Privacy Policy

Introduction

Infinity E. Pools & Spas ("we," "us," "our," or "Company"), California Contractors State License Board (CSLB) License #1111464, operates the website infinityepools.com (the "Site"). We are committed to protecting your privacy and ensuring you have a positive experience on our Site.

This Privacy Policy explains what personal information we collect, how we use and share it, your rights under California law, and how to contact us with questions. This policy applies to all information collected through our Site, email communications, phone calls, and in-person consultations.

1. Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when you:

• Submit a contact form or quote request on our Site
• Call us at (916) 201-5852
• Email us at info@infinityepools.com
• Meet with us for an in-person consultation or site visit
• Subscribe to marketing communications
• Apply for financing through our third-party partner (Lyon Financial)

Categories of Personal Information Collected

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), we collect the following categories of personal information:

We do not collect sensitive personal information as defined under the CPRA, including Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, genetic data, biometric data, health information, or sexual orientation.

Information Collected Through Analytics

Analytics runs only if you turn it on. If you consent through our cookie banner, our analytics provider may collect:

• IP address (anonymized)
• Browser type, version, and language
• Operating system and device type
• Referring and exit pages
• Pages visited and time spent on each page
• Date and time of access

If you decline, or take no action, none of the above is collected. Our web host keeps standard server logs, including IP address, as a normal part of delivering the Site and protecting it from attack. Server logs are not used to track you across websites.

2. How We Use Your Information

We use the personal information we collect for the following business and commercial purposes:

• To respond to your inquiries and provide customer service
• To prepare and deliver quotes for pool construction, remodeling, or related services
• To schedule consultations, site visits, and project milestones
• To communicate about your project, including updates and follow-ups
• To send marketing communications you have opted into
• To facilitate financing applications through Lyon Financial
• To improve our Site, services, and customer experience
• To analyze website traffic and usage patterns
• To prevent fraud and ensure Site security
• To comply with legal obligations, including CSLB record-keeping requirements

3. Cookies and Tracking Technologies

Categories of Cookies

• Strictly Necessary (always on): Needed to deliver the Site and keep it secure. This includes remembering the cookie choice you make, so we can honor it without asking again. It also includes the spam protection on our quote and contact forms, which loads only when you begin filling out a form, not when you are reading a page.
• Analytics (off by default): Google Analytics, used to understand which pages visitors find useful. If you turn it on, we run it with IP anonymization enabled and with advertising features, Google Signals, and ad personalization switched off. We do not use analytics data to build advertising profiles.
• Advertising (off by default): We do not currently use any advertising, retargeting, or conversion pixels. This category exists so that if we add advertising measurement in future, it stays off until you choose otherwise.

Changing or Withdrawing Your Choice

You can change your choice at any time, and it is as easy as making it was. Select Your Privacy Choices in the footer of any page. Withdrawing consent takes effect immediately and deletes the cookies set under the category you turned off.

Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) signal. If your browser or browser extension sends GPC, we treat it as a decision to decline all non-essential cookies and analytics. We apply that decision before anything loads, and we do not show you the consent banner. You do not need to do anything else.

We also disclose our treatment of the older Do Not Track (DNT) header, as required by the California Online Privacy Protection Act (CalOPPA). Because we do not load tracking technology without your consent, a DNT header does not change our behavior. There is nothing for it to switch off.

4. How We Share Your Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We may disclose your information to the following categories of third parties for a business purpose:

• Service Providers: Companies that perform services on our behalf, including website hosting and video delivery (Cloudflare), form processing (JotForm), bot and spam protection (Google reCAPTCHA), web fonts (Google Fonts), analytics (Google Analytics, only if you have opted in), and email communications. These providers are contractually bound to use your information only for the purposes we specify, and are prohibited from selling it or using it for their own purposes.
• Financing Partners: Lyon Financial, if you apply for pool financing through our Site. Lyon Financial operates under its own privacy policy.
• Subcontractors: Licensed subcontractors who perform work on your project, limited to information necessary to complete the work.
• Legal Requirements: When required by law, court order, or government investigation, or to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Do Not Sell or Share My Personal Information

Infinity E. Pools & Spas does not sell your personal information and does not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We receive no money or other valuable consideration for your personal information, and we do not use advertising pixels that would send your activity to an ad platform.

