Privacy Policy

Under the TDPSA, we are required to disclose the categories of personal data we collect:

• Identifiers: Name, email address, phone number, mailing address, billing address
• Contact Information: Physical address, email address, phone number
• Commercial Information: Records of services purchased, obtained, or considered; service preferences
• Payment Information: Credit card numbers, billing information (processed securely through third-party payment processors)
• Internet/Network Activity: IP address, browser type, operating system, device information, browsing history on our website
• Geolocation Data: General location based on IP address (we do not collect precise geolocation)

Note: We do not collect sensitive personal data as defined by the TDPSA, including racial or ethnic origin, religious beliefs, mental or physical health diagnoses, sexual orientation, citizenship or immigration status, genetic data, biometric data, or personal data from children under 13 without parental consent.

We process your personal data for the following purposes:

• Service Fulfillment: To schedule, provide, and manage cleaning services
• Payment Processing: To process payments for services rendered
• Communication: To contact you regarding appointments, service updates, and customer support
• Service Improvement: To improve our website, services, and customer experience
• Marketing: With your consent, to send promotional communications about our services
• Legal Compliance: To comply with applicable laws and regulations
• Security: To protect against fraud, unauthorized transactions, and other liability

As a Texas resident, you have the following rights under the Texas Data Privacy and Security Act:

• Right to Know: You have the right to confirm whether we are processing your personal data
• Right to Access: You have the right to access the personal data we have collected about you
• Right to Correct: You have the right to request correction of inaccurate personal data
• Right to Delete: You have the right to request deletion of your personal data
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable, readily usable format
• Right to Opt-Out: You have the right to opt out of:
  • The sale of your personal data (we do not sell personal data)
  • Targeted advertising
  • Profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to Non-Discrimination: You will not be discriminated against for exercising any of these rights

Under the TDPSA, we provide at least two methods for you to submit requests regarding your personal data:

Response Time: We will respond to your request within 45 days of receipt. If we need additional time, we will notify you of the extension and the reason for it. You do not need to create an account to submit a request.

Verification: To protect your privacy, we may need to verify your identity before processing your request. We will use reasonable methods to verify that you are the person whose data is being requested.

If we decline to take action on your request, you have the right to appeal our decision. To submit an appeal:

• Email us at info@maidsofcyfair.com with the subject line "Privacy Request Appeal"
• Include a copy of or reference to your original request
• Explain why you believe the decision should be reconsidered

We will respond to your appeal within 60 days. If your appeal is denied, we will provide you with information on how to contact the Texas Attorney General to submit a complaint.

We may share your personal data with the following categories of third parties:

• Service Providers: Payment processors, scheduling software providers, and email service providers who help us operate our business
• Legal Authorities: When required by law or to protect our legal rights

Important: We do not sell your personal data to third parties. We do not sell sensitive personal data or biometric data.

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When your data is no longer needed, we will securely delete or anonymize it.

Our website and services are not intended for children under the age of 13. We do not knowingly collect personal data from children under 13 without verified parental consent. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take appropriate steps to remove the information from our records.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.