Privacy Policy

Legacy Paving Company ("Legacy Paving," "we," "our," or "us") is a paving contractor based in Austin, Texas, serving residential, commercial, and industrial clients throughout Central Texas. We operate the website at legacypaving.com (the "Website").

Business Name: Legacy Paving Company
Service Area: Austin, TX and surrounding areas within approximately 50 miles
Phone: (308) 530-5290
Email: [email protected]

This Privacy Policy applies to all information collected through our Website, web forms, phone calls, in-person interactions, and any other means by which you provide information to us.

2.1 Information You Provide Directly

We collect personal information you voluntarily provide to us through website forms, phone calls, email, and in-person interactions. This includes:

• Identity information: First name, last name, company or property name
• Contact information: Phone number (including mobile phone number), email address
• Location information: Project address, service address, city, ZIP code
• Project information: Service type requested, project size, timeline, and project description you provide
• Communication preferences: Preferred contact method, SMS consent status
• Correspondence: The content of emails, messages, or notes you send us

2.2 Information Collected Automatically

When you visit our Website, we and our third-party service providers automatically collect certain technical information, including:

• Device and browser information: IP address, browser type, operating system, device type
• Usage data: Pages visited, time spent on pages, referring URL, links clicked
• Cookie and tracking data: Cookies, pixel tags, and similar technologies placed by us and by Meta (Facebook/Instagram) on your browser — see Sections 5 and 11 for full details

2.3 Information from Third-Party Platforms

If you submit information through a Meta (Facebook or Instagram) Lead Ad or instant form, we receive the personal information you provide in that form, which may include your name, phone number, and email address. This is governed by Meta's privacy policy in addition to ours.

We use the personal information we collect for the following purposes:

We do not use your personal information for any purpose materially different from those described above without providing you with prior notice and, where required by law, obtaining your consent.

4.1 SMS Program Description

Program Name: Legacy Paving Company SMS Messaging Program

We use your mobile phone number to send you text messages including appointment confirmations, appointment reminders, project quotes, follow-up communications, and service-related updates. These messages are sent using an automated text messaging platform.

Message frequency varies based on your service inquiry and project stage. You may receive multiple messages over the course of an active project inquiry or scheduled service.

Message and data rates may apply. Contact your wireless carrier for details about your plan.

4.2 How We Obtain SMS Consent

We collect your consent to receive SMS messages through a separate, unchecked opt-in checkbox on our web forms. Consent language presented at the time of opt-in reads substantially as follows:

Providing consent to receive text messages is never a condition of requesting an estimate, hiring us, or receiving any service. You may contact us and receive all services without opting in to SMS communications.

4.3 How to Opt Out of SMS

You may opt out of receiving text messages from us at any time using any of the following methods:

• Reply STOP to any text message you receive from us. You will receive a single confirmation message and no further messages will be sent.
• Reply HELP to any text message to receive help information and our contact details.
• Contact us directly at (308) 530-5290 or [email protected] to request removal from our SMS list.

Opt-out requests are processed within 24 hours. You may revoke SMS consent at any time and in any reasonable manner, consistent with FCC rules effective April 2025.

4.4 Texas SB 140 Compliance

We comply with Texas SB 140 (effective September 1, 2025), which extends the Texas Telephone Solicitation Act to cover SMS messages. We do not send marketing text messages before 9:00 AM or after 9:00 PM Central Time, Monday through Saturday, and not before 12:00 PM (noon) on Sundays. We maintain records of SMS consent with date, time, source, and exact language agreed to. We honor the Texas No-Call List for marketing messages.

Carriers, including T-Mobile, are not liable for delayed or undelivered messages. By providing your mobile phone number and opting in to receive text messages, you confirm that you are the owner or authorized user of the mobile device and phone number provided, and that you are at least 18 years of age.

We use the Meta Pixel (also known as the Facebook Pixel) and related technologies, including the Meta Conversions API, on our Website. This disclosure is provided in compliance with Meta's Business Tools Terms, which require that we notify you of the following.

