Privacy Policy

With your analytics cookie permission, we use Google Analytics 4 to measure page visits, engagement, phone-button clicks and successful service requests. We do not send your name, email, phone number, service address or advisor conversation text to Google Analytics. You can withdraw permission using Cookie Settings.

Effective Date: September 6, 2026
Last Updated: November 2, 2026

Heco Heating and Air Conditioning ("Heco," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit hecohvac.com, contact us, request HVAC service or an estimate, or otherwise interact with our business.

Optional advertising visit audit

Only after you allow Advertising, Heco records ad arrival time, page path without its query string, ad-click identifier, campaign and ad-group identifiers, targeted keyword when supplied by the ad link, Google-supplied approximate location identifier, device category, a random browser-session identifier and a coded network identifier. We use these records to measure ad visits and call-button activity and review possible repeat visits. A phone-button click is not a completed or recorded phone call.

The audit transforms your connection IP in memory into a keyed code that changes each UTC day and after a server restart. It does not save the raw IP in this audit or send it to an IP-location provider. Codes and click IDs are still treated as personal information. A shared network, VPN or privacy relay may represent multiple people, and one person may use different networks. Google location IDs are estimates supplied with the ad, not GPS or a verified home address. No fingerprinting, session replay or automatic visitor blocking is used.

Audit records are accessible only to authorized Heco administrators and are not sent to Google or other advertising providers by this feature. Our hosting provider processes the database as part of hosting the site. Records older than seven days are removed by an hourly cleanup; backups may retain prior copies until the host’s backup cycle expires and are not used for advertising analysis. Separate necessary hosting access logs may contain raw IPs for website operation and security; this feature does not add full query-string logging or change the host’s retention.

A session-only, HttpOnly hecoAdAudit cookie links these optional audit records. Advertising is off by default, and Global Privacy Control prevents collection even if you previously opted in. Turn Off Advertising withdraws permission and requests removal of audit records linked to this browser’s current audit cookie. If that cookie is unavailable, use the privacy-request contact below; records still expire on the seven-day schedule. Access to HVAC services does not depend on advertising permission.

Website call measurement

After you allow Advertising, Google may replace our displayed phone number and call links with a Google forwarding number that reaches Heco. Google processes call details such as caller number where available, call time, duration and ad attribution to measure actual calls; calls lasting at least 60 seconds may be counted as qualified call conversions. A qualified call is not necessarily a booked job. This is separate from a phone-button click. Google call reporting and any enabled recording are handled under Google’s settings and applicable notices; do not share sensitive information in a test call. You can decline Advertising and still call our regular business number.

Cookie-free page request totals

We count successful public page requests by hour and fixed page category directly on our server, without cookies or visitor identifiers. These aggregate totals do not store IP addresses, browser identifiers, query strings, search terms, referrers or contact details. They include repeat loads and automated requests and do not identify individual visitors. Totals are retained for 90 days and are separate from optional analytics and advertising records.

Ask Heco AI Chat

Ask Heco is an automated HVAC assistant. When you send a message, Heco processes it against approved Heco reference records to answer your question. The current public chat does not send visitor messages to NVIDIA. External AI processing is disabled for public visitors. It will not be enabled without reviewing production-use permissions, data handling and the notice shown before a message is sent. You can use the website and request service without using chat.

Please do not enter names, private contact details, service addresses, payment information, passwords, health information or other sensitive information in chat. Use our service-request form for contact details. We attempt to block messages containing phone numbers, email addresses or street addresses before sending them to the AI service, but automated detection is not guaranteed.

For follow-up questions, Heco temporarily keeps up to six recent exchanges in server memory, expiring after 20 minutes of inactivity and no later than one hour. A random conversation cookie links your requests and lasts up to 20 minutes. Server restarts may clear context earlier. This is separate from service-request records.

Heco records limited usage events, such as time, page, answer category and service-link clicks. The current chat does not save answered conversation text in Heco’s event database or send conversation text to Google Analytics. Hosting systems and the AI provider may process technical or diagnostic information under their own practices. NVIDIA’s handling is described in its Privacy Policy and API service terms. Earlier Ask Heco testing used NVIDIA’s hosted API to process questions and generate answers. NVIDIA’s published trial terms permit collection of inputs and outputs to improve its products and AI models and for security, fraud and abuse monitoring, with certain retention exceptions. Those terms also restrict personal-data submissions. Heco does not promise zero retention, a no-training commitment or service-provider-only processing under those trial terms. Public NVIDIA processing is now disabled; separate internal testing uses synthetic or public HVAC information.

Sending a message acknowledges this processing. For chat questions or privacy requests, contact info@hecohvac.com. See also our chat terms.

