Who runs this siteA plumbing and heating shop on SW Alaska Street decides what happens to your data, and nobody else.

The controller of the data on this site is Beesplumbingandheating, trading as Bee's Plumbing & Heating at beesplumbingandheating.co. We are a residential plumbing and heating contractor and an emergency plumber Seattle households reach by phone at any hour.

Postal address: 2401 SW Alaska St, Seattle, Washington 98106, United States. Phone 206-745-7570. Email [email protected].

This policy covers the website only. Paperwork on an actual job, such as the written price and the invoice, is between you and us as a customer and follows the terms on the terms page.

What we collectWhat you type into the form or the chat, plus whatever your browser and an ad click hand over on the way in.

From the inquiry form. When you send the form on the contact page or the home page, jefo2e0.php writes down your name, phone, email, the job address, the kind of inquiry you picked, your message, any specification you gave (tank size, fixture, line), and whether you ticked the consent box.

Recorded with it automatically. Your IP address, your browser's user-agent string, the page you came from (the referring URL), the moment the form was rendered and the moment it was sent. The two timestamps catch bots that fill a form in under a second.

From the support chat. cagif5f.php keeps the conversation, and your browser keeps a token so you can come back to the same thread. If you give a name, phone or email in the chat, those are kept with it.

Cookie and storage identifiers. Your consent choice sits in your browser's local storage under site_consent_v2, and the chat token under bees_chat_token. If you allow storage, the ad and analytics tags set their own identifiers, listed on the cookie page.

Advertising click identifiers. If you clicked an ad, the landing address carries a gclid, msclkid or fbclid value.

No account, no password, no payment, no card data. Nothing is sold on this site and no payment is taken here.

What it is used forMostly calling you back about the job. The rest keeps spam out and shows us which ads actually bring in work.

Form and chat details: to call or write back, to price the job, to book a visit and to keep a record of what was asked for. If you write "water heater replacement, 50 gallon gas, garage", that line goes to whoever looks at the job.
IP address, user-agent and timestamps: to block automated junk and to trace abuse. We do not build a profile from them.
Referring URL and click identifiers: to see which search or ad sent an inquiry, so we stop paying for ads that bring nothing.
Analytics and advertising identifiers, only after you allow them: to measure visits and conversions and to show our ads to people in Seattle searching for a 24/7 plumber.
The consent record: to remember what you chose so the banner does not keep asking.

We do not sell your details to lead brokers. That is the whole reason we answer our own phone.

Legal basesEach purpose rests on one of three bases: your consent, steps toward a contract you asked for, or a legitimate interest we can name.

Visitors from Europe are owed a stated basis under the GDPR. US visitors get the same honesty.

Purpose and the basis it rests on
Purpose	Data	Basis
Answering an inquiry, pricing and booking the job	Form fields, chat messages	Contract: steps you asked for before a contract
Contacting you about the inquiry	Name, phone, email	Consent, given by the tick box
Blocking spam and abuse	IP, user-agent, timestamps, honeypots	Legitimate interest in a working inbox
Measuring which ads produce inquiries	gclid, msclkid, fbclid, ad cookies	Consent, through the cookie banner
Visit analytics	Analytics cookies	Consent, through the cookie banner
Remembering your cookie choice	`site_consent_v2`	Legitimate interest; strictly necessary
Server and access logs	IP, request line, time	Legitimate interest in security

Swipe the table sideways to see every column.

Ad platforms and click IDsGoogle Ads and Microsoft Advertising send paid clicks here today, Meta Ads does where a campaign runs, and each adds its own identifier to the link.

We buy search ads. When somebody types "emergency plumber seattle" or "burst pipe repair seattle" and clicks our ad, the platform adds a click identifier to the address of the page they land on.

Google Ads adds gclid.
Microsoft Advertising adds msclkid.
Meta Ads adds fbclid, where a campaign runs there.

The identifier is a random string. It tells the platform which ad click led to which visit. If you allow storage, it can be kept in a first-party cookie so an inquiry sent later counts as a conversion. If you decline, it is not stored and the platforms get no ad storage signal from your visit.

None of these platforms has reviewed or endorsed this site. They sell us ad space and report back on clicks.

Consent Mode v2Four signals start at denied before the page draws, flip to granted only when you press Allow, and go back to denied when you decline.

Google's consent mode is set in the first line of script on every page, before any tag loads. It sets these four to denied:

ad_storage: cookies for advertising.
ad_user_data: sending user data to Google for ads.
ad_personalization: using the visit for personalised ads.
analytics_storage: cookies for visit measurement.

Press Allow and all four update to granted. Press Decline, or withdraw later through "Cookie settings" in the footer, and all four are set back to denied at that moment. While they are denied, tags may send cookieless pings with no identifier stored on your device. The full table of states is on the cookie page.

Who else receives itFive outside parties touch some of this data, and each is named here with what it gets.

Google Ireland Ltd / Google LLC, for Google Ads. Receives the gclid and the consent signals. Policy: policies.google.com/privacy.
Microsoft Ireland Operations Ltd, for Microsoft Advertising. Receives the msclkid. Its own handling is covered by the Microsoft privacy statement at privacy.microsoft.com/privacystatement.
Meta Platforms Ireland Ltd, for Meta Ads, where a campaign runs there. Receives the fbclid. Policy: facebook.com/privacy/policy.
The hosting provider that serves this site and stores the inquiry database and chat transcripts.
The mail provider that carries the notification of a new inquiry to our inbox.

