Privacy Policy

Last updated: April 30, 2026

Castle Rock Christmas Lights ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, the legal bases we rely on, and the rights you have under applicable law — including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), and the Colorado Privacy Act (CPA). For details on cookies specifically, see our Cookie Policy.

Data controller: Castle Rock Christmas Lights, Castle Rock, Colorado, USA. Contact: info@castlerockchristmaslights.com · (720) 443-1563.

Information We Collect

We only receive personal information that you voluntarily provide through the quote form, a phone call, a text message, or an email. We do not maintain any independent customer database, CRM, or backend store of personal data on this website. Specifically:

• Quote / contact form submissions — name, phone, email, property address, and any project details you choose to include. These are submitted directly into HouseCall Pro and stored on their platform on our behalf. Our website does not retain a copy.
• Call, text, and email communications — handled through our phone carrier and email provider; we keep records only as needed to respond to and service your request.
• Photos of your property, only if you choose to send them for an estimate.
• Payment information — collected and processed by HouseCall Pro and its PCI-compliant payment processors. We never see, store, or transmit your full card details.
• Anonymous website analytics — only if you opt in via the cookie banner: aggregated page views, device type, and referring URL via Google Analytics 4 with IP anonymization. No name, email, or phone number is collected by analytics.

What we do NOT collect: we do not run user accounts, we do not store passwords, we do not collect government IDs, and we do not build advertising profiles on site visitors.

How We Use Your Information

We use your information to:

• Provide estimates, schedule installations, and deliver our services
• Communicate with you about your project and appointments
• Send seasonal reminders and promotional offers (with your consent)
• Improve our services and website experience
• Comply with legal obligations

Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent — for non-essential cookies and marketing communications. You may withdraw consent at any time.
• Contract — to provide the services you requested (quotes, scheduling, installation).
• Legitimate interests — to operate, secure, and improve our website and services, where not overridden by your rights.
• Legal obligation — to comply with tax, accounting, and other applicable laws.

Your Rights (GDPR — EU/UK Residents)

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion ("right to be forgotten")
• Restrict or object to processing
• Data portability — receive your data in a structured, commonly used format
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with your local supervisory authority

To exercise these rights, email info@castlerockchristmaslights.com. We respond within 30 days.

International Transfers

We are based in the United States. If you access the Site from outside the US, your information will be transferred to, stored, and processed in the US. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for transfers from the EEA/UK.

California Privacy Rights (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of personal information we collected from you
• Correct inaccurate personal information
• Opt out of the "sale" or "sharing" of personal information
• Limit the use of sensitive personal information
• Be free from discrimination for exercising these rights

We do not sell your personal information and we do not "share" it for cross-context behavioral advertising as defined under CPRA. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request.

No Sale or Sharing of Personal Information

This applies to all visitors and customers, regardless of jurisdiction:

• We do not sell, rent, trade, or lease your personal information to anyone.
• We do not share your information with third parties for their own marketing or advertising.
• We do not participate in cross-context behavioral advertising or data brokerage.
• We do not use your name, email, phone, or address to build advertising profiles.
• The only third parties that receive your information are the service providers strictly necessary to deliver the service you requested (e.g. HouseCall Pro for scheduling, invoicing, and payment processing). They are bound by contract and their own privacy commitments to use it only for that purpose.
• We will only disclose information when legally required (e.g. valid court order or subpoena).

Colorado Privacy Act (CPA)

As a Colorado-based business, we honor the rights granted to Colorado residents under the CPA, including the rights to access, correct, delete, and obtain a portable copy of your personal data, and the right to opt out of targeted advertising, sale of personal data, and certain profiling. Submit requests using the contact details above.

Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 16 (or under 13 in the US under COPPA). If you believe a child has provided us with personal information, contact us and we will delete it.

Data Retention

We retain personal information only as long as necessary to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. Quote and customer records are typically kept for up to 7 years for tax and warranty purposes.

Third-Party Services & Processors

Because we do not operate our own customer database, the following vendors handle most personal data on our behalf. Each is bound by their own privacy and security commitments:

• HouseCall Pro — receives and stores all quote / contact form submissions, scheduling, invoicing, and payment data. Acts as our processor (and as an independent controller for payments). See HouseCall Pro Privacy Policy.
• Google Analytics 4 — anonymous traffic measurement, loaded only after you consent. IP addresses are anonymized.
• Phone carrier & email provider — used to receive calls, SMS, and emails you initiate.

Cookies & Tracking

Our website uses cookies and similar technologies. Non-essential cookies (such as Google Analytics) are loaded only after you grant consent via our cookie banner. You can change your preferences at any time:

For full details on each cookie we use, see our Cookie Policy.

Data Security

Our security posture benefits directly from the fact that this website does not store personal data:

• No on-site database of customer information — the website cannot be breached for personal data because none is stored here.
• HTTPS everywhere — all traffic, including form submissions to HouseCall Pro, is encrypted in transit (TLS).
• No payment data on our systems — payments are tokenized and processed by HouseCall Pro's PCI-compliant payment provider.
• Least-privilege access — only authorized team members have HouseCall Pro accounts, protected by strong passwords and access controls provided by the platform.
• Consent-gated analytics — no analytics or marketing scripts run until you explicitly opt in.

Marketing Opt-Out

You may opt out of promotional communications by replying "STOP" to any text message or using the unsubscribe link in emails. Transactional messages (e.g., appointment confirmations) may continue.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. Material changes will be highlighted on the Site.

Contact Us

If you have questions about this Privacy Policy, please contact us at:
Castle Rock Christmas Lights
Phone: (720) 443-1563
Email: info@castlerockchristmaslights.com
Castle Rock, CO