1. Who We Are

Capahome LLC (“we”, “us”, “our”) provides window, door, blind and screen repair and installation services in Chicago and suburbs, Illinois, US. This Privacy Policy describes how we collect, use, disclose and safeguard your information when you visit capahome.com (the “Site”), fill a contact/estimate form, call us, or otherwise interact with us.

Controller / Contact:
Capahome LLC
Service area: Chicago, IL & suburbs
Phone: 224-434-0915
Email: info@capahome.com
Website: https://capahome.com

If you have questions or requests about this Policy, contact us via the details above.

2. Information We Collect

A. Information you provide directly

Contact & estimate requests: name, phone, email, address/service area, photos/videos of windows/doors you send, preferred time, message content (via WPForms/Contact Form 7, Thumbtack, Yelp, OpenPhone).
Communications: records of calls, SMS, emails, chat (including our support trainer / Dify AI logs if you use chat), reviews you submit.
Payments (if applicable): if you pay online, transaction data is processed by third-party payment processors — we do not store full card numbers.

B. Information collected automatically

Device & usage: IP address, browser type, OS, referring/exit pages, pages viewed, time on page, click data, error logs.
Cookies & similar: see Section 6.
Approximate location: derived from IP (city/region) to show service area and prevent fraud.

C. Information from third parties

Lead platforms (Thumbtack, Yelp, Angi, Google Business), analytics providers (Google Analytics 4), advertising pixels (Meta, Google Ads if enabled), map providers (Google Maps), review widgets (Trustindex), hosting/CDN logs (Hostinger / hcdn).

3. How We Use Information

To provide, schedule and fulfill repair/installation services, estimates and callbacks.
To communicate with you (confirmations, reminders, follow-ups, customer support).
To process and manage reviews/testimonials (with your consent).
To operate, secure and improve the Site (debugging, analytics, A/B testing, caching).
To personalize content and measure marketing effectiveness.
To comply with law, enforce our Terms, prevent fraud and protect rights/safety.
With your consent, to send occasional offers/tips (you can opt out anytime).

We do not sell your personal information for money. We do not use automated decision-making that produces legal effects.

4. Legal Bases (for EEA/UK visitors, GDPR)

Where GDPR applies, we process personal data under:

Contract — to provide requested services/estimates.
Legitimate interests — site security, analytics, service improvement, fraud prevention (balanced against your rights).
Consent — cookies/marketing, photos you submit, optional newsletters (withdrawable anytime).
Legal obligation — accounting, tax, legal claims.

We share personal data only as needed:

Service providers & processors: Hostinger (hosting/hcdn), WordPress plugins (WooCommerce if used, WP forms, Safe SVG), Google (Analytics, Fonts, Maps), Cloudflare/hcdn-like CDN, email/SMS providers (OpenPhone), Dify/AI hosting (srv1617600.hstgr.cloud infrastructure), Trustindex (reviews), payment processors.
Professional advisers: accountants, insurers, attorneys under confidentiality.
Lead platforms: if you contacted us via Thumbtack/Yelp, that platform retains your message per its own policy.
Legal & safety: to comply with law, subpoena, or to protect rights, property, safety of Capahome LLC, users or public.
Business transfer: in merger, acquisition or asset sale, with notice where required.
Lead platform APIs: Where we receive customer information through a lead platform's API (including Thumbtack), that data is transferred only to our own CRM system, used solely to respond to and service that customer, and is never resold, shared or redistributed to third parties. API access is authorized by us and can be revoked at any time.

We require processors to use data only on our instructions and to implement appropriate safeguards.

6. Cookies & Tracking

We use cookies, local storage and similar tech:

Essential: WordPress session, nonce, load-balancer, Hostinger/hcdn caching, WPBakery/Woodmart preferences.
Functional: remembering form inputs, language.
Analytics: Google Analytics 4 (IP anonymization on, data retention 14 months default), Search Console, Hostinger logs.
Marketing (only if enabled): Meta Pixel, Google Ads conversions.

Manage cookies: Use your browser settings to block/delete cookies. Rejecting essential cookies may break forms/cart. For GA opt-out, use Google Analytics Opt-Out. If we deploy a cookie banner (CookiesWidget), your choice is stored in localStorage.

Do Not Track: Our Site does not currently respond to DNT signals; we provide other opt-outs above.

7. Data Retention

Estimate/lead data: 24 months after last contact, unless you ask to delete sooner or law requires longer.
Job records/invoices: 7 years (tax/accounting under Illinois law).
Analytics logs: 14–26 months, then aggregated.
Marketing consent: until you unsubscribe + 3 years proof log.

8. Your Rights & Choices

Depending on your residency, you may have rights to:

Access, correct, update or delete your personal data.
Object to or restrict certain processing; withdraw consent (does not affect prior lawfulness).
Portability (receive a copy in common format).
Lodge a complaint with your supervisory authority (e.g., US state AG, EU DPA).

To exercise rights, email info@capahome.com with subject “Privacy Request”. We verify identity (reply from your email of record or request a callback to 224-434-0915). We respond within 30 days (45 days if complex, with notice).

Marketing opt-out: Click unsubscribe in any email, reply STOP to SMS, or contact us. Even after opt-out, we may send transactional messages (estimate confirmations).

9. California, Illinois & US State-specific Rights

Illinois residents: We comply with Illinois Personal Information Protection Act (815 ILCS 530). California residents (CCPA/CPRA):

Categories collected in last 12 months: identifiers (name, phone, email), commercial info (service requests), internet/network activity, geolocation (approx.), visual info (photos you send).
Sources: you, automatically, lead platforms.
Purpose & sharing: as in Sections 3 & 5.
No sale/share for cross-context behavioral advertising for money; limited analytics sharing may be considered “sale/share” under CCPA — you may opt out via “Do Not Sell/Share My Personal Information” by emailing us.
Rights: access, deletion, correction, non-discrimination, opt-out of sale/share, limit sensitive data use.
How to submit: email info@capahome.com or call 224-434-0915. Authorized agent requests require proof.

Other states (Virginia CDPA, Colorado CPA, Connecticut CTDPA, etc.): we honor similar rights upon verified request.

10. Security

We use Hostinger data centers, TLS/SSL, HSTS, firewall, limited access, and up-to-date WordPress/core/plugins. No method is 100% secure; you share information at your own risk and should use strong passwords and avoid sending sensitive data via unencrypted email.

11. Children's Privacy

Site is not directed to children under 16 and we do not knowingly collect data from them. If you believe a child provided us data, contact us for deletion.

12. International Transfers

We are US-based. If you access the Site from outside the US (EEA/UK), your data may be transferred to and processed in the US (Hostinger EU->US CDN, US servers). We use Standard Contractual Clauses / processor DPA where required.

13. Third-Party Links & Embedded Content

Site may link to Thumbtack, Yelp, Google Maps, Instagram, Facebook, YouTube. Their privacy practices are governed by their own policies. Embedded content (e.g., Google Map, YouTube video, Trustindex reviews) behaves as if you visited that site directly and may set third-party cookies.

14. Changes to This Policy

We may update this Policy to reflect changes in law, tech or services. We will post the new Policy with revised “Last Updated” date and, if material, notify via Site banner or email. Continued use after changes means acceptance.