Privacy policy

Clause 01Who we are and what this policy covers

Carpet Cleaning Wizards ("we", "us", "our") is an owner operated cleaning service based in Union County, New Jersey. We clean carpet, area rugs, upholstery, mattresses, tile and grout, and we extract and dry water in homes and businesses across eight North Jersey counties: Bergen, Essex, Hudson, Middlesex, Morris, Passaic, Somerset and Union. We have no storefront. All services are performed at your home or business.

This Privacy Policy explains what personal information we collect when you use our website at carpetcleaningwizards.com (the "Site"), when you call, text or email us, and when we do work at your home or business. It explains why we collect it, who sees it, how long we keep it, how we protect it, and the choices you have.

"Personal information" means information that identifies you or could reasonably be linked to you, such as your name, phone number, email address, street address, and photos of the inside of your home.

This policy is written in plain English on purpose. If anything is unclear, call or email us using the details at the end of this page and we will explain.

Clause 02The short version

• We collect only what we need to give you an estimate, book the job, do the work and get paid.
• We do not sell your personal information. We do not rent it, trade it or give it to data brokers.
• We do not run advertising pixels or targeted advertising on the Site as of the effective date above.
• Nothing measures your visit until you agree to it. Analytics and session recording are both switched off when the Site loads, and they stay off unless you turn them on in the consent banner.
• We text you only if you have told us we may, in writing for offers, and you can stop at any time by replying STOP.
• We do not take payments through the Site and the Site has no user accounts.
• You can ask us at any time what we hold about you, ask us to correct it, or ask us to delete it. We honor those requests whether or not a privacy law forces us to.

Clause 03Information you give us

The estimate form

Our estimate form asks for your name, phone number, email address, the street address, town and ZIP code of the property, the services you need, and, if you choose, a short message and photos of the item or area you want cleaned. We use this to work out what the job involves, to send you a written price, and to reach you about it.

When you submit the form, its contents, including any photos, are delivered to our business email inbox through Resend, the service that sends the notification, and a copy of the submission is stored in our own database on Cloudflare so that no enquiry is lost. Photos are stored in Cloudflare object storage. The details are also entered into Workiz, the field service software we use to schedule and invoice the job. Our hosting provider, Cloudflare, passes the submission from your browser to us.

Photos you upload are meant to show us the carpet, rug, sofa, mattress or floor. Please do not include people, identification documents, mail, screens or anything else personal in the frame. If a photo shows something you did not mean to send, tell us and we will delete it.

The form contains a hidden field that people cannot see but automated spam programs fill in. If that field is filled, the submission is discarded. This protects the form and collects nothing from real visitors.

The form also carries two optional consent boxes about calls and texts. What each box means, and what happens if you leave them empty, is explained on our SMS and Call Consent page.

The Book a visit form

The Book a visit button on the Site opens a short form that asks for your name, phone number, preferred day and preferred time window. It is delivered to our inbox the same way as the estimate form, and the Site keeps no copy. A person calls the number you entered to confirm the visit. The form carries the same two optional consent boxes as the estimate form; if you leave them empty we confirm by a person calling or emailing you and we send no automated texts about the booking.

The chat widget

The chat button on the Site opens a simple question and answer helper. It answers from a fixed set of prepared answers about our services, areas, pricing and timing. The helper runs entirely in your browser: what you type is matched against a list of keywords to pick an answer, and nothing you type leaves your browser or reaches us. It is not read by a person, it is not stored, and it cannot take a message or a phone number for us. If you type a phone number into it, we will not see it. To reach a person, use the estimate form, the Book a visit form, or call (908) 545-9387.

If we ever connect the chat to a live person or to an automated assistant that sends your messages to us or to a third party, we will update this policy first, say so in the chat window, and show the consent sentence from our SMS and Call Consent page before the chat accepts a phone number. Any call back from a chat would be made by a person, and we would send no automated texts to a number given in chat unless you later consent by form or by text reply.

Calls, texts and email

When you call (908) 545-9387, we see your caller ID and we may write down your name, number, address and what you need so we can quote and schedule. When you email us, we keep the email thread. When you text us, or agree to receive texts from us, we keep the messages. Our texting practices and the consent we ask for are described on our SMS and Call Consent page.

We do not record phone calls.

Information we gather while doing the job

To do the work we keep a job record: your name, contact details, the service address, what we cleaned, the price, the date, notes about the condition of the items (for example a pre existing stain or a loose seam), and the amount you paid and how. We take photos before and after cleaning so that we and you have a record of the result. Those photos are part of the job record.

If you pay by card, the card reader and its payment processor handle your card details. We see the last four digits and the approval, and we do not store full card numbers. If you pay by check we keep a record of the check as part of our accounting.

Photos of your home in our gallery

We only publish a photo of a cleaned room, rug or sofa in our online gallery, on our social media pages or in our advertising if you have given us permission. We ask for that permission separately, in writing (a text or email reply counts), and we retain that written permission. We do not publish your name, address or anything that identifies the house from the outside. This applies to every photo on the Site, including photos carried over from our earlier website. You can withdraw permission at any time by contacting us, and we will remove the photo from places we control within ten business days. We cannot pull back copies that other people have already saved or shared.