Nobody else. No lead marketplace, no data broker, no "partner network".

Transfers abroadThe business is in the United States, so data from a European visitor crosses the Atlantic, and the platforms' own safeguards cover that crossing.

We work in Seattle. If you write to us from Europe, your inquiry is processed in the United States. Google, Microsoft and Meta move data between their Irish entities and the US under the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses. For a European visitor's own inquiry, the transfer is necessary to answer the request you sent us.

How long it staysInquiries two years, chats one year, logs ninety days, your cookie choice six months.

Retention by category
Category	Kept for	Why that long
Inquiries and their email copies	24 months	A water heater job often comes back as a question a year later.
Chat transcripts	12 months	Long enough to pick up a thread about the same leak.
Server and access logs	90 days	Enough to trace an attack, no more.
Record of a consent choice	6 months	Then the banner asks again.

After the period runs out the record is deleted, not archived. Invoices for work actually done fall under tax record rules, not this website policy.

How it is protectedEncrypted in transit and readable only by the people who answer the phone.

Every page and every form post goes over HTTPS. The inquiry store sits outside the public web folder and cannot be fetched by URL. The operator's panel is behind a login, and only staff who handle inquiries have it. Honeypot fields and timing checks throw out automated submissions before they reach storage.

No system is perfect. If a breach ever touched your data, we would tell you and the relevant authority within the time the law sets.

Rights under the GDPRIf you reach us from Europe, you have seven rights over your data and any of them costs you one email.

Access: a copy of what we hold on you.
Rectification: correct a wrong phone number or address.
Erasure: delete it.
Restriction: keep it but stop using it while a dispute is settled.
Portability: get it in a machine-readable file.
Objection: object to processing on legitimate interest.
Withdraw consent: at any time, for the future, through "Cookie settings" or by email.

How to ask is under data requests.

US state privacy rightsCalifornia residents and residents of other states with privacy laws can know, correct, delete and opt out of sale or sharing.

Under the California Consumer Privacy Act as amended (CCPA/CPRA), and the other state privacy laws in force, you can ask to know what personal information we hold, where it came from and who received it, to correct it, to delete it, and to opt out of its sale or its sharing for cross-context behavioural advertising.

We do not sell personal information for money. Ad cookies set after you press Allow can count as "sharing" under California law. To opt out, press Decline in the banner or "Cookie settings" in the footer, or send a Global Privacy Control signal. We will not treat you differently for using any of these rights. The quote you get is the same either way.

Global Privacy ControlIf your browser sends the GPC signal, we treat it as a decline and do not ask you again.

Global Privacy Control is a setting in some browsers and extensions that sends a Sec-GPC: 1 header. We honour it as an opt-out of sale and sharing. All four Consent Mode signals stay denied, and no ad cookie is set, without the banner asking you to confirm.

ChildrenThis site is for adults booking work on a home, and it takes no data from children.

We work for homeowners, landlords and tenants. The site is not aimed at anyone under 16 and we do not knowingly collect their data. If a child has sent us something, tell us and we delete it.

ComplaintsYou can take a complaint past us to a regulator, and you do not need our permission to do it.

Tell us first if you like. We would rather fix it. But you can complain directly to your state Attorney General; in Washington that is the Washington State Office of the Attorney General. In California you can also go to the California Privacy Protection Agency. Visitors from Europe can complain to the data protection authority of their own country.

Data requestsWrite to one address, say what you want, and get an answer within seven days.

Email [email protected] with "Data request" in the subject, or use the contact form and pick "Data request" as the kind of inquiry. By post: 2401 SW Alaska St, Seattle, Washington 98106, United States.

Say which right you want (a copy, a correction, deletion, an opt-out) and give the phone or email you used with us, so we can find the record. We may call that number to confirm it is you before we send anything. That stops a stranger from requesting your address.

We answer within 7 days. If the law gives us longer for a complicated request, we still reply within 7 days to say what is happening. There is no charge.

AccessibilityThe site is built against WCAG 2.2 AA. If something still blocks you, the phone works and we fix the page.

What we built in: a skip link on every page, full keyboard use of the menu, forms and these drawers, visible focus rings, labels on every form field, text contrast checked against the cream and oxblood grounds, and pages that reflow to a 320px phone with no sideways scrolling. Animation stops when your device asks for reduced motion.

What we know is weaker: the large condensed display type is harder to read for some people at small sizes, so every heading also makes sense read aloud by a screen reader. Some tables scroll sideways on narrow phones.

If any part of the site stops you booking a plumber, call 206-745-7570. Then email [email protected] with the page and what went wrong, and we will fix it.

Changes to this policyA change shows up as a new date at the top of this page, and a change in what we collect also resets the cookie banner.

When we change this policy, the "last updated" date at the top changes with it. If we start collecting something new or add a new recipient, the stored consent key changes too, so the banner comes back and you choose again. We do not apply a new use to data you gave us under the old policy without asking.

Talk to a personThe same phone that takes burst-pipe calls takes privacy questions, and a human picks it up.

Email [email protected]. Phone 206-745-7570, answered 24/7, though a privacy question is better in daylight. Post: Beesplumbingandheating, 2401 SW Alaska St, Seattle, Washington 98106, United States.

This policy is read with the cookie statement and the terms, and the law of Washington, United States governs it, with disputes heard in the courts of Seattle.