1. Information We Collect

Information You Provide

We may collect information you voluntarily provide, including:

  • First and last name
  • Telephone number and email address
  • Service address, city, ZIP code, or other location information
  • Requested service, estimate, rebate consultation, or appointment information
  • Information about your heating, air-conditioning, ventilation, or other HVAC equipment
  • Messages, comments, and information submitted through our website
  • Information you provide by telephone, email, text message, or other communications

Please do not submit Social Security numbers, payment-card information, account passwords, health information, or other highly sensitive information through our website service-request form.

Information Collected Automatically

Our website and hosting systems may automatically collect limited technical information, including your IP address, browser and device type, operating system, referring page, pages visited, access date and time, and website error, security, or diagnostic information.

2. Sources of Personal Information

We may collect personal information:

  • Directly from you when you contact us or request service
  • Automatically from your browser or device when you use our website
  • From service providers supporting our website, communications, scheduling, or operations
  • From publicly available sources when reasonably necessary to provide requested services

3. How We Use Your Information

We may use personal information to:

  • Respond to service, estimate, and rebate inquiries
  • Schedule and manage residential or commercial HVAC appointments
  • Communicate with you regarding your request, estimate, project, or service
  • Prepare estimates, proposals, and service recommendations
  • Provide HVAC installation, repair, replacement, and maintenance services
  • Maintain customer, service, warranty, and business records
  • Provide customer support
  • Operate, secure, troubleshoot, and improve our website
  • Detect fraud, abuse, security incidents, or technical problems
  • Comply with applicable laws and legal obligations
  • Establish, exercise, or defend legal claims

Providing a telephone number allows Heco to contact you regarding your inquiry, appointment, estimate, or service. Submitting a service request does not by itself constitute consent to receive automated marketing calls or marketing text messages.

4. How We Disclose Information

We may disclose personal information when reasonably necessary to:

  • Website hosting, database, information-technology, security, email, telephone, scheduling, and other providers that perform services for Heco
  • HVAC equipment suppliers, manufacturers, utility programs, rebate administrators, financing providers, or warranty providers when you request or authorize a related service
  • Accountants, attorneys, insurers, consultants, and other professional advisers
  • Government agencies, regulators, courts, law enforcement, or other parties when required or permitted by law
  • A successor or prospective successor in connection with a merger, financing, reorganization, sale, or transfer of all or part of our business

Providers process information under the terms applicable to the service. We do not assume a provider qualifies as a restricted CCPA service provider solely because it supplies an API. External AI processing remains disabled for public chat while suitable production and data-processing arrangements are evaluated.

5. Sale, Sharing and Advertising Choices

Heco does not sell personal information for money. With your Advertising permission, Google Ads measurement may receive online identifiers, device or browser information and website activity. Heco treats these optional advertising disclosures as sharing for purposes of offering a clear California privacy choice, without assuming that every measurement disclosure is legally classified the same way.

You may use Do Not Sell or Share My Personal Information to turn off optional advertising for this browser without creating an account. You may also use Cookie Settings or enable Global Privacy Control. Advertising is off by default; Global Privacy Control keeps it off even if an older saved choice allowed it. Ad personalization is disabled in our Google tag settings. We do not knowingly sell or share the personal information of children under 16 for advertising.

Analytics and functional tools have separate optional choices. Turning off advertising does not cancel a service request or prevent you from using the booking form. A browser choice does not automatically delete previously collected records; contact Heco for an applicable access, correction or deletion request.

6. Cookies and Similar Technologies

Our website uses cookies or similar technologies reasonably necessary for website functionality, security, form processing, user authentication, and system administration. Google Analytics and Google Ads measurement load only after the corresponding optional permission. We disable Google Signals and ad-personalization signals in our tag configuration. These settings do not by themselves guarantee that a third party never processes information for its own purposes.

When enabled on the Request Service page, Google Places address autocomplete loads only after you allow Functional technology through Cookie Settings. The feature sends information needed to provide address suggestions to Google. This may include text entered into the address field, IP address, browser or device information, and service interactions. Google processes that information under its own terms and privacy policies.

You can change optional technology choices at any time using the Cookie Settings link in the website footer. You may also be able to block or delete cookies through your browser settings. Disabling necessary cookies or third-party scripts may affect certain website functions. For current details about the technologies we use and available controls, see our Cookie Policy.

7. Call Tracking and Call Recording

Heco may use call-routing or call-tracking numbers to identify which website or advertising source generated a telephone call. If Heco records or monitors the contents of a telephone communication, we will provide notice and obtain any consent required by applicable law.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing services, maintaining customer and warranty records, resolving disputes, enforcing agreements, and satisfying legal, accounting, licensing, tax, safety, and recordkeeping requirements.

Retention periods may vary based on the type of information, services provided, our relationship with you, and applicable legal requirements. When information is no longer reasonably necessary, we may delete, anonymize, or securely dispose of it.

