Privacy Policy
FabWorx, Inc. is a metal fabrication shop in Santa Rosa, California, not a data company. This policy explains, in detail, what we collect when you visit fabworxinc.com or ask us about a project, why, who sees it, how long we keep it, and the rights California law gives you.
- We collect what you send us to quote and build your project: contact details, the jobsite, a description and any photos or plans.
- We do not sell your personal information and we do not share it for targeted advertising. We never have.
- The site uses only the cookies it needs to work and stay secure. No advertising or tracking cookies.
- Project photos show the city, never your name or street address, and we will take any photo down if you ask.
- California residents can ask to know, correct or delete their information. Email bryan@fabworxinc.com or call (707) 566-7045.
- Your information stays in the United States with a short list of service providers we name below.
This summary is for convenience. The full policy below is what applies.
1Who we are and what this covers
This Privacy Policy is provided by FabWorx, Inc. ("FabWorx," "we," "us"), a California corporation and licensed contractor (CSLB #810565) located at 3100 Dutton Ave. Ste. 156 F, Santa Rosa, CA 95407. FabWorx is the business responsible for the personal information described here.
It applies to information we collect through fabworxinc.com (the "Site"), through our quote and contact forms, and when you email, call or text us about a project. It does not apply to information handled under a separate written agreement (for example, a signed proposal or contract), which may contain its own terms, or to other companies' websites that we link to.
This policy is written to meet the California Online Privacy Protection Act (CalOPPA, Bus. & Prof. Code §§ 22575–22579), California's "Shine the Light" law (Civ. Code § 1798.83) and, to the extent it applies to us, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA, Civ. Code § 1798.100 et seq.). Even where a law does not strictly apply to a business our size, we choose to honor the rights it describes.
2Information we collect
Information you give us
When you request a quote or contact us, we ask for:
- Contact details: your name, email address, phone number and mailing address.
- Jobsite details: the project or jobsite name and its address, so we can understand the work, travel there and measure.
- Your project: a description of the work, any project number from our portfolio you reference, and any files you choose to upload, such as photos, sketches, plans, specifications or schedules.
- Communications: the content of emails, calls, texts and messages you exchange with us, and notes our staff keep about your request.
If we go on to work together, we also keep the records needed to do the job and run our business: proposals, change orders, shop drawings, field measurements, invoices and payment records. We do not ask for, and ask you not to send through the Site, Social Security numbers, driver's license numbers, bank or card numbers, health information or other sensitive personal information. Card payments, if any, are handled at the time of billing and not through this Site.
Information collected automatically
- Technical information: your IP address, browser and device type, the pages you visit, the date and time, and the page that referred you. Our hosting and security providers record this in standard server logs.
- Security signals: to stop spam and abuse, our forms check things like how quickly a form was filled in and whether hidden "honeypot" fields were filled, and may use a privacy-focused human check from Cloudflare (Turnstile).
- Visitor statistics: our own simple, private statistics count page views, which site or app referred a visit (for example Google or ChatGPT), the type of device (phone or computer), searches typed into our site search, Service level quiz results, and whether a visit led to a quote request. They use no tracking cookies and are never shared. Instead of storing your IP address, we keep a one-way code that changes every day, so we can count visitors without being able to identify anyone. Statistics are kept for up to 13 months.
- Cookies: a small number of essential cookies, described in section 4.
We do not use the Site to collect precise geolocation from your device, and we do not build profiles about you or make automated decisions with legal or similarly significant effects.
3How we use information
We use personal information only for the business purposes it was collected for, or purposes compatible with them:
- To respond to your questions, review your project, visit and measure the site, and prepare and follow up on a quote.
- To design, draft, fabricate, finish, deliver and install the work you hire us for, and to coordinate with your architect, general contractor or other parties involved in your project.
- To send you project communications such as proposals, schedules, drawings for approval, invoices and warranty information.
- To protect the Site and our customers: preventing spam, fraud and attacks, and keeping our systems secure.
- To keep business, tax, licensing and warranty records, and to comply with the law, respond to lawful requests, and establish or defend legal claims.
- To understand which kinds of projects people ask about, so we can improve our services and the Site, using information that does not identify you wherever practical.
If we ever want to use personal information for a materially different purpose, we will update this policy and, where required, ask for your consent first.
4Cookies, Do Not Track and Global Privacy Control
Cookies are small files a website stores in your browser. Today the Site uses only cookies that are strictly necessary for it to work and stay secure:
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
fabworx_session | FabWorx | Keeps forms working as you move between pages, keeps staff signed in to our admin, and remembers which site you arrived from so our private statistics can credit a quote request to it. Encrypted. | 2 hours |
XSRF-TOKEN | FabWorx | Security token that stops other websites from submitting forms in your name. | 2 hours |
__cf_bm, cf_clearance | Cloudflare | Distinguishes people from malicious bots and protects the Site from attacks. | 30 minutes to 1 year |
We do not use advertising cookies, cross-site tracking pixels or third-party analytics (such as Google Analytics) on the Site. Our visitor statistics are our own, run on our own server and use no extra cookies (see section 2). If that ever changes, we will update this table and this policy before those tools go live, and give you a way to say no where the law requires.
Because these cookies are essential, the Site will not work properly without them. You can block or delete cookies in your browser settings at any time.
Do Not Track and Global Privacy Control. As CalOPPA requires us to disclose: because we do not track visitors across websites or over time for advertising, there is nothing for a "Do Not Track" signal to turn off. We also treat a Global Privacy Control (GPC) signal from your browser as a valid request to opt out of any sale or sharing of your personal information, which we already do not do.
Our pages load fonts from Google Fonts. To deliver them, Google receives your IP address and browser information, as it would for any font request. Google's handling of that data is described in its own privacy policy.
