Privacy Policy

Last updated: January 15, 2026 · Effective since: January 1, 2020

1. Introduction & Scope

Bright Home New ("we," "our," "us") is a home renovation and remodeling company headquartered at 9 Apricot Rd, Casa Blanca, New Mexico 87007, USA. We have been operating since 2020 and are committed to protecting the privacy of every visitor, lead, client, and subscriber who interacts with our website, mobile interfaces, and offline services.

This Privacy Policy describes what information we collect, how we use it, the choices you have, and the safeguards we put in place to protect your data. By using our website or engaging our services, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide Directly

• Contact information: Full name, phone number, email address, mailing address, and ZIP code when you submit a booking form, contact form, or newsletter signup.
• Project details: Property type, square footage, project scope, budget range, timeline, and any specifications you share during consultations or via forms.
• Financial information: When financing is requested, we collect data necessary to process loan applications through our lending partners. We do not store full credit card numbers on our servers.
• Communication records: Email correspondence, phone call logs, and meeting notes created during your project lifecycle.

2.2 Information Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system, screen resolution, and time zone settings.
• Usage data: Pages visited, time spent on each page, referring URLs, search terms used to find our site, and click patterns.
• Location data: Approximate geographic location derived from IP address (city/state level only — never GPS-level without explicit consent).
• Cookie data: Authentication cookies, preference cookies, analytics cookies, and marketing pixels (see Section 5 below).

2.3 Information from Third Parties

We may receive supplementary data from trusted partners including:

• Google Maps (for property address verification)
• Property data aggregators (public records, square footage, year built)
• Insurance providers (during claim-coordinated repairs)
• Lending partners (for financing pre-approvals you initiate)

3. How We Use Your Information

We process your personal information for the following legitimate business purposes:

1. Service delivery: Responding to inquiries, scheduling consultations, preparing quotes, and executing contracted renovation projects.
2. Project management: Coordinating with subcontractors, permit offices, suppliers, and inspectors on your behalf.
3. Communication: Sending project updates, appointment reminders, and warranty documentation.
4. Marketing: Sending newsletters, seasonal offers, and design trend reports — only when you have explicitly opted in. You may unsubscribe at any time via the link in each email or through our unsubscribe page.
5. Analytics & improvement: Analyzing website usage patterns to improve user experience, page performance, and content relevance.
6. Legal compliance: Maintaining records for tax, insurance, and regulatory purposes as required by federal and state law.
7. Security: Detecting, preventing, and investigating fraud, unauthorized access, or other malicious activity.

We do not sell your personal information to third parties under any circumstances.

4. Information Sharing & Disclosure

We share your information only with the following categories of recipients, and only to the extent necessary:

• Service providers: Subcontractors, suppliers, architects, and inspectors working on your project (name, address, phone, project scope only).
• Financial partners: Lenders and insurance adjusters when you request financing or file a claim.
• Technology providers: Email service providers, analytics platforms, hosting providers, and CRM tools used to operate our business. All are bound by data processing agreements.
• Legal authorities: When required by law, court order, or government regulation; or to protect our rights, property, or safety.
• Business successors: In the event of a merger, acquisition, or asset sale, information may transfer to the successor entity under equivalent privacy protections.

5. Cookies & Tracking Technologies

We use the following categories of cookies and similar technologies:

• Essential cookies: Required for core site functionality (session management, security). Cannot be disabled.
• Preference cookies: Remember your language, region, and display preferences.
• Analytics cookies: Aggregate, anonymized usage data via Google Analytics. We use this to understand which content resonates.
• Marketing cookies: Used to measure the effectiveness of advertising campaigns and to retarget visitors who showed interest in our services. Only set after explicit consent where required by law.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may limit some site functionality.

6. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: Limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent for processing that relies on consent at any time without affecting the lawfulness of prior processing.
• CCPA-specific rights (California residents): Right to know what personal information is collected, sold, or disclosed; right to opt out of the sale of personal information (we do not sell data); right to non-discrimination for exercising your rights.
• GDPR-specific rights (EU/EEA residents): All rights listed above, plus the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@brighthomenew.com. We respond to verified requests within 30 days.

7. Data Security Measures

We implement industry-standard safeguards to protect your personal information:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• AES-256 encryption at rest for sensitive data stored in our databases.
• Role-based access controls limiting internal data access to authorized personnel only.
• Annual third-party security audits and penetration testing.
• Regular security awareness training for all employees and contractors.
• Incident response plan with 72-hour breach notification where required by law.
• Secure backup and disaster recovery procedures with quarterly testing.

Despite our efforts, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying affected users promptly in the event of a breach.

8. Data Retention Policy

We retain personal information only as long as necessary for the purposes described in this policy:

• Active client records: 10 years after project completion (for warranty claims and legal compliance).
• Inquiry/lead data: 3 years from last interaction, then anonymized or deleted.
• Newsletter subscriber data: Until you unsubscribe, plus 30 days for processing.
• Marketing analytics: Aggregated and anonymized within 26 months.
• Financial records: 7 years as required by IRS regulations.
• Security logs: 12 months, then automatically purged.

9. Children's Privacy

Our services are intended exclusively for individuals aged 18 and older. We do not knowingly collect personal information from children under 13 (under 16 in the EU). If you believe a child has provided us with personal information, please contact us immediately at privacy@brighthomenew.com, and we will promptly delete such information.

10. Third-Party Links & Services

Our website may contain links to third-party websites, social media platforms, and embedded content (such as Google Maps, YouTube videos, and social media widgets). These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review their policies before providing any personal information.

Specifically, we integrate with: Google Analytics, Google Maps, Meta (Facebook/Instagram) for marketing pixels, Mailchimp for newsletter delivery, Stripe for payment processing, and DocuSign for contract execution. Each processes data in accordance with their published privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. For material changes (those that significantly affect how we handle your data), we will provide notice via email to active subscribers at least 30 days before the changes take effect.

We encourage you to review this policy periodically to stay informed about how we protect your information.