Who We Are

Paso Robles Tank is the data controller responsible for the processing of personal data described in this Privacy Policy.

Paso Robles Tank
825 26th Street, Paso Robles, CA 93446
Email: admin@pasoroblestank.com

What Data We Collect

We collect the following types of personal data when you visit our website and request a quote:

Cookie consent preferences (your choices about which cookies and similar technologies you allow).
Device and connection information (such as IP address, browser type, device type, operating system, and basic request information needed to load and secure the website).
Quote request and contact details (such as your name, email address, phone number, and the information you include in your message about the work you are requesting).
Usage data collected through analytics (information about how you interact with our website, collected through cookies or similar technologies, where you have given consent).
Advertising and measurement data (information collected through advertising-related cookies or similar technologies to help deliver and measure advertising, where you have given consent).

Sources of data:
Directly from you when you submit a quote request or contact us.
Automatically from your device when you access the website (for example, IP address and technical request data).
From cookies and similar technologies, including analytics and advertising technologies, where you have given consent.

Providing quote request and contact details is optional, but if you do not provide them, we may not be able to respond to your request or provide a quote. Device and connection information is necessary to provide and protect the website.

How We Use Your Data

We use your personal data for the following purposes:

To respond to your quote requests and communicate with you about the services you asked about (legal basis: contract).
To measure and understand how visitors use our website using analytics technologies (legal basis: consent).
To deliver and measure advertising using advertising technologies (legal basis: consent).
To protect our website and users, including monitoring for security issues and preventing misuse (legal basis: legitimate interest).
To produce aggregated statistics from technical logs that do not rely on cookies or other technologies that require consent (legal basis: legitimate interest).

Where we rely on consent, you can withdraw it at any time through our cookie settings.

Who We Share Your Data With

We share personal data only as needed to operate our website, provide requested services, and run the features you choose to enable (such as analytics and advertising). When we use third-party services, your data is processed under their privacy policies.

Google (including Google services that may support analytics and advertising features). We use Google services to help us understand website performance and, where enabled by your consent, to support advertising and measurement. Data may be collected through cookies or similar technologies when you consent to those categories.

YouTube. We use YouTube to display video content on our website. When YouTube content loads, YouTube may receive device and usage information and may set cookies or similar technologies depending on your settings and consent choices.

We use our own consent management system (Trustwards) to record and manage your cookie preferences. This data is processed internally and not shared with third parties.

International Data Transfers

If you are located in the EU/EEA, the United Kingdom, or Switzerland, please note that some of our service providers are located outside your jurisdiction, specifically in the United States. This means your personal data may be transferred internationally when those services are used.

Google: Transfers may occur to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).
YouTube: YouTube is provided by Google and transfers may occur to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF).

Our consent management system (Trustwards) is based in Spain (EU), so consent data is not transferred internationally.

How Long We Keep Your Data

Account data: until deletion request.
Cookie consent records: 10 years (to demonstrate compliance and address potential claims within legal limitation periods).
Security logs and technical records: 12 months.
Analytics data: until consent is withdrawn or according to the analytics tool retention settings.
Advertising/marketing tracking data: until consent is withdrawn.

Your Rights

If you are located in the EU/EEA, the United Kingdom, or Switzerland, you have the right to:
Access your personal data.
Correct inaccurate personal data.
Delete your personal data.
Restrict processing of your personal data.
Receive a copy of your personal data in a portable format and have it transmitted where technically feasible.
Object to processing based on legitimate interests.
Withdraw consent at any time where processing is based on consent (this does not affect processing already carried out before you withdrew consent).
Not be subject to automated decision-making or profiling that produces legal effects or similarly significantly affects you.

If you are a California consumer, you have the right to:
Know what personal information is collected, used, shared, or sold.
Delete personal information.
Opt-out of the sale or sharing of personal information (“Do Not Sell or Share My Personal Information”).
Correct inaccurate personal information.
Limit the use and disclosure of sensitive personal information.
Not be discriminated against for exercising your privacy rights.

To exercise your rights, contact us at admin@pasoroblestank.com. We may need to verify your identity before completing certain requests.

Response timing:
For GDPR requests, we aim to respond within one month.
For CCPA/CPRA requests, we respond within 45 days (and may extend by an additional 45 days when permitted, with notice).

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Privacy

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Data Security

We implement appropriate technical and organizational measures designed to protect personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, but we take reasonable precautions to reduce risk.

Data Breach Notification

We maintain procedures to detect, report, and investigate security incidents. If a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and provide information about the nature of the breach, likely consequences, and the measures taken or proposed to address it.

If you suspect a security issue, please contact us at admin@pasoroblestank.com.

How to Lodge a Complaint

If you are located in the EU/EEA, the United Kingdom, or Switzerland, you have the right to lodge a complaint with the competent data protection authority in your jurisdiction. We encourage you to contact us first so we can try to resolve your concern.

If you are a California consumer, you may also contact the California Privacy Protection Agency (CPPA) or the California Attorney General. CPPA website: https://cppa.ca.gov/

Updates to This Policy

We review and update this Privacy Policy periodically. The “Last updated” date at the top of this policy shows when it was most recently changed. If we make significant changes, we will provide notice by posting an update on our website and, where appropriate, by email.

Changes take effect from the date indicated at the top of this policy. Where processing is based on consent, we will request new consent when required.

Contact Us

Email: admin@pasoroblestank.com
Address: 825 26th Street, Paso Robles, CA 93446
Data Controller: Paso Robles Tank

California Privacy Rights (CCPA/CPRA)

This section applies to California consumers and serves as our Notice at Collection.

Personal information we collect (categories collected in the last 12 months):
Identifiers (such as name, email address, phone number, IP address, and online identifiers associated with cookies where enabled).
Internet or other electronic network activity information (such as interactions with our website, including analytics and advertising measurement data where enabled).
Inferences drawn from online activity to understand website performance and advertising measurement, where enabled by your choices.

Business and commercial purposes for collecting personal information:
To provide our website and respond to quote requests and communications.
To maintain the security and integrity of our website and prevent misuse.
To measure website performance through analytics where you allow it.
To support advertising delivery and measurement where you allow it.

Sale or sharing of personal information:
We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

Your CCPA/CPRA rights and how to exercise them:
You may request to know, access, delete, and correct personal information we maintain about you. You may also opt-out of the sale or sharing of personal information by using a “Do Not Sell or Share My Personal Information” request, even though we do not sell or share personal information as described above. You may request to limit the use and disclosure of sensitive personal information; we do not collect special categories of data for GDPR purposes, and we do not use sensitive personal information for purposes that would require offering a limitation right beyond what is described in this policy.

To submit a request, contact us at admin@pasoroblestank.com. We will verify your request by asking for information that matches what we already maintain (for example, confirming access to the email address used to contact us) and by considering the nature of the request and the sensitivity of the information.

Timing and non-discrimination:
We respond to verifiable consumer requests within 45 days, and we may extend this period by an additional 45 days when permitted, with notice. We do not discriminate against you for exercising your CCPA/CPRA rights.

Global Privacy Control (GPC):
Where our website receives a valid Global Privacy Control signal, we treat it as a request to opt-out of the sale or sharing of personal information.