1What this policy covers
This policy describes how XTM Construction, LLC handles personal information collected through this website, through our quote and contact forms, through your account dashboard, and in the course of estimating and performing construction work. XTM Construction, LLC is the controller of that information and is responsible for it.
Questions, requests, and complaints go to xtmcon@gmail.com or (210) 485-9831, or by mail to XTM Construction, LLC, 21750 Hardy Oak Blvd, Ste 104 PMB 7000564, San Antonio, TX 78258.
2What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Contact information | Name, email address, phone number, mailing address | You, through a form, your account, phone, or email |
| Project information | Property address, service type, project title and description, scope notes, square footage, budget range, target or completion date, timeframe (past, current, future) | You, and our own site visits and measurements |
| Account information | Email address, display name, phone, password (stored only as a hash by our authentication provider), whether the account has administrator access, account creation date | You, at signup |
| Messages | The content of messages you send us through the site, our replies, and the timestamps and sender role for each | You and us |
| Project records | Photographs and video of the work area, measurements, plans and drawings you provide, permits, inspection results, change orders, invoices and payment status | You, our crews, subcontractors, and permitting authorities |
| Technical information | IP address, browser type and version, device type, pages viewed, referring page, approximate location derived from IP, and cookie identifiers | Automatically, when you use the site |
| Consent records | Your cookie preferences and the date you set them, and records of communication consent and opt outs | Automatically, and from you |
3Why we use it
- To respond to your quote request, prepare an estimate, and schedule a site visit
- To perform, document, inspect, and warranty construction work
- To create and maintain your account and show you your requests and messages
- To communicate with you about your project by phone, text, and email
- To order materials and coordinate subcontractors, inspectors, and suppliers
- To bill you and collect payment, and to keep accounting and tax records
- To pull permits and satisfy building code, inspection, and licensing requirements
- To keep records that protect both of us if a warranty claim or dispute arises
- To understand which pages and services people use, so the site is more useful (only if you allow analytics cookies)
- To measure advertising performance and decide which past work to show (only if you allow marketing cookies)
- To secure the site, prevent fraud and abuse, and comply with law
4We do not sell your information
XTM Construction, LLC does not sell personal data, and does not sell or share sensitive personal data or biometric personal data. We do not trade, rent, or license your contact information to data brokers, lead generation companies, or other contractors.
If we ever begin processing personal data for targeted advertising or for a purpose that would count as a sale under Texas law, we will update this policy, post the notice Texas law requires, and give you the ability to opt out before we do it.
6Your rights under Texas law
The Texas Data Privacy and Security Act, Chapter 541 of the Texas Business and Commerce Code, gives Texas residents rights over their personal data. XTM Construction, LLC may qualify as a small business under the federal Small Business Administration size standards, which exempts a business from most of that chapter. We honor these rights anyway, because you should be able to see and control what we hold about you.
- Confirm and access: ask whether we are processing your personal data and get a copy of it
- Correct: ask us to fix inaccurate personal data, taking into account the nature of the data and why we hold it
- Delete: ask us to delete personal data you provided or that we obtained about you
- Portability: get a copy in a portable and readily usable format where we process it by automated means
- Opt out: opt out of targeted advertising, of any sale of personal data, and of profiling that produces legal or similarly significant effects. We do not currently do any of these three things.
A parent or legal guardian may exercise these rights on behalf of a child. An agent may act for you if you give us written authorization we can verify.
7How to make a request, and how fast we respond
Email xtmcon@gmail.com with the subject line Privacy Request, or call (210) 485-9831, or write to us at the address above. Tell us which right you are exercising and give us enough information to find your records and confirm who you are. We may ask you to confirm control of the email address or phone number on the account. We will not ask for more information than we need to verify you.
- We respond without undue delay and no later than 45 days after we receive the request.
- If we need more time we may take one additional 45 day extension, and we will tell you within the first 45 days that we are doing so and why.
- Requests are free at least twice in any 12 month period. We may charge a reasonable fee or decline a request that is manifestly unfounded, excessive, or repetitive, and we will explain why if we do.
- If we decline, we will tell you within 45 days and explain the reason.
If we decline your request you may appeal. Reply to our decision or email xtmcon@gmail.com with the subject line Privacy Appeal within a reasonable time. We will respond in writing within 60 days of receiving the appeal and explain the reasons for our decision. If we deny the appeal, we will give you a link to submit a complaint to the Texas Attorney General, who enforces this law. You may also contact the Texas Attorney General's Consumer Protection Division directly at any time.
8When we cannot delete everything
Some records we are required or entitled to keep even after you ask us to delete your data. We will delete what we can, tell you what we are keeping, and explain why.
- Signed contracts, change orders, invoices, and payment records, for tax, accounting, and lien purposes
- Permit applications, inspection results, and plans filed with a governmental authority
- Project documentation photographs and warranty records, for the length of the applicable warranty and statute of repose
- Records subject to a litigation hold, a subpoena, or an insurance claim
- Records of your opt out or deletion request itself, so we can honor it
9Browser opt out signals
We honor universal opt out preference signals, including Global Privacy Control, sent by your browser or a browser extension. When we detect one, we treat it as a request to opt out of targeted advertising and of any sale of personal data, and we set your optional cookie categories to off for that browser. You can still set your preferences directly using the Cookie settings link in the footer.
10Calls, texts, and email
When you give us your phone number, you consent to be contacted about your request and your project by phone, text, and email. Those are service messages: scheduling, crew arrival, permits, inspections, questions about scope, invoices, and warranty follow up.
Marketing text messages require your separate opt in, and that consent is never a condition of doing business with us. Message and data rates may apply. Reply STOP to any text, or tell us to stop by any other reasonable means including a phone call or email, and we will process it within 10 business days. Marketing emails include an unsubscribe link and a physical address, and we honor unsubscribes within 10 business days. Unsubscribing from marketing does not stop messages about an active project unless you ask us to stop those too.
12How we protect it
Data is transmitted over encrypted connections and stored on Google Cloud infrastructure with encryption at rest. Access to customer records is limited to the people who need it to do their job, and administrator access to the dashboard is restricted to authorized XTM staff. Our Data Policy describes our security and retention practices in more detail.
No system is perfectly secure. If a breach of security compromises sensitive personal information as Texas law defines it, we will notify affected individuals without unreasonable delay and no later than 60 days after we determine the breach occurred, and if 250 or more Texas residents are affected we will notify the Texas Attorney General no later than 30 days after that determination, as Chapter 521 of the Texas Business and Commerce Code requires.
13How long we keep it
We keep personal information only as long as we need it for the purpose we collected it, plus any period required by law, warranty, insurance, or the statute of repose for construction claims. The Data Policy sets out the specific schedule.
14Children
This website is meant for adults. It is not directed to children under 13 and we do not knowingly collect personal information from them. Accounts require you to be at least 18. If you believe a child has given us personal information, contact us and we will delete it.
15If you are not in Texas
We work primarily in and around San Antonio, Texas, and this policy is written around Texas law. If you contact us from another state or country, we will still honor access, correction, and deletion requests on the same terms described above. Our systems and our vendors process and store data in the United States. If you are outside the United States, do not send us personal information you are not comfortable having processed here.
16Changes to this policy
We will post any revised version here with a new date at the top. If a change materially affects your rights, we will make a reasonable effort to notify account holders by email or in the dashboard before it takes effect.
17Questions about this document
Contact XTM Construction and we will get back to you.
- Email: xtmcon@gmail.com
- Phone: (210) 485-9831
- Mail: 21750 Hardy Oak Blvd, Ste 104 PMB 7000564, San Antonio, TX 78258