6Project photos
We are proud of our work and photograph it. We may publish photos of finished and in-progress work on the Site and in our portfolio, labeled with a project number, a description of the work, and the city or county only.
- We never publish a customer's name, street address or personal details with project photos without permission.
- We avoid showing people, house numbers, license plates and personal belongings, and blur or crop them when they appear.
- Photos and plans you upload when asking for a quote are private. They are used to prepare your quote and do your project, and are never published.
If you would like a photo of your property removed or changed, contact us and we will take it down promptly.
7Email and communications
When you contact us, we reply by the method you choose and keep copies of our communications with you as business records. Messages you send through the Site are stored in our secure admin and delivered to our estimating team.
We do not send marketing newsletters or add you to mailing lists from a quote request. If we ever send promotional email, it will identify FabWorx, include our mailing address, and include a working way to unsubscribe, as required by the federal CAN-SPAM Act. Project and billing emails about work you requested are not marketing and are not affected by unsubscribing.
Email is not fully secure in transit across the internet. Please do not email sensitive personal or financial information.
8How long we keep information
We keep personal information only as long as needed for the purposes in this policy, then delete or de-identify it:
| Information | How long | Why |
|---|---|---|
| Quote requests that do not become a project | Up to 3 years after our last contact | So we can help if you come back to the project, and to keep a record of our communications |
| Project records: proposals, drawings, measurements, change orders, invoices, photos | Up to 10 years after the work is completed | Warranty, tax and licensing records, and California's construction defect claim periods (Code Civ. Proc. §§ 337.1 and 337.15) |
| Messages identified as spam | Deleted within about 30 days | Protecting our inbox and the Site |
| Server and security logs | Generally 90 days or less | Security, troubleshooting and abuse prevention |
We may keep information longer where the law requires it, or where it is needed to resolve a dispute or legal claim.
9How we protect information
We use reasonable administrative, technical and physical safeguards appropriate to the information we hold, including: encrypted connections (HTTPS) for the whole Site; uploaded files stored privately, outside the public website; staff access by individual account only, with strong passwords, optional two-step sign-in and automatic sign-out; an internal activity log of who changed what; and security headers and spam protection on every page.
No method of transmission or storage is completely secure. If a security breach affects your personal information, we will notify you as required by California law (Civ. Code § 1798.82).
10Your California privacy rights
If you are a California resident, you have the following rights regarding your personal information, subject to verification and the exceptions the law allows. We honor them for California residents whether or not the CCPA strictly applies to us.
- Right to know and access: the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
- Right to delete: ask us to delete personal information we collected from you, except what we must keep (for example, records of work performed, warranty obligations, or legal requirements).
- Right to correct: ask us to fix inaccurate personal information.
- Right to opt out of sale or sharing: we do not sell or share personal information, so there is nothing to opt out of, but you may still make the request and we will honor GPC signals.
- Right to limit the use of sensitive personal information: we do not use or disclose sensitive personal information for any purpose that would trigger this right.
- Right to non-discrimination: we will not deny you service, charge you a different price or provide a different quality of work because you exercised any of these rights.
How to make a request
Email bryan@fabworxinc.com, call (707) 566-7045, or write to us at the address below. To protect you, we will verify your request by matching information you provide (such as your name, email and project or jobsite address) against our records before acting on it. You may use an authorized agent; we will ask for your signed permission and may ask you to verify your identity with us directly. We will confirm receipt within 10 business days and respond within 45 days. If we need more time (up to 45 more days), we will tell you why.
Categories of personal information (last 12 months)
| Category (CCPA) | Examples | Source | Disclosed to |
|---|---|---|---|
| Identifiers | Name, email, phone, postal address, IP address | You; your device | Service providers; project parties as needed |
| Customer records (Civ. Code § 1798.80) | Name, address, phone, billing records | You | Service providers; project parties as needed |
| Commercial information | Projects requested, quotes, purchases | You; our records | Service providers; project parties as needed |
| Internet activity | Pages visited, browser type, referring page | Your device | Hosting and security providers |
| Audio, electronic or visual information | Photos, plans and files you upload; call notes | You | Service providers; project parties as needed |
| Professional information | Company, title (for contractors and design firms) | You | Service providers; project parties as needed |
We collect these categories for the purposes in section 3 and keep them for the periods in section 8. We do not collect sensitive personal information as defined by the CCPA, other than what you might choose to include in a message.
Shine the Light
California Civil Code § 1798.83 lets California residents ask which personal information a business disclosed to third parties for their direct marketing in the prior year. We do not make such disclosures. You may still ask using the contact details below.
11Children and minors
The Site is meant for adults planning construction projects. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
California law (Bus. & Prof. Code § 22581) allows registered users under 18 to request removal of content they posted. The Site has no public posting features, but if you are under 18 and sent us something you would like removed, contact us and we will remove it.
12Where information is stored
FabWorx serves customers in Northern California, and the Site is operated from the United States. Information is stored and processed in the United States by us and our service providers. If you contact us from outside the United States, you understand your information will be handled under U.S. and California law.
13Other websites
The Site links to other websites, such as social media pages, the Contractors State License Board license lookup and Google Maps directions. Those sites have their own privacy practices, which this policy does not cover. Please review their policies before giving them information.
14Changes to this policy
We may update this policy as our services, the Site or the law change. The "last updated" date at the top shows when it was last revised. If we make a material change, such as using information in a new way, we will post a notice on the Site before the change takes effect. We review this policy at least once every 12 months.
?Questions
Questions about this policy, or want to make a privacy request? Contact us any of these ways and we will respond.
3100 Dutton Ave. Ste. 156 F
Santa Rosa, CA 95407