/gaoptout;
• Use a browser that blocks third-party cookies, or configure your existing browser to block cookies from google-analytics.com;
• Enable the Global Privacy Control (GPC) signal in a supported browser (see Section 20).

Other Tracking Technologies

Server Log Files

Our web hosting provider automatically records server log data each time your browser makes a request to our Website. Server logs may include your IP address, browser type and version, operating system, referring URL, pages requested, HTTP status codes, bytes transferred, and the date and time of each request. Server log data is used for security monitoring, technical diagnostics, and aggregate traffic reporting. Logs are retained for a limited period consistent with our data retention practices.

Pixel Tags and Web Beacons

We may use transparent pixel images (1x1 pixel GIFs, also called web beacons or tracking pixels) embedded in web pages or HTML-formatted emails. Pixel tags may be used to confirm that a web page was loaded, that an email was opened, that a link was clicked, and to associate such actions with a cookie or session. Pixel tags may be operated by us or by third-party vendors.

Session Replay and Heatmapping

We may use session replay or heatmapping tools (such as Hotjar, Microsoft Clarity, or similar services) to record and replay anonymized visitor sessions, generate click maps, scroll maps, and interaction heatmaps, and understand how visitors navigate our Website. These tools are configured to:

• Mask and suppress the recording of sensitive form field content (such as passwords and payment information);
• Collect data in an anonymized or pseudonymized form that does not personally identify individual visitors;
• Operate in compliance with the vendor's applicable privacy and data protection terms.

Where such tools are in use, they will be disclosed in the applicable cookie table and governed by the vendor's privacy policy.

Email Tracking

Marketing and promotional emails sent by us may contain tracking pixels that allow us to determine whether an email was opened, when it was opened, what device was used, and whether links within the email were clicked. This information is used to evaluate the effectiveness of our email campaigns and is aggregated at a campaign level for reporting purposes. You may opt out of email marketing at any time, as described in Section 21.

Form Tracking and Conversion Tracking

Our Website may use JavaScript-based event tracking to record form submissions, button clicks, and other conversion events. This data is transmitted to analytics and advertising platforms (such as Google Analytics and Google Ads) to help us measure the effectiveness of our Website and marketing activities. Form input data itself (such as your name or email address) is not shared with advertising platforms unless you have explicitly consented to such sharing.

Content Delivery Networks (CDNs) and Embedded Content

Our Website may load resources (such as fonts, scripts, or images) from third-party content delivery networks (CDNs), including Google Fonts, Cloudflare, or similar services. When your browser loads resources from a CDN, the CDN provider may receive your IP address and other technical data as part of the HTTP request. CDN providers generally do not use this data for advertising purposes, but their data practices are governed by their own privacy policies.

How We Share Your Information

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own independent marketing or commercial purposes. We share your information only in the following circumstances:

Service Providers and Subprocessors

We share information with trusted third-party vendors and service providers who assist us in operating our Website and delivering our Services. These parties are authorized to use your information only as necessary to perform their contracted functions and are required to maintain appropriate confidentiality and security measures. See Section 11 for a list of current service providers.

Business Partners

In limited circumstances, we may share information with business partners (such as property management platform providers or referral networks) where such sharing is necessary to provide a jointly offered service and where you have been notified of such sharing.

Legal Process and Law Enforcement

We may disclose your personal information where required to do so by applicable law, regulation, court order, subpoena, or lawful request from a governmental authority, regulatory body, or law enforcement agency. We will make commercially reasonable efforts to notify you of such a request where permitted by law.

Protection of Rights

We may disclose information where we believe in good faith that such disclosure is necessary to: protect the rights, property, or safety of JW Roofing and Construction, LLC, our employees, clients, or the public; detect, prevent, or address fraud, security breaches, or technical issues; or enforce our Terms and Conditions or Service Agreements.

Business Transactions

In the event of a merger, acquisition, asset sale, financing, reorganization, dissolution, or similar corporate transaction, your personal information may be transferred to the acquiring entity or successor as part of the transaction. In such cases, we will provide reasonable notice and require any successor to honor the commitments made in this Policy.

