Privacy Policy

This policy explains what Cardinal Exteriors and Home Services LLC ("we", "us", "our") collects when you visit https://cardinalexteriors.com, why we collect it, who we share it with, how long we keep it, and what choices you have. It covers this website only. It does not cover information you give us in person, over the phone, or under a signed service agreement.

Who we are

Cardinal Exteriors and Home Services LLC, trading as Cardinal Exteriors, is a licensed Minnesota home services contractor. We are the controller of the information described in this policy. You can reach us at:

• Address: 730 Tower Dr. Ste #100, Medina, MN 55340-9691
• Phone: 952-445-8638
• Email: sales@cardinalexteriors.com

Information we collect

Information you give us

Several pages on this site carry a contact or estimate request form. What you type into those forms — typically your name, phone number, email address, property address and a description of the work you need — is sent to our marketing and CRM provider and to us, so that we can respond to your enquiry.

If you start a chat using the chat widget, the contents of that conversation and any contact details you provide in it are stored by our chat provider so we can reply.

Information collected automatically

When you load a page we automatically receive standard technical information: your IP address, browser and device type, the page you requested, the page that referred you, and an approximate location (country and city) derived from your IP address.

We also record analytics events about how the site is used — pages viewed, how you arrived, and general interaction with the page. Where you arrive from one of our advertisements, the click identifier in the link (gclid, gbraid or wbraid) is read so the visit can be attributed to the correct campaign, and is carried across the pages you view during that visit.

Cookies and tracking technologies

Always active

Basic traffic measurement always runs. Our analytics provider loads on every page for every visitor and is not controlled by the cookie banner. It sets cookies that distinguish one browser from another, so that repeat visits are not counted as new people. We use this only to understand overall traffic — how many people visit, which pages they read, and which campaigns brought them.

The following also run for every visitor and are not controlled by the banner:

• Website hosting analytics and page loading performance measurement.
• The chat widget, so the chat launcher is available on every page.
• Error monitoring, which records technical details of errors and crashes so we can fix them.
• Our contact and estimate forms, on pages that carry one. These are supplied by our CRM provider and set their own cookies.

The companies behind these are named under "Who we share information with" below.

Advertising

Advertising cookies are on by default, and you can switch them off. We advertise online, and we need to know which visits came from those advertisements in order to judge whether the advertising is worth what we pay for it. So advertising storage, advertising personalisation and the sharing of advertising user data are enabled when you arrive, and advertising cookies may be set. Opening cookie preferences and turning off the Marketing category stops this and deletes the advertising cookies already on your device.

We do not use this information to build a profile of you for anyone else, and we do not sell it. Its purpose is measuring our own advertising and showing our own advertisements.

Controlled by the cookie banner

Two categories in the cookie banner change what runs:

• Analytics — additional analytics tools that record how visitors interact with individual pages, such as session recording or heatmaps. None are switched on at present, but the site supports them. This setting does not turn off the basic traffic measurement described above.
• Marketing — the advertising measurement described above, together with any remarketing tags. On by default; switching it off is a genuine opt-out and clears the associated cookies.

Your choices

You can open cookie preferences at any time from the link in the cookie banner and change either category. You can also block or delete cookies in your browser settings, and most browsers offer a private browsing mode. Those are outside our control but will limit what any of these tools can record.

We honour Global Privacy Control. If your browser or an extension sends a Global Privacy Control signal, we treat it as an instruction to opt out: advertising storage, advertising personalisation and the sharing of advertising user data all start switched off, and the Marketing category in the cookie banner starts off too. You do not have to do anything else. If you would rather allow advertising cookies despite the signal, you can switch the Marketing category on yourself and that choice will be respected.

The signal does not switch off basic traffic measurement, which is first-party measurement of our own site rather than targeted advertising. To opt out of anything else, or to exercise any of the rights below, contact us using the details above.

