Privacy Policy

Last Update: March 25, 2026

Legal Entity: Rubicon Construction LLC dba Lofty Built ("Lofty Built," "we," "us," or "our")

Physical Address: 21 North Montello St., Brockton, MA 02301, USA

Mailing Address: 1089 Commonwealth Avenue, No. 292, Boston, MA 02215

Privacy Contact: support@loftybuilt.com

Website: www.loftybuilt.com

1. Introduction

Rubicon Construction LLC, doing business as Lofty Built ("Lofty Built"), provides full-service residential renovation and construction services, including kitchen and bathroom remodeling, primarily within Massachusetts and Rhode Island.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we share it with, and what rights you have regarding that information. It applies to:

• Our website at www.loftybuilt.com
• Project inquiry and estimate forms
• SMS, email, and telephone communications you initiate with us
• Advertisements we run on platforms such as Meta (Facebook/Instagram)

By submitting a form, contacting us, or otherwise providing your personal information, you acknowledge that you have read and agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect only the information reasonably necessary to provide renovation estimates, complete projects, and communicate with prospective and current clients.

2.1 Information You Provide Directly

• Contact details: name, email address, phone number
• Project details: zip code, property type, kitchen or bathroom layout description, uploaded photos
• Communications: messages, questions, or feedback you submit via forms, email, or phone

2.2 Information Collected Automatically

• Technical data: IP address, browser type, operating system, referring URL
• Behavioral data: pages visited, time on site, links clicked — collected via Google Analytics 4 (GA4)
• Advertising data: pixel events (page view, form initiation, form submission) — collected via Meta Pixel

2.3 Information We Do Not Collect

We do not collect Social Security numbers, government-issued ID numbers, payment card information, bank account information, or any sensitive health or financial data. Payment processing, if applicable, is handled entirely by third-party processors subject to their own privacy policies.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to project inquiries and prepare renovation estimates
• To schedule walkthroughs, measurements, and consultations
• To deliver project updates and communicate about active or pending work
• To send marketing communications (SMS, email, or phone) about relevant services — only to individuals who have provided express consent
• To display targeted advertisements to website visitors on Meta platforms (Facebook/Instagram)
• To analyze website performance and improve user experience via Google Analytics 4
• To detect, prevent, and address spam, fraud, or abuse via Google reCAPTCHA
• To comply with applicable legal obligations

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Third-Party Tools & Data Sharing

We do not sell your personal information. We share personal information only with the following categories of service providers who help us operate our business:

4.1 Customer Relationship Management

All project inquiries and client communications are stored in our Odoo CRM instance, hosted on secure infrastructure. Access is restricted to authorized Lofty Built personnel only.

4.2 Cloud Hosting

Our website and infrastructure are hosted on Amazon Web Services (AWS). AWS operates as a data processor under our direction and is subject to its own privacy and security certifications.

4.3 Analytics

We use Google Analytics 4 to understand how visitors interact with our website. GA4 collects anonymized usage data. You can opt out of GA4 tracking by using the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout) or by adjusting your cookie preferences via our Cookie Settings.

4.4 Advertising (Meta Pixel)

We use the Meta Pixel to measure ad performance and to show relevant advertisements to people who have previously visited our website ("retargeting"). Under California privacy law (CCPA/CPRA) and emerging Massachusetts privacy frameworks, the transfer of browsing data to Meta for targeted advertising may constitute "sharing" personal information.

You may opt out of this data sharing at any time via:

• Our Cookie Settings tool on the website
• Your Meta account's "Ad Preferences" settings (www.facebook.com/adpreferences)
• The Digital Advertising Alliance opt-out tool (optout.aboutads.info)

4.5 Spam Prevention (Google reCAPTCHA)

We use Google reCAPTCHA on our contact forms to prevent automated spam submissions. reCAPTCHA collects hardware and software information and sends it to Google for analysis. This data is subject to Google's Privacy Policy (policies.google.com/privacy) and Terms of Service.

4.6 Other Disclosures

We may also disclose your personal information: (a) to comply with applicable law, legal process, or a valid government request; (b) to enforce our agreements; (c) to protect the rights, property, or safety of Lofty Built, our clients, or others; or (d) in connection with a business transaction such as a merger, acquisition, or sale of assets, in which case the acquiring entity will be bound by the terms of this Privacy Policy or provide you advance notice.

5. SMS & Communications Policy

By voluntarily providing your phone number through our website forms or otherwise, and checking the applicable consent box where present, you expressly consent to receive communications from Lofty Built as follows:

5.1 SMS / Text Messages

• Message types: appointment confirmations, project updates, and promotional offers related to renovation services
• Message frequency: varies based on project stage; you may receive up to 4 messages per month for promotional content
• Message and data rates may apply based on your mobile carrier plan
• Opt-out: Reply STOP to any SMS message at any time to unsubscribe. You will receive one final confirmation message, then no further messages
• Help: Reply HELP to any message or email support@loftybuilt.com for assistance

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS consent and phone numbers collected for SMS purposes will not be shared with any third party.