With Your Consent

We may share your information with third parties where you have given explicit consent to such sharing, such as when you authorize us to share your contact information with a partner or co-marketing organization.

Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized data (data that cannot reasonably be used to identify you) with analytics partners, industry groups, or in public reporting, without restriction.

Third-Party Service Providers

The following table discloses our current key third-party service providers who may receive or process personal information on our behalf. This list is updated as our provider relationships change.

We review our service providers periodically and update this table to reflect current relationships. All service providers are contractually required to process personal data only as instructed by us and to maintain appropriate security measures.

International Data Transfers

JW Roofing and Construction, LLC is based in the State of Florida, United States. If you access our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

For individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the transfer of personal data to the United States is subject to appropriate safeguards under applicable law. Where we transfer personal data outside the EEA or UK, we rely on one or more of the following transfer mechanisms:

• Standard Contractual Clauses (SCCs): Approved by the European Commission or UK ICO, incorporated into our agreements with service providers who receive personal data from the EEA or UK;
• Adequacy Decisions: Where the European Commission or UK ICO has determined that the recipient country offers an adequate level of data protection;
• Consent: Where you have explicitly consented to the transfer after being informed of the risks;
• Performance of a Contract: Where the transfer is necessary to perform a contract with you or pre-contractual measures taken at your request.

You may request a copy of the relevant transfer mechanism applicable to transfers of your personal data by contacting us at the address in Section 26.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, to maintain active Client relationships, to comply with legal and regulatory obligations, and to resolve disputes and enforce our agreements. The following general retention periods apply:

When personal information is no longer required for any of the purposes described above, we will delete, anonymize, or securely destroy it in accordance with our standard data disposal practices. Anonymized or aggregated data that cannot reasonably be used to identify you may be retained indefinitely for statistical and analytical purposes.

Where you have submitted a valid data deletion request under applicable law, we will delete or anonymize your personal information within the timeframes required by applicable law, subject to any legal obligation to retain certain records.

Data Security

JW Roofing and Construction, LLC takes the security of your personal information seriously and implements commercially reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

Technical Safeguards

• HTTPS/TLS encryption for all data transmitted between your browser and our Website;
• Secure configuration of our web hosting environment, including firewalls and access controls;
• Regular software updates and security patches for our Website and underlying platforms;
• Encrypted storage of sensitive information where technically feasible;
• Restricted access to personal data based on the principle of least privilege.

Administrative Safeguards

• Internal policies governing the access, use, and handling of personal information;
• Limited access to personal information to personnel and contractors who require it to perform their duties;
• Confidentiality obligations with all employees, contractors, and service providers who handle personal data;
• Periodic review of our data security practices and third-party provider relationships.

Incident Response

In the event of a data security incident or breach that affects your personal information, we will notify you and applicable regulatory authorities as required by applicable law, including Florida's Information Protection Act (Florida Statutes § 501.171) and any other applicable state or federal breach notification requirements.

Your Privacy Rights — General

Regardless of your location, you have certain rights with respect to your personal information held by JW Roofing and Construction, LLC. We are committed to honoring these rights to the extent required by applicable law.

How to Submit a Privacy Request

To exercise any of the rights described above or in Sections 16–18, please submit a written request to us at the email address in Section 26, including:

• Your full name and email address;
• The specific right(s) you wish to exercise;
• Sufficient information to verify your identity and your relationship to us;
• Any additional information required to process your specific request type.

We will verify your identity before processing any request and will respond within the timeframe required by applicable law (generally within 30–45 days, with the possibility of a single extension where permitted by law). We will not charge a fee for processing reasonable requests, but reserve the right to charge a reasonable fee or decline to process requests that are manifestly unfounded or excessive.

You may also designate an authorized agent to submit a privacy request on your behalf. Authorized agent requests must be accompanied by written authorization signed by you or a valid power of attorney, and we may require direct verification from you.