Records we keep on our own systems

Separately from the third-party tools above, our content system stores:

• Search terms typed into the site search, with a count of how often each was searched and how many results it returned. These are stored as the search term only, and are not linked to a person.
• Addresses of pages that returned "not found", with a count, so we can fix broken links.
• Security events — where a request is rate-limited or blocked, we record the IP address, the page requested, the browser user agent, the approximate country and city, the referring page and the request method.

Of these, the security event record is the only one containing information capable of identifying a device, and it exists to protect the site from abuse.

Who we share information with

We do not sell your personal information. We share it with the service providers that make this website work. Each receives data directly from your browser or from our systems, acts on our instructions, and has its own privacy policy:

• Google — website analytics, and advertising measurement for our own campaigns.
• Vercel — website hosting, page view analytics and performance measurement.
• Sanity — the content management system that stores page content and the records described above.
• Constant Contact Lead Gen & CRM (formerly SharpSpring) — the contact and estimate forms, and the customer records created from them.
• Chatwoot — the chat widget and chat transcripts, self-hosted on our behalf.
• Sentry — error and crash monitoring.

We may also disclose information where the law requires it, in response to a lawful request from a public authority, to establish or defend legal claims, or where it is necessary to protect our rights, our property, or the safety of others. If our business is sold or merged, information may transfer to the acquirer as part of that transaction.

How long we keep information

We keep information only as long as we need it:

• Enquiries and customer records — while we are dealing with your enquiry, and then for seven years after our last dealing with you, so that we can honour workmanship warranties and meet tax and record-keeping obligations.
• Chat transcripts — 24 months from the end of the conversation.
• Security event records — 90 days, unless an event forms part of an ongoing investigation.
• Google Analytics data — user-level and event-level data is retained for 14 months. Aggregate reporting totals are kept for longer.
• Search terms and not-found page addresses — kept as running counts with no personal information attached, and reviewed periodically.

Where we no longer need information we delete it or anonymise it so it can no longer be connected to you.

Your privacy rights

Minnesota residents have rights under the Minnesota Consumer Data Privacy Act. Residents of other states may have comparable rights under their own state law, and we apply the process below to every request we receive, wherever you live.

You may ask us to:

• Confirm whether we hold personal data about you, and give you access to it.
• Correct anything inaccurate.
• Delete personal data we hold about you.
• Give you a copy in a portable, machine-readable format.
• Give you a list of the specific third parties to whom we have disclosed personal data about you. Minnesota law entitles you to the named companies, not just the categories - they are listed above, and we will confirm them on request.
• Stop using your personal data for targeted advertising or profiling.

How to make a request. Email sales@cardinalexteriors.com or write to us at the address above, and say which right you wish to exercise. We may need to ask for information to confirm who you are — we will only use it for that purpose. We will respond within 45 days. If a request is complex we may take a further 45 days, and we will tell you before we do.

If we refuse. We will explain why. You may appeal by replying to that decision, or by writing to us at the address above marking your letter "Privacy Appeal". We will decide the appeal within 45 days and explain the outcome in writing. If we reject your appeal, you may complain to the Minnesota Attorney General.

We will not treat you differently, or refuse to serve you, because you exercised a right.

Children's privacy

This website is intended for property owners and is not directed to children. We do not knowingly collect personal information from anyone under 13, and we do not knowingly use the data of anyone we know to be under 16 for targeted advertising or profiling. If you believe a child has given us personal information, contact us and we will delete it.

How we protect information

The site is served over an encrypted connection, access to our content and customer systems is restricted to people who need it, and we apply rate limiting and blocking to abusive traffic. No website can promise perfect security, but we take reasonable steps to protect the information we hold.

Contact us about this policy

For any question about this policy, or about the information we hold:

• Email: sales@cardinalexteriors.com
• Phone: 952-445-8638
• Post: Cardinal Exteriors and Home Services LLC, 730 Tower Dr. Ste #100, Medina, MN 55340-9691

Changes to this policy

We may update this policy as the website or our practices change. The version published here is the one that applies, and we will update the effective date below whenever we change it. If we make a change that materially affects how we use information already collected about you, we will say so prominently on this page.

Effective date: 14 September 2026