Privacy Policy

Long Home — Privacy Policy

Effective date: February 1, 2026

This Privacy Policy explains how Long Home Products (“Long Home”, “we”, “us”, “our”) collects, uses, shares, and protects information about customers and visitors to our websites, mobile properties, and offline services. It also describes your privacy rights and choices, including state-specific rights for residents of Maryland, the District of Columbia, Virginia, West Virginia, Delaware, Florida, Pennsylvania, Massachusetts, New Hampshire, Connecticut, Maine, and Rhode Island.

Scope

This Policy applies to personal information we collect about you in an individual or household context when you: (i) visit our websites (including longhome.com), (ii) contact us, (iii) schedule or receive an in-home consultation, (iv) purchase products or services, (v) participate in promotions, loyalty, or referral programs, (vi) communicate with us by phone, email, SMS/MMS, or social media, or (vii) interact with our advertising. This Policy does not apply to information collected in an employment or commercial/business-to-business context.

Information we collect

We collect the following categories of information, consistent with the materials provided to us and our operations:

• Identifiers (e.g., name, postal address, email, phone number, IP address, cookie IDs).

• Protected characteristics (e.g., date of birth, gender) where relevant to customer profiling and service eligibility.

• Commercial information (e.g., records of products and services purchased, project details, financing-related information, rewards program activity).

• Internet/network activity (e.g., browsing history on our sites, pages viewed, time spent, referral URLs, search terms, interactions with ads and emails).

• Geolocation information (e.g., general location inferred from IP; precise location only with your consent).

• Audio/visual (e.g., call recordings with customer support, photos you provide of home projects).

• Inferences (e.g., preferences, interests, or project propensity derived from the above).

Sources of personal information

We collect information directly from you; automatically through your use of our websites, apps, emails, and ads (including cookies, pixels, SDKs, and similar technologies); from service providers and partners (e.g., financing providers, analytics, advertising, direct mail and shared mail partners, social media platforms); and from publicly available sources and data enrichment services, where permitted by law.

How we use personal information

We use personal information to:

• Provide and improve our products and services, including scheduling design consultations, preparing estimates, processing orders and payments, financing, delivery, installation, servicing, and warranty support.

• Communicate with you about your project, respond to inquiries, and provide customer support.

• Personalize content and offers; conduct analytics, measurement, attribution, and reporting; and improve websites and marketing effectiveness.

• Market and remarket our services (including via online advertising, social media, direct mail, email, and SMS/MMS, where permitted).

• Detect, prevent, and investigate fraud, security incidents, and abuse; and comply with legal obligations.

• Maintain business operations, including recordkeeping, audits, and research and development.

Sensitive data

We do not intentionally collect or use sensitive personal data (e.g., precise geolocation, health data, racial or ethnic origin, religious beliefs, sexual orientation, citizenship/immigration status, genetic or biometric identifiers, data of known children under 13) except where necessary to provide a requested service, comply with law, or with your consent. Where required by state law, we will obtain opt-in consent before processing sensitive data and allow you to withdraw consent at any time.

Online analytics, cookies, and advertising

We use cookies and similar technologies for site operations, preferences, analytics, and advertising (including Google Analytics, Bing/Microsoft Ads, Facebook/Meta, and remarketing services). You can manage cookies through browser settings and platform tools. Where required by state law, you may opt out of targeted advertising and the sale or sharing of personal information as described under Your Privacy Rights. We honor state-required universal opt-out signals (e.g., Global Privacy Control) for Connecticut (effective Jan 1, 2025), New Hampshire (effective Jan 1, 2025), and Delaware (effective Jan 1, 2026).

How we share personal information

We share personal information with:

• Service providers who process data on our behalf to deliver services (e.g., scheduling, installation, fulfillment, customer support, analytics, and IT security).

• Financing partners to process financing applications and manage accounts.

• Marketing and remarketing partners (including ad platforms, social media sites, direct mail and shared mail partners, and analytics providers) to present offers based on your interactions.

• Affiliates and business transfers (e.g., mergers, acquisitions).

• Government authorities, regulators, or law enforcement when required by law or to protect rights and safety.

We do not sell your personal information for money. Some of our advertising activities may be considered a “sale” or “sharing” under certain state laws (e.g., targeted advertising). You may opt out of these activities as described below.

