Privacy Policy

2. Information We Collect We collect information that you voluntarily provide to us when you:

Fill out a contact form or request a quote.

Upload a Violation Report ("Red Tag").

Sign up for our newsletter or SMS updates.

Purchase products or schedule services.

Types of Data:

Personal Identifiers: Name, email address, phone number, business address.

Business Records: Fire protection history, violation reports, and property details.

Payment Information: Credit card details (processed securely via third-party payment gateways).

Technical Data: Your IP address, the browser and device you use, the pages you view and how you reached them. This is collected automatically by the services described in section 7, not typed in by you. Where a marked link or an advertisement brought you here, the campaign it names is attached to any enquiry you go on to send, and — if you accepted advertising — so is the click identifier the advertising platform set in your browser.

How Long We Keep It: We keep each kind of information for as long as the purpose it was collected for lasts, and then for as long as we have to be able to evidence it. California law allows us to publish either a fixed period or the criteria we use to arrive at one; what follows are the criteria, category by category.

Personal Identifiers: For a customer, for as long as you are one, and after that for as long as we may still have to answer for the work — while a claim about it could be brought, and while our accounting records have to support it. For an enquiry that never became a job, for as long as it might still become one, so that if you come back the quote picks up where it left off; once it plainly will not, it is deleted.

Business Records: Fire protection history, violation reports and Title 19 certification records are kept for as long as we may be asked to evidence the work to the State Fire Marshal or a local fire authority, and for as long as the equipment's own history stays relevant — a hydrostatic test date matters for the working life of the cylinder rather than for a set number of years after it. A violation notice you upload is stored with the enquiry it arrived with and is deleted on the same schedule as that enquiry.

Payment Information: We do not store card numbers at all; they are held by the payment gateway that processes the transaction, under its own retention rules. What we keep is the record of the transaction — the amount, the date, and what it paid for — for as long as our accounting and tax records have to support it.

Technical Data: Analytics reports are kept for at most 14 months and the cookies behind them expire two years after your last visit, both as set out in section 7. That data lives in the measurement accounts described there. One part of it is also kept by us: where a marked link or an advertisement brought you to an enquiry you then sent, the enquiry record notes which campaign it was, and — where you accepted advertising — the click identifier the advertising platform set in your browser. Both are stored with that enquiry and deleted on the same schedule as it, rather than on the 14 months above.

What this means for a deletion request: the exception noted in section 6 is these criteria and nothing wider. Where a record has to be kept for one of the reasons above we will tell you which record and which reason, and delete everything else you have asked us to.

3. How We Use Your Information We use your data for the following business purposes:

Service Delivery: To schedule inspections, repairs, and issue Title 19 certifications.

Compliance: To submit required reports to the Fire Department (e.g., LAFD) on your behalf.

Communication: To send service reminders (e.g., annual inspection due dates), quotes, and operational updates.

Marketing (With Consent): To send promotional offers via email or SMS, provided you have opted in.

4. SMS & Email Communications (TCPA Compliance) By checking the consent box on our forms, you agree to receive automated marketing messages and service reminders from SOS Fire Services at the phone number provided.

Consent is not a condition of purchase.

Opt-Out: You can unsubscribe from SMS messages at any time by replying "STOP". You can unsubscribe from emails by clicking the "Unsubscribe" link in the footer.

Privacy of Mobile Data: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Sharing Your Information We do not sell your personal information. We only share data with:

Service Providers: Technicians and subcontractors working directly on your project.

Technology Providers: The companies that run this website and its tools on our behalf — Wix, which receives the enquiry forms and stores files uploaded with them; Vercel, which hosts the site; Google, Meta and Microsoft, which provide the measurement and advertising services in section 7; and Usercentrics, which records your cookie choice. Each acts on our instructions under its own agreement with us. Two further companies receive data without being tools we chose: Meta runs part of its measurement service on Amazon Web Services and Google Cloud, and the Meta Pixel in your browser is directed by Meta to send some of its reports there rather than to Meta's own domain. Those requests carry your IP address, as any request from your browser does.

Regulatory Bodies: The State Fire Marshal or local Fire Departments as required by law for certification filing.

Legal Obligations: If required by a subpoena or other legal process.

6. Your California Privacy Rights (CCPA/CPRA) If you are a California resident, you have the following rights regarding your personal information:

Right to Know / Access: Request details about the categories and specific pieces of personal data we collect, use, and disclose.

