Privacy Policy | Bluffdale HVAC Data & UT Consumer Rights

Privacy Policy

Effective Date: January 1, 2026 · Last Updated: June 27, 2026

Bluffdale Heating and Air Conditioning (“we,” “us,” “our,” or the “company”), operating from 14659 S 855 W bldg b 142, Bluffdale, UT 84065, under Utah DOPL HVAC contractor license #10943221-5501, is committed to protecting the privacy of homeowners, businesses, and visitors who interact with our website (bluffdaleairconditioningheating.site) or engage our services. This policy explains what personal information we collect, how we use it, who we share it with, and what rights you have — including your specific rights under the Utah Consumer Privacy Act (UCPA), which took effect December 31, 2023.

Information We Collect

Contact and Service Address Information

When you request a quote, schedule a service call, or contact us through the website, phone, email, or an in-home consultation, we collect: full name, service address (typically inside Bluffdale, Riverton, Draper, Herriman, Lehi, South Jordan, or our broader Salt Lake Valley service area), billing address if different, email address, and phone number(s). This information is required to dispatch a technician to your location and to send you a written estimate.

Job-Specific Technical Data

During in-home diagnostic and installation visits, our technicians collect equipment-specific information tied to your home: existing HVAC equipment make, model number, serial number, and installation date; combustion analyzer readings (CO air-free, stack temperature, O2 percentage); static pressure measurements; refrigerant charge weights; ACCA Manual J load calculation inputs (square footage, window count and type, insulation R-values, orientation); and photographs of equipment, ductwork, gas line runs, and any code violations flagged during inspection. This technical data is retained with the job file for warranty and future service reference.

Payment Information

Payment information (credit card, ACH, or check details) is collected only during the transaction and is processed through PCI-DSS compliant third-party payment processors (Stripe, Square, or QuickBooks Payments depending on the transaction path). We do not store full credit card numbers on our systems. Financing applications through Synchrony, Wells Fargo, GreenSky, and Enerbank USA are submitted directly to those partners — we do not retain application data beyond the confirmation number.

Website Analytics

When you visit bluffdaleairconditioningheating.site, our web hosting provider automatically logs: IP address, browser type and version, operating system, referring URL, pages visited, time spent on each page, and approximate geographic location (typically resolved to city level, e.g. Bluffdale or Salt Lake City). If Google Analytics is enabled on the site, additional first-party cookies track session behavior for aggregate reporting only. You may opt out of Google Analytics through the browser Do-Not-Track setting or the Google Analytics opt-out browser add-on.

Cookies

The site uses functional cookies required for basic operation (session identifiers, contact form CSRF protection) and, if you consent, analytics cookies for aggregate site improvement. No behavioral advertising or cross-site tracking cookies are used. You can disable cookies through your browser settings, though some site features may not function correctly without them.

Communication Records

Phone calls to our office at (801) 610-6528 may be recorded for quality assurance and training purposes — an audible notification plays when this occurs. Text messages, emails, and answering-service transcripts are retained with the associated job file for reference during and after the service relationship.

How We Use Your Information

  • Service delivery. Dispatch technicians, provide written estimates, complete installations, and schedule follow-up maintenance visits.
  • Permit filing. Submit permit applications to Bluffdale City Building Services, Riverton City, Draper City Building Department, Herriman City, South Jordan Building Services, or the Utah County Building Department. Permit filings become part of the public record maintained by the relevant municipal authority.
  • Manufacturer warranty registration. Register your new equipment with the manufacturer (Carrier, Trane, Lennox, Rheem, Bryant, Goodman, American Standard, Mitsubishi Electric, Daikin, or Bosch) within the 60-day registration window required to activate the full parts warranty.
  • Utility rebate applications. Submit Rocky Mountain Power Wattsmart and Dominion Energy ThermWise rebate paperwork on qualifying installations.
  • Financing coordination. Transmit financing applications to Synchrony HOME, Wells Fargo, GreenSky, or Enerbank USA at your direction.
  • Insurance and liability coverage. Provide project documentation to our insurance carrier (The Hartford) and workers’ compensation carrier (Workers Compensation Fund of Utah) if a claim arises.
  • Communication. Send appointment confirmations, service reminders, invoices, and warranty documentation.
  • Marketing (with consent only). Send seasonal maintenance reminders, Comfort Club membership renewal notices, and occasional promotional emails — only to customers who have opted in. Every marketing email includes a one-click unsubscribe link.