For Ask Heco, temporary context is limited to six recent exchanges and expires after 20 minutes of inactivity, with a one-hour maximum. The chat conversation cookie lasts up to 20 minutes. Cookie choices remain in this browser’s local storage until you clear them or we update the consent version; advertising attribution stored in session storage lasts for the browser session. Service-request and equipment records are retained while needed to respond to the request, perform work, handle warranties, maintain required business records or meet legal obligations. The optional advertising visit audit follows the seven-day schedule described above; separate technical hosting logs and necessary business records have their own retention. Third-party retention is governed by the provider’s applicable terms; we do not promise a deletion date we cannot verify.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No website, database, electronic communication, or storage system can be guaranteed to be completely secure.

10. Your Privacy Choices

You may:

  • Choose not to provide optional information
  • Ask us to update or correct your contact information
  • Request that promotional emails stop by using the provided unsubscribe method or contacting us
  • Reply STOP to promotional text messages, when applicable
  • Adjust cookie controls through your browser
  • Contact us with questions about information associated with your service request

Transactional communications concerning appointments, estimates, active services, warranties, safety matters, or account administration may continue when necessary.

11. California Privacy Rights

Depending on Heco's activities and whether the California Consumer Privacy Act applies to Heco for the relevant period, California residents may have the right to request:

  • The categories and specific pieces of personal information collected about them
  • The sources from which personal information was collected
  • The purposes for collecting, using, selling, or sharing personal information
  • The categories of third parties to whom personal information was disclosed
  • Deletion of personal information, subject to applicable exceptions
  • Correction of inaccurate personal information
  • Opt-out of the sale or sharing of personal information
  • Limitation of certain uses or disclosures of sensitive personal information
  • Equal service and freedom from unlawful discrimination for exercising privacy rights

Use Do Not Sell or Share My Personal Information for this browser’s advertising opt-out. For other applicable privacy requests, email info@hecohvac.com or call (916) 813-2766. We do not require you to create an account to submit a request.

Certain exceptions may apply. We may retain information when reasonably necessary to complete a transaction, provide requested services, maintain appropriate business records, comply with legal obligations, protect against fraud or security threats, or establish or defend legal claims.

12. Notice at Collection for California Residents

At or before collecting personal information, Heco provides notice of these categories and purposes:

  • Identifiers and contact information: Used to respond to inquiries, schedule appointments, provide services, and maintain customer records.
  • Customer and service information: Used to understand HVAC needs, prepare estimates, provide services, administer rebates or warranties, and maintain service history.
  • Internet or electronic activity: Used to operate, secure, troubleshoot, and improve the website.
  • Communications: Used to answer questions, document requests, provide customer service, and manage appointments.

We retain these categories according to Section 8. Optional advertising disclosures and your opt-out are described in Section 5. Sources include you, your browser and service providers. Recipients include website hosting and communications providers for service requests, Google for permitted analytics or advertising measurement, and NVIDIA for earlier AI testing as described above. Service and contact records are used to fulfill your requests; chat is not intended for sensitive personal information.

13. Privacy Requests

To ask a question or submit an applicable privacy request, contact Heco using the information in Section 19. Please write Privacy Request in the email subject line.

We may take reasonable steps to verify your identity and authority before fulfilling a request. Information provided for verification will be used for that purpose as permitted by law.

An authorized agent may submit a request on your behalf. We may require evidence of the agent's authorization and may ask you to verify your identity directly with us. We will respond within the time required by applicable law.

14. Global Privacy Control and Do Not Track

Some browsers provide Global Privacy Control ("GPC"), Do Not Track, or similar privacy signals. We recognize Global Privacy Control by keeping optional Advertising off for the browser transmitting the signal. Our advertising attribution endpoint also checks the Sec-GPC request header. You do not need to sign in or submit identity documents for this browser opt-out. Analytics remains a separate optional choice.

There is not currently a universally accepted standard governing all Do Not Track signals. Apart from legally recognized opt-out preference signals, our website does not respond differently when it receives a Do Not Track signal.

15. California “Shine the Light” Disclosure

California residents may request information concerning certain disclosures of personal information to third parties for their own direct-marketing purposes. Heco does not disclose personal information to third parties for their own direct-marketing purposes.

16. Children's Privacy

Our website and HVAC services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child submitted personal information to us, please contact us so we can review and, when appropriate, delete it.

17. Third-Party Websites

Our website may link to utility companies, financing providers, manufacturers, social-media platforms, review websites, rebate programs, or other third-party services. Heco does not control and is not responsible for their privacy, security, or content practices. Review the privacy policy of a third-party website before providing personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, data practices, or legal obligations change. The revised policy will be posted on this page with an updated "Last Updated" date. Material changes will be communicated through the website or another legally appropriate method.

19. Contact Heco

If you have questions about this Privacy Policy or wish to submit a privacy request, contact:

Heco Heating and Air Conditioning
5140 San Francisco Street
Rocklin, CA 95677
Phone: (916) 813-2766
Email: info@hecohvac.com
California Contractor License: #1050351