Privacy Policy

At Universal Environmental Services, LLC ("UES", "we", "us"), we are committed to protecting your privacy and personal data. This Privacy Policy ("Policy") explains how we collect, use, disclose and protect your personal data when you visit our website, universalenvironmentalservices.com, and when you contact us about our services.

UES operates in the United States. We follow the U.S. privacy laws that apply to us, including, where it applies, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

By using our website, you agree to the collection and use of personal data in accordance with this Policy.

1. Introduction and scope

This Policy applies to personal data UES collects through this website and when you contact us about our services.

Our contact details:

Universal Environmental Services, LLC
411 Dividend Drive
Peachtree City, GA 30269
800.988.7977
[email protected]

Privacy contact: [email protected]

We encourage you to read this Policy carefully to understand our practices regarding your data and how we will treat it.

2. Information we collect

We collect information to provide and improve our services to you. We only collect data that is necessary for the purposes in this Policy.

2.1 Personal data

This includes information that can be used to identify you directly or indirectly. The categories of personal data we may collect are:

• Identifiers: your name, email address, phone number, city, state and ZIP code, and IP address.
• Professional information: your business name.
• Commercial information: the materials you need handled, and anything you tell us about amounts and timing.
• Communications: what you send us through the request form, by email or by phone. The request form also sends the title and address of the page you used it on and the page that brought you there.

The request form sends your request as an email to our [email protected] inbox. The website itself doesn't keep a copy. The form counts how many times it is viewed and sent. Those counts use a random number for each page visit and don't store your name, contact details or IP address.

2.2 Usage data

When you visit our website, we automatically collect certain information, including:

• Device information: IP address, browser type and version, and operating system.
• Usage patterns: the pages you view, how you reached the site, clicks on our phone numbers, email links and the Customer Portal link, and each time the request form is sent.
• Location data: your general location, derived from your IP address.
• Cookies: information collected through the cookies listed in section 2.4.

2.3 Sensitive personal information

We do not collect sensitive personal information (for example, health data, racial or ethnic origin, political opinions, religious or philosophical beliefs, genetic data, biometric data or sexual orientation). Please don't send payment details or other sensitive personal information through the request form. If, for a specific service, we need to collect such data, we will clearly inform you, explain the purpose, and obtain your explicit consent or rely on another lawful basis as required by applicable privacy laws.

2.4 Tracking technologies

We and the service providers named in section 4 use these technologies to collect information about how you use our website:

• Cookies: small text files stored on your device that remember your cookie choice and help us analyze how the site is used. The table below lists each one.
• Analytics tools: Google Analytics, which records the usage data in section 2.2. Google Analytics keeps this detailed data for 2 months and keeps overall visit totals longer. We don't use it for advertising, and the site has no advertising or remarketing tags.
• Security and spam checks: traffic to this site passes through Cloudflare, which protects the site and delivers its pages. Cloudflare processes your IP address, the pages you request and your browser details. The spam check on our request form is Cloudflare Turnstile. When you send the form, your IP address and a check token go to Cloudflare to confirm the request comes from a person. Turnstile keeps a small item of its own inside the check box.
• Log files: our web server records each request: an IP address, the date and time, the page requested, the page that linked to it, and browser details. A separate log of redirects and pages that can't be found keeps the address, the linking page and browser details, without IP addresses.
• Web fonts: some older news and job pages load their fonts from Google Fonts. When one of those pages loads, Google receives your IP address.

We use these technologies to run the website, remember your cookie choice, provide analytics and keep the website secure.

Staff who sign in to manage the website also get WordPress sign-in cookies.

Analytics cookies are on until you turn them off. You can change your choice at any time with Cookie settings at the bottom of every page. If you turn analytics cookies off, the site sets no Google Analytics cookies. Your browser still sends Google a limited signal for each page, with no cookie or ID that links your visits, which Google uses to estimate total visits. If your browser sends a Global Privacy Control signal, we treat it as a choice to turn analytics cookies off. You may also adjust your browser settings to limit or block cookies, though some features of the site may not work properly without them.

3. How we use your information

We use the information we collect for these purposes:

• To provide our services: to answer your request, arrange service and contact you about it.
• For customer support: to respond to your questions and resolve issues.
• To improve our website: to understand how people use the website and improve its content.
• For analytics: to monitor trends and use of the website.
• For security and fraud prevention: to run and protect the website, including stopping spam and attacks.
• To comply with legal obligations: to keep business records and meet our legal and regulatory requirements.