Who We Share Your Information With

We share personal and job-specific information only with parties necessary to complete the service or fulfill legal obligations:

  • Municipal building departments. Bluffdale City Building Services, Riverton, Draper, Herriman, South Jordan, Utah County, and others receive homeowner name, service address, equipment specifications, and installer license number when we file HVAC permits. Permit records become public records.
  • Equipment manufacturers. Carrier, Trane, Lennox, Rheem, Bryant, Goodman, American Standard, Mitsubishi Electric, Daikin, and Bosch receive homeowner contact information and installed equipment serial numbers for warranty registration.
  • Financing partners. Synchrony Bank, Wells Fargo, GreenSky, and Enerbank USA receive credit application data (with your explicit authorization) for loan underwriting.
  • Utility rebate programs. Rocky Mountain Power and Dominion Energy receive homeowner name, service address, account number, installed equipment specifications, and AHRI Certified Reference Numbers for Wattsmart and ThermWise rebate processing.
  • Payment processors. Stripe, Square, or QuickBooks Payments process credit card transactions and receive card data directly. We do not receive or store full card numbers.
  • Insurance and legal. The Hartford (general liability, $2,000,000 aggregate) and Workers Compensation Fund of Utah receive project documentation only in the event of a claim or subpoena.
  • Legal compliance. We disclose information when required by law (subpoena, court order, government audit) or to protect the safety of any person, including responding to imminent threats.

We do not sell personal information to advertisers, data brokers, or any third party for marketing purposes.

Data Retention

  • Service records: Retained for 10 years from the completion date of the last service. This retention period reflects Utah’s statute of limitations on construction defect and mechanics’ lien claims (Utah Code § 78B-2-225 and § 38-1a-701 series), plus the extended parts warranty windows offered by major HVAC manufacturers on registered systems.
  • Financial records: Retained for 7 years to satisfy IRS record-keeping requirements and state tax audit windows.
  • Marketing consent records: Retained until explicit withdrawal of consent. Opt-out requests are honored within 10 business days.
  • Website analytics: Aggregate data retained indefinitely; individual-session data purged after 26 months.
  • Recorded phone calls: Retained 90 days unless flagged for quality review or associated with an active service dispute.

Your Rights Under the Utah Consumer Privacy Act

The Utah Consumer Privacy Act (UCPA), codified at Utah Code § 13-61-101 et seq., took effect December 31, 2023 and grants Utah residents specific rights regarding personal data:

  • Right to access. You may request confirmation that we process your personal data, and a copy of the personal data we hold about you.
  • Right to delete. You may request deletion of personal data we hold about you, subject to legal retention requirements described above.
  • Right to opt out of targeted advertising and sale. We do not engage in either, so this right is satisfied by default.
  • Right to data portability. You may request your personal data in a portable, machine-readable format.

To exercise any of these rights, email info@bluffdaleairconditioningheating.site with the subject line “UCPA Request” and include the name and service address associated with your account. We respond within 45 days as required by the UCPA. If we deny a request in full or in part, we explain our reasoning in writing and inform you of your right to appeal to the Utah Division of Consumer Protection.

Rights for California Residents (CCPA/CPRA)

If you are a California resident who happens to interact with our website (for example, requesting information about relocating to Utah), you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. These include the right to know, right to delete, right to correct, and right to opt out of sale or sharing. We do not sell personal information as defined by California law. To exercise these rights, use the same email process described above with the subject line “CCPA Request.”

Children’s Privacy

Our services are directed to homeowners, landlords, and commercial property managers. We do not knowingly collect personal information from children under 13. If we learn we have collected such information without verifiable parental consent, we delete it promptly. Contact us at the email above if you believe a child under 13 has provided us information.

Security

We maintain administrative, physical, and technical safeguards to protect personal information: password-protected access to job files, encrypted transmission of financing applications, PCI-DSS compliant payment processing, and secure destruction of paper records past their retention window. No system is perfectly secure — we cannot guarantee against unauthorized access, but we treat security seriously and comply with applicable Utah data breach notification requirements (Utah Code § 13-44-202).

