PRIVACY POLICY – cHRISTMAS bROTHERS

This Privacy Policy explains how Christmas Brothers Inc. (“Christmas Brothers,” “we,” “us”) collects, uses, and discloses personal information when you visit www.christmasbrothers.com, submit our quote request form, or otherwise interact with us — and the choices you have, including your rights under the California Consumer Privacy Act (“CCPA”).

1. Information we collect

Information you give us. When you submit our quote or contact form, we collect the details you enter: your first and last name, business name and role, email address, phone number, business address or ZIP code, venue type, and anything you tell us about your project. We also record the date and time of your submission.

Information collected automatically. Our website uses cookies and similar technologies — including Google Analytics 4, the Meta Pixel, Google advertising tags, and the Microsoft Advertising tag (UET) — that collect device and usage information such as IP address, browser type, pages viewed, and interactions with our ads. See Section 5.

Information from advertising platforms. Google, Meta, and Microsoft provide us with aggregated campaign statistics. These reports do not identify you individually.

We do not collect sensitive personal information as defined by the CCPA (such as government identifiers, precise geolocation, or health or financial account details), and we do not knowingly collect information from anyone under 18.

2. How we use personal information

We use the information above to respond to your inquiry and prepare quotes; to schedule, deliver, and invoice our services; to communicate with you about your request by email, phone, or text; to request feedback or reviews after a project; to send you marketing about our services, which you can opt out of at any time; to build the advertising audiences and perform the ad measurement described in Section 3; to analyze and improve our website and campaigns; and to comply with legal obligations, prevent fraud, and protect our rights.

3. Matched advertising audiences and ad measurement (Google Customer Match, Meta Custom Audiences, and Microsoft Advertising Customer Match)

If you share your contact details with us, we may use them to show you — and businesses similar to yours — relevant Christmas Brothers advertising on third-party platforms, and to measure how well that advertising works. This section explains exactly what that involves.

What we upload. We may upload your email address, phone number, first and last name, and ZIP code to our advertising accounts with Google and Meta, and your email address to our Microsoft Advertising account. These identifiers are hashed (converted into a pseudonymous code using SHA-256) before or at the point of upload, so the platforms receive hashed values rather than plain-text contact details.

Google Customer Match. Google LLC matches the hashed identifiers against Google accounts so that our ads can be shown to you on Google Search, YouTube, Gmail, and Google’s display network. See Google’s privacy policy (https://policies.google.com/privacy) and “How Google uses Customer Match data” (https://support.google.com/google-ads/answer/6334160).

Meta Custom Audiences. Meta Platforms, Inc. matches the hashed identifiers against Facebook and Instagram accounts so that our ads can be shown to you on Facebook, Instagram, Messenger, and Meta’s Audience Network. See Meta’s privacy policy (https://www.facebook.com/privacy/policy).

Microsoft Advertising Customer Match. Microsoft Corporation matches the hashed identifiers against Microsoft accounts so that our ads can be shown to you on Bing, MSN, Outlook.com, and the Microsoft Audience Network. See Microsoft’s privacy statement (https://privacy.microsoft.com/privacystatement).

Lookalike and similar audiences. We may use these matched lists as a model (a “seed”) so that Google, Meta, or Microsoft can show our ads to other people whose characteristics resemble those of the people on our list. Your information is used only by the platform for this modeling; it is never revealed to those other people or to other advertisers.

Suppression. We may also use matched lists to exclude you from certain campaigns — for example, so you stop seeing lead-generation ads once you have already become a customer.

Ad measurement. We may also send hashed identifiers and related event information to Google, Meta, and Microsoft to measure which ads lead to inquiries and booked projects — for example through Google’s enhanced conversions, offline conversion imports from our customer management system, Meta’s Conversions API, and Microsoft Advertising’s enhanced conversions. The platforms use this data to perform measurement services on our behalf.

Platform limits. Under the platforms’ advertiser terms, uploaded data may be used only to provide these audience and measurement services to us; it is not shared with other advertisers, and hashed records that do not match an account are deleted.

Your choices. Disclosing identifiers to advertising platforms for cross-context behavioral advertising may constitute “sharing” under the CCPA. You can opt out at any time — see Section 6 or use the “Do Not Sell or Share My Personal Information” link in the footer of our website — and we will remove your details from our source lists and refresh the uploaded audiences within 15 business days. You can also control personalized ads directly with the platforms via Google’s My Ad Center (https://myadcenter.google.com), Meta’s Ad preferences (accessible from your Facebook or Instagram settings), and Microsoft’s ad settings (https://account.microsoft.com/privacy/ad-settings).