Reviews

The reviews quoted on the Site are written by real customers on Google. We quote them with the first name shown on Google and, where a reviewer gave it, the town. We do not change the words except to shorten a long review, which we mark. We do not pay for reviews, offer anything in exchange for a review, or hide negative reviews. If you wrote a Google review and would rather we did not quote it on our Site, tell us and we will take it down.

Clause 04Information collected automatically when you visit the Site

Server and security logs

The Site is a static website hosted on Cloudflare Pages. Like every web host, Cloudflare receives your IP address, browser type, the pages you request and the time of each request in order to deliver the pages and defend against attacks. We use Cloudflare's summary reports, which show us traffic totals and countries, not individual visitors. Those reports come from Cloudflare's own server side counts; we do not load Cloudflare's Web Analytics script on the Site. Cloudflare's own privacy policy governs what Cloudflare does with its logs.

Google Fonts

The Site loads its typefaces from Google Fonts at fonts.googleapis.com and fonts.gstatic.com. When your browser fetches a font file, Google receives your IP address and the font request. Google states that it does not use Google Fonts requests to build profiles or serve advertising and that Google Fonts does not set cookies. Google's privacy policy governs that request.

Measurement, only if you ask for it

We use two measurement tools on the Site and neither one runs until you say so. On your first visit a consent banner appears and the Site loads nothing beyond the necessary storage below while it waits for your answer. You can Accept all, Reject non essential, or open Manage choices and take one category without the other. The Cookie settings link in the footer of every page reopens the banner, and our Cookie Policy lists every cookie by name.

The two optional categories are Analytics (Google Analytics 4) and Session recordings (Microsoft Clarity). Both are off until you turn them on, and turning either one off again stops further collection and clears that tool's cookies from your browser.

Google Analytics 4 tells us in aggregate which pages people visit, how they arrived, roughly where they are (town level), what device they use and whether they reached the estimate form. Google Analytics 4 does not store IP addresses; it uses the address only for a moment to estimate location and then discards it. We have set the shortest available data retention period, we have turned off Google Signals (the setting that would link visits to Google accounts for advertising), and we have turned off data sharing with other Google products.

Microsoft Clarity records how visitors move around a page (scrolling, clicking, tapping) and can replay a session as a video like recording. Clarity masks the text you type into forms and, with our settings, masks all text content so that the replay shows layout and movement, not your words. Clarity does not use these recordings to advertise to you. Microsoft's privacy statement governs Clarity's own processing.

We do not use Google Ads conversion tracking, Meta pixels or any other advertising tags on the Site as of the effective date. If we add Google Ads conversion measurement later, it will be a fourth category in the consent banner, off until you turn it on, and we will update this policy and the Cookie Policy before it goes live.

Preferences stored in your browser

The Site stores two small things in your own browser so the Site works the way you asked: your consent choice, and your accessibility menu choices (bigger text, high contrast, highlighted links, paused motion, readable font and big cursor). The consent choice is kept for 12 months, in local storage and in a first party cookie, both named cc-consent; it records which categories you accepted and when, and nothing else. The accessibility choices stay in local storage until you clear them. Neither is sent to us, and you can clear both in your browser settings. Our Cookie Policy names each item.

Clause 05Why we use your information

We use personal information for these purposes and no others:

We do not use your information to make automated decisions about you, and we do not profile you.

• To answer your question and send you a written estimate.
• To schedule the visit, find the address, and tell you when we are on the way.
• To do the cleaning, keep a record of the result, and handle any follow up.
• To send invoices, take payment and keep the accounting and tax records New Jersey and federal law require.
• To send appointment related texts and calls with your consent, and marketing texts only with your separate written consent.
• To run, secure and improve the Site.
• To respond to a request you make about your information.
• To comply with law, respond to lawful requests from authorities, and protect our legal rights, for example if there is a dispute about a job.

Clause 06Who we share information with

We share personal information only with the companies that help us run the business, and only what each one needs:

Each of these companies is allowed to use the information only to provide its service to us. We do not allow them to sell it or use it for their own marketing.

We will disclose information if the law requires it, for example in response to a subpoena, or if we need to in order to protect someone's safety or our legal rights.

If the business is ever sold or merged, customer records would pass to the new owner under this same policy, and we would tell you.

We do not sell personal information. We do not share it for targeted advertising. We are not a data broker.

• Cloudflare, which hosts the Site and passes form submissions to us.
• Resend, which sends the notification email for each form submission to us.
• Cloudflare Email Routing, which forwards mail addressed to our domain to the mailbox we read, and Google, which hosts that mailbox.
• Workiz, the field service software where the job is scheduled and invoiced.
• Google, for Google Analytics 4 (only if you turned Analytics on) and Google Fonts.
• Microsoft, for Clarity (only if you turned Session recordings on).
• The telephone and text messaging provider we use to send and receive appointment texts, which needs your mobile number to deliver a message.
• The card reader and payment processor, when you pay by card.
• Our accountant and bookkeeping software, for invoices and tax records.
• A lawyer, insurer or court, if a claim or dispute requires it.

