Privacy Policy

Introduction

Hyder Paving ("we," "us," "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in connection with our asphalt paving services in Tennessee.

Effective Date: This Privacy Policy is effective as of the date listed above and applies to all information collected by us on or after such date.

Information We Collect

Personal Information You Provide

We collect personal information you voluntarily provide when you:

• Request a quote, estimate, or consultation through our website or phone
• Contact us via phone, email, contact forms, or live chat
• Schedule appointments or on-site visits
• Subscribe to our newsletter, updates, or maintenance reminders
• Submit reviews, testimonials, or feedback
• Apply for financing or credit for paving services
• Engage with us on social media platforms

This information may include: full name, email address, phone number(s), mailing address, property address where services will be performed, project details and specifications, preferred contact methods and times, budget information, and any special requests or requirements.

Information Collected Automatically

When you visit our website, we automatically collect certain information including:

• IP address, browser type and version, operating system
• Pages visited, time spent on pages, referring website
• Device information, screen resolution, and connection type
• Geographic location data (city/state level)
• Search terms used to find our website

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your website experience, analyze site usage, and deliver targeted advertising. You can control cookie settings through your browser preferences, but disabling cookies may limit website functionality.

How We Use Your Information

We use collected information for the following business purposes:

• Service Delivery: Provide quotes, estimates, consultations, and asphalt paving services
• Communication: Contact you about projects, appointments, service updates, and maintenance
• Quality Assurance: Follow up on completed projects and gather feedback
• Marketing: Send newsletters, seasonal maintenance reminders, and promotional offers (with consent)
• Website Improvement: Analyze usage patterns to enhance user experience
• Legal Compliance: Meet regulatory requirements, respond to legal requests
• Safety and Security: Protect against fraud, investigate complaints, ensure worksite safety
• Business Operations: Scheduling, routing, inventory management, and administrative functions

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.We may share your information only in the following circumstances:

Service Providers and Business Partners

We work with the following third-party service providers who may have access to your personal information:

• Vercel Inc. - Website hosting, analytics, and performance monitoring
• Google LLC - Maps, Places API, and location services
• Resend Inc. - Email delivery and communication services
• GoHighLevel - Customer relationship management (CRM) and lead tracking
• Supabase Inc. - Database hosting and user authentication
• Upstash Inc. - Redis caching and rate limiting services
• Material suppliers and subcontractors involved in your project
• Equipment rental companies and delivery services
• Payment processors and financial institutions
• Professional services including legal, accounting, and insurance

Data Transfer Mechanisms: Information is shared through secure APIs, encrypted data transmission, and webhook notifications. All third-party providers are contractually required to maintain appropriate data security measures.

Legal Requirements

We may disclose information when required by law, including:

• Compliance with subpoenas, court orders, or legal processes
• Cooperation with law enforcement investigations
• Protection of our rights, property, or safety
• Response to regulatory inquiries or licensing requirements

Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity, subject to this Privacy Policy.

Data Security and Protection

Our security measures include: SSL encryption for data transmission, secure data storage with access controls, regular software updates and security patches, employee training on data protection, and periodic security audits and assessments.

Important Notice: While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specific retention periods:

• Customer Records: 7 years after project completion (tax and warranty requirements)
• Quote Requests: 3 years from request date for follow-up and analytics
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics (Vercel): 2 years from collection date
• CRM Data (GoHighLevel): 5 years or until customer requests deletion
• Email Communications (Resend): 1 year for delivery logs, indefinitely for content
• Maps/Location Data (Google): 18 months for usage analytics
• Database Records (Supabase): According to customer record retention periods
• Legal or Regulatory: As required by TN, NC, federal law, and any other state we operate within

Automated Deletion: We implement automated deletion processes for expired data where technically feasible. Some data may require manual deletion processes.

Your Privacy Rights

General Rights

You have the right to:

• Access: Request information about personal data we collect and process
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Receive a copy of your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Object: Object to processing of your personal information for certain purposes

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used
• Right to delete personal information (subject to exceptions)
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

Exercising Your Rights

To exercise your privacy rights, contact us using the information below. We will respond to verified requests within 30 days. We may require additional information to verify your identity before processing requests.

Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If we learn we have collected information from a child under 18, we will delete it promptly.

Third-Party Links and Services

Our website may contain links to third-party websites (social media, suppliers, review sites). This Privacy Policy does not apply to third-party sites. We encourage you to read their privacy policies.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Material changes will be posted on our website with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

Data Breach Notification: In the event of a data breach affecting your personal information, we will notify you within 72 hours of discovery via email and/or postal mail. We will also notify appropriate regulatory authorities as required by law.

Compliance and Legal Framework

This Privacy Policy complies with applicable federal and Tennessee state privacy laws including:

• Tennessee Consumer Protection Act - Consumer privacy rights
• Tennessee Personal and Commercial Computer Act - Data security requirements
• Tennessee Identity Theft Deterrence Act - Personal information protection
• Federal Trade Commission Act - Fair information practices
• CAN-SPAM Act - Email marketing compliance
• Telephone Consumer Protection Act (TCPA) - Phone and text messaging

International Data Transfers: Some of our service providers (Vercel, Google) may process data outside the United States. We ensure appropriate safeguards are in place for international data transfers through adequacy decisions, standard contractual clauses, or equivalent protections.

Automated Decision Making: We may use automated systems for quote calculations, lead scoring, and customer communication timing. You have the right to request manual review of any automated decisions that significantly affect you.

We are committed to maintaining transparency about our data practices and responding promptly to privacy inquiries and requests.