Right to Delete: Request the deletion of your personal information, subject to certain legal exceptions, such as regulatory compliance and record retention.

Right to Correct: Request the correction of inaccurate personal data.

Right to Opt-Out of Sale or Sharing: Opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising, as detailed in section 7. We do not sell your personal information.

Right to Non-Discrimination: We will not discriminate against you in pricing, service quality, or availability for exercising any of your privacy rights.

To exercise any of these rights, please contact us at info@sosfireservices.com or call us at (877) 256-0161.

Verifying who you are: Before we act on a request to know, delete, or correct, we have to be reasonably sure the request is yours, because acting on a false one would itself be a breach. We do that by matching the details in your request against details we already hold — typically the name, email address and phone number from an enquiry or a job. The more sensitive the request, the more we match. We ask only for what is needed to verify you, we do not use it for anything else, and if we cannot verify you we will tell you why rather than simply refusing.

Authorised agents: You may use someone else to make a request for you. We will ask for written permission, signed by you, that allows them to act on your behalf, and we may still contact you directly to confirm both that you gave that permission and that you want the request carried out. An agent holding a valid power of attorney under California Probate Code sections 4000 to 4465 does not need to provide separate written permission.

How long we take: We will acknowledge your request, tell you how we intend to handle it, and respond as quickly as we reasonably can. Where the CCPA governs a request we will meet the deadlines it sets rather than any of our own: acknowledgement within 10 business days, a substantive response within 45 calendar days, and — where a request is genuinely complex — a single extension of up to a further 45 days, with its reason given to you before the first 45 are up. Requests are free of charge, and the CCPA allows a request to know to be made twice in any 12-month period.

Children under 16: This site sells fire protection services to businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone we know to be under 16 — under California law that would require their opt-in consent, or a parent's or guardian's for a child under 13, and we do not seek either. If you believe a child has given us their information, write to us using the details in section 10 and we will delete it.

“Shine the Light” (California Civil Code section 1798.83): Where that section applies to a business, California residents may ask it once a year for a list of the third parties it disclosed their personal information to for those third parties' own direct marketing, and what was disclosed. We do not make disclosures of that kind, so there would be nothing to list. The advertising and measurement services named in section 7 are a different matter: they receive information in order to run and measure our own advertising, on our instructions, not to market to you on their own account. You are welcome to ask us to confirm that in writing at the address in section 10.

7. Cookies, Analytics & Advertising We use Google Tag Manager to load the measurement and advertising tools described below. We do not display third-party adverts on this site, and we do not sell your personal information.

Google Analytics 4: Tells us how visitors find and use the site. It sets first-party cookies (_ga and _ga_*) holding a randomly generated identifier, not your name, phone number, or email. They expire two years after your last visit; how long the resulting reports are kept is set in our Google Analytics account and never exceeds 14 months.

Google Ads: Measures which adverts led to an enquiry, and allows us to show our adverts again to people who have visited us, known as remarketing. It may set advertising cookies from google.com and doubleclick.net.

Meta Pixel: Reports page views and completed enquiry forms to Meta, so that a Facebook or Instagram advert can be credited with an enquiry and so we can reach people similar to those who contact us. It sets Meta's own _fbp cookie in your browser, and once you have sent us an enquiry it also carries the hashed contact details described below.

Microsoft Clarity: Records how pages are used — pointer movement, clicks, scrolling, and which pages you view — and replays those sessions back to us so we can find what is confusing or broken, alongside aggregate heatmaps. Text you type into form fields is masked out of the recordings. Microsoft may combine what it collects here with its own advertising data, including Bing.

Server-side tagging: Some of these measurements travel to a tagging server we operate at metrics.sosfireservices.com, rather than leaving your browser addressed to Google or Meta directly. It forwards the same information onward and adds nothing to it; it exists so that measurement survives the browser restrictions that would otherwise drop it. Because it runs on our own subdomain, cookies it sets are first-party ones — see below.

Hashed contact details: When you submit an enquiry form, your first name, last name, email address and phone number are each converted into a SHA-256 hash inside your own browser before anything is sent for measurement. A hash is a fixed-length string of characters that does not contain your details and cannot be read back into them by anyone who does not already hold the same details. The hash is what reaches Google and Meta; your actual name, address and number never do, and no other script running on the page can read them either. Google and Meta compare it against hashes of their own account holders so that an advert can be credited with your enquiry.

