Privacy Policy
Effective Date: October 7, 2026 | Last Updated: October 7, 2026
Total Comfort Heating & Air Conditioning, Inc. ("Total Comfort," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website at www.tchvac.net (the "Site"), submit information through our contact forms, request service or estimates, or otherwise engage with our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with applicable privacy laws, including the Maryland Online Data Privacy Act ("MODPA"), the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), and the CAN-SPAM Act.
Total Comfort Heating & Air Conditioning, Inc. is a Maryland corporation located at 12009 Margaret Dr, Hagerstown, MD 21742.
1. Information We Collect
Information You Provide Directly
| Category | Data Elements | Source |
|---|---|---|
| Contact Information | Name, email address, phone number, service address, message content | Contact and service request forms |
| Service Enquiries | Equipment type, system details, nature of the problem, preferred appointment times | Service request and estimate forms |
Information Collected Automatically
| Category | Data Elements | Source |
|---|---|---|
| Device & Usage Data | IP address, browser type and version, operating system, referring URL, pages viewed, time on page, approximate location derived from IP | Cookies and similar technologies, subject to your choices |
2. How We Use Your Information
- To respond to service requests, estimates and general enquiries
- To schedule and carry out work at your property
- To operate, secure and maintain the Site
- To understand how the Site is used and improve it
- To send service reminders or marketing communications where you have asked to receive them
- To comply with legal obligations and enforce our terms
3. Cookies and Tracking Technologies
Our Site uses cookies and similar tracking technologies. A cookie is a small data file stored on your device when you visit a website. We use the following categories of cookies:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for the Site to function, including session management, security, load balancing, and bot protection. These cookies cannot be disabled. A tag manager is used to manage tracking scripts across the Site; it loads without storing personal data, and your choices determine what, if anything, is tracked. | Session / up to 1 year |
| Analytics & Performance | Help us understand how visitors interact with the Site, including page views, session duration, traffic sources, and user behavior. Data is collected pseudonymously. | Up to 2 years |
| Marketing & Advertising | Used to deliver relevant advertisements, retarget past visitors, track conversions, and measure campaign performance. These cookies are only set with your consent. | Up to 2 years |
| Functional | Enable enhanced features such as embedded media, interactive maps, and social sharing tools. These services may set their own cookies when activated. | Session / up to 1 year |
You can review and change your choices at any time using the "Cookie Preferences" control in the footer of our Site. The banner lists every service we use by name, grouped under the categories above, and is the authoritative record of what is active on this Site.
Your choices are remembered for 365 days, after which we will ask again.
We honor the Global Privacy Control (GPC) signal and other universal opt-out preference signals. When we detect such a signal from your browser, we will treat it as a valid opt-out request for the sale of personal data and targeted advertising, as required under MODPA, CCPA/CPRA, and other applicable laws.
4. Data Sharing and Third Parties
We do not sell your personal data. We do not share your personal data with third parties for their own independent marketing purposes.
When you provide consent through our cookie banner, we may share certain data (such as cookie identifiers and site interaction data) with advertising platforms for retargeting and audience creation purposes. Under some state laws (including CCPA/CPRA), this sharing for targeted advertising may constitute a "sale" or "sharing" of personal information. You may opt out at any time through our cookie settings, by contacting us, or via a Global Privacy Control signal.
We share personal data only with the following categories of service providers who process data on our behalf under written agreements:
| Service Provider Category | Purpose | Data Shared |
|---|---|---|
| Web Analytics & Tag Management | Website traffic analysis, reporting, and consent-based management of analytics and marketing tags | IP address (anonymized where required), usage data, device and browser information, consent preferences |
| Advertising Platforms | Conversion tracking, retargeting and campaign measurement (with consent only) | Cookie identifiers, page view and conversion events, IP address |
| Embedded Media & Mapping | Embedded video playback, interactive maps and social sharing features | IP address, browser information, interaction data (when the feature is used) |
| Scheduling & Service Management | Managing service requests, appointments and customer records | Name, contact details, service address, request details |
| Web Hosting & Infrastructure | Website hosting, content delivery, and bot mitigation | Server logs, IP address |
5. Data Retention
We keep personal data only as long as necessary for the purpose it was collected, or as required by law. Service and customer records are retained for as long as needed to support the work carried out, warranty obligations, and our legal and accounting requirements. Analytics data is retained according to the retention period configured in our analytics platform.
6. Your Privacy Rights
Depending on where you live, you may have the right to access, correct, delete or obtain a copy of your personal data; to opt out of targeted advertising and the sale of personal data; and not to be discriminated against for exercising these rights. Sections 7 and 8 describe the rights available under specific laws. To exercise any right, contact us using the details in section 16.
7. Maryland Online Data Privacy Act (MODPA) Rights
Maryland residents may confirm whether we process their personal data, access it, correct inaccuracies, request deletion, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and certain profiling. We will respond within 45 days, extendable once by a further 45 days where reasonably necessary. If we decline a request, you may appeal by replying to our response; we will inform you of the outcome within 60 days.
8. California Privacy Rights (CCPA/CPRA)
California residents may request disclosure of the categories and specific pieces of personal information collected, the sources, the business purpose, and the categories of third parties with whom it is shared; request correction or deletion; limit the use of sensitive personal information; and opt out of the sale or sharing of personal information. We do not sell personal information, and we do not knowingly sell or share the personal information of consumers under 16.
9. Universal Opt-Out and Do Not Sell
We honor browser-based universal opt-out signals, including the Global Privacy Control. You may also opt out of targeted advertising at any time using the "Cookie Preferences" control in the footer of our Site.
10. Email Communications & CAN-SPAM Compliance
We send marketing email only to people who have asked to receive it. Every marketing message identifies us, includes a valid postal address, and carries a working unsubscribe link. We action unsubscribe requests promptly. We may still send transactional messages, such as appointment confirmations or replies to a request you submitted.
11. Sensitive Data
We do not seek to collect sensitive personal data through this Site, and ask that you do not submit it through our forms. We do not use personal data to infer characteristics such as health, religion or political opinion.
12. Data Security
We maintain administrative, technical and physical safeguards appropriate to the nature of the data we hold, including encryption in transit, access controls, and bot mitigation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children's Privacy
The Site is not directed to children, and we do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Links to Other Sites
Our Site may contain links to websites operated by others, including manufacturers, suppliers and review platforms. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any site you visit from a link on ours.
15. Changes to This Policy
We may update this Policy from time to time. The "Last Updated" date above reflects the most recent revision. Where changes materially affect how we use personal data, we will take reasonable steps to notify you.
16. Contact Us
For any question about this Policy or to exercise a privacy right:
Total Comfort Heating & Air Conditioning, Inc.
12009 Margaret Dr,
Hagerstown, MD 21742
301-745-3700