Changes to This Policy

We may update this policy to reflect changes in our practices, legal requirements, or the addition of new financing partners, rebate programs, or service categories. Substantive changes are posted on this page with a revised “Last Updated” date at the top. If you have an active service relationship with us, we notify you by email of material changes at least 30 days before they take effect.

Contact for Privacy Inquiries

Privacy questions, UCPA and CCPA requests, or complaints about how we handle personal information should be sent to:

  • Email: info@bluffdaleairconditioningheating.site (subject: “Privacy Inquiry”)
  • Mail: Bluffdale Heating and Air Conditioning, Attn: Privacy Officer, 14659 S 855 W bldg b 142, Bluffdale, UT 84065
  • Phone: (801) 610-6528, ask for Operations Manager Rachel Kimball

If you are not satisfied with our response, you may file a complaint with the Utah Division of Consumer Protection (utahdcp.utah.gov) or, for California residents, the California Attorney General’s Office (oag.ca.gov/privacy).

Frequently Asked Questions

What specific customer information does Bluffdale Heating & Air Conditioning collect during a service call?
Contact information (name, phone, email), service address, existing equipment make/model/serial numbers, combustion analyzer readings, static pressure measurements, refrigerant charge weights, ACCA Manual J load calc inputs, and job-site photographs. Payment information is collected only during the transaction and processed through PCI-DSS compliant processors (Stripe, Square, or QuickBooks Payments) — we do not store full credit card numbers on our systems.
Do you share my Bluffdale address with anyone besides your technicians?
Yes, in specific circumstances required to complete your service: Bluffdale City Building Services or the relevant municipal building department receives your address when we file HVAC permits (which become public record); equipment manufacturers (Carrier, Trane, Lennox, Rheem, and others) receive your address for warranty registration; Rocky Mountain Power and Dominion Energy receive your address for rebate processing on qualifying installations; and financing partners receive your address as part of any credit application you authorize. We do not sell your address or share it with advertisers, data brokers, or third-party marketers.
How long do you retain my service records after a job?
Ten years from the completion date of the last service. This retention period reflects Utah’s statute of limitations on construction defect and mechanics’ lien claims (Utah Code § 78B-2-225 and § 38-1a-701 series) plus the extended parts warranty windows offered by major HVAC manufacturers on registered systems. Financial records are retained for 7 years to satisfy IRS requirements. Marketing consent records are retained until you withdraw consent.
Do I have rights under the Utah Consumer Privacy Act?
Yes. The Utah Consumer Privacy Act (Utah Code § 13-61-101 et seq.) took effect December 31, 2023 and grants Utah residents the right to access, delete, and port personal data we hold. You may also opt out of targeted advertising and sale — though we do not engage in either. To exercise any UCPA right, email info@bluffdaleairconditioningheating.site with the subject line “UCPA Request” and include the name and service address associated with your account. We respond within 45 days as required by law.
How do I opt out of marketing communications from Bluffdale Heating & Air Conditioning?
Three options. First, click the one-click unsubscribe link at the bottom of any marketing email — requests are honored automatically within 10 business days. Second, reply STOP to any SMS communication. Third, email info@bluffdaleairconditioningheating.site with the subject line “Opt Out” and specify which channels (email, SMS, postal mail) you want removed from. Opting out of marketing does not affect transactional communications required to complete your service — appointment confirmations, invoices, and warranty documentation continue to be sent as long as you have an active service relationship.

Contact Bluffdale Heating & Air Conditioning

Privacy inquiries, service scheduling, quotes, and emergency HVAC dispatch all route through the same office at 14659 S 855 W. For non-privacy business (a no-heat call in January, a Manual J consultation for a Bluffdale Heights retrofit, a Wattsmart rebate question), call the main line. For privacy-specific requests, use the email path described above with the appropriate subject line.

Contact Us →

Office Hours

  • Emergency Service: 24 hours a day, 7 days a week
  • Office Staff: Monday – Saturday, 9:00 AM – 5:00 PM
  • Closed: Sundays and State/Federal Holidays (emergency line always active)