Effective Date: November 16, 2025
C&M Subsurface, LLC (“C&M Subsurface,” “we,” “our,” or “us”) hereby establishes this Ultimate Privacy Policy (the “Policy”) to inform all visitors, clients, and users (“User” or “you”) of the Website https://cmsubsurface.com (the “Website”) regarding the collection, processing, storage, disclosure, and use of personal information. This Policy is designed to comply fully with all applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as well as international privacy regulations, including the General Data Protection Regulation (GDPR).
By accessing, using, or interacting with the Website, you hereby acknowledge and consent to the terms, conditions, and practices described herein.
- Introduction and Purpose
1.1 This Policy sets forth the rights and obligations of Users and C&M Subsurface with respect to personal information collected through the Website.
1.2 The purpose of this Policy is to:
- Ensure transparency in data collection, processing, and storage;
- Inform Users of their rights under applicable U.S. and international law;
- Define responsibilities for secure handling of personal data;
- Provide a framework for marketing communications, cookies, and consent.
1.3 C&M Subsurface reserves the right to modify, amend, or update this Policy at any time, with such modifications becoming effective immediately upon posting on the Website. Continued use constitutes acceptance of such modifications.
- Definitions
- Personal Information / Personal Data: Any information relating to an identified or identifiable individual.
- Processing: Any operation performed on personal information, including collection, storage, disclosure, transfer, modification, or deletion.
- User Consent: Freely given, specific, informed, and unambiguous indication of the User’s wishes regarding the processing of personal data.
- Third-Party Services: Any external service provider, including analytics, email marketing, and advertising platforms engaged by C&M Subsurface.
- Categories of Information Collected
3.1 Information Provided Voluntarily
C&M Subsurface collects the following personal information when submitted voluntarily through the Request a Quote form or other interactive features:
- Full legal name
- Email address
- Telephone number
- Company or business name
- Project address
- Project-specific details
3.2 Information Collected Automatically
We also collect technical information automatically via Google Analytics (GA4) and similar services:
- IP addresses
- Device and browser type/version
- Operating system
- Pages visited, time spent, and navigation paths
- Referring URLs
- Traffic and performance data
This information is used solely for analytics, Website optimization, security, and marketing purposes.
3.3 Excluded Sensitive Data
C&M Subsurface does not collect sensitive personal information such as social security numbers, financial account details beyond project-related communications, precise geolocation, or other high-risk identifiers.
- Purposes for Processing Personal Information
Personal information shall be processed solely for the following purposes:
- Responding to project inquiries and providing quotes
- Communicating with Users regarding services, project updates, or requests
- Sending newsletters, marketing communications, and promotional materials, with explicit consent
- Conducting Website analytics to improve functionality and user experience
- Delivering personalized and retargeted advertising through third-party platforms
- Ensuring compliance with applicable law, maintaining security, and protecting against unauthorized access or fraud
No personal information shall be used for purposes incompatible with those stated without explicit User consent.
- Data Storage, Retention, and Security
5.1 Storage
All personal data collected is securely stored on Mailchimp, a platform with robust security measures and encryption.
5.2 Sharing
Personal information may be shared with third-party service providers for legitimate business purposes under contractual obligations to protect privacy. Third-party services include:
- Analytics platforms (Google Analytics)
- Email marketing platforms (Mailchimp)
- Advertising/retargeting platforms (Google Ads, Meta Ads)
C&M Subsurface does not sell personal information under any circumstances.
5.3 Retention
Data shall be retained indefinitely unless deletion is requested. Retention may also be required for legal compliance, dispute resolution, or other legitimate business purposes.
5.4 Security
Reasonable administrative, technical, and physical safeguards are implemented, including:
- Encryption of data in transit and at rest
- Access control measures restricting data access to authorized personnel
- Periodic security assessments and vulnerability scans
- Physical security measures for server and office facilities
Despite these safeguards, no system is completely secure. Users acknowledge inherent risks associated with online data transmission.
- Cookies, Tracking, and Consent
6.1 Types of Cookies
- Strictly Necessary Cookies: Essential for Website operation
- Performance/Analytics Cookies: Collect anonymized statistics for optimization
- Marketing/Targeting Cookies: Deliver personalized advertising and retargeting
6.2 Consent Mechanism
Users are presented with a consent banner upon first visit. Users may:
- Accept all cookies
- Reject non-essential cookies
- Adjust preferences at any time via settings
6.3 Withdrawal of Consent
Consent may be withdrawn at any time through browser settings or by contacting Co*****@**********ce.com.
6.4 Third-Party Tracking
Third-party providers may place cookies or tracking pixels. Their processing is subject to their own privacy policies.
- Marketing Communications
- Marketing communications shall be sent only to Users who provide explicit consent.
- Users may unsubscribe via the “unsubscribe” link or by contacting Co*****@**********ce.com.
- Retargeting advertising may occur through Google Ads, Meta Ads, and other platforms. Users may opt out via platform-specific controls.
- EU Users must provide explicit consent, which may be withdrawn at any time.
- Users’ Rights
8.1 CCPA Rights (California Residents)
- Right to Access: Obtain information regarding collected personal information
- Right to Deletion: Request removal of personal data
- Right to Opt-Out: Request cessation of data sharing for marketing
- Non-Discrimination: Exercising rights does not impact access to services
8.2 GDPR Rights (EU Residents)
- Access and Portability
- Rectification
- Erasure (“Right to be Forgotten”)
- Restriction of Processing
- Withdrawal of Consent
- Right to Lodge Complaint with Data Protection Authority
Requests may be made via Co*****@**********ce.com.
- Minors
- Only minors with parental or guardian consent may submit information.
- Parents or guardians are responsible for supervising minor interaction with the Website.
- Cross-Border Data Transfers
- Data may be transferred outside the U.S. or EEA.
- Transfers are safeguarded via standard contractual clauses or GDPR-compliant mechanisms.
- Limitation of Liability
- C&M Subsurface shall not be liable for unauthorized access or misuse of personal data by third parties.
- Indirect, incidental, or consequential damages arising from Website use are disclaimed to the maximum extent permitted by law.
- Users assume responsibility for safeguarding credentials and personal information submitted.
- Governing Law and Jurisdiction
- Governed by laws of the State of Texas, U.S.A., without regard to conflict of law principles.
- Exclusive jurisdiction: courts located in Texas.
- Amendments
- Policy may be amended at any time.
- Material changes shall be posted with an updated effective date.
- Continued use constitutes acceptance.
- Contact Information
For inquiries, concerns, or data subject requests, Users may contact:
Email: Co*****@**********ce.com
Website: https://cmsubsurface.com
