Privacy Policy

1. Controller and contact

The data controller responsible for your personal data is:

Besecker & Coss
1553 Olean-Portville Rd., Olean, NY 14760
Email: beseckerandcoss@gmail.com
Phone: 716-372-0565

2. What data we collect and why

We collect only the data necessary to provide our services and run our business:

• Contact and identity: Name, email address, phone number, and postal address when you submit a service request or contact us. We use this to respond to your request, schedule service, and send transactional communications.
• Service details: Description of your service request, appliance model number (if provided), and related information. We use this to fulfill your repair or parts request.
• Technical and usage data: When you visit our website we may collect IP address, browser type, device information, and pages visited. We use this to operate the site, prevent abuse (e.g. via Cloudflare Turnstile), and improve our services.
• Cookies and similar technologies: We use essential cookies to remember your cookie preferences and optional analytics/functional cookies (including Google Analytics) if you consent. See the Cookie and Google Analytics sections below.

3. Legal basis (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your data on the following bases:

• Contract: Processing necessary to perform our contract with you (e.g. handling your service request, scheduling, and communications related to the service).
• Legitimate interests: Operating and securing our website, preventing fraud and abuse, and improving our services, where these interests are not overridden by your rights.
• Consent: Where we use non-essential cookies or send marketing communications, we do so only with your consent. You may withdraw consent at any time.
• Legal obligation: Where we must retain or disclose data to comply with applicable law.

4. How long we keep your data

We retain your data only as long as necessary for the purposes above:

• Service and contact data: for the duration of our relationship and for a reasonable period afterward (e.g. for warranty, disputes, or legal obligations), typically up to seven years where required for legal or accounting purposes.
• Cookie and preference data: as indicated in the Cookie section or until you change your choices.
• Technical and security logs: for a limited period necessary for security and troubleshooting.

5. Your rights (including GDPR)

Depending on where you live, you may have the right to:

• Access your personal data and receive a copy.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) in certain circumstances.
• Restriction of processing in certain circumstances.
• Data portability (receive your data in a structured, machine-readable format where applicable).
• Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with a supervisory authority (e.g. in your country of residence in the EEA/UK).

To exercise any of these rights, contact us at beseckerandcoss@gmail.com. We will respond within the time required by applicable law (e.g. one month under GDPR).

6. Cookies and similar technologies

We use cookies and similar technologies as follows:

• Strictly necessary: Required for the site to function (e.g. cookie consent preference). These do not require your consent under applicable law.
• Functional / optional: If you click “Accept” on our cookie banner, we may use additional cookies for analytics (e.g. Google Analytics) or functionality. You can decline optional cookies and still use the site.
• Third parties: Our site may use Cloudflare (including Turnstile) for security and performance, and Google Analytics for usage statistics when you have consented. See Cloudflare's and Google's privacy policies for their use of data. We do not sell your personal data.

You can change your cookie preferences by clearing site data or contacting us. Disabling cookies may affect some site features.

6a. Google Analytics

When you have accepted optional cookies, we use Google Analytics (GA4) to understand how visitors use our website (e.g. pages visited, general traffic). This helps us improve the site and our services.

Google Analytics may collect data such as your approximate location (country/region), device type, browser, and how you interact with our pages. We have configured Analytics to anonymize IP addresses where possible. Data is processed by Google in accordance with their Privacy Policy and How Google uses data when you use our partners' sites or apps. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on or by declining optional cookies on our site.

We only enable Google Analytics after you click “Accept” on our cookie banner. If you decline optional cookies, Analytics will not load.

7. Sharing and international transfers

We may share your data with:

• Service providers who process data on our behalf (e.g. hosting, email delivery such as Mailchimp Transactional, Cloudflare, Google Analytics when you have consented). We require them to protect your data and use it only as we instruct.
• Authorities when required by law or to protect our rights.

Our business is based in the United States. If you are in the EEA, UK, or another region with different data protection laws, your data may be transferred to and processed in the United States or elsewhere. We ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) where required by law.

8. Security

We use appropriate technical and organizational measures (e.g. HTTPS, access controls, secure email and form handling) to protect your data against unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure; we encourage you to use strong passwords and protect your own devices.

9. Children

Our services are not directed at minors. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date. For material changes we may notify you by email or a notice on the site where required by law. Continued use of the site after changes constitutes acceptance of the updated policy.