Florida Resident Rights

As a Florida-based business, JW Roofing and Construction, LLC operates in compliance with Florida's applicable privacy and data protection statutes, including:

• Florida Information Protection Act (FIPA), Florida Statutes § 501.171: Governs the security of personal information held by covered businesses and mandates breach notification obligations;
• Florida Digital Bill of Rights (FDBR), effective July 1, 2024 (applies to controllers meeting the statutory threshold of $1 billion in global annual revenues or entities that derive 50% or more of global revenue from the sale of targeted advertising — note that JW Roofing and Construction, LLC does not currently meet these thresholds, but we disclose this statute for transparency);
• Applicable Florida consumer protection statutes under Chapter 501, Florida Statutes.

Florida residents may submit privacy inquiries, data access requests, or security concerns to us at the contact address in Section 26. We will respond to all verified requests in a timely manner and in accordance with applicable Florida law.

In the event of a security breach that compromises personal information of Florida residents, we will notify affected individuals and, where required, the Florida Department of Legal Affairs, within the timeframes mandated by Florida Statutes § 501.171.

California Resident Rights (CCPA / CPRA)

If you are a resident of California, you have specific rights under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA), effective January 1, 2023. While JW Roofing and Construction, LLC is a Florida-based business and does not currently meet the CCPA's applicability thresholds (annual gross revenues exceeding $25 million; buying, selling, or sharing personal information of 100,000+ consumers; or deriving 50%+ of annual revenue from selling consumers' personal information), we provide the following disclosures as a matter of best practice and transparency.

CCPA Categories of Personal Information Collected

We Do Not Sell or Share Personal Information

JW Roofing and Construction, LLC does not sell personal information as defined under the CCPA/CPRA, and does not share personal information for cross-context behavioral advertising purposes. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

California Rights

California residents may have the following rights under the CCPA/CPRA:

• Right to Know: The categories and specific pieces of personal information collected, sources, purposes, and third parties with whom we share information;
• Right to Delete: Deletion of personal information we have collected, subject to certain exceptions;
• Right to Correct: Correction of inaccurate personal information;
• Right to Opt Out of Sale/Sharing: Opt out of the sale or sharing of personal information (note: we do not sell or share);
• Right to Limit Use of Sensitive Personal Information: Limit the use and disclosure of sensitive personal information to specified purposes;
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising CCPA rights.

To exercise California privacy rights, contact us at the address in Section 26. California residents may also authorize an agent to submit requests on their behalf as described in Section 15.

European & UK Resident Rights (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) (EU) 2016/679 and, for UK residents, the UK GDPR as retained under the European Union (Withdrawal) Act 2018. While JW Roofing and Construction, LLC is a U.S.-based business primarily serving Florida markets and does not currently direct its services to EEA or UK consumers, we provide these disclosures as a matter of enterprise-level best practice.

Data Controller

For personal data processed in connection with our Website and Services, JW Roofing and Construction, LLC acts as the data controller. Our contact information for GDPR purposes is set forth in Section 26.

Your GDPR Rights

Under the GDPR and UK GDPR, you have the right to:

• Access (Article 15): Obtain a copy of your personal data and information about how it is processed;
• Rectification (Article 16): Have inaccurate personal data corrected or incomplete data completed;
• Erasure / Right to Be Forgotten (Article 17): Have personal data deleted where it is no longer necessary for the purpose collected, consent is withdrawn, or other grounds apply;
• Restriction of Processing (Article 18): Restrict processing of your data in certain circumstances;
• Data Portability (Article 20): Receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller;
• Object to Processing (Article 21): Object at any time to processing based on legitimate interests or direct marketing;
• Withdraw Consent (Article 7): Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing;
• Lodge a Complaint: Lodge a complaint with a supervisory authority — for EU residents, the competent Data Protection Authority in your member state; for UK residents, the Information Commissioner's Office (ICO) at ico.org.uk.

Automated Decision-Making

We do not engage in automated decision-making or profiling under Article 22 of the GDPR that produces legal or similarly significant effects on individuals without explicit consent.

