Privacy Policy

Effective date: August 15, 2026
Last updated: August 15, 2026

Who we are

This website is operated by SBJ Painting LLC, an owner-operated painting, staining, deck restoration, and log home restoration contractor based in Walsenburg, Colorado. We serve Walsenburg, Huerfano County, and southern Colorado. In this policy, "SBJ Painting", "we", "us", and "our" mean SBJ Painting LLC, and "you" means anyone who visits sbjpainting.com or contacts us through it.

We are the controller of the personal information described here. Our contact details are at the bottom of this page.

The short version

We collect what you type into our estimate form, plus basic technical data every website receives.
We use it to answer you, quote your project, and schedule the work. That is it.
We do not sell your information, and we do not run advertising or remarketing trackers.
Analytics are on by default and you can switch them off in one click, from the notice or from the footer. In the EEA, the UK, and Switzerland they stay off unless you turn them on.
You can ask us to delete everything we hold about you at any time.

Information we collect

Information you give us

The estimate form on our contact page asks for:

Your name (required)
Your phone number (required)
Your email address (optional)
The service you need and your property type (required, chosen from a list)
A free-text message (optional), which may include your address, timing, budget, or anything else you choose to tell us

Please only include what you are comfortable sharing. The message box is free text, so we ask that you do not send sensitive information such as financial account numbers or government ID numbers through it. If you call or email us instead, we receive whatever you choose to tell us that way.

Information collected automatically

Like every website, this one receives some technical data simply because your browser has to ask our server for the page:

Server logs. Our hosting provider, Hostinger, records requests to the site. Those records can include your IP address, the page requested, the date and time, your browser and operating system (the user agent string), and the referring page. Hostinger keeps these logs for a limited period as part of running and securing the service, under its own retention schedule.
Error logs. When the estimate form fails to send, our server records the failure so we can find out what went wrong and follow up with you. Those failure records can include the details you submitted with the form.
Analytics, on unless you turn them off. Google Analytics 4 runs when the page loads. It records which pages you view, roughly how long you stay, which page sent you here, your approximate location (typically city level, derived from a truncated IP address), and your device and browser type. You can switch it off at any time from the notice on the site or the "Cookie preferences" link in our footer, and we remember that. Two exceptions, where analytics are off from the start and the Google script is never requested: visitors in the EEA, the UK, and Switzerland, and anyone whose browser sends a Global Privacy Control signal. In both cases nothing runs unless the visitor switches it on themselves. See our Cookie Policy for the specifics.

We do not use advertising pixels, remarketing tags, session recording, heat mapping, or fingerprinting of any kind.

How we use your information

We use what you give us to:

Reply to your estimate request and answer your questions
Follow up by phone, text message, or email about the project you asked us about
Walk your property, prepare a written quote, and agree on scope and price
Schedule and carry out the work, including coordinating around weather and access
Keep records of quotes and completed projects for warranty, tax, and accounting purposes
Understand which pages of this site are useful, unless you have turned analytics off
Keep the site working and protect it from abuse and spam
Meet our legal and record-keeping obligations

We do not use your information to build advertising profiles, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

Text messages and phone calls

When you send us your phone number and email through the estimate form, we use them to reply to the project you asked about, by phone, text message, or email, whichever gets you an answer soonest.

What we send. Only messages about your own request: confirming we received it, asking follow-up questions, setting up a time to walk the property, sending or discussing your quote, confirming scheduling, and letting you know when we are on the way. We do not run text or email marketing campaigns.
If you would rather we did not. Tell us to stop calling or texting and we will. Just say so on a call, in a reply, or by email. It does not affect your estimate or any work in progress.
We never sell or share your number with anyone else for their marketing.

Cookies and similar technologies

This site sets one necessary cookie to remember your cookie choice, plus Google Analytics cookies unless you have turned analytics off (or are in a region where they start off). The embedded Google map on our contact page can set Google cookies once it loads. We use no advertising or remarketing cookies. The full list, with purposes and durations, is in our Cookie Policy. You can turn analytics off, or back on, at any time using the cookie preferences link in our footer.

We do not sell your personal information and we do not share it for anyone else's advertising. We do use a small number of service providers to run the website and deliver email. Each one only receives what it needs to do its job:

Hostinger hosts this website and runs the small server script behind the estimate form. Hostinger processes request data and server logs, including IP addresses.
Resend (Plusdocs, Inc.) delivers email. When you submit the estimate form, Resend transmits the lead email to us and the confirmation email back to you. That means Resend processes your name, phone number, email address, and message content in transit, and retains delivery metadata for a limited period.
Google LLC provides Google Analytics 4, which runs unless you have turned it off, and which does not run at all for visitors in the EEA, the UK, and Switzerland unless they turn it on. Google also provides the embedded map on our contact page and the web fonts used across the site. Loading the map or the fonts sends your IP address and browser information to Google, because that is how any request to a third-party server works.
Google Workspace / Gmail. Our business email address, sean@sbjpainting.com, is a Google-hosted mailbox, so estimate requests sent to us are stored there.
Facebook. We link out to our Facebook page. That is an ordinary outbound link. We do not run the Meta pixel or any Facebook tracking code on this site. Facebook only learns anything about you if you click through to it.

