1. Who We Are
Alucom Window (“Company,” “we,” “us,” or “our”) is a Massachusetts‑registered business headquartered at [street address], Boston, MA [ZIP], USA. We manufacture and install aluminum and PVC windows, doors, and related architectural products for residential and commercial clients.
2. Scope of This Policy
This Policy explains how we collect, use, disclose, and safeguard personal information obtained through alucomwindow.com, our customer portals, email, phone, in‑person interactions, and any other services that link to or reference this Policy. It also describes the confidentiality measures we apply to proprietary drawings, specifications, and other sensitive materials you share with us.
We follow U.S. federal requirements (including the Privacy Act of 1974 and the Children’s Online Privacy Protection Act), the Massachusetts Data Security Regulations (201 CMR 17.00), and comparable state privacy statutes such as the California Privacy Rights Act (CPRA) and Colorado Privacy Act (CPA).
3. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, postal address, email, phone, IP address | Provided by you or collected via cookies |
| Commercial Information | Quotes, invoices, purchase history, project specs | Generated during transactions |
| Professional Information | Employer, job title, licensing data (if relevant) | Provided by you or your organization |
| Internet Activity | Device type, browser, pages visited, interaction timestamps | Automatically collected |
| Audio/Visual Data | CCTV footage at our showroom, recorded calls (with notice) | From onsite visits or support lines |
We do not intentionally collect data about children under 13.
4. How We Use Your Information
- Process quotes, orders, deliveries, and warranty claims
- Design, engineer, and manufacture custom products to your specifications
- Respond to enquiries and provide customer support
- Improve website functionality and user experience
- Send marketing communications only with your opt‑in consent (you may unsubscribe at any time)
- Detect, investigate, or prevent fraud and security incidents
- Comply with legal obligations (tax, accounting, building‑code documentation)
5. Confidentiality of Customer Drawings & Project Data
All architectural drawings, CAD files, and proprietary measurements submitted to us are treated as Confidential Information:
- Access is limited to employees, subcontractors, and fabricators who need to know the data to fulfil your project and who have signed confidentiality agreements.
- Electronic files are stored on an encrypted cloud environment secured to NIST SP 800‑171 standards.
- Hard‑copy documents are kept in locked files within our Boston facility.
- We will not disclose, reproduce, or publish your materials for marketing or other purposes without your written consent, except as required by law or to defend legal claims.
6. When We Share Information
We do not sell personal information. We disclose data only:
- To vetted service providers (e‑commerce hosts, payment processors, freight carriers, installation subcontractors) bound by written data‑protection terms
- To government authorities or courts when legally compelled
- In connection with a merger, acquisition, or asset sale (you will receive notice and choices ahead of any change)
7. Cookies & Tracking
We use first‑party and limited third‑party cookies for site performance, analytics, and optional remarketing. You can adjust browser settings or opt‑out via our Cookie Banner. For opt‑out mechanisms specific to CPRA or CPA residents, see Section 8.
8. Your Privacy Rights
| Jurisdiction | Rights Available | How to Exercise |
|---|---|---|
| Massachusetts & most U.S. states | Access, correction, deletion | Email us or use the web form |
| California (CPRA) | Above rights + opt‑out of “sharing” for cross‑context advertising | Use the “Do Not Share My Info” link |
| Colorado, Virginia, Connecticut, Utah | Access, correction, deletion, opt‑out of targeted ads | Same as above |
| EU/UK (GDPR) | Access, rectification, erasure, portability, processing restriction, objection | Email us; DPO: privacy@alucomwindow.com |
We respond within 30 days (or the shorter timeframe mandated by applicable law). You will never receive discriminatory treatment for exercising your rights.
9. Data Security
- Encryption in transit & at rest for all personal data
- Role‑based access control and multi‑factor authentication for internal systems
- Annual penetration testing and continuous vulnerability monitoring
- Written Information Security Program (WISP) in line with 201 CMR 17.00 requirements (Mass.gov)
10. Data Retention
We retain records for the shortest period necessary to fulfil the purposes outlined above or as required by tax, warranty, and building‑code obligations (typically 7 years for financial records and up to 10 years for project documentation). Confidential drawings are purged or securely archived upon project completion per client contract terms.
11. International Transfers
If you access our site from outside the United States, be aware your data will be processed in—and subject to the laws of—the United States. Where required, we rely on standard contractual clauses or another lawful mechanism to legitimize cross‑border transfers.
12. Children’s Privacy
Our services are not directed at children under 13. We do not knowingly collect data from children. If we learn we have done so, we will delete it promptly.
13. Changes to This Policy
We may update this Policy periodically. Material changes will be highlighted on this page and, if significant, we will notify you via email or an on‑site banner. The “Effective Date” at the top will always indicate the latest version.
14. Contact Us
If you have questions, requests, or concerns about this Policy or our data practices, please contact:
Privacy Office – Alucom Window
151 Wassegussett Rd Weymouth
Boston, MA 02191
United States
Email: privacy@alucomwindow.com
Phone: +1 (959) 867-1924
This Policy is provided for general informational purposes and does not constitute legal advice. Consult qualified counsel to ensure full compliance with applicable laws in your specific circumstances.