5.1 What the Meta Pixel Does

The Meta Pixel is a piece of code provided by Meta Platforms, Inc. that we have installed on our Website. When you visit our Website, the Pixel:

• Places cookies on your browser, including the _fbp cookie (Facebook browser ID) and the fr cookie (used for ad delivery and measurement)
• Collects data about your browsing activity on our Website, including pages visited, actions taken (such as submitting a form), device information, and IP address
• Transmits this data to Meta Platforms, Inc. for advertising measurement, optimization, and audience building purposes

5.2 Advanced Matching

If we use Meta's Advanced Matching feature, form field data you submit — such as your name, email address, or phone number — may be captured in hashed (encrypted) form before being transmitted to Meta. This is used to improve the accuracy of ad measurement and attribution.

5.3 How We Use Meta Pixel Data

Data collected through the Meta Pixel is used to:

• Measure the effectiveness of our advertising on Facebook and Instagram
• Optimize ad delivery to reach people most likely to be interested in our paving services
• Build Custom Audiences of Website visitors for retargeting advertising
• Create Lookalike Audiences to find new potential customers similar to our existing customers

5.4 Your Opt-Out Rights

You may opt out of the collection and use of your information for targeted advertising through the following resources:

• Digital Advertising Alliance: http://www.aboutads.info/choices
• European opt-out portal: http://www.youronlinechoices.eu/
• Facebook Ad Preferences: https://www.facebook.com/adpreferences
• Browser cookie controls: You may block or delete cookies through your browser settings. Note that blocking cookies may affect Website functionality.

For more information about how Meta uses the data it receives through the Meta Pixel, please see Meta's Privacy Policy at https://www.facebook.com/privacy/policy/.

6.1 Meta Lead Ads (Facebook / Instagram)

We may run Lead Ad campaigns on Facebook and Instagram using Meta's Instant Form feature. When you submit your information through one of our Lead Ad forms, we receive the personal information you provide, which may include your name, email address, phone number, and project details.

This information is used solely to respond to your paving service inquiry and to provide you with a quote or follow-up communication. Your submission is governed by both this Privacy Policy and Meta's Privacy Policy. We will contact you only regarding the purpose for which you provided your information unless you provide additional consent.

In compliance with Meta's Lead Ads Terms of Service, lead data collected through Meta Lead Ads will not be sold under any circumstances and will only be used for the purposes stated in the applicable Lead Ad's call-to-action.

6.2 Custom Audiences

We may share certain customer information — such as email addresses and phone numbers — with Meta in hashed (encrypted) form to create Custom Audiences for targeted advertising on Facebook and Instagram. This allows us to show relevant ads to existing customers and to create Lookalike Audiences of similar potential customers.

If you would like to opt out of this use of your information for advertising audience building, you may:

• Adjust your preferences at https://www.facebook.com/adpreferences
• Contact us at [email protected] to request removal from advertising audiences

7.1 We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

7.2 Third Parties We Share Data With

We share personal information with the following categories of third parties for the purposes described:

7.3 Service Providers

We may engage other third-party service providers (such as website hosting, email delivery, and accounting software providers) who process personal data on our behalf as data processors. These providers are contractually required to protect personal data and use it only for the purposes we direct.

8.1 Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction, including:

• SSL/TLS encryption for data transmitted between your browser and our Website (HTTPS)
• Role-based access controls limiting access to personal data to authorized personnel only
• Secure CRM platform (GoHighLevel) with enterprise-level security for stored contact data
• Regular review of our data collection, storage, and processing practices

No method of transmission over the Internet or electronic storage is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security.

8.2 Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Active customer records: Retained throughout the customer relationship and for a reasonable period after its conclusion
• SMS consent records: Retained for a minimum of 4 years from the date of consent or last communication, consistent with the TCPA statute of limitations
• Estimate and project records: Retained for a minimum of 4 years for business and legal purposes
• Website analytics data: Retained per Google Analytics default retention settings (14 months for user-level data)
• Deleted records: When customer data is deleted upon request, we process the deletion within 45 days and remove records from backups within 90 days

The Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, provides certain rights to Texas residents with respect to their personal data. While Legacy Paving Company may qualify for the small business exemption under applicable SBA size standards for our industry (NAICS 238), we are committed to honoring the following rights for all Texas residents as a matter of good practice:

