Privacy Policy

Last updated: June 26, 2026 — Effective as of this date.

Introduction

GVS PAINT INC, a company headquartered at 500 N State College Blvd Ste 1100, Orange, CA 92868-1625, United States, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gvspaint.lat or engage with our computer systems design and related services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of our website and services immediately.

Information We Collect

Personal Data You Provide

We collect information that you voluntarily provide when you fill out our contact form, request a consultation, or communicate with us via email at help@gvspaint.lat. This may include:

• Identity data: Full name, company name, and job title.
• Contact data: Email address, phone number, and business address.
• Project data: Information about your project requirements, timeline, and budget range that you include in your message.
• Communication data: Records of correspondence, including emails and form submissions.

Data Collected Automatically

When you access our website, certain information is collected automatically through standard web technologies:

• Usage data: Pages visited, time spent on pages, navigation paths, and interaction patterns.
• Device data: Browser type and version, operating system, screen resolution, and device type.
• Network data: IP address, internet service provider, referring URLs, and general geographic location derived from your IP address.
• Cookies and similar technologies: As described in our Cookies section below.

How We Use Your Information

GVS PAINT INC uses the collected data for the following purposes:

• Service delivery: To respond to your inquiries, provide requested consulting services, and fulfill project engagements.
• Business operations: To manage our client relationships, process internal records, and improve our service offerings.
• Communication: To send you relevant information about our services, project updates, and occasional company news if you have opted into such communications.
• Website improvement: To analyze how visitors use our website and make data-driven improvements to user experience and content.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, including responding to lawful requests from public authorities.
• Security: To detect, prevent, and address technical issues, unauthorized access, and potential fraud.

We do not use automated decision-making or profiling that produces legal effects concerning you.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the specific context. We process your data under the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your data protection rights — for example, improving our website and services.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

You have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your information in the following limited circumstances:

• Service providers: With trusted third-party vendors who perform services on our behalf, such as website hosting, analytics, and email delivery. These providers are contractually bound to protect your data and use it only for the services we have engaged them to perform.
• Legal requirements: When required by law, subpoena, court order, or governmental regulation — or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. You will be notified via email or a prominent notice on our website of any change in ownership.
• With your consent: We may share your information for any other purpose with your explicit consent.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect usage analytics. Cookies are small text files placed on your device by your web browser.

Types of Cookies We Use

• Essential cookies: Necessary for the website to function properly. These cannot be disabled. They include session cookies that maintain your form progress and navigation state.
• Analytics cookies: These help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this data to improve our content and user experience.
• Functional cookies: These enable enhanced functionality such as remembering your preferences for future visits.

Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, delete existing cookies, or alert you when a cookie is being sent. Please note that disabling essential cookies may affect the functionality of our website. For more information about managing cookies, visit your browser's help documentation.

Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and our servers.
• Access controls and authentication mechanisms that restrict data access to authorized personnel only.
• Regular security assessments, vulnerability scanning, and penetration testing of our systems.
• Employee training on data protection obligations and secure handling practices.
• Physical security measures at our facilities at 500 N State College Blvd Ste 1100, Orange, CA 92868-1625.

However, no method of electronic storage or transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. We encourage you to take steps to protect your own information, such as using strong passwords and keeping your login credentials confidential.

Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Retention periods vary based on the type of data and the purpose:

• Contact form submissions and correspondence: Retained for up to 3 years after the conclusion of our last interaction, unless a longer period is required for legal or contractual reasons.
• Website usage data: Retained in anonymized or aggregated form for up to 26 months.
• Client project records: Retained for the duration of the engagement plus 7 years for legal and tax compliance purposes.

Your Rights Under the CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal data. These rights include:

• Right to know: You may request that we disclose what personal data we collect, use, disclose, and sell about you. You may make this request up to twice in a 12-month period.
• Right to delete: You may request the deletion of personal data we have collected from you, subject to certain exceptions such as completing a transaction or complying with a legal obligation.
• Right to opt-out: You have the right to opt out of the sale of your personal data. GVS PAINT INC does not sell personal data. We confirm this explicitly.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights, including denying services, charging different prices, or providing a different quality of service.
• Right to correct: You may request that we correct inaccurate personal data we hold about you.
• Right to limit use of sensitive data: You may direct us to limit the use of sensitive personal data to specific business purposes.

To exercise your CCPA rights, contact us at help@gvspaint.lat or call +1 (707) 625-8612. We will verify your identity before processing your request, which we aim to complete within 45 days.

Your GDPR Rights

If you are located in the European Economic Area or the United Kingdom, you have the following additional rights under the General Data Protection Regulation:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request that we correct any inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data under certain conditions, also known as the right to be forgotten.
• Right to restrict processing: Request that we limit how we process your data in specific circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used, and machine-readable format, and have it transmitted to another controller.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: We do not engage in automated individual decision-making, including profiling.

To exercise any of these rights, please contact us at help@gvspaint.lat. You also have the right to lodge a complaint with your local data protection supervisory authority.

Children and Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data without verifiable parental consent, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at help@gvspaint.lat.

International Data Transfers

GVS PAINT INC is headquartered in the United States, and your data will be processed and stored in the United States. If you are located outside the United States, including in the EEA or UK, please be aware that your data will be transferred to, stored, and processed in the United States. We take appropriate safeguards to ensure that such transfers comply with applicable data protection laws, including the use of standard contractual clauses approved by the European Commission where applicable. By using our website or services, you consent to the transfer of your data to the United States.

Third-Party Links

Our website may contain links to third-party websites or services that are not owned or controlled by GVS PAINT INC. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We strongly recommend that you review the privacy policy of every site you visit.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting the updated policy on this page, with the Last updated date revised accordingly. We encourage you to review this Privacy Policy periodically. Material changes will be communicated via a prominent notice on our website or, where appropriate, via email notification to clients with whom we have an active relationship.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We are committed to addressing your privacy concerns promptly and transparently.