Privacy Policy

1. Introduction

2020 Flooring Solutions (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.2020flooring.com (the “Site”). Please read this Privacy Policy carefully.

By using the Site, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Site.

2. Information We Collect

2.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you:

• Submit a contact form or inquiry
• Subscribe to our newsletter or communications
• Request information about our services
• Communicate with us via email or other means

This personal information may include:

• Name
• Email address
• Phone number
• Mailing address
• Project details or preferences
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our Site, we may automatically collect certain information about your device and usage patterns, including:

• IP address
• Browser type and version
• Operating system
• Referring URLs
• Pages viewed and time spent on pages
• Date and time of visits
• Device identifiers
• Geographic location (country, region, city level)
• Screen resolution and device type

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small data files stored on your device that help us improve your experience and understand how our Site is used.

Types of Cookies We Use:

• Essential Cookies: Required for basic Site functionality
• Analytics Cookies: Help us understand how visitors interact with our Site
• Functionality Cookies: Remember your preferences and settings

3. Analytics and Tracking Services

3.1 Umami Analytics

We use Umami, a privacy-focused, open-source web analytics platform to understand how visitors use our Site. Umami is designed with privacy in mind and provides the following privacy protections:

• No Personal Data Collection: Umami does not collect personally identifiable information
• No Cookies Required: Umami can function without storing cookies on your device
• Anonymous Data: All data collected is anonymized and aggregated
• No Cross-Site Tracking: Umami does not track you across different websites
• GDPR Compliant: Designed to comply with privacy regulations including GDPR

Umami collects the following anonymized information:

• Page views and visit duration
• Referral sources
• General geographic location (country/region)
• Device type and browser information
• Screen resolution

Data collected through Umami is stored on our own servers or secure third-party infrastructure and is not shared with external parties for advertising or tracking purposes.

3.2 Google Analytics (If Implemented)

We may implement Google Analytics, a web analytics service provided by Google, Inc. (“Google”), to help us understand how visitors use our Site.

Google Analytics uses cookies and collects information such as:

• How often users visit the Site
• What pages they visit and in what sequence
• How long they stay on each page
• What other sites they visited before coming to our Site

Google Analytics collects only the IP address assigned to you on the date you visit the Site, rather than your name or other identifying information. We do not combine information collected through Google Analytics with personally identifiable information.

IP Anonymization: If implemented, we will enable IP anonymization (anonymizeIP) so that Google will truncate/anonymize the last octet of your IP address for Member States of the European Union and European Economic Area.

Google's Privacy Policy: Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and Google's Privacy Policy.

Opt-Out: You can prevent Google Analytics from recognizing you on return visits by disabling cookies in your browser.

3.3 Current Implementation Status

As of the effective date of this Privacy Policy:

• Umami Analytics: Currently implemented on the Site
• Google Analytics: Not currently implemented but may be added in the future

We will update this Privacy Policy if our analytics implementations change.

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 To Provide and Improve Our Services

• Respond to your inquiries and contact form submissions
• Provide information about our architectural services
• Process and fulfill your requests
• Communicate with you about projects or services

4.2 To Analyze and Improve the Site

• Understand how visitors use our Site
• Improve Site functionality, design, and content
• Monitor and analyze usage trends and preferences
• Detect, prevent, and address technical issues

4.3 For Marketing and Communications

• Send you newsletters, updates, or promotional materials (with your consent)
• Inform you about our services, projects, or events
• Respond to your comments, questions, or feedback

4.4 For Legal and Security Purposes

• Comply with legal obligations and regulatory requirements
• Protect our rights, privacy, safety, or property
• Enforce our Terms and Conditions
• Prevent fraud, abuse, or unauthorized access

5. Disclosure of Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Site, conducting our business, or servicing you, including:

• Web hosting providers
• Analytics service providers (Umami, potentially Google Analytics)
• Email service providers
• IT support and security services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

• Compliance with legal processes (subpoenas, court orders)
• Protection of our rights, property, or safety
• Protection of the rights, property, or safety of our users or the public
• Investigation of fraud or security issues

5.3 Business Transfers

If 2020 Flooring Solutions is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Site of any change in ownership or uses of your personal information.

5.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so.

6. Image Sources and Attribution

Images displayed on our Site are sourced from the following:

• Pexels: Free stock photography used under the Pexels License, which allows free use for commercial and non-commercial purposes
• Original Photography: Images taken by or commissioned by 2020 Flooring Solutions
• Project Imagery: Modified or anonymized photographs of actual projects, used with appropriate permissions and modified to protect client privacy
• Placeholder Images: Stock images used as placeholders for proprietary project folders

We respect the intellectual property rights of others. If you believe any image on our Site infringes your copyright, please contact us immediately.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure Socket Layer (SSL) encryption for data transmission
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure storage and backup systems
• Employee training on data protection practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Contact Form Submissions: Retained for as long as necessary to respond to your inquiry and for legitimate business purposes, typically 3-7 years
• Analytics Data: Retained in aggregated, anonymized form for analysis purposes
• Communication Records: Retained for business record-keeping and potential project reference

When personal information is no longer needed, we will securely delete or anonymize it.

9. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

9.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy of this information in a portable format.

9.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information.

9.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions and retention requirements.

9.4 Objection and Restriction

You have the right to object to or request restriction of certain processing of your personal information.

9.5 Withdrawal of Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time.

9.6 Opt-Out of Marketing

You may opt out of receiving marketing communications from us by following the unsubscribe instructions in our emails or by contacting us directly.

9.7 Cookie Control

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent.

To Exercise Your Rights: Please contact us using the information provided in the Contact section below. We will respond to your request within a reasonable timeframe as required by applicable law.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

10.1 Right to Know

You have the right to request disclosure of:

• Categories of personal information collected
• Categories of sources from which personal information is collected
• Business or commercial purpose for collecting personal information
• Categories of third parties with whom we share personal information
• Specific pieces of personal information we have collected about you

10.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.

10.3 Right to Opt-Out

We do not sell personal information. If our practices change, we will update this Privacy Policy and provide appropriate opt-out mechanisms.

10.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

Submitting Requests: California residents may submit requests by contacting us using the information provided below. We will verify your identity before processing your request.

11. European Union (EU) and European Economic Area (EEA) Rights

If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation (GDPR):

11.1 Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: You have given clear consent for processing your personal information for specific purposes
• Contract: Processing is necessary for a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary to comply with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, except where overridden by your rights and interests

11.2 Data Transfers

Your personal information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission.

11.3 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of alleged infringement.

12. Children's Privacy

Our Site is not directed to children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information from our systems.

13. Third-Party Websites and Links

Our Site may contain links to third-party websites, services, or resources that are not operated or controlled by 2020 Flooring Solutions. This Privacy Policy does not apply to third-party websites. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Do Not Track Signals

Some browsers include a “Do Not Track” (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no uniform technology standard for recognizing and implementing DNT signals. Our Site does not currently respond to DNT browser signals or mechanisms.

However, our use of Umami Analytics is designed with privacy in mind and does not track users across websites. If we implement Google Analytics, you can opt out using the methods described in Section 3.2.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new “Last Updated” date
• Providing notice on our homepage
• Sending an email notification if we have your email address

Your continued use of the Site after any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

16. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

For privacy-related inquiries, please include “Privacy Request” in the subject line. We will respond to your request within a reasonable timeframe as required by applicable law.

Data Protection Officer

If required by applicable law, we will designate a Data Protection Officer (DPO) who can be contacted at: dpo@2020flooring.com

17. Consent

By using our Site, you consent to this Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please do not use our Site.

18. International Data Transfers

18.1 Data Processing Location

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country of residence.

18.2 Safeguards for International Transfers

When we transfer personal information internationally, we implement appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with service providers
• Privacy Shield principles where applicable
• Encryption and security measures during transit
• Regular security audits and compliance reviews

18.3 Your Rights Regarding International Transfers

If you are located in the EU, EEA, UK, or other jurisdictions with specific data transfer requirements, you have the right to obtain information about the safeguards we have in place for international transfers. Contact us for more details.

19. Automated Decision-Making and Profiling

We do not currently use automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. If we implement such systems in the future, we will:

• Update this Privacy Policy with detailed information
• Provide appropriate notice to affected users
• Ensure compliance with applicable regulations including GDPR Article 22
• Implement safeguards and human oversight where required
• Provide mechanisms for you to challenge automated decisions

20. Biometric Data and Sensitive Information

20.1 No Collection of Biometric Data

We do not collect, process, or store biometric data such as fingerprints, facial recognition data, retinal scans, or voiceprints through this Site.

20.2 Sensitive Personal Information

We do not intentionally collect sensitive personal information including:

• Health or medical information
• Financial account or credit card information (we do not process payments on this Site)
• Social Security numbers or government-issued identification numbers
• Genetic or biometric data
• Information about racial or ethnic origin, political opinions, religious beliefs, or trade union membership
• Sexual orientation or sex life information

If you voluntarily provide such information, we will handle it with additional care and in compliance with applicable laws.

21. Social Media Integration

21.1 Social Media Plugins and Links

Our Site may include links to our social media profiles and may contain social media plugins or sharing buttons. When you interact with these features:

• The social media platform may collect information about your visit
• Your interaction may be visible to your social media connections
• The social media platform's privacy policy governs data collection
• We do not control what data social media platforms collect

21.2 Information from Social Media

If you contact us through social media platforms, the communications are governed by both this Privacy Policy and the platform's privacy policy. We may retain and use information from social media communications to respond to your inquiries and improve our services.

21.3 Public Posts

Any information you post publicly on our social media pages or in response to our posts may be viewed by others. Exercise caution when posting personal information in public forums.

22. Email Communications and Security

22.1 Email Security

Email communications are not always secure. Please do not send sensitive or confidential information via unencrypted email. If you need to share confidential information, contact us to arrange secure transmission methods.

