Privacy Policy

This Privacy Policy describes how DDM Irrigation (“we,” “us,” or “our”) collects, uses, stores, shares and protects information in connection with www.ddmirrigation.com (the “Website”) and the services we provide. It applies to visitors to the Website, people who contact us through it, and customers who receive our services. Please read it before using the Website. By using the Website you acknowledge that you have read and understood this policy.

If you do not agree with any part of this policy, please discontinue use of the Website. If you have questions at any point, contact us using the details in the Questions section below.

What information we collect and store

We collect information in three ways: information you give us directly, information collected automatically when you use the Website, and information we receive from service providers acting on our behalf.

Information you provide directly

Your name, email address, telephone number and service or mailing address.
The contents of any message, quote request, service request, employment application or other form you submit to us, including any files or photographs you choose to attach.
Appointment details, property details and service preferences relevant to the work you have asked us to perform.
Payment-related information when you purchase services. Card details are handled by our payment processor; we do not store full payment card numbers on our systems.
Records of your communication preferences, including timestamped records of any consent you give to receive email or text messages from us.

Information collected automatically

IP address, approximate location derived from that address, and time zone.
Browser type and version, operating system, device type and screen characteristics.
Pages viewed, time spent on the Website, the referring page or search term that brought you here, and links clicked.
Cookies and similar technologies, as described in the Cookies section below.

Information from third parties

Analytics providers, advertising platforms and hosting providers that supply aggregate or event-level usage data about the Website.
Customer relationship and scheduling platforms we use to receive and respond to your inquiries.

We do not knowingly collect sensitive personal information such as government identifiers, health information, precise geolocation, biometric data, racial or ethnic origin, religious beliefs or trade union membership, and we ask that you do not send it to us.

With whom we share your personal information

We do not sell, rent or trade your personal information. We share it only in the circumstances described here, and only to the extent necessary.

Service providers

We use third parties to operate the Website and run our business, including website hosting, file storage, email delivery, text message delivery, appointment scheduling, customer relationship management, payment processing and analytics. These providers may process your information only on our instructions, are bound by confidentiality obligations, and may not use it for their own purposes.

Legal and safety disclosures

We may disclose information where we believe in good faith that doing so is required by law, legal process, subpoena or a valid request from a law enforcement or regulatory authority, or where disclosure is necessary to establish, exercise or defend legal claims, to enforce our terms, or to protect the rights, property or safety of any person.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization or sale of assets, your information may be transferred as part of that transaction. It remains subject to this policy unless and until you are notified of a change.

Text messaging data

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

How we protect your personal information

We maintain administrative, technical and physical safeguards designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration and destruction. These include:

Encryption of data in transit using industry-standard transport layer security.
Encryption at rest for files and records held in our storage systems.
Access controls limiting personal information to staff who need it to do their work.
Authentication requirements on the accounts and platforms we use.
Periodic review of our vendors, permissions and configurations.
Staff guidance on handling customer information and recognizing phishing attempts.
A procedure for assessing, containing and notifying affected people of any breach, in accordance with applicable law.

No method of transmission over the Internet and no method of electronic storage is completely secure. While we work to protect your information using commercially reasonable means, we cannot guarantee absolute security, and you provide information to us at your own risk.

Sale of your information

We do not sell your personal information, and we have not sold personal information in the preceding twelve months. We do not share personal information for cross-context behavioral advertising as that term is defined under California law, and we do not process personal information for targeted advertising as that term is defined under other state privacy laws without your consent where consent is required. We do not sell the personal information of anyone we know to be under the age of sixteen.

Cookies

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies such as pixels and local storage for the following purposes:

Strictly necessary. Required to route requests, keep the Website secure and remember your privacy choices. These cannot be switched off.
Preferences. Remember choices you have made, such as previously entered contact details or display settings.
Analytics. Help us understand how the Website is used so we can improve it.
Advertising. Measure the effectiveness of our advertising and, where permitted, show you relevant advertisements on other sites.

Where the law requires it, we ask for your consent before setting analytics or advertising cookies, and you may change or withdraw that choice at any time through the cookie preferences control on the Website. You may also block or delete cookies through your browser settings, although parts of the Website may not function properly if you do. Our Cookie Policy describes the categories in more detail.

Children's privacy

The Website is intended for adults and is not directed to children. We do not knowingly collect personal information from children under the age of thirteen, or under sixteen where a higher age applies in your jurisdiction. If you believe a child has provided us with personal information, contact us at ddmirrigationoffice@gmail.com and we will delete it promptly.

Analytics programs

We use analytics services to understand how visitors find and use the Website. These services set cookies or use similar technologies to collect information such as pages viewed, session duration, referral source, approximate location and device characteristics. The information is used in aggregate to measure performance and improve content and navigation. Where the analytics provider offers an opt-out mechanism, you may use it, and where consent is required we do not run analytics until you have given it.

Advertising and remarketing

We may advertise our services on search engines, social platforms and other websites. Those platforms may use cookies or similar technologies to measure whether an advertisement led to a visit or an inquiry, and to show our advertisements to people who have previously visited the Website. We do not provide those platforms with your name, email address or telephone number for advertising purposes. You can generally control interest-based advertising through the settings offered by each platform, or through industry opt-out tools.