We honor the Global Privacy Control signal, and you can review or withdraw any consent you have given at any time. Select Your Privacy Choices in the footer of any page.

If our practices change, we will update this policy and post a "Do Not Sell or Share My Personal Information" link on our Site before any such activity begins.

6. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

Right to Know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of third parties with whom we shared it.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, complying with legal obligations, CSLB record-keeping requirements, or exercising legal claims).

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you.

Right to Opt-Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information. As noted above, we do not currently sell or share personal information.

Right to Limit Use of Sensitive Personal Information

We do not collect or process sensitive personal information beyond what is necessary to provide our services.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, provide a different quality of service, or suggest that you will receive a different level of service for exercising your rights.

How to Submit a Request

You may submit a verifiable consumer request by:

• Emailing us at info@infinityepools.com with the subject line "California Privacy Rights Request"
• Calling us at (916) 201-5852
• Mailing us at 9816 Business Park Dr Ste. B, Sacramento, CA 95827

We will verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may require proof that you authorized the agent to act on your behalf plus verification of your identity.

We will respond to verifiable consumer requests within 45 calendar days of receipt. If we need additional time (up to an additional 45 days), we will inform you of the reason and extension in writing.

7. Data Retention

We retain your personal information for the following periods:

• Quote and consultation records: 3 years from the date of the inquiry, or longer if a project is initiated.
• Active project and contract records: Duration of the project plus 10 years, as required by California contractor licensing law and statute of limitations for construction defect claims (Cal. Civ. Proc. Code Section 337.15).
• Marketing and communication preferences: Until you opt out or request deletion.
• Website analytics data: 26 months (Google Analytics default retention period).
• Financial and tax records: 7 years, as required by federal and state tax law.

When retention periods expire, we will securely delete or anonymize the data. If you request deletion, we will delete your information except where retention is required by law.

8. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted through our Site
• Secure hosting through Cloudflare with DDoS protection
• Access controls limiting employee access to personal information on a need-to-know basis
• Regular security reviews of our systems and practices

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Data Breach Notification

In the event of a data breach involving your personal information, we will notify you in accordance with California Civil Code Section 1798.82 and other applicable laws. Notification will be provided in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement or any measures necessary to determine the scope of the breach.

10. Third-Party Services

These are the third-party services our Site uses, and what triggers each one:

• Cloudflare: Hosting, content delivery, security, and the video on our home page. Loads with every page, as a necessary part of delivering the Site.
• Google reCAPTCHA: Spam protection on our forms. Loads when you begin filling out a form, not when you are reading a page.
• JotForm: Receives your form submission when you send it.
• Google Maps: On our Contact page, the map is not embedded by default. You will see our address and a button, and the map loads only if you choose to open it.
• Google Analytics: Loads only if you opt in through our cookie banner.
• Lyon Financial: Only if you follow our financing link and apply. Operates under its own privacy policy.

We do not use advertising or retargeting pixels, session recording, or heat-mapping tools of any kind. The fonts used on this Site are hosted by us, not by an outside font service.

Each service listed above operates under its own privacy policy. We encourage you to review their practices. We are not responsible for the privacy practices of third-party services.

11. Links to External Websites

Our Site may contain links to third-party websites, including social media platforms and financing partners. These external sites have their own privacy policies and are not controlled by us. We are not responsible for the content or privacy practices of external websites. We encourage you to review the privacy policy of any site you visit.

12. Children's Privacy

Our Site is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on this page and update the "Last updated" date. For material changes, we will provide prominent notice on our Site. Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your California privacy rights, or have concerns about our data practices, please contact us: