Privacy Policy

This Privacy Policy applies to personal information collected through the Site, the quote builder, request-a-callback and contact forms, our service-related telephone calls, SMS text messages, email correspondence, and in-person interactions with our cleaning teams.

The data “controller” / “business” for the purposes of applicable privacy laws (including the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA (the “CCPA”), the Texas Data Privacy and Security Act (the “TDPSA”), and the Virginia Consumer Data Protection Act (the “VCDPA”)) is:

Maid Brigade of Southeast Houston
2110 Center St., Deer Park, TX 77536, United States
Telephone: (281) 464-6243
Email: info@mbsehouston.com

This Policy is effective June 3, 2026 and replaces any earlier version. Material changes will be communicated as described in Section 22.

We collect the categories of personal information listed below. The specific information we collect depends on how you interact with us.

(a) Information you provide to us

• Identifiers and contact data — first and last name, postal address, email address, telephone number.
• Property details — service address, number of bedrooms, full bathrooms, half bathrooms, approximate finished square footage, number of stories, presence of pets, and any special requests, allergies, or access instructions you choose to share.
• Service preferences — type and frequency of cleaning service requested, preferred days and times, and special add-ons.
• Commercial information — booking history, cancellations, billing history, and the deal value of any completed bookings.
• Payment information — when you book and pay for a service, our payment processor collects your payment card number, expiration date, and security code on our behalf. We do not store full payment-card numbers on our servers.
• Correspondence and feedback — the contents of messages, calls, and SMS exchanges with our team, plus any survey or review responses you submit.

(b) Information collected automatically

• Device and connection data — Internet Protocol (IP) address, browser type and version, operating system, device type, screen size, viewport size, time zone, language, referring URL, exit URL, pages viewed, time on page, scroll depth, click counts, and the date and time of each visit.
• Approximate geolocation — city / region / postal code derived from your IP address through a third-party geo-lookup service. We do not collect precise GPS coordinates unless you affirmatively select a specific address in our address-autocomplete field.
• Marketing / advertising identifiers — Google click ID (“gclid”), Microsoft click ID (“msclkid”), Meta click ID (“fbclid”), TikTok click ID (“ttclid”), Meta browser ID (“fbp”), and any UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) appended to inbound links so we can understand which campaign brought you to us.
• First-party session cookie — a randomly generated identifier that stitches together multiple page views from the same visitor over a 30-day window so we can tell if a click eventually became a lead.

(c) Information we infer or receive from third parties

• Address suggestions and standardization — when you type an address in our quote builder, we send the partial text to one of our address-autocomplete providers (Radar, the US Census Bureau Geocoder, or OpenStreetMap-based services) so suggestions appear as you type.
• Publicly recorded property data — once you select an address, we may query public-records APIs (such as RentCast, ATTOM Data, the Harris County Appraisal District public ArcGIS endpoint, and OpenStreetMap) to retrieve the home's recorded sq ft, bedrooms, bathrooms, year built, and property type to pre-fill the quote.
• Public business reviews — we read aggregate review counts and average ratings from Google Business Profile.

(d) Sensitive personal information

We do not solicit or knowingly collect sensitive personal information (such as Social Security numbers, driver's license or state-ID numbers, government-issued IDs, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, citizenship or immigration status, health information, sex life or sexual orientation, biometric data, genetic data, financial-account credentials, or contents of private communications). Please do not include sensitive information in messages or free-text fields when contacting us.

We collect personal information from these sources: directly from you (forms, messages, calls); automatically from your device when you use the Site (cookies, server logs, analytics SDKs); from advertising platforms (Google, Meta, TikTok) regarding clicks on our advertisements; from address and property-data providers as described in Section 2(c); and occasionally from referral partners or current customers who refer you to us.

We use personal information for the following business and commercial purposes:

1. Respond to your requests — provide quotes, schedule bookings, return calls, and follow up on inquiries.
2. Deliver Services — perform cleaning visits, process payments, send appointment reminders and confirmations, and resolve issues.
3. Customer service and quality — train staff, investigate complaints, and improve service quality.
4. Marketing and personalization — send you promotional emails (only with your consent where required), show you relevant advertising on third-party platforms, measure the performance of our advertising, build lookalike/remarketing audiences, and personalize the Site where useful.
5. Site analytics and improvement — measure usage, debug performance, A/B test changes, and improve user experience.
6. Fraud prevention and security — detect and prevent fraudulent submissions, abuse, spam, and security incidents.
7. Legal and compliance — comply with our legal obligations, respond to lawful requests, enforce our terms, and protect our and others' rights, property, and safety.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)) — to provide a quote, schedule, perform, and bill for cleaning services you request.
• Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the Site; to measure advertising performance using aggregated or pseudonymous data; to prevent fraud. Where we rely on legitimate interests, we have weighed them against your privacy interests.
• Consent (Art. 6(1)(a)) — for non-essential cookies, certain advertising and analytics processing, SMS marketing, and email marketing where consent is required. You may withdraw consent at any time using the methods in Section 13 / 14.
• Legal obligation (Art. 6(1)(c)) — to comply with applicable laws and respond to lawful requests.

We and our advertising and analytics partners use cookies, pixels, software development kits (SDKs), and similar technologies (collectively, “Cookies”) to operate the Site, remember preferences, and measure advertising performance.

• Strictly necessary — required to load the Site, keep your form session active, and prevent abuse. These cannot be disabled through our consent controls because the Site cannot function without them.
• Functional — remember your address autocomplete history within a session and your form progress between page reloads.
• Analytics — Google Analytics 4 (_ga, _ga_*) measures how visitors use the Site so we can improve it. We instruct Google to pseudonymize IP addresses where supported and we have not enabled Google Signals / cross-device personalization beyond what is required to measure conversions.
• Advertising — Google Ads conversion + remarketing tags, Meta Pixel and Conversions API, and TikTok Pixel and Events API, when enabled, allow us to measure conversion performance and reach the right audiences. These platforms may receive irreversibly-hashed (SHA-256) versions of your email, phone, first name, last name, city, region, and postal code so they can match your interaction to a click without exposing cleartext PII.

You can control most cookies through your browser settings or the “Do Not Sell or Share” instructions in Section 15. Refusing all cookies may prevent the quote builder, address autocomplete, and other interactive features from working correctly.

We use third-party advertising and analytics services to measure and improve the performance of our advertising and to deliver relevant ads to people who have visited our Site or expressed interest in our Services. These services may use first-party and third-party cookies, web beacons, mobile-advertising identifiers, and hashed identifiers (such as your email and phone number passed in a one-way hash) to recognize your device or browser.

We use, or may use, the following advertising and analytics partners. Click the linked privacy notices to learn more and exercise the opt-out controls each platform provides:

• Google Ads / Google Analytics 4 / Google Tag Manager — Google LLC. See the Google Privacy Policy, Google's advertising-cookies policy, and adjust your preferences at adssettings.google.com. You may opt out of personalized advertising from Google across the web at the same link, and from Google Analytics by installing the Google Analytics Opt-Out Browser Add-on. Where we use Google Ads Enhanced Conversions, we provide Google with SHA-256 hashes of your email, phone, name, and postal information so Google can match conversions to ad clicks.
• Meta Pixel and Conversions API — Meta Platforms, Inc. See the Meta Privacy Policy and manage preferences at Meta Ad Preferences.
• TikTok Pixel and Events API — TikTok Inc. See the TikTok Privacy Policy (US) and ad controls at TikTok Ads & Data.
• Industry-wide ad-personalization opt-outs — the Digital Advertising Alliance, Network Advertising Initiative, and YourAdChoices Canada.

We do not use your personal information for cross-context behavioral advertising in any manner that would constitute a “sale” under the CCPA for monetary consideration. Some of the analytics and advertising arrangements described above may, however, constitute “sharing” of personal information under the CCPA or “targeted advertising” under other state laws. See Section 15 for how to opt out.

We use rule-based scoring and machine-learning models (provided by the advertising platforms above) for ad bidding, audience targeting, and lead-quality measurement. None of these systems make legal or similarly significant decisions about you. Pricing and final estimates are always reviewed by a human consultant before being communicated to you.

We may use third-party generative AI tools (for example, OpenAI or Groq) to draft internal marketing copy or to summarize aggregated, de-identified analytics. We do not feed personally identifying customer data into these tools.

We share personal information only as described below. We do not sell your personal information for monetary consideration. Categories of recipients:

• Service providers / processors — vendors acting on our behalf under written contracts that restrict their use of the information to the services they provide to us. See Section 10 for the named list.
• Advertising and analytics partners — see Section 7. Some of these arrangements may be considered “sharing” for cross-context behavioral advertising under the CCPA or “targeted advertising” under other state laws.
• Professional advisors — lawyers, accountants, insurers, auditors.
• Government, law-enforcement, and other parties — when we believe in good faith that disclosure is required by law, court order, or to protect the rights, property, or safety of Maid Brigade, our customers, employees, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of all or part of our business or assets, in which case the recipient will be bound by terms that are no less protective than this Policy.
• With your direction — at your request or with your consent, e.g., posting a public testimonial.

The processors below assist us with hosting, communication, CRM, analytics, advertising, and address standardization. Each is contractually limited to using your information only to deliver the service it provides to us. Linked privacy policies describe each provider's own data practices.

• Vercel Inc. — hosting infrastructure for the Site. (privacy policy)
• Supabase, Inc. — secure database hosting for leads, quotes, and content management. (privacy policy)
• Maid.tech / Maid Central — our CRM and booking system. Quote and callback submissions are relayed to Maid.tech so our consultants can respond.
• Resend, Inc. — sends transactional emails (booking confirmations, callback requests, team notifications) on our behalf. (privacy policy)
• RingCentral, Inc. — telephony and SMS used by our team to contact you about your quote or booking. (privacy policy)
• Radar Labs, Inc. — address autocomplete on the quote builder. (privacy policy)
• RentCast and ATTOM Data Solutions — publicly recorded property data used to pre-fill the quote builder.
• OpenStreetMap Foundation / Komoot Photon / US Census Bureau Geocoder / Harris County Appraisal District (HCAD) — publicly accessible address and property-data sources.
• IP geolocation provider (ip-api.com) — used to derive approximate city/region from your IP address for analytics.
• Google LLC / Meta Platforms, Inc. / TikTok Inc. — analytics and advertising platforms described in Section 7.
• Anthropic, OpenAI, Groq — internal generative AI tools used to draft marketing copy on de-identified data only.

We may add or replace processors from time to time. Material changes will be reflected in updated versions of this Policy.

We retain personal information only as long as needed for the purposes described in this Policy or as required by law:

• Quote and lead records — up to 7 years from the date of the last interaction, to support customer service, bookkeeping, and tax recordkeeping.
• Customer booking and payment records — at least 7 years from the last booking, to comply with U.S. tax and accounting requirements.
• Web analytics & click logs — up to 14 months for raw event data; aggregated reports may be retained indefinitely.
• Email and SMS message logs — up to 24 months from the most recent message.
• Marketing-suppression lists — indefinitely, so we honor your prior opt-out request.

You may request earlier deletion of your information as described in Section 13 / 14.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. These include TLS 1.2+ encryption in transit, encryption at rest for our databases, role-based access controls, least-privilege service credentials, multi-factor authentication for administrative access, and regular review of our processors' security postures.

No system is 100% secure. If we ever experience a personal-data breach affecting your information, we will notify you and applicable regulators as required by law.

Subject to certain exceptions, residents of California, Texas, Virginia, Colorado, Connecticut, Utah, Oregon, Montana, and other states with comprehensive privacy laws may have the following rights:

• Right to know / access — request confirmation of whether we process personal information about you and to access that information.
• Right to correct — request correction of inaccurate personal information.
• Right to delete — request deletion of personal information we have collected from or about you.
• Right to portability — receive a copy of your personal information in a portable, readily usable format.
• Right to opt out — opt out of the “sale” or “sharing” of your personal information and out of targeted advertising and certain profiling activities. See Section 15.
• Right to limit sensitive PI (California only) — limit the use of sensitive personal information. (We do not use sensitive personal information for any purpose that would require this right to be exercised.)
• Right against retaliation / non-discrimination — we will not discriminate against you for exercising any of these rights.

To exercise these rights, submit a verifiable request by emailing info@mbsehouston.com with “Privacy Rights Request” in the subject line, or by calling (281) 464-6243. We may need to verify your identity (by confirming details about a prior interaction) before fulfilling the request. You may designate an authorized agent to submit a request on your behalf by providing the agent with written, signed permission. We will respond within the timeframes required by applicable law (generally 45 days, extendable by an additional 45 days where permitted).

California residents may also request the categories of personal information collected, sold, or shared during the prior 12 months, the categories of sources, business or commercial purposes for collection, and categories of third parties to whom we disclose information. The information in Sections 2, 3, 4, 7, 9, and 10 of this Policy satisfies that disclosure.

If you believe we have not adequately resolved a privacy concern, California residents may contact the California Attorney General's Office; Texas residents may contact the Texas Attorney General.

If you are in the European Economic Area, United Kingdom, or Switzerland, you have the rights to access, rectify, erase, restrict, object to, and port the personal information we hold about you, and to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. You also have the right to lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner's Office at ico.org.uk).

We respond to GDPR requests within 30 days. To submit a request, contact us at info@mbsehouston.com.

We do not sell personal information for monetary consideration. However, our use of advertising cookies and pixels described in Section 7 may constitute a “sale” or “sharing” of personal information under the CCPA, or processing for “targeted advertising” under other state laws.

You can opt out of these activities in several ways:

1. Email info@mbsehouston.com with the subject line “Do Not Sell or Share My Information.”
2. Enable a recognized opt-out signal such as the Global Privacy Control (GPC) browser signal. We treat GPC as a request to opt out of cross-context behavioral advertising for the browser sending the signal.
3. Adjust the platform-specific opt-out controls linked in Section 7.

These opt-outs apply on a per-browser / per-device basis. Clearing cookies, switching browsers, or using a different device will require you to re-apply the opt-out.

By providing your mobile phone number and opting in to our SMS program (for example, by checking the SMS-consent box on a quote form), you expressly consent to receive recurring transactional and marketing text messages from Maid Brigade of Southeast Houston at the number you provided, sent via an automatic telephone dialing system (ATDS) or automated equipment.

• Consent is not a condition of purchase.
• Message frequency varies. Up to ~10 messages per month per program.
• Message and data rates may apply.
• To stop messages, reply STOP from your mobile device. To get help, reply HELP, or contact us using the methods in Section 23.
• Carriers are not liable for delayed or undelivered messages. Supported U.S. carriers include AT&T, Verizon, T-Mobile, Sprint, U.S. Cellular, Boost, MetroPCS, Cricket, and most regional carriers.
• We do not share your mobile number or SMS opt-in status with third parties for their marketing purposes.

When you contact our consultants by phone (or when we return your call), we may use our telephony provider's call-logging features to record the date, duration, and originating number of the call for quality and training. If we record the contents of any call (audio), we will tell you at the start of the call and obtain your consent where required by applicable law.

If you give us your email address, we may send you transactional emails relating to your quote, booking, or service. We may also send occasional promotional emails. Every promotional email includes a clear unsubscribe link in the footer; you can also unsubscribe by replying to any message with “unsubscribe” in the subject line, or by emailing info@mbsehouston.com. Honoring an unsubscribe may take a few business days. You will continue to receive transactional emails about your bookings even after you unsubscribe from marketing.

The Site and our Services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in some jurisdictions). If you are a parent or guardian and believe a child has provided us with personal information, please contact us at info@mbsehouston.com and we will promptly delete it.

We operate in the United States. If you access the Site from outside the U.S., your personal information will be transferred to, processed, and stored in the U.S., which may have data-protection laws different from those in your country. Where we transfer personal information of individuals in the EEA, UK, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, where required.

Our Site does not respond to legacy “Do Not Track” browser signals because there is no consistent industry standard for how to interpret them. We do, however, honor the Global Privacy Control (GPC) opt-out signal as described in Section 15.

We may update this Privacy Policy from time to time to reflect changes in our practices or to comply with new legal requirements. We'll post the new version on this page and update the “Last updated” date at the top. If we make material changes, we'll notify you by a prominent banner on the Site or, where required, by email or other direct contact.

If you have questions, comments, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:

• Email: info@mbsehouston.com
• Phone: (281) 464-6243
• Postal mail: Maid Brigade of Southeast Houston, 2110 Center St., Deer Park, TX 77536, United States

For privacy-rights requests, please include “Privacy Rights Request” in your subject line and describe the right you are exercising and the email address or phone number associated with your records so we can locate your information.