Clause 07How long we keep information

When we no longer need a record we destroy it so that it cannot be read or reconstructed, as the New Jersey Identity Theft Prevention Act requires.

• Estimate requests that do not turn into a job: up to 24 months from the request, then deleted, so that we can honor a price we quoted and answer if you come back.
• Job records, invoices and payment records: seven years after the job, because federal and New Jersey tax and accounting rules require us to keep business records for several years.
• Before and after job photos: with the job record, seven years, unless you ask us to delete them sooner and no dispute is open.
• Gallery permission records: for as long as the photo is published, plus three years.
• Text message consent records and opt out records: at least five years from your last message, so that we can prove consent and honor your opt out.
• Chat: nothing is kept, because the chat helper runs entirely in your browser and sends nothing to us.
• Google Analytics user level data: two months, the shortest period Google allows. Aggregate reports last longer.
• Clarity session recordings: 30 days, after which Microsoft deletes them. Aggregate heatmaps up to 13 months.
• Email: kept in our inbox for the same period as the job or request it relates to, then deleted.

Clause 08How we protect information

We are a small business and we keep our systems simple. Our business email and the accounts that hold customer information are protected by strong, unique passwords and two step verification. Job records live in a password protected system rather than on paper. Photos on phones used for work are backed up to a protected account and deleted from devices that are retired. Access is limited to the owner and the people working on your job. The Site is served only over an encrypted connection.

No system is perfectly secure. If we discover that personal information in our care has been accessed or taken by someone who should not have it, and misuse of it is reasonably possible, we will notify the affected people as quickly as we can and without unreasonable delay, and we will report the incident to the New Jersey State Police before notifying customers, as New Jersey law requires. Notice will come by email or letter from the contact details in this policy, and it will never ask you for a password or payment.

Clause 09Your choices and rights

What you can ask us to do

Whether or not a privacy law requires it, you can ask us to:

To make a request, call (908) 545-9387 or email privacy@carpetcleaningwizards.com. We will confirm that we received it within two business days and answer within 45 days. If we need a little more time for a complicated request we will tell you why and when to expect an answer. Before we release or delete information we will check that you are the person it belongs to, usually by contacting you at the phone number or email address already on the job record. We will not charge you for a request and we will not treat you differently for making one. If we say no to any part of a request, we will tell you why, and you can ask us to reconsider by replying to that answer.

• Confirm whether we hold personal information about you and give you a copy of it.
• Correct information that is wrong or out of date.
• Delete your information, unless we must keep it (for example a paid invoice we are required to keep for tax purposes, or a record needed for an open dispute), in which case we will tell you what we are keeping and why.
• Stop texting or calling you.
• Take down a gallery photo of your home or a quote from your review.
• Turn off analytics or session recording for your browser, which you can also do yourself through the Cookie settings link.

Where the New Jersey Data Privacy Act stands for us

The New Jersey Data Privacy Act (in effect since January 15, 2025) gives New Jersey residents rights of access, correction, deletion, portability and opt out. It applies to businesses that control or process the personal data of at least 100,000 New Jersey consumers in a year, or of at least 25,000 consumers while earning revenue or a discount from selling personal data. We serve far fewer people than that and we sell no data, so as of the effective date the Act does not apply to us. We honor the rights listed above anyway, because we think you should have them. New Jersey law also restricts the sale of sensitive personal data by any business, covered by the Act or not, and we sell no personal data of any kind, sensitive or otherwise.

If we ever grow past those thresholds, this policy will be updated and we will meet the Act's full requirements.

Universal opt out signals

Some browsers can send a "Global Privacy Control" signal asking websites not to sell or share your data for targeted advertising. We do neither, so there is nothing for that signal to switch off on our Site. If we ever add targeted advertising, we will honor the signal.

Do Not Track

Browsers can send a "Do Not Track" request. There is no agreed standard for how websites should respond, so our Site does not change its behavior based on that signal. Use the consent banner instead, which we do honor, and which starts with everything optional switched off.

Clause 10Children

Our Site and services are for adults arranging cleaning for a home or business. We do not knowingly collect personal information from anyone under 13, and the Site is not directed to children. If you believe a child has sent us information, contact us and we will delete it.

Clause 11Links to other sites

The Site links to our Google Business Profile, Facebook, Instagram, YouTube, Pinterest and X pages, and to phone and email apps. Those services have their own privacy policies and we do not control what they collect. Our Site does not embed social media tracking buttons.

Clause 12Changes to this policy

When we change this policy we will change the "Last updated" date at the top. If a change affects how we use information you have already given us in a way you would not expect, we will tell you by email or text before the change takes effect and, where the law requires it, ask for your consent.

Clause 13How to contact us

We acknowledge privacy questions and requests within two business days.