Privacy Policy
What we collect when you use this website or request a quote, why we collect it, who it goes to, and the rights you have over it.
1. Who we are
This policy is issued by Hi Sign [confirm full legal entity name and form — e.g. “Hi Sign, Inc.” or the registered DBA], a non-electrical sign fabricator located at 2870 E. Imperial Hwy, Brea, CA 92821 (“Hi Sign,” “we,” “us,” “our”). We are the party responsible for the personal information described here.
Contact: thehisign@gmail.com · 714-993-0912 · Monday–Friday, 8am–5pm Pacific.
2. What this policy covers
This policy applies to information we collect through hisignbrea.com (the “Site”), including the quote request form, and to information you send us by email or telephone in connection with a project inquiry.
It does not change the terms of any signed estimate, proposal, or purchase order between you and Hi Sign. Where a signed agreement addresses confidentiality of your project information, that agreement controls.
3. Information we collect
3.1 Information you give us
When you submit the quote form, we collect the project type, your timeline, your name, your business email address, your phone number (optional), and anything you write in the project details field. When you email or call us, we collect what you choose to tell us — typically site addresses, building contacts, artwork files, and specifications.
3.2 Information collected automatically
Our hosting and security provider records standard server and edge log data for every request: IP address, browser type and user agent, referring page, the pages and files requested, and the date and time. We use this for delivering the Site, diagnosing errors, blocking abuse, and understanding traffic in aggregate.
3.3 Cookies and similar technologies
The Site does not use advertising cookies or cross-context behavioral tracking. Our bot-protection widget (Cloudflare Turnstile) and our security provider may set strictly necessary cookies or local storage entries required to verify that a form submission is not automated. [Confirm before launch: no web analytics package is installed as of this revision. If one is added, this section and the categories table must be updated first.]
3.4 Information we ask you not to send
We do not need and do not knowingly collect sensitive personal information — government ID numbers, financial account numbers, health information, precise geolocation, or biometric data. Please do not include it in the quote form. Deposits and invoices are handled separately; we do not collect payment card numbers through this Site.
4. Categories collected in the last 12 months
Under the California Consumer Privacy Act as amended (the “CCPA”), the categories of personal information we have collected in the preceding twelve months are:
| Category | Examples | Source | Business purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Name, business email, phone number, IP address | You; automatic collection | Responding to quote requests; site security | Hosting and email service providers |
| Customer records (Cal. Civ. Code §1798.80) | Business name, site address, billing contact | You | Estimating, scheduling, performing the work | Service providers; installers as needed |
| Commercial information | Project type, scope, timeline, quote and order history | You | Preparing proofs and estimates; business records | Service providers; accountants |
| Internet or network activity | Pages requested, referrer, user agent, timestamps | Automatic collection | Security, abuse prevention, error diagnosis | Hosting and security provider |
We do not collect the categories of sensitive personal information defined by the CCPA, biometric information, geolocation beyond coarse IP-derived region, education records, or inferences used for profiling.
5. How we use information
- To respond to your inquiry and schedule an on-site photo survey.
- To prepare estimates, proofs, drawings, and permits or approvals related to your project.
- To fabricate, deliver, install, and service the signage you order.
- To invoice, collect deposits and balances, and keep required business and tax records.
- To operate and secure the Site, including rate limiting and bot filtering of the quote form.
- To send transactional messages about a project you have requested or ordered. We do not run a marketing email program from this Site. [Confirm before launch if a newsletter or campaign list is added — that requires separate consent language and an unsubscribe path.]
- To comply with law and to establish, exercise, or defend legal claims.
6. Who we disclose information to
We disclose personal information only for the business purposes listed above, to:
- Service providers under contract — our hosting, content-delivery and bot-protection provider (Cloudflare, Inc.), our transactional email provider (Resend), and the web font service that serves typefaces to your browser (Google Fonts, which receives your IP address as part of that request). Each is bound to use the information only to perform services for us.
- Subcontractors and installers engaged for your project, limited to what they need to perform the work.