Security and spam prevention

To protect the Website and our forms from automated abuse, we use technical measures including hidden form fields, submission rate limits, request logging and, where necessary, third-party bot detection. These measures may process your IP address and information about your browser and submission behavior. We do this on the basis of our legitimate interest in keeping the Website and our customers' information secure.

Information retention

We retain personal information only as long as necessary for the purposes described in this policy, or as long as required by law. In practice:

Inquiry and quote request details are retained while we are in contact with you and for a reasonable period afterward.
Customer service records are retained for the duration of the relationship and afterward as needed for warranty, dispute resolution and record-keeping purposes.
Consent and opt-out records are retained for as long as we are required to evidence them.
Financial and tax records are retained for the period required by applicable law.
Analytics data is retained in aggregate or for the retention period offered by the provider.

When information is no longer needed we delete it or anonymize it so it can no longer be associated with you.

Direct marketing

With your consent, we may contact you by email or text message about our services, appointment availability, seasonal reminders and offers. You may withdraw that consent at any time.

Email

Every marketing email includes an unsubscribe link. Unsubscribing stops marketing messages but not transactional messages relating to work you have asked us to perform.

Text messaging program

You will only receive text messages if you have explicitly opted in, and we keep a timestamped record of that opt-in.
Message frequency varies based on your interactions with our business.
Messages relate to the services you have requested, including appointment reminders, scheduling updates and customer support.
Reply STOP at any time to cancel. You will receive one confirmation message and no further messages unless you opt in again.
Reply HELP for assistance, or contact us at ddmirrigationoffice@gmail.com.
Standard message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
We comply with the Telephone Consumer Protection Act and other applicable communication laws.

We do not share customer opt-in information, including phone numbers and consent records, with affiliates or third parties for marketing or promotional purposes.

Your rights

Depending on where you live, you may have specific rights over your personal information. The sections below set out those rights by jurisdiction. We honor requests from anyone, wherever they live, to the extent we are reasonably able to, regardless of whether a particular law applies to them.

European Economic Area, United Kingdom and Switzerland (GDPR and UK GDPR)

These rights apply to you if you are located in the European Economic Area, the United Kingdom or Switzerland at the time your personal data is collected.

The right to be informed about how your personal data is collected and used, which this policy is intended to provide.
The right of access to the personal data we hold about you, together with a copy of that data.
The right to rectification of personal data that is inaccurate or incomplete.
The right to erasure of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where it has been processed unlawfully.
The right to restrict processing while a request or objection you have made is being resolved.
The right to data portability, meaning you may receive the personal data you provided to us in a structured, commonly used and machine-readable format and have it transmitted to another controller where technically feasible.
The right to object to processing carried out on the basis of legitimate interests, and an absolute right to object to processing for direct marketing purposes.
The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects.
The right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
The right to lodge a complaint with your national supervisory authority, including the Information Commissioner's Office in the United Kingdom or the Federal Data Protection and Information Commissioner in Switzerland.

We process personal data on one or more of the following legal bases: your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate interests in operating, securing and improving our business, where those interests are not overridden by your rights.

California (CCPA as amended by the CPRA)

These rights apply to you if you are a resident of the State of California.

The right to know the categories of personal information we have collected about you, the categories of sources it came from, the business or commercial purpose for collecting it, and the categories of third parties to whom it is disclosed.
The right to access the specific pieces of personal information we have collected about you in the preceding twelve months.
The right to delete personal information we have collected from you, subject to the exceptions permitted by law.
The right to correct inaccurate personal information we maintain about you.
The right to opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are defined by the CCPA.
The right to limit the use and disclosure of sensitive personal information to those uses permitted by law.
The right to non-discrimination, meaning we will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised any of these rights.

You may designate an authorized agent to submit a request on your behalf. We will require written proof of that authorization and may require you to verify your own identity directly with us before the request is processed.

California Civil Code Section 1798.83 additionally permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Virginia (Consumer Data Protection Act)

These rights apply to you if you are a resident of the Commonwealth of Virginia.

The right to confirm whether we are processing your personal data and to access that data.
The right to correct inaccuracies in your personal data.
The right to delete personal data you provided to us or that we obtained about you.
The right to obtain a copy of your personal data in a portable and readily usable format.
The right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.
The right to appeal a refusal to act on your request, and to contact the Virginia Attorney General if that appeal is denied.

Colorado (Colorado Privacy Act)

These rights apply to you if you are a resident of the State of Colorado.

The right to access the personal data we process about you.
The right to correct inaccuracies in your personal data.
The right to delete personal data concerning you.
The right to obtain your personal data in a portable and, to the extent technically feasible, readily usable format.
The right to opt out of targeted advertising, the sale of personal data, and certain profiling, including through a universal opt-out mechanism recognized by the Colorado Attorney General.
The right to appeal a refusal to act on your request within a reasonable period.

Connecticut (Connecticut Data Privacy Act)

These rights apply to you if you are a resident of the State of Connecticut.