9.1 Your Rights

As a Texas resident, you may have the following rights regarding your personal data:

• Right to Know: You have the right to confirm whether we process your personal data and to access the data we hold about you
• Right to Correct: You have the right to correct inaccurate personal data we maintain about you
• Right to Delete: You have the right to request deletion of personal data we have collected from you, subject to certain exceptions
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable format
• Right to Opt Out of Targeted Advertising: You have the right to opt out of the processing of your personal data for purposes of targeted advertising
• Right to Opt Out of Sale: We do not sell personal data. If this practice changes, we will notify you and provide opt-out mechanisms
• Right to Opt Out of Profiling: You have the right to opt out of profiling that produces legal or similarly significant effects

9.2 How to Exercise Your Rights

To exercise any of the rights described above, please contact us using one of the following methods:

• Email: [email protected] with subject line "Texas Privacy Rights Request"
• Phone: (308) 530-5290
• Mail: Legacy Paving Company, Austin, TX

We will respond to verified requests within 45 days of receipt. We may extend this period by an additional 45 days when reasonably necessary, with prior notice. We will not discriminate against you for exercising any privacy rights.

9.3 Verification Process

To protect your privacy, we verify your identity before processing data access, correction, or deletion requests. We may ask you to confirm information we have on file (such as your name and the phone number or email associated with your record) to complete the verification.

9.4 Sensitive Data

We do not sell sensitive personal data as defined under the TDPSA. If this practice were to change, we would display the following notice and obtain your consent: "NOTICE: We may sell your sensitive personal data." No such sale currently occurs.

9.5 Appeals

If we decline to act on your rights request, you may appeal our decision by contacting us at [email protected] with the subject line "Privacy Rights Appeal." We will respond to your appeal within 60 days. If your appeal is denied, you may contact the Texas Attorney General's office at texasattorneygeneral.gov for assistance.

Our Website and services are directed to adults and business professionals. We do not knowingly collect personal information from children under the age of 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information.

If you believe that we may have collected information from a child under 13, please contact us at [email protected].

For SMS services specifically: by providing a mobile phone number and opting in to receive text messages, you represent that you are at least 18 years of age and the authorized user of that mobile number.

We use cookies and similar tracking technologies on our Website. Cookies are small data files placed on your device by your browser when you visit a website.

11.1 Types of Cookies We Use

11.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is set. Please note that refusing or deleting cookies may affect the functionality of our Website and other websites you visit.

For advertising cookies specifically, you may also use the opt-out tools described in Section 5.4 above.

11.3 Global Privacy Control (GPC)

As of January 1, 2025, we honor Global Privacy Control (GPC) browser signals as opt-out requests from targeted advertising and sale of personal data, consistent with Texas TDPSA requirements. If your browser sends a GPC signal, we will treat it as a request to opt out of targeted advertising for that browser session.

We implement reasonable safeguards to protect your personal information. In the event that we experience a data breach that affects your personal information, we will notify you and the appropriate regulatory authorities as required by Texas law.

Under the Texas Identity Theft Enforcement and Protection Act (Chapter 521, Texas Business & Commerce Code), if a security breach occurs that involves sensitive personal information of Texas residents:

• We will notify affected individuals within 60 days of discovering the breach
• We will notify the Texas Attorney General within 30 days if the breach affects 250 or more Texas residents

Breach notifications will be provided by email, written notice, or, where required, through prominent posting on our Website or notification to major statewide media.

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or regulatory requirements. When we make material changes, we will:

• Update the "Effective Date" and "Last Updated" dates at the top of this policy
• Post the revised policy on this page
• Where required by law or where we believe it is appropriate, notify you directly by email or other means

We encourage you to review this Privacy Policy periodically. Your continued use of our Website or services after the effective date of a revised policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

For changes to our SMS practices, we will provide notice as required by the TCPA and applicable carrier guidelines. Material changes to SMS terms may require you to re-confirm your consent.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using any of the following methods:

We are committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy concern, you may also contact the Texas Attorney General's Consumer Protection Division at texasattorneygeneral.gov.