4. How we share your information

We share personal data only as this Policy describes, and always with appropriate safeguards in place. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4.1 Service providers

These companies run parts of our website and email for us. They have access to personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

• Google: analytics, and fonts on older pages
• Cloudflare: security, page delivery and the spam check on the request form
• SMTP2GO: sends the request form emails
• Proofpoint: filters the email we receive
• Amazon Web Services: hosting and backups

4.2 Companies in our group

Other companies in our group, including Avista Oil and Advantage Environmental Corp., when they help answer or serve your request.

4.3 Business transfers

If UES is involved in a merger, acquisition or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

4.4 Legal requirements

We may disclose your personal data in the good faith belief that such action is necessary to:

• Comply with a legal obligation, such as a subpoena or court order.
• Protect and defend the rights or property of UES.
• Prevent or investigate possible wrongdoing in connection with our services.
• Protect the personal safety of the users of our services or the public.
• Protect against legal liability.

4.5 With your consent

We may disclose your personal data for any other purpose with your explicit consent.

4.6 Aggregated or de-identified data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Where we store your information

We store and process personal data in the United States. The website runs on Amazon Web Services servers in Ohio, and weekly backups of the website are stored with Amazon Web Services. Our service providers may process data in other locations under their own safeguards. If you visit from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country.

6. Data security and retention

6.1 Data security

We use technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure or destruction. These measures include:

• Encryption: encrypted connections (HTTPS) for data in transit.
• Access controls: access to personal data is limited to authorized staff.
• Security updates and firewall rules: our servers receive regular security updates and are protected by firewall rules.
• Data minimization: we collect only the data we need.

No method of transmission over the internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security.

6.2 Data retention

We keep personal data only as long as we need it for the purposes in this Policy, unless the law requires or permits a longer period (for example, for legal, tax or accounting purposes):

• Request emails: in our inquiries inbox for as long as we need them to serve your business and keep business records.
• Detailed Google Analytics data: 2 months.
• Server logs: 14 days.
• Log of redirects and pages that can't be found: 7 days.

When we no longer need your personal data, we securely delete or anonymize it in accordance with applicable law.

7. Your data protection rights

Depending on where you live and the privacy laws that apply, you may have the following rights regarding your personal data. We are committed to helping you exercise them.

7.1 General rights

• Right to be informed: you have the right to know what personal data we collect, why we collect it and how we use it. This Policy serves to fulfill this right.
• Right of access: you have the right to request a copy of the personal data we hold about you.
• Right to correction: you have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
• Right to deletion: you have the right to ask us to delete your personal data in certain circumstances.
• Right to restrict processing: you have the right to ask us to limit how we use your personal data in certain circumstances.
• Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to object: you have the right to object to how we use your personal data, including asking us to stop emailing you.
• Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. You can turn analytics cookies off at any time with Cookie settings.

7.2 California residents (CCPA/CPRA)

• Right to know: you have the right to request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting it and the categories of third parties we disclose it to.
• Right to opt out of sale or sharing: we do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. You can still turn analytics cookies off at any time with Cookie settings.
• Right to limit use of sensitive personal information: we do not collect sensitive personal information (see section 2.3).
• Right to correct: you have the right to ask us to correct inaccurate personal information.
• Right to non-discrimination: we will not discriminate against you for exercising any of your rights.

Residents of other states with consumer privacy laws may have similar rights, and we will honor them as those laws require.

7.3 How to exercise your rights

To exercise any of these rights, email [email protected] or call 800.988.7977. We will respond within the time the applicable law requires (for example, 45 days under the CCPA). We may need to verify your identity before fulfilling your request. You may exercise your rights free of charge, unless requests are manifestly unfounded or excessive.

8. Children's privacy

Our website is for businesses and is not intended for individuals under the age of 13. We do not knowingly collect personal data from children. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we learn that we have collected personal data from a child, we will delete it.

9. Links to other websites

Our website links to other websites, including our Customer Portal at uesclient.com. Those sites have their own privacy policies, and this Policy covers universalenvironmentalservices.com only. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

10. Changes to this Privacy Policy

We may update this Policy from time to time. We will post the new Policy on this page and update the "Last updated" date at the top. For significant changes, we will also post a notice on our website before the change takes effect and update the "Effective date". Changes take effect on the effective date shown at the top of this Policy. Please review this Policy periodically.

11. Complaints

If you have concerns about our privacy practices, please contact us using the details in section 1. California residents can also contact the California Attorney General or the California Privacy Protection Agency.