Make a privacy request

4. How we disclose personal information

Service providers. We use vendors that process personal information on our behalf and only on our instructions: our form provider (Typeform); our customer relationship management and field service platform, Housecall Pro, which we use for scheduling, estimates, invoicing, and sending service and marketing communications; our payment processor (card payments are handled by the processor — we do not store full card numbers); our website hosting provider; and cloud-based analytics and AI tools that we use to analyze inquiries and campaign performance on our behalf (for example, Anthropic’s Claude), under terms that restrict use of the data to providing the service to us.

Advertising partners. As described in Section 3, we disclose hashed identifiers to Google, Meta, and Microsoft, and our website tags transmit device identifiers and site activity to them. Under California law these disclosures may be considered “sharing” (or “selling” as broadly defined), even though no money changes hands. We do not sell personal information for monetary consideration.

Text messaging. Mobile information and text messaging opt-in data and consent will not be sold or shared with third parties or affiliates for their marketing or promotional purposes. We send marketing or promotional texts only with your prior express written consent, which you can revoke at any time. SMS data is shared only with providers who help us deliver text messages. If you receive texts from us and wish to stop, reply STOP at any time.

Other disclosures. We may disclose information to professional advisors, to comply with law or legal process, to protect rights and safety, or in connection with a business transaction such as a merger or sale.

5. Cookies and online tracking

Our site uses first- and third-party cookies, pixels, and tags for analytics and advertising, including Google Analytics 4 (GA4), the Meta Pixel, Google advertising tags, and the Microsoft Advertising tag (UET), which we deploy and manage through Google Tag Manager. Our GA4 property is linked to our Google Ads account, which means data about your activity on our site may be used to build advertising audiences and to measure ad performance and, where Google Signals is enabled, for cross-device ad personalization. These technologies also enable retargeting: after you visit our website, you may see our ads on Google services, Facebook and Instagram, Bing and other Microsoft properties, and other sites and apps in these platforms’ networks. You can control these technologies through your browser settings, the platform controls linked in Section 3, and industry opt-out tools such as https://optout.aboutads.info. To opt out of the sharing described in this policy, use the “Do Not Sell or Share My Personal Information” link in the footer of our website or contact us as described in Section 6.

6. Your California privacy rights

California residents have the right to know and access the personal information we hold, to correct inaccurate information, to delete personal information, to opt out of the “sale” or “sharing” of personal information, to limit the use of sensitive personal information (which we do not collect), and not to be discriminated against for exercising these rights. We honor these rights for all California residents who interact with us, regardless of whether the CCPA’s applicability thresholds are met.

CategoryExamples we collectPurposeDisclosed to
IdentifiersName, email, phone, ZIP, IP addressQuotes and service delivery; marketing; matched audiences and measurement (Section 3)Service providers; Google; Meta; Microsoft
Commercial informationInquiry and project details, quotes, purchase historyQuotes, service delivery, recordsService providers
Internet or network activityPages viewed, ad interactions (via cookies and pixels)Analytics; advertisingGoogle; Meta; Microsoft
Professional informationBusiness name, role, venue typeQuotes and service deliveryService providers

How to exercise your rights. Use the “Do Not Sell or Share My Personal Information” link in the footer of every page of our website (which takes you to [www.christmasbrothers.com/your-privacy-choices]), email us at [privacy@christmasbrothers.com], or call (310)773-9857. We will verify requests using the contact details we have on file and respond within 45 days (extendable once by a further 45 days where reasonably necessary). Opt-out requests are honored within 15 business days, including removal from the matched audiences described in Section 3. You may use an authorized agent to submit a request on your behalf with written permission.

7. Retention

We keep inquiry and lead information for [24] months after our last interaction. If you become a customer, we keep transaction records for as long as required for tax, accounting, and warranty purposes [typically 7 years]. Matched-audience lists are refreshed at least every 12 months, and Google automatically expires list memberships after 540 days. Opt-out records are kept indefinitely so we can continue to honor them.

8. Security

We use reasonable administrative, technical, and organizational safeguards to protect personal information, including hashing identifiers before they are uploaded to advertising platforms. No method of transmission or storage is completely secure.

9. Children

Our services are directed at businesses, not children. We do not knowingly collect, sell, or share personal information of anyone under 18.

10. Residents of other states

If you live in another state with a comprehensive privacy law (such as Colorado, Virginia, Connecticut, or Texas), we honor equivalent rights of access, correction, deletion, and opt-out of targeted advertising. Use the contact details in Section 6.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows the current version; material changes will be flagged on our website.

12. Contact

227 W 140th St
Los Angeles, CA 90061

[info@christmasbrothers.com] · (310)773-9857