- Professional advisors — accountants, insurers, and attorneys, under duties of confidentiality.
- Legal and safety — when required by law, subpoena, or court order, or to protect the rights, property, or safety of Hi Sign, our customers, or the public.
- Business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
7. No sale or sharing of personal information
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. We have not done so in the preceding twelve months. We do not sell or share the personal information of consumers we know to be under 16 years of age.
8. How long we keep it
We keep quote requests that do not become projects for [retention period — confirm; commonly 24 months] and then delete them. Records tied to a completed project — contracts, proofs, invoices, and installation documentation — are retained for as long as needed for warranty, tax, and legal purposes, generally at least four years under California record-keeping rules. Server and security logs are retained for the short period set by our provider’s defaults. We delete or de-identify information when it is no longer needed for the purpose it was collected.
9. Security
The Site is served over HTTPS. Form submissions are transmitted over encrypted connections, protected by bot verification and rate limiting, and delivered to a limited number of internal recipients. Access to project records is limited to people who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. California privacy rights
If you are a California resident, the CCPA gives you the rights below. We honor these requests as a matter of policy, whether or not Hi Sign meets the statutory thresholds that make a business subject to the CCPA in a given year.
- Right to know — the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
- Right to delete — deletion of personal information we collected from you, subject to exceptions such as completing a transaction, warranty obligations, security, and legal compliance.
- Right to correct — correction of inaccurate personal information.
- Right to opt out of sale or sharing — we do not sell or share personal information, so no opt-out link is required or provided.
- Right to limit use of sensitive personal information — we do not collect sensitive personal information.
- Right to non-discrimination — we will not deny service, charge different prices, or provide a different level of quality because you exercised a privacy right.
10.1 How to submit a request
Email thehisign@gmail.com with the subject line “Privacy Request,” or call 714-993-0912. Tell us which right you are exercising.
10.2 Verification
To protect your information, we will verify your identity before acting. For most requests this means matching the email address or phone number in our records and confirming details of the inquiry or project. We will not use information provided for verification for any other purpose.
10.3 Authorized agents
An authorized agent may submit a request on your behalf with written permission signed by you, or a valid power of attorney. We may also contact you directly to confirm the authorization.
10.4 Timing
We confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, we will tell you and may take up to 45 additional days.
10.5 Shine the Light
California Civil Code §1798.83 lets California residents ask about personal information disclosed to third parties for those parties’ own direct marketing. We do not disclose personal information for that purpose.
11. Other state privacy rights
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana — may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to appeal a denied request. We apply the process in Section 10 to those requests. To appeal, reply to our response with “Appeal” in the subject line; we will respond in writing with our decision and the reasons for it.
12. Children’s privacy
This Site serves commercial and institutional buyers. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided information, email thehisign@gmail.com and we will delete it.
13. Do Not Track and Global Privacy Control
There is no common standard for responding to browser “Do Not Track” signals, and this Site does not respond to them. Because we do not sell or share personal information, a Global Privacy Control signal does not change how we handle your information — there is nothing to opt out of.
14. Visitors outside the United States
Hi Sign serves customers in [service area — confirm radius] and stores information in the United States. If you visit the Site from outside the U.S., you understand that your information will be processed in the United States, where privacy laws may differ from those in your country. We do not market to individuals in the European Economic Area or the United Kingdom. [If EEA/UK inquiries become routine, add an Article 13 lawful-basis and transfer section with counsel.]
15. Third-party links
The Site may link to third-party websites, such as a mapping service for our shop address. We are not responsible for the privacy practices of those sites; read their policies before providing information.
16. Changes to this policy
We may update this policy as our practices or the law change. The effective date at the top shows the current version. Material changes will be posted here before they take effect.
17. Contact us
Hi Sign · 2870 E. Imperial Hwy, Brea, CA 92821 · 714-993-0912 ·
See also our Terms of Service and Accessibility Statement.
Placeholder notice: every bracketed item above must be confirmed, and this document reviewed by a licensed California attorney, before launch. It is a drafting template, not legal advice.