The right to confirm whether we process your personal data and to access it.
The right to correct inaccuracies in your personal data.
The right to delete personal data provided by or obtained about you.
The right to obtain a copy of your personal data in a portable and readily usable format.
The right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of solely automated decisions that produce legal or similarly significant effects.
The right to appeal a refusal to act on your request, and to submit a complaint to the Connecticut Attorney General.

Utah (Utah Consumer Privacy Act)

These rights apply to you if you are a resident of the State of Utah.

The right to confirm whether we are processing your personal data and to access that data.
The right to delete personal data that you provided to us.
The right to obtain a copy of your personal data in a portable and readily usable format.
The right to opt out of targeted advertising and the sale of personal data.

Nevada (NRS Chapter 603A)

These rights apply to you if you are a resident of the State of Nevada.

The right to submit a verified request directing us not to make any covered sale of the personal information we have collected about you. We do not sell personal information as defined by Nevada law.

Canada (PIPEDA and provincial privacy legislation)

These rights apply to you if you are located in Canada.

The right to know why your personal information is being collected, used or disclosed, and to have that purpose identified before or at the time of collection.
The right to give, refuse or withdraw consent, subject to legal or contractual restrictions and reasonable notice.
The right to access the personal information we hold about you and to be told how it has been used and to whom it has been disclosed.
The right to challenge the accuracy and completeness of that information and have it corrected.
The right to challenge our compliance with these principles, first with us and then with the Office of the Privacy Commissioner of Canada or the applicable provincial commissioner.

Australia (Privacy Act 1988)

These rights apply to you if you are located in Australia.

The right to access the personal information we hold about you.
The right to request correction of personal information that is inaccurate, out of date, incomplete, irrelevant or misleading.
The right to complain about a breach of the Australian Privacy Principles, first to us and then to the Office of the Australian Information Commissioner.

Exercising your rights

To exercise any right described above, contact us by email at ddmirrigationoffice@gmail.com or by telephone at (319) 774-3750. Please tell us which right you wish to exercise and provide enough information for us to locate your records.

We will verify your identity before acting on a request, usually by matching the details you provide against the information we already hold. We may ask for additional verification where a request concerns sensitive information or deletion.
We will respond within the period required by the law that applies to you, generally within thirty to forty-five days, and we will tell you if we need a permitted extension.
There is no charge for a request unless it is manifestly unfounded, repetitive or excessive, in which case we will tell you the reason before proceeding.
An authorized agent may submit a request on your behalf with written proof of authorization.
We will not discriminate against you for exercising any of these rights.

If we decline a request, we will explain why and how you may appeal. To appeal, reply to our decision within a reasonable period and we will review it and respond in writing.

Complaints

If you are unhappy with how we have handled your personal information or a request, contact us first at ddmirrigationoffice@gmail.com so we can try to resolve it. You also have the right to complain to a regulator: your national data protection supervisory authority in the European Economic Area, the Information Commissioner's Office in the United Kingdom, the Office of the Privacy Commissioner of Canada or the applicable provincial commissioner in Canada, the Office of the Australian Information Commissioner in Australia, or your state Attorney General in the United States.

Accountability

DDM Irrigation is responsible for the personal information under its control, including information transferred to service providers for processing. We are the controller of the personal information described in this policy. We require our service providers to give comparable protection through contract, and we review our privacy practices when our services, systems or legal obligations change. Questions about our accountability practices can be directed to the contact details in the Questions section.

Location of data processing

We are based in the United States, and the personal information we collect is processed and stored in the United States and in other countries where our service providers operate. Data protection laws in those countries may differ from the laws in your country. Where we transfer personal information out of the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards such as the European Commission's standard contractual clauses, together with additional measures where required.

Third-party websites

The Website may contain links to websites, platforms and services operated by others, including social media pages, mapping services, manufacturer sites, review platforms and payment pages. We do not control those sites and are not responsible for their content or their privacy practices. This policy applies only to information collected by DDM Irrigation. We encourage you to read the privacy policy of any site you visit through a link on the Website.

Do Not Track

Some browsers transmit a “Do Not Track” signal. There is no common industry standard for how such signals should be interpreted, so we do not currently respond to them. We do honor recognized universal opt-out mechanisms, such as Global Privacy Control, where the law requires us to treat them as a valid opt-out of sale or targeted advertising.

Transferring data

By using the Website and submitting information to us, you understand that your information may be transferred to, stored in and processed in the United States and in other countries where our service providers operate, and you consent to that transfer, storage and processing. We take reasonable steps to ensure your information is treated securely and in accordance with this policy wherever it is processed.

Questions

If you have questions about this Privacy Policy, or about how your information is handled, contact us at:

DDM Irrigation
640 51st Street, Marion, IA 52302
Phone: (319) 774-3750
Email: ddmirrigationoffice@gmail.com
Website: www.ddmirrigation.com

Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services or the law. The current version is always available on the Website. If we make a material change, we will take reasonable steps to notify you, such as posting a notice on the Website or contacting you directly where we have your details. Your continued use of the Website after a change takes effect means you accept the revised policy.