5.2 Email Communications

• To unsubscribe from marketing emails, click the "Unsubscribe" link in any email or email support@loftybuilt.com
• Transactional emails related to an active project inquiry or ongoing project may continue even after you opt out of marketing emails

5.3 Phone Calls

If you provide your phone number, we may call you to discuss your project inquiry. You may request to be removed from our call list at any time by contacting support@loftybuilt.com.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us operate and improve our site.

Types of cookies we use:

• Essential cookies: Required for core website functions (e.g., form submission, reCAPTCHA)
• Analytics cookies: Google Analytics 4 — help us understand how users navigate the site
• Advertising cookies: Meta Pixel — enable retargeted advertising on Meta platforms

You can manage your cookie preferences at any time via the Cookie Settings link in our website footer, or by adjusting your browser settings. Please note that disabling certain cookies may affect website functionality.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law:

• Inquiry-only contacts (no project started): up to 24 months from last contact
• Active and completed project records: up to 7 years from project completion, consistent with standard construction record-keeping and potential warranty obligations
• Marketing opt-out records: retained indefinitely to honor your preference
• Analytics data: retained per Google Analytics 4 default settings (up to 14 months)

You may request deletion of your data at any time (see Section 9). We will honor deletion requests subject to any legal retention obligations.

8. Data Security

We implement reasonable and appropriate technical and organizational safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• Access controls limiting CRM access to authorized personnel only
• Use of established, security-certified third-party infrastructure (AWS)
• Encrypted transmission of data via HTTPS/TLS on our website
• Spam and bot prevention via Google reCAPTCHA on all intake forms

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that triggers notification obligations under applicable law (including Mass. Gen. Laws ch. 93H), we will notify affected individuals as required.

9. Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information. We respect and honor these rights for all individuals who contact us, regardless of their state.

9.1 General Rights (All Residents)

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal information, subject to legal retention requirements
• Opt-Out of Targeted Advertising: Opt out of the sharing of your data with Meta for advertising purposes (see Section 4.4)

9.2 Massachusetts Residents

Massachusetts maintains data security regulations under 201 CMR 17.00 requiring businesses to implement a Written Information Security Plan (WISP) and safeguard personal information of MA residents. You may also have rights under the Massachusetts Consumer Protection Act (M.G.L. c. 93A) regarding unfair or deceptive practices relating to your data.

9.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of personal information we have collected, subject to exceptions
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell personal information. You may opt out of the "sharing" of your browsing data with Meta for cross-context behavioral advertising
• Right to Limit Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights — your price or service quality will not change

9.4 How to Submit a Privacy Request

To exercise any of the above rights, contact us at:

• Email: support@loftybuilt.com (subject line: "Privacy Request")
• Mailing Address: Lofty Built Privacy Team, 1089 Commonwealth Avenue, No. 292, Boston, MA 02215

We will respond to verifiable requests within 45 days. In some cases, we may need to verify your identity before processing your request.

10. Children's Privacy

Our website and services are intended for adults (18 years of age and older). We do not knowingly collect personal information from individuals under the age of 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we may have collected such information, please contact us at support@loftybuilt.com.

11. Third-Party Links

Our website may contain links to third-party websites (for example, Google Maps, Houzz, or review platforms). These sites have their own privacy policies and we are not responsible for their practices. We encourage you to review the privacy policy of any third-party site you visit.

12. International Users

Our services are intended exclusively for residents of the United States, specifically Massachusetts and Rhode Island. If you access our website from outside the United States, including from the European Union, United Kingdom, or other jurisdictions with their own data protection laws, please be aware that your information will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

We do not specifically target individuals located outside the United States. If you are located in the EU or UK and believe you have a GDPR-related inquiry, please contact us at support@loftybuilt.com and we will make reasonable efforts to address your request.

13. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Our website does not currently respond to DNT signals because there is no uniform standard for how websites should interpret or honor them. We will revisit this position if an industry or legal standard is established. In the meantime, you may use our Cookie Settings to manage tracking preferences.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other business reasons. When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Post the revised policy prominently on our website
• Where required by law or where feasible, notify you by email or by a notice on our website prior to the change taking effect

Your continued use of our website or services after the Effective Date of any updated policy constitutes your acknowledgment of the changes.

15. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

Company: Lofty Built — Privacy Team

Email: support@loftybuilt.com

Mailing Address: 1089 Commonwealth Avenue, No. 292, Boston, MA 02215

We take privacy inquiries seriously and will respond within 10 business days of receiving your request.

This document does not constitute legal advice. Lofty Built recommends periodic review of this policy with qualified legal counsel to ensure ongoing compliance with applicable federal and state privacy laws.