How we
handle your
information
— plainly.

This Privacy Policy describes how WindowsPro Window Services ("WindowsPro," "we," "us") collects, uses, retains, and protects personal information submitted through our website, during quote requests, and across the course of a window installation project — from site survey through warranty service.

It applies to all visitors, prospective clients, contracted clients, and subcontractor partners interacting with WindowsPro in the United States. The policy does not cover third-party platforms we may link to (manufacturer catalogues, NFRC lookup tools) — those relationships are governed by their own terms.

Plain-English summary: we collect what is required to fabricate and install your windows, hold it for the duration of the project plus the warranty period, and delete it on request. We do not sell data. We do not run advertising trackers.

We collect three categories of information, each tied to a specific business purpose. We do not collect data preemptively — every field on every form maps to a downstream operational need.

• Identification & contact: name, email address, phone number, billing address, and project property address. Collected at quote request and again at contract signature.
• Project & technical: rough opening measurements, existing window photographs, shop drawings, NFRC specifications, structural calculations, finish selections, and hardware choices. Collected during site survey and detailing.
• Transactional: contract value, payment schedule, deposit records, change orders, punchlist items, and warranty claims. Held in our project management system for the life of the warranty plus seven years.
• Passive technical: IP address, browser type, and pages visited on WindowsPro.com. Logged for security and basic analytics only. No cross-site tracking, no advertising SDKs.

Information collected is used exclusively for the operation of our window services business. Specifically:

• Quoting & estimating — calculating material, fabrication, and labor costs.
• Site surveying & detailing — generating shop drawings and structural calcs.
• Fabrication & installation — producing and installing your window systems.
• Warranty service — verifying coverage, scheduling service visits, ordering replacement parts.
• Project communication — sending status updates, photos, and punchlist items.
• Legal & contractual — fulfilling contract obligations, dispute resolution, tax records.
• Site improvement — aggregated, anonymized analytics to improve WindowsPro.com usability.

We will not use your personal information for any purpose not listed above without obtaining your separate consent. We will never use your data to build a profile for advertising or sell it to a third party for any reason.

WindowsPro.com uses a single first-party analytics tool — Plausible — which runs without cookies and does not track users across pages, sessions, or other websites. We see aggregate page view counts and referrer domains. We do not see your name, your browsing history, or your device fingerprint.

We do not deploy Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any advertising SDK. There are no third-party tracking cookies set on this site, ever.

• Essential cookies: one session cookie for the quote-request form to function. Cleared on browser close.
• Preference cookies: none.
• Analytics cookies: none — Plausible is cookieless by design.
• Advertising cookies: none.

Because we do not rely on cookies for tracking, no cookie banner is required and none will appear. If we ever change this stance, we will update this section and notify existing clients by email no fewer than thirty days before deployment.

We share personal information only when required to deliver our services or to comply with legal obligation. The list of recipients is short and is reproduced in full below.

• Fabrication & material suppliers — your shop drawings and project specifications are shared with our aluminum extruder, glass manufacturer, and wood-cladding supplier as needed to produce your order. They receive project-specific data only, never your contact or payment information.
• Payment processor — Stripe handles all card transactions. We receive a confirmation token; Stripe holds the card data under their own PCI-DSS compliance program.
• Field crew subcontractors — project address, access instructions, and on-site contact information may be shared with installation crews under written NDA.
• Legal counsel & tax preparers — contract and payment records may be disclosed to our attorney or CPA as needed for business operations, under standard confidentiality.
• Law enforcement & regulators — only when compelled by valid subpoena, court order, or as required by state and federal law. We will challenge overbroad requests.

We have never sold personal information, and we have no intention of doing so. Under CCPA, sale is broadly defined; we affirmatively state that we do not engage in any practice that would qualify as a sale under that definition.

We hold personal information only as long as needed for the purpose it was collected. Different categories of data carry different retention windows, calibrated to warranty coverage and tax law.