To exercise any GDPR or UK GDPR right, please contact us in writing at the address in Section 26. We will respond within 30 days (extendable by a further two months in complex cases, with notice).

Children's Privacy

Our Website and Services are not directed to, and are not intended for use by, children under the age of thirteen (13). We do not knowingly collect, solicit, use, or disclose personal information from children under thirteen (13) years of age without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq., and applicable FTC regulations.

If you are a parent or guardian and believe that your child under the age of thirteen (13) has provided us with personal information without your consent, please contact us immediately at the address in Section 26. We will take prompt steps to delete such information from our records.

For users between the ages of thirteen (13) and seventeen (17), we encourage parents and guardians to review this Policy with their minor children and to monitor their online activities. Our Services are designed for business-to-business and property management contexts and are not intended for use by minors in any capacity.

Do Not Track & Global Privacy Control

Do Not Track (DNT)

Some web browsers include a "Do Not Track" (DNT) feature that transmits a signal to websites indicating that you do not wish to be tracked. Our Website does not currently respond to DNT signals in a technically standardized manner, as the World Wide Web Consortium (W3C) has not yet established a universally accepted DNT standard. We encourage you to use the opt-out mechanisms described in Sections 7 and 8 to limit tracking.

Global Privacy Control (GPC)

The Global Privacy Control (GPC) is a browser-level signal that communicates a user's privacy preference to websites, indicating an opt-out from the sale or sharing of personal information under applicable law (including the CCPA/CPRA and certain other state privacy laws). Our Website is working toward recognition of GPC signals. Where we recognize a GPC signal from your browser, we will treat it as a valid opt-out of sale and sharing of your personal information under applicable law.

You can enable GPC in supported browsers or through browser extensions. For more information about GPC, visit globalprivacycontrol.org.

Email & Marketing Communications

JW Roofing and Construction, LLC may send you the following types of email communications:

• Transactional Emails: Service confirmations, invoices, schedule notifications, account updates, and other communications directly related to your use of our Services. These cannot be opted out of as long as you have an active service relationship with us;
• Service Announcements: Important notices about changes to our Terms, this Policy, or our Services. These are required communications and cannot be opted out of;
• Marketing Emails: Promotional content, case studies, service updates, seasonal messages, or other marketing communications. These are subject to your consent or, for existing Clients, our legitimate interest in maintaining the business relationship.

CAN-SPAM Compliance

All marketing emails from JW Roofing and Construction, LLC comply with the CAN-SPAM Act, 15 U.S.C. § 7701 et seq. Specifically, our marketing emails will:

• Clearly identify the sender and include our contact information;
• Include a truthful, non-deceptive subject line;
• Be clearly identified as an advertisement where required;
• Include a clear and conspicuous opt-out mechanism in every email;
• Honor opt-out requests within ten (10) business days of receipt.

Opting Out of Marketing Emails

You may opt out of receiving marketing emails from us at any time by:

• Clicking the "Unsubscribe" link included in the footer of every marketing email; or
• Sending a written opt-out request to our contact email address in Section 26.

Opt-out requests will be processed within ten (10) business days. After opting out, you will continue to receive transactional and service-related emails if you have an active account or service relationship with us.

Links to Third-Party Websites

Our Website may contain hyperlinks to third-party websites, applications, or services that are not owned or controlled by JW Roofing and Construction, LLC. These links are provided for your convenience and informational purposes only. The inclusion of any link does not constitute an endorsement, sponsorship, or affiliation.

We have no control over and assume no responsibility for the content, privacy practices, data security, or terms of service of any third-party website. When you click a link to a third-party website, you leave our Website and are subject to the privacy policy and terms of that third party. We strongly encourage you to review the privacy policy of every website you visit.

Third-party websites may collect personal information about you independently of your relationship with JW Roofing and Construction, LLC, and such collection is governed solely by the applicable third party's policies.