How long those hashes keep travelling: once the Meta Pixel holds them, it does not use them only for the enquiry you have just sent. It keeps the hashed first name, last name, email address and phone number in your browser and attaches them to the ordinary page views it reports afterwards, for the rest of your visit and potentially on later visits from the same browser until you clear its stored data. Meta can therefore connect those page views to one another and to you. If you would rather that did not happen, turn advertising off through “Your Privacy Choices” at the foot of every page, which stops the pixel running, and clear this site's cookies and stored site data in your browser to remove anything it has already kept.

Meta Conversions API: When an enquiry form is accepted, our server also reports that enquiry to Meta directly, sending the hashed details described above together with your IP address and browser type. It carries the same identifier as the report sent from your browser, so the two are counted once rather than twice.

Cookies we set: Two kinds. The cookies named above are set by the tools running inside your browser. In addition, the tagging server described above sets first-party cookies of its own, in the responses it returns rather than from any script on the page; these let a returning visit be recognised as the same visit. All of them hold randomly generated identifiers, not your name, phone number, or email. The hashed details described earlier are not held in any of them: Meta's pixel keeps those in your browser's own storage, and they are cleared when you clear this site's stored site data.

Your choice: We ask before any analytics or advertising cookie is set, wherever in the world you are. That is not the minimum the law requires of us outside Europe; it is the same opt-in standard everywhere, applied deliberately. Until you accept, every tool listed above stays switched off — advertising, analytics, personalisation and functionality storage all start denied, and nothing is measured. The single exception is the storage that keeps a session intact and guards against fraud, which no privacy framework treats as optional. You can change or withdraw your choice at any time using “Your Privacy Choices” at the foot of every page. Your choice covers every browser-based tool listed above, and is recorded by Usercentrics, our consent management provider, on your own device rather than on our servers.

Global Privacy Control and “Do Not Sell or Share”: Using your information for remarketing may count as “sharing” for cross-context behavioural advertising under California law. You can opt out at any time through “Your Privacy Choices”. If your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as an opt-out automatically and switch both analytics and advertising off, without asking you again.

What a cookie choice does not reach: The Conversions API report described above is sent by our own server at the moment an enquiry form is accepted, so a choice made in your browser does not travel with it. If you would like that record removed, write to us using the details in section 10 and we will ask Meta to delete it.

This does not cover the forms: details you type into a quote or contact form are sent to us because you asked us to contact you. They are covered by sections 2 and 3 above, and are not affected by your cookie choice.

Measuring which adverts work: when you send an enquiry, the campaign named in the link you arrived through is stored with it, so that we can tell which of our own advertising and listings bring us work. If you accepted advertising, the click identifier that Google or Meta set in your browser is stored with the enquiry as well, and may be reported back to those platforms so they can be told which enquiries turned into work and which did not — that reporting is the “sharing” described in section 6, and turning advertising off through “Your Privacy Choices” stops it. If you did not accept advertising, no click identifier is set in your browser and none is stored. The campaign name is not an identifier of you and is kept either way.

8. Address & Permit Lookup Tools The Fire Hazard Zone Checker and the Permit Lookup answer by querying public reference services, which means the address or parcel number you enter is sent to them: the US Census Bureau's geocoder, the State of California's fire hazard severity zone map service, and the City of Los Angeles open data portal. We keep no record of what you look up, and neither tool requires you to enter your own address.

9. Security We implement industry-standard security measures to protect your data. However, please note that no method of transmission over the Internet is 100% secure. A violation report you upload travels straight from your browser to our forms provider's file storage over a one-time link issued for that upload, rather than passing through this website.

10. Contact Us: If you have questions about this policy, please contact us at SOS Fire Services, Address: 19849 Nordhoff St, Unit #211, Northridge, CA 91324. Phone: (877) 256-0161. Email: info@sosfireservices.com.

11. Accessibility of This Notice: We are committed to making this notice usable by everyone, including consumers with disabilities. If you use assistive technology and have difficulty reading this policy, or would prefer it in an alternative format — large print, plain text, or read to you over the phone — contact us at (877) 256-0161 or info@sosfireservices.com and we will provide it at no charge. Our Accessibility Statement describes how the rest of this site is built and how to report a barrier.