We may also disclose information if we are legally required to (for example, a valid subpoena or court order), if it is necessary to protect our rights, safety, or property, or in connection with a sale or transfer of the business, in which case the buyer would be bound by this policy.

Do we sell your data?

No. We have never sold personal information, we do not sell it now, and we do not share it for cross-context behavioral or targeted advertising. We also do not process personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

How long we keep information

Estimate requests that do not become projects: kept for up to 24 months after our last contact with you, so we can pick up the conversation if you come back to us, then deleted.
Customer project records (quotes, invoices, correspondence, and project notes): kept for 7 years after the project is completed, because we need them for tax, accounting, warranty, and potential dispute purposes.
Server and error logs: retained by our hosting provider for a limited period as part of normal operations, under its own retention schedule.
Email delivery metadata at Resend: retained for a limited period under Resend's own retention schedule.
Google Analytics data: retained no longer than the retention period selected in our Analytics property settings, which is capped at 14 months, after which Google deletes it automatically. Aggregate reports may persist longer, but they do not identify individuals.
Your cookie choice: stored in your own browser for up to 180 days, then the notice appears again.

You can ask us to delete your information sooner. See Your privacy rights.

How we protect information

We take reasonable measures appropriate to the size of our business and the sensitivity of the data. The site is served over HTTPS, form submissions are encrypted in transit, and access to incoming estimate requests is limited to Sean and the people who need it. We keep the number of places your data lives deliberately small.

That said, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we ever become aware of a breach affecting your personal information, we will notify you and any required authorities as the law requires.

Your privacy rights

We are a small local contractor and may not meet the size thresholds that make the Colorado Privacy Act (CPA) legally binding on us. We follow it anyway, and we extend the same rights to everyone who contacts us, wherever you live. You have the right to:

Know and access. Ask whether we hold personal information about you and get a copy of it.
Correct. Ask us to fix information that is wrong or out of date.
Delete. Ask us to delete the personal information we hold about you. We may need to keep records tied to a completed project for the tax, warranty, and legal periods described above, and we will tell you if that applies.
Data portability. Get the information you gave us in a portable, readable format, up to twice per calendar year.
Opt out of the sale of personal information, targeted advertising, and profiling with legal or similarly significant effects. We do none of these things, so there is nothing to opt out of, but the right stands.
Turn off analytics, and withdraw consent to text messages, at any time. Analytics are on by default, so this one is an opt-out rather than a consent withdrawal: one click on the site notice or on the "Cookie preferences" link in our footer switches them off, we remember it, and collection stops from that moment. Neither choice affects anything we did before you told us.

How to exercise a right

Email sean@sbjpainting.com with "Privacy request" in the subject line
Call 719-285-9214
Write to SBJ Painting LLC, 289 Chickasaw Drive, Walsenburg, CO 81089

We will confirm receipt and respond within 45 days. If a request is complex we may take up to 45 additional days, and we will tell you before we do. We may need to ask a question or two to confirm you are who you say you are (for example, matching the phone number or email address on the request we received). We do not charge for this, and we will not treat you differently for asking. An authorized agent may submit a request on your behalf with written permission from you.

If we say no: the appeal process

If we decline your request, we will tell you why in writing. You can appeal that decision at no cost by replying to our response, or by emailing sean@sbjpainting.com with "Privacy appeal" in the subject line. A person who was not involved in the original decision will review it, and we will respond in writing within 45 days explaining what we decided and why.

If your appeal is denied, you may refer the matter to the Colorado Attorney General. We will include instructions and a contact link for the Colorado Department of Law with our appeal decision. You can also reach the Colorado Attorney General's office directly at coag.gov.

Universal opt-out signals

If your browser or an extension sends a universal opt-out preference signal such as Global Privacy Control (GPC), we treat it as an opt-out. Analytics are on by default for everyone else, but when we detect that signal they stay off for you, the Google Analytics script is never requested, and we do not interrupt you with the notice. If you would rather turn analytics on despite the signal, you can do that yourself through the cookie preferences link in our footer.

Children's privacy

This site is meant for homeowners, property managers, and businesses. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. We also do not knowingly process the personal data of anyone under 18 for targeted advertising, sale, or profiling. If you believe a child has sent us personal information, contact us and we will delete it promptly.

Changes to this policy

If we change how we handle personal information, we will update this page and change the "Last updated" date at the top. If the change is material, for example if we begin using a new category of data or a new service provider, we will make that clear on the page and, where the change affects cookies, we will ask for your cookie choice again.

Contact us

Questions about this policy, or about anything we hold on you? Reach us directly. No ticket system, no phone tree.