Sensitive Personal Information

We do not intentionally collect or request sensitive categories of personal information through our Website or standard business operations. Sensitive personal information includes, but is not limited to:

• Social Security numbers, tax identification numbers, or government-issued identification numbers;
• Financial account numbers, credit or debit card numbers (in full), or account passwords;
• Precise geolocation (GPS-level) data;
• Racial or ethnic origin, national origin, or religious beliefs;
• Health, medical, or biometric information;
• Sexual orientation or gender identity;
• Immigration or citizenship status;
• Contents of private communications not directed to us.

If you inadvertently submit sensitive personal information to us through a general contact form or email, we will use it only to the extent necessary to respond to your inquiry and will take reasonable steps to securely dispose of it thereafter. Please use only secure and appropriate channels for any communications that must contain sensitive information.

Where required by applicable law, we will obtain your explicit consent before collecting or processing sensitive personal information and will limit such collection to what is strictly necessary for the identified purpose.

Changes to This Policy

24.1 Right to Update. JW Roofing and Construction, LLC reserves the right to update, modify, or replace this Privacy Policy and Cookie Policy at any time to reflect changes in our data practices, applicable law, regulatory guidance, or business operations. All changes will be effective upon posting of the revised Policy to our Website.

24.2 Notice of Material Changes. Where changes are material (meaning they significantly affect the rights described in this Policy or the ways in which we collect, use, or share your personal information), we will provide notice by updating the "Last Updated" date at the top of this Policy and, where appropriate, by sending a notice to active Clients via email or by placing a prominent notice on our Website prior to the change becoming effective.

24.3 Your Continued Use. Your continued use of our Website or Services after the effective date of any update to this Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue use of our Website and, if applicable, provide written notice of cancellation of any active Service Agreement in accordance with the terms thereof.

24.4 Policy Archive. We recommend saving a copy of this Policy each time you review it for your records. Older versions of this Policy may be made available upon written request to the address in Section 26.

Definitions

As used in this Policy, the following terms have the meanings set forth below:

"Anonymized Data" means data that has been processed in a manner that irreversibly prevents identification of the individual to whom it relates, such that re-identification is not reasonably possible.

"Controller" means the natural or legal person that determines the purposes and means of processing personal data (used in the GDPR context).

"Cookie" means a small text file placed on your device by a website, used to store information about your visit and preferences.

"Data Subject" means an identified or identifiable natural person whose personal data is processed.

"De-Identified Data" means data from which all reasonable identifiers have been removed such that the data cannot, alone or in combination with other data, be used to re-identify an individual.

"Personal Information" / "Personal Data" means any information that identifies or can reasonably be used to identify a specific individual, directly or indirectly.

"Processing" means any operation performed on personal data, including collection, storage, use, disclosure, deletion, or destruction.

"Processor" means a natural or legal person that processes personal data on behalf of the controller.

"Pseudonymization" means processing personal data such that it can no longer be attributed to a specific individual without additional information kept separately under appropriate security measures.

"Sale" has the meaning assigned to it under applicable privacy law, including the CCPA/CPRA definition of exchanging personal information for monetary or other valuable consideration.

"Sensitive Personal Information" means categories of personal data that are subject to heightened protection under applicable law, as described in Section 23.

"Subprocessor" means a third-party service provider engaged by the Company to process personal data on behalf of the Company and its Clients.

Contact & Privacy Requests

For all privacy-related inquiries, data subject access requests, cookie opt-out requests, data deletion requests, breach notifications, consent withdrawals, or concerns about this Policy or our data practices, please contact us in writing. All formal privacy communications must be submitted via email.

Please include the following in your communication:

• Your full name and email address;
• The subject line: "Privacy Request" or the specific right you are exercising;
• A clear description of your request, concern, or inquiry;
• Your relationship to JW Roofing and Construction, LLC (e.g., website visitor, current client, former client, resident);
• Your state or country of residence (for jurisdiction-specific rights).

If you are not satisfied with our response to a privacy inquiry or request, you may have the right to lodge a complaint with the applicable data protection or consumer protection authority in your jurisdiction. For Florida residents: the Florida Attorney General's office. For EU residents: your national Data Protection Authority. For UK residents: the Information Commissioner's Office (ICO) at ico.org.uk.