Retention

We retain personal information for as long as needed to provide services, fulfill the purposes described, comply with legal obligations, resolve disputes, and enforce our agreements. We apply data minimization and retention limits required under applicable laws (including Maryland MODPA, effective Oct 1, 2025).

Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information. For Massachusetts residents, we maintain a Written Information Security Program (WISP) consistent with 201 CMR 17.00 standards, including access controls, encryption, employee training, vendor oversight, and incident response.

Children

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have collected such information, we will delete it.

Your privacy rights

Residents of certain states have specific rights regarding personal information. We comply with these requirements where applicable and otherwise, where practicable. Depending on your state, these may include the right to:

• Access: Request confirmation and access to personal information we process about you.

• Correction: Request that we correct inaccuracies.

• Deletion: Request deletion of personal information provided by or obtained about you.

• Portability: Obtain a copy of your personal information in a portable format.

• Opt-out: Opt out of processing for targeted advertising, sale or sharing of personal information, and certain profiling with legal or similarly significant effects.

• Consent management: Where processing is based on consent (e.g., sensitive data), withdraw consent at any time.

State-specific disclosures

Maryland (MODPA) — Effective October 1, 2025 (enforcement begins April 1, 2026): We apply strict data minimization; recognize authorized agent opt-outs; provide detailed privacy notices; and conduct documented data protection assessments for processing activities that present heightened risk (e.g., targeted advertising, sale/sharing, sensitive data).

Virginia (VCDPA): If applicable to our operations, Virginia residents have rights to access, correct, delete, portability, and to opt out of targeted advertising, sale of personal data, and certain profiling. We respond within 45 days and provide an appeals process.

Connecticut (CTDPA): We honor universal opt-out signals (e.g., Global Privacy Control) beginning January 1, 2025. Connecticut residents have rights to access, correction, deletion, portability, and opt-out of targeted advertising, sale, and certain profiling.

Delaware (DPDPA) — Effective January 1, 2025 (universal opt-out recognition beginning January 1, 2026): Delaware residents have rights to access, correction, deletion, portability, and opt-out of targeted advertising, sale, and certain profiling.

New Hampshire (NHDPA) — Effective January 1, 2025: New Hampshire residents have rights similar to other comprehensive state privacy laws, and may use opt-out preference signals or authorized agents to opt out of targeted advertising and sale.

Florida (FDBR) — Effective July 1, 2024: Florida’s comprehensive privacy law applies to very large enterprises. Regardless of coverage, we provide Floridians with opt-out choices for targeted advertising and sale/sharing and honor applicable telemarketing rules.

Massachusetts: We maintain a WISP and applicable safeguards consistent with 201 CMR 17.00.

Maine: While Maine’s ISP privacy law applies to broadband providers, we apply consent-based practices for sensitive data and transparency about our marketing and analytics activities.

Pennsylvania, District of Columbia, West Virginia, and Rhode Island — Breach notifications: In the event of a data breach, we will notify affected residents and regulators consistent with applicable law, including notification without unreasonable delay; and, where required, notice to the Attorney General or consumer reporting agencies.

How to exercise your rights

Submit a request by:

• Web form: longhome.com/privacy/rights (coming soon).

• Email: privacy@longhome.com (placeholder — update to preferred address).

• Phone: 240-473-1400.

We will verify your identity and respond within 45 days (with one 45-day extension where reasonably necessary). If we decline your request, you may appeal by replying “APPEAL” to our decision or using the appeal instructions provided. You may designate an authorized agent to act on your behalf; we will require proof of authority and verification.

Global Privacy Control and other opt-out signals

Where required by law, we honor browser- or device-based opt-out signals (e.g., Global Privacy Control) indicating your preference to opt out of targeted advertising and sale/sharing of personal information.

SMS/Mobile Terms (summary)

• By opting in, you agree to receive text messages (SMS/MMS) about promotions, project status, and product information. Message and data rates may apply.

• You may opt out at any time by texting STOP; for help, text HELP. Consent is not required to purchase goods or services.

• We do not share text message originator opt-in data or consent with third parties, except as necessary to provide the messaging service.

• For Florida residents, we comply with applicable telemarketing rules, including honoring STOP requests and providing a cure period before sending further messages.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post a notice on our website and update the effective date above.

Contact us

Address: Long Home, 8530 Corridor Rd, Savage, MD 20763
Phone: 240-473-1400
Email: contactus@longhome.com
Online: longhome.com/privacy-policy