• Quote requests (no contract signed): 24 months from submission, then permanently deleted.
• Project records (contracted clients): 12 years from substantial completion — matching our envelope warranty.
• Financial & tax records: 7 years from transaction date, per IRS recordkeeping requirements.
• Warranty claims: for the life of the warranty plus 3 years.
• Website analytics: 12 months, then aggregated and stripped of any identifier.
• Email correspondence: 36 months for routine inquiries; retained longer for active projects.

When the retention period expires, data is permanently deleted from production systems and backups within ninety days. If you would like your data deleted sooner, see section 08 — Your privacy rights.

Physical and digital security are both treated as part of the building envelope — layered, redundant, and inspected on a published schedule.

• Encryption in transit: TLS 1.3 on all web forms and client portal sessions.
• Encryption at rest: AES-256 on all project databases and file storage.
• Access controls: role-based access, least-privilege default. Field crews see only the project they are assigned to.
• Multi-factor authentication: required for all staff accessing client PII or financial records.
• Workshop physical security: project drawings stored in a locked room at the Brooklyn Navy Yard facility; site access logged.
• Vendor review: suppliers handling project data are reviewed annually for security posture.
• Incident response: written IR plan, tested quarterly. 72-hour breach notification window to affected clients.

No system is perfectly secure. If a breach occurs that exposes your personal information, we will notify you by email within seventy-two hours of confirmation, describe what was exposed, and outline the remediation steps underway.

If you are a resident of California, Colorado, Virginia, or any other U.S. state with a comprehensive privacy law, you have specific rights regarding the personal information we hold about you. We honor these rights for all clients regardless of state of residence.

A summary of the four core rights is below — see the section "Your rights" further down this page for the full grid.

• Right to know — what personal information we have collected about you in the past twelve months.
• Right to delete — request erasure of your personal information, subject to legal retention requirements.
• Right to correct — request correction of inaccurate or incomplete information.
• Right to opt out — there is nothing to opt out of, as we do not sell data and do not run targeted advertising.

To exercise any of these rights, email privacy@WindowsPro.com with the subject line matching the right you wish to exercise. We will verify your identity, then respond within forty-five days as permitted by law.

WindowsPro.com is not directed to children under sixteen, and we do not knowingly collect personal information from anyone under sixteen. Our services — design, fabrication, and installation of architectural window systems — are contracted by adults.

If you believe a minor has submitted personal information to us — for example, through a quote-request form — please contact privacy@WindowsPro.com and we will delete that information promptly.

WindowsPro operates in the continental United States. If you are visiting from the European Union, the United Kingdom, or another jurisdiction with comprehensive privacy law, your information will be processed in the United States.

For EU/UK residents, we rely on the Standard Contractual Clauses as a lawful transfer mechanism where applicable. You have the rights granted under GDPR — access, rectification, erasure, restriction, portability, and objection — exercisable by contacting privacy@WindowsPro.com.

We do not currently maintain a physical office or data residency outside the United States.

We review this policy annually and after any material change to our data practices. The version number and effective date at the top of this page will be updated, and a changelog of substantive revisions is maintained below.

• v2.1 — January 2025: clarified cookieless analytics stance; added retention schedule.
• v2.0 — March 2024: rewritten in plain English; added CCPA/CPRA compliance section.
• v1.3 — August 2023: added GDPR transfer language for international visitors.
• v1.0 — January 2025 (incorporation): initial policy issued at company founding.

For material changes — defined as changes to what we collect, why we collect it, or who we share it with — we will notify all active clients by email no fewer than thirty days before the change takes effect. Non-material changes (formatting, typos, clarifications) take effect on publication.

WindowsPro Window Services is the controller of personal data described in this policy. Our mailing address for privacy correspondence is:

If you believe we have not resolved your privacy concern, you have the right to file a complaint with the California Attorney General at oag.ca.gov/privacy or with your state's attorney general office. We will not retaliate against anyone for exercising their privacy rights.

For project-specific questions — quotes, scheduling, warranty claims — please use the contact details on our contact page rather than the privacy inbox.