22.2 Marketing Emails

If you opt in to receive marketing emails, newsletters, or promotional content from us:

• We will only send materials you have consented to receive
• You can unsubscribe at any time using the link in our emails
• We may track email open rates and click-through rates to improve our communications
• We do not sell or share email lists with third parties for marketing purposes

22.3 Transactional Emails

Even if you opt out of marketing emails, we may still send you transactional or administrative emails regarding:

• Responses to your inquiries
• Service agreements or project communications
• Important updates to our policies
• Security or legal notifications

23. Data Breach Notification

23.1 Security Incident Response

In the event of a data breach that affects your personal information, we will:

• Investigate the incident promptly and thoroughly
• Take immediate steps to contain and remediate the breach
• Notify affected individuals as required by applicable law
• Report to relevant regulatory authorities within required timeframes
• Provide information about the breach and steps you can take to protect yourself

23.2 Notification Methods

If we need to notify you of a data breach, we will use one or more of the following methods:

• Email to the address on file
• Prominent notice on our Site
• Direct mail notification
• Telephone contact where appropriate

23.3 Your Responsibilities

To help us contact you in case of a security incident, please:

• Keep your contact information up to date
• Monitor your accounts for suspicious activity
• Report any suspected unauthorized access to your information

24. Aggregate and De-Identified Data

We may create aggregate, anonymized, or de-identified data from personal information by removing elements that make the data personally identifiable. This aggregate data may be used for:

• Statistical analysis and research
• Understanding industry trends
• Improving our services and Site functionality
• Marketing and business development
• Sharing with third parties for analytical purposes

Aggregate and de-identified data is not subject to this Privacy Policy as it does not identify you personally.

25. Age Verification and Parental Consent

25.1 Minimum Age Requirement

Our Site is intended for users who are at least 18 years of age (or 16 in the EU/EEA). If you are under the required age, you may only use the Site with the involvement and consent of a parent or legal guardian.

25.2 Parental Rights

Parents or legal guardians who believe their child has provided personal information to us may contact us to:

• Review the information collected
• Request deletion of the information
• Refuse further collection or use of the child's information

25.3 Educational Institution Compliance

If we work with educational institutions or on projects involving minors, we comply with applicable laws including FERPA (Family Educational Rights and Privacy Act) and ensure appropriate safeguards are in place.

26. Location-Based Information

26.1 Location Data Collection

We may collect general location information based on your IP address, which provides approximate geographic location at the city or regional level. This information is used to:

• Understand our visitor demographics
• Provide location-appropriate content
• Comply with jurisdiction-specific legal requirements
• Improve our services for different regions

26.2 Precise Location Data

We do not collect precise GPS or device-based location data through this Site unless you explicitly provide it (for example, by entering your project address in a contact form).

26.3 Project-Related Location Information

If you provide specific addresses or location information for project inquiries, we use this information solely for:

• Assessing project feasibility
• Site analysis and evaluation
• Providing accurate service estimates
• Complying with local regulatory requirements

27. Business Contact Information

If you provide business contact information in a professional capacity (as an employee, contractor, or representative of an organization), we may use and retain this information for business-to-business communications and relationship management. This may include:

• Storing contact details in our CRM system
• Sharing with team members involved in the business relationship
• Using for ongoing project communications
• Retaining for future business development purposes

Business contact information is subject to the same security measures and confidentiality provisions as other personal information.

28. Accessibility and Privacy Accommodations

If you have accessibility needs that affect how you can manage your privacy preferences or exercise your privacy rights, please contact us. We are committed to providing accommodations such as:

• Alternative formats for privacy notices
• Assistance with privacy requests
• Accessible communication methods
• Extended timeframes for responses when needed

29. Detailed Data Retention Schedule

We retain different types of data for varying periods based on business needs and legal requirements:

29.1 Contact Form Submissions

• Active Inquiries: Duration of the inquiry process plus 1 year
• Converted to Projects: Duration of project plus 7 years (in accordance with architectural industry standards)
• Inactive Inquiries: 3 years from last contact

29.2 Analytics Data

• Umami Analytics: Retained indefinitely in anonymized form
• Google Analytics (if implemented): 26 months (configurable)
• Server Logs: 90 days

29.3 Marketing Communications

• Email Subscribers: Until unsubscribe plus 30 days
• Campaign Performance Data: 3 years

29.4 Project-Related Information

• Client Files: 7-10 years after project completion (professional liability requirements)
• Contracts and Agreements: 7 years after expiration
• Financial Records: 7 years (IRS requirements)

30. Additional State-Specific Privacy Rights

30.1 Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA)

If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have additional privacy rights including:

• Right to confirm whether we process your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to delete personal data
• Right to obtain a copy of your personal data
• Right to opt out of targeted advertising (we do not currently engage in targeted advertising)
• Right to opt out of sale of personal data (we do not sell personal data)
• Right to opt out of profiling (we do not engage in profiling)

30.2 Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of certain personal information. We do not currently sell personal information as defined under Nevada law. If our practices change, we will update this Privacy Policy and provide appropriate opt-out mechanisms.

30.3 Exercising State-Specific Rights

To exercise any of these rights, please contact us using the information in Section 31. We will respond within the timeframes required by applicable state law (typically 45 days, with possible extension).

This Privacy Policy was last updated on February 7, 2026.

© 2026 2020 Flooring Solutions. All rights reserved.