Effective 2026-04-29
Privacy Policy
How Highland Building and Supply collects, uses, and protects your information.
Note to reviewers: This is a templated draft. Sections marked [REVIEW WITH COUNSEL] require legal review before launch.
1. Who we are
This site is operated by Highland Building and Supply, a post-frame building contractor based in Ohio. You can reach us at admin@highlandbuilds.com or (513) 500-7378. Our mailing address is 1305 OH-28, Loveland, OH 45140.
2. What we collect and why
We collect three buckets of information:
- Information you give us — name, phone, email, ZIP code, and project details when you submit a quote form, request a callback, or interact with our 3D configurator. We use this only to respond to your project inquiry and to send the information you asked for.
- Information collected automatically — pages you visit, what you click, the device and browser you use, your approximate location (city level, derived from IP), and how you arrived at our site (referrer + UTM parameters). We use this to measure marketing performance, fix bugs, and prevent abuse.
- Phone-call data — when you call a Highland number that appears on this website, the call may be tracked, recorded, and analyzed for quality and attribution purposes via CallRail. See CallRail call recording below.
3. Third-party services we use
We use the following service providers. Each one processes some of your personal information on our behalf:
| Service | Purpose | Data shared |
|---|---|---|
| Google Analytics 4 (GA4) | Site analytics | Hashed client ID, page views, events, approximate location |
| Google Ads (incl. Enhanced Conversions) | Conversion measurement | Hashed email + phone for conversion match (if consented) |
| Meta Pixel + Conversions API | Conversion measurement, retargeting | Hashed email + phone, page views, lead events (if consented) |
| CallRail | Phone-call attribution + recording | Phone number, call duration, call recording, source attribution |
| Resend | Transactional email delivery (lead notifications) | Email content + recipient address |
| Cloudflare Turnstile | Bot protection on forms | Browser fingerprint signals, no personal info |
| Vercel | Web hosting + performance analytics | IP address, browser, page-load timings |
| Smart Build Systems (iframe configurator) | 3D building designer + quote routing | Design parameters, contact info you enter inside the configurator |
| Google Tag Manager | Tag orchestration (loads the above) | Configuration only — no personal data on its own |
4. Cookies and consent
We use Google Consent Mode v2 with all six signals defaulting to denied. When you arrive on the site for the first time, you'll see a banner where you can grant or deny consent for analytics, ad personalization, and other categories. Until you interact with that banner, no personalized analytics or advertising tags fire.
You can update your consent at any time using the Cookie preferences link in the footer.
5. CallRail call recording
If you call a Highland phone number listed on this website, your call may be recorded. Recordings are used to verify quality of service, train our team, and attribute incoming calls to marketing campaigns. We do not sell call recordings or share them with parties outside CallRail and Highland staff.
Ohio is a one-party consent state for call recording. You can opt out of recording by telling the staff member who answers your call; we will note your preference and stop the recording for that conversation.
6. How long we keep your data
- Quote form submissions — [REVIEW WITH COUNSEL — recommend 24 months in CRM].
- Call recordings — 90 days, per CallRail's default retention.
- Site analytics (GA4) — 14 months, per our GA4 property setting.
- Server logs (Vercel) — 30 days, for security and debugging.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, or limit how we use your personal information. To exercise any right, email admin@highlandbuilds.com. We respond within 30 days.
California residents (CCPA/CPRA): You have the right to know what personal information we've collected, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell personal information for money. We do share hashed identifiers with advertising platforms (Meta, Google) for measurement purposes — you can opt out via the consent banner.
EU/UK residents (GDPR/UK GDPR): Our lawful bases for processing are (1) consent for analytics and advertising, (2) legitimate interest for security and fraud prevention, and (3) contract performance for fulfilling your quote request. You have the right to lodge a complaint with your local supervisory authority. [REVIEW WITH COUNSEL — confirm whether GDPR applies to Highland's traffic.]
8. Children
This site is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have, contact us and we will delete it.
9. Security
We use HTTPS site-wide with HSTS, default-denied cookie consent, server-side bot protection on forms, and least-privilege access to our analytics consoles. No system is 100% secure; if you suspect a breach affecting your data, contact us immediately at admin@highlandbuilds.com.
10. Changes to this policy
We may update this policy as our practices change. The effective date at the top of this page reflects the most recent change. We will notify you of material changes via email if you have an active quote with us.
11. Contact
Highland Building and Supply
1305 OH-28
Loveland, OH 45140
admin@highlandbuilds.com · (513) 500-7378
See also: Terms of Service · Accessibility Statement.