Privacy Policy | Draper Heating & Air Conditioning

Privacy Policy — Draper Heating & Air Conditioning

Effective Date: January 1, 2026
Last Updated: May 26, 2026

Draper Heating & Air Conditioning (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect when you visit our website (https://draperheatingairconditioning.xyz/), contact us by phone or email, request service at your home or business, or interact with us in any other way. It also explains how we use that information, who we share it with, and the rights you have over your data under applicable U.S. state and federal privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (VCDPA), and Utah Consumer Privacy Act (UCPA).

Who We Are

Draper Heating & Air Conditioning is a licensed HVAC contractor headquartered at 12244 Business Park Dr #155, Draper, UT 84020. We are a Utah-registered business and operate under Utah Division of Occupational and Professional Licensing (DOPL) HVAC contractor license #11487612-5501. For all privacy-related questions, contact us at info@draperheatingairconditioning.xyz or by phone at (385) 336-1837.

Information We Collect

Information You Provide Directly

When you contact us through our website contact form, by phone, by email, or in person at your home or business during a service call or estimate, we may collect:

  • Identifying information: Your name, residential or business address, phone number, and email address.
  • Service information: Details about your HVAC equipment, the issue you are experiencing, your home or business size and layout, and the equipment we install or service for you.
  • Payment information: Credit card numbers, ACH/bank account details, or check information processed through our payment processor (Stripe and/or QuickBooks Online). We do not store full credit card numbers on our servers — payment data is tokenized at the processor.
  • Financing information: If you apply for HVAC equipment financing through our partner Synchrony Financial, you provide your name, Social Security Number, date of birth, address, employment status, gross annual income, and monthly housing payment. This information is transmitted directly to Synchrony and is not retained on our servers.
  • Communication content: Any messages, comments, photos, or other information you send us through email, text, or website forms.

Information Collected Automatically

When you visit our website, certain information is automatically collected through cookies, server logs, and similar technologies:

  • Device and browser information: IP address, browser type and version, operating system, device type (desktop, tablet, mobile), and screen resolution.
  • Usage data: Pages visited, time spent on each page, links clicked, referring website, date and time of access, and exit pages.
  • Location data: Approximate geographic location derived from IP address. We do not collect precise GPS coordinates from your device.
  • Cookies and tracking technologies: Small text files placed on your device to remember your preferences, support website functionality, and measure site performance. You can disable cookies through your browser settings, though some features of the site may not function correctly without them.

Information From Third Parties

We may receive information about you from third parties including:

  • Google Analytics and Google Ads (for website performance and advertising measurement)
  • Synchrony Financial (regarding the status of your financing application and any approved credit line)
  • Equipment manufacturers (regarding warranty registration confirmations and warranty claim status)
  • Service review platforms (Google Business, Yelp, Nextdoor) when you post a review tagging our company
  • Referral partners and prior customers who recommend our services to you with your consent

How We Use Your Information

We use the information we collect for the following purposes:

  • Service delivery: Scheduling appointments, dispatching technicians, performing diagnostics and repairs, installing equipment, and providing follow-up service and maintenance.
  • Payment processing: Charging for services rendered, processing financing applications, issuing refunds when applicable, and resolving billing disputes.
  • Communication: Confirming appointments, sending estimates, providing service updates, responding to inquiries, and following up after service completion.
  • Warranty administration: Registering manufacturer parts warranties on your behalf, processing warranty claims, and maintaining service records that support warranty coverage.
  • Marketing: Sending periodic emails about seasonal maintenance reminders, rebate program updates, or service promotions. You can opt out of marketing emails at any time using the unsubscribe link in any marketing message.
  • Improving our website and services: Analyzing website traffic patterns, identifying technical issues, and understanding which services are most relevant to our customers.
  • Legal compliance: Complying with applicable laws including Utah DOPL contractor licensing requirements, EPA Section 608 refrigerant tracking, and municipal permit recordkeeping requirements.
  • Fraud prevention: Detecting and preventing fraudulent transactions, unauthorized access to accounts, and other illegal activity.

Cookies and Tracking Technologies

Our website uses several categories of cookies:

  • Strictly necessary cookies: Required for the website to function, including session management, security, and accessibility. These cannot be disabled.
  • Performance cookies: Help us understand how visitors use the website through Google Analytics. These collect aggregated data about page views, traffic sources, and user behavior. IP addresses are anonymized before processing.
  • Functional cookies: Remember your preferences such as form data and language settings to improve your experience on return visits.
  • Advertising cookies: Used by Google Ads and Meta (Facebook) pixel to measure the effectiveness of advertising campaigns and serve relevant ads on other websites you visit. You can opt out through the Network Advertising Initiative (https://optout.networkadvertising.org/) or Digital Advertising Alliance (https://optout.aboutads.info/).

You can control cookies through your browser settings. Major browsers (Chrome, Firefox, Safari, Edge) provide instructions for managing cookies in their help documentation.

Who We Share Your Information With

We do not sell your personal information. We share your information only with third parties who help us deliver our services or as required by law:

  • Service providers: Companies that help us operate our business, including web hosting (currently provided by SiteGround), email service (Google Workspace), payment processing (Stripe, QuickBooks Online), customer relationship management (ServiceTitan or HouseCallPro), and call tracking software. These providers are contractually obligated to protect your information and use it only to provide services to us.
  • Financing partner: Synchrony Financial, when you apply for HVAC equipment financing. Synchrony’s privacy policy governs their handling of your information once submitted.
  • Equipment manufacturers: Carrier, Trane, Lennox, Rheem, Mitsubishi Electric, Daikin, Bosch, and other manufacturers we register warranties with, limited to information needed for warranty registration and claim processing.
  • Government agencies: Municipal building departments (Draper City, Sandy City, Bluffdale, Riverton, South Jordan, Herriman) for permit applications and inspection scheduling; Utah DOPL for contractor licensing recordkeeping; EPA for Section 608 refrigerant tracking.
  • Legal requirements: When required by law, court order, subpoena, or other legal process, including responding to lawful requests from law enforcement.
  • Business transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the successor entity. We would notify you of any such change and the privacy implications.

Your Rights Under State Privacy Laws

Depending on your state of residence, you may have specific rights regarding your personal information:

California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, use, and share; the right to delete personal information we have collected (with certain exceptions); the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right to non-discrimination for exercising your privacy rights.

Colorado, Virginia, and Utah Residents (CPA, VCDPA, UCPA)

You have the right to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising or sale of personal data. Utah residents also have the right to opt out of profiling that produces legal or similarly significant effects.

How to Exercise Your Rights

To submit a privacy rights request, contact us at info@draperheatingairconditioning.xyz with the subject line “Privacy Rights Request.” Include your name, contact information, the state in which you reside, and the specific right you are exercising. We will respond within 45 days as required by applicable state law. We may need to verify your identity before processing requests involving sensitive information.

Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements:

  • Service records and invoices: Minimum 7 years (per IRS tax recordkeeping requirements and Utah DOPL recordkeeping standards)
  • Warranty registration records: Duration of the manufacturer warranty period (typically 10 years on parts, 20 years on heat exchangers)
  • Marketing email lists: Until you unsubscribe
  • Website analytics data: Up to 26 months in Google Analytics, after which data is automatically deleted
  • Financing application data: Retained by Synchrony Financial per their data retention policy; not stored on our systems beyond confirmation of application submission

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information:

  • SSL/TLS encryption for all data transmitted between your browser and our website
  • Encrypted storage of customer records in our CRM system
  • Restricted access to customer information on a need-to-know basis among employees
  • Regular security updates and patches applied to our website, CRM, and operational software
  • Background checks and confidentiality agreements with all employees who handle customer data
  • Payment card data tokenized through PCI-DSS compliant processors (Stripe, QuickBooks Online); we do not store full card numbers on our systems

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

Children’s Privacy

Our website and services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete that information promptly. Parents who believe their child has provided us with personal information should contact us at info@draperheatingairconditioning.xyz.

Third-Party Links

Our website may contain links to third-party websites including manufacturer product pages (Carrier, Trane, Lennox, etc.), rebate program portals (Dominion Energy, Rocky Mountain Power, Utah Office of Energy Development), and review sites (Google, Yelp, Nextdoor). This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party site you visit.

Do Not Track Signals

Some web browsers offer a “Do Not Track” (DNT) feature that signals to websites you do not want to be tracked. There is currently no industry consensus on how to interpret DNT signals, and our website does not currently respond to DNT signals. However, you can control tracking through cookie settings as described above.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where appropriate, notify you by email or through a notice on our website. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.

Frequently Asked Questions

Does Draper Heating & Air Conditioning sell my personal information?
No. We do not sell personal information to data brokers, marketing companies, or any other third party. We share information only with service providers who help us operate the business (web hosting, payment processing, CRM) and with parties involved in providing our services to you (financing partners, equipment manufacturers for warranty registration, government agencies for permitting). All service providers are contractually obligated to protect your information and use it only for the purposes we authorize.
How can I opt out of marketing emails from your company?
Every marketing email we send includes an unsubscribe link at the bottom. Clicking the link immediately removes you from our marketing list. You can also email us directly at info@draperheatingairconditioning.xyz with “Unsubscribe” in the subject line. Note that opting out of marketing emails does not opt you out of transactional emails (appointment confirmations, service updates, invoices, warranty registration confirmations) which are part of providing the services you have engaged us for.
Do you share my information with Synchrony Financial even if I do not apply for financing?
No. Information is shared with Synchrony Financial only when you complete a financing application through them, and the application data goes directly to Synchrony rather than being retained on our systems. If you pay for services by cash, check, credit card, or ACH bank transfer, Synchrony receives nothing about you. Their privacy policy governs the data you provide them during the application process.
How do I request a copy of all the personal information you have about me?
Submit a Privacy Rights Request by emailing info@draperheatingairconditioning.xyz with the subject line “Privacy Rights Request — Data Access.” Include your name, current contact information, and any prior addresses or phone numbers we may have on file. We will verify your identity (typically through callback verification using a phone number we have on record) and respond within 45 days with a copy of the personal information we have collected about you. There is no charge for the first request in any 12-month period.
What happens to my information if I cancel a service contract?
If you cancel an ongoing service contract or maintenance plan, we retain your service history records for the periods described in the Data Retention section above — primarily because tax, regulatory, and warranty recordkeeping requirements apply regardless of whether the customer relationship is active. You can request deletion of your information beyond what we are required to retain by submitting a Privacy Rights Request as described above. We will delete what we can while retaining only the records we are legally obligated to keep.

Contact Draper Heating & Air Conditioning

For privacy-related questions, requests to exercise your data rights, or general inquiries, contact us using the information below.

Contact Us →

Office Hours

  • Office Staff: Monday – Friday, 8:00 AM – 5:00 PM
  • Closed: Weekends and State/Federal Holidays