Does Biozura sell my personal information?

No. Biozura does not sell personal information under any definition used by the Connecticut Data Privacy Act, California Consumer Privacy Act, or GDPR. We do not share data with data brokers, advertising networks, or third parties for monetary or other valuable consideration. The only third-party sharing we engage in is service-related (equipment manufacturers for warranty, Eversource for rebates, lenders the customer chose, payment processors, building departments for permits).

What's the Connecticut Data Privacy Act (CTDPA)?

Public Act 22-15, codified at Connecticut General Statutes Sections 42-515 through 42-525, effective July 1, 2023. The CTDPA gives Connecticut residents specific rights over personal data collected and processed by businesses operating in the state: access, correction, deletion, data portability, opt-out of sale or targeted advertising, and the right to appeal denied requests. Enforcement is handled by the Office of the Connecticut Attorney General.

How long does it take to respond to a CTDPA request?

Forty-five (45) days from the date we receive a verifiable request. The law allows one additional forty-five (45) day extension when reasonably necessary; if we extend, we notify you within the initial 45-day window. Most access and correction requests are completed inside two weeks; deletion requests may take longer due to identity verification and the need to coordinate with our CRM and accounting systems to ensure complete removal where the law requires it.

Do you record customer service calls?

Yes, for quality assurance, training, and dispute resolution. We notify callers at the beginning of each recorded call that the call may be recorded. Recordings are retained for 90 days unless flagged for ongoing dispute or training use. Recorded calls are subject to the same access and deletion rights described in Section 3.

What happens to my data if I cancel a service agreement?

Active service-related personal data is retained for warranty and regulatory recordkeeping for 7 years following the last service interaction. Marketing-related contact preferences are honored immediately upon opt-out request. You may exercise the CTDPA right to deletion at any time, subject to the legal retention requirements described in Section 10. We do not retain customer data beyond the legal retention period without specific written consent.

Biozura Heating and Air Privacy Policy

Effective Date: September 1, 2025 | Last Updated: June 1, 2026

This Privacy Policy explains how Biozura Heating and Air (Connecticut DCP HVAC contractor license #S1-0414829, operating from 10 N Main Street, Suite 377, West Hartford, CT 06107) collects, uses, discloses, and protects personal information. It applies to data we receive through our website at https://biozuraheatingairconditioning.xyz, through phone calls to (860) 955-4428, through email at info@biozuraheatingairconditioning.xyz, through in-person service visits, and through our customer relationship management (CRM) and dispatch systems. This policy is written to comply with the Connecticut Data Privacy Act (Public Act 22-15, effective July 1, 2023, codified at Connecticut General Statutes §§ 42-515 through 42-525), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the European Union General Data Protection Regulation (GDPR), and the Children’s Online Privacy Protection Act (COPPA).

1. Information We Collect

The categories of personal information we collect, the source of that data, and the purposes for which we use it are summarized below.

1.1 Identifiers and Contact Information

What: Full name, residential or commercial service address, mailing address (if different), primary phone number, secondary phone numbers if provided, email address, emergency contact name and phone (for service appointments).
Source: Direct submission by the customer through our contact form, phone call, email, or in-person estimate visit.
Purpose: To schedule and complete HVAC service appointments, send appointment reminders and arrival notifications, send written quotes and invoices, process payments, file permits with municipal building departments, file rebate applications with Eversource Energy and Connecticut Green Bank, and respond to inquiries.

1.2 HVAC Equipment and Service Records

What: Make, model, serial number, installation date, refrigerant type and charge weight (for AC and heat pumps), AFUE or HSPF rating, BTU capacity, photos of equipment and service conditions, technician notes, repair history, scheduled maintenance dates, combustion analysis printouts, static pressure measurements, capacitor readings.
Source: Generated by our technicians during diagnostic and installation visits.
Purpose: Required for warranty documentation, regulatory compliance (EPA Section 608 refrigerant tracking, Connecticut DEEP recordkeeping for refrigerant recovery, Connecticut DCP permit closeout), future service planning, and ongoing customer relationship management.

1.3 Financial Information

What: Payment method (credit card, ACH, check, financing), last four digits of payment card, billing address, financing application data (forwarded to Synchrony Financial, Wells Fargo, GreenSky, or Connecticut Green Bank lenders as applicable).
Source: Direct submission by the customer at the time of payment or financing application.
Purpose: To process payments, originate financing through the customer’s chosen lender, and reconcile invoices. We do not store full credit card numbers; all payment processing routes through PCI-DSS Level 1 compliant processors (Stripe and Square as of June 2026).

1.4 Communications

What: Text messages, voicemails, email correspondence, recorded customer service calls (when consent is obtained at the start of the call), notes from in-person consultations.
Source: Two-way communication between the customer and Biozura staff.
Purpose: Quality assurance, dispute resolution, training, and ongoing service coordination.

1.5 Website Analytics and Cookies

What: IP address, browser type and version, operating system, referring URL, pages visited and time on each page, device type and screen resolution, geolocation (city-level only, derived from IP).
Source: Automatic collection through Google Analytics 4 and standard web server logs.
Purpose: To understand which pages are most useful to visitors, identify technical errors, measure marketing effectiveness, and improve site usability. We do not use IP addresses to personally identify visitors except in cases of suspected abuse, fraud, or security incident.

2. How We Share Information

We share personal information only with specific third parties for the limited purposes described below. We do not sell personal information. We do not engage in cross-context behavioral advertising. We do not share data with data brokers or aggregators.

Equipment manufacturers: Name, address, equipment model and serial number are shared with Carrier, Trane, Lennox, Mitsubishi Electric, Daikin, Bosch, Buderus, Viessmann, Weil-McLain, Burnham, and other manufacturers for warranty registration purposes only.
Utility rebate administrators: Name, address, phone, equipment data, and installation date are shared with Eversource Energy, the Connecticut Energy Efficiency Fund, and the Connecticut Green Bank for rebate and incentive program administration.
Financing partners: Where the customer applies for financing, application data (including credit-decision-relevant fields per the lender’s requirements) is shared with the chosen lender (Synchrony Financial, Wells Fargo Home Projects, GreenSky, Capital for Change, Connex Credit Union, American Eagle Financial Credit Union, others).
Municipal building departments: Name, service address, equipment data, and contractor license number are shared with West Hartford Building & Inspections, Hartford Department of Development Services, Bloomfield Building Department, and other municipal authorities for permit and inspection purposes as required by Connecticut law.
Payment processors: Tokenized payment data is shared with Stripe and Square for transaction processing.
Service providers under written contract: CRM provider (HousecallPro), accounting software (QuickBooks Online), email service (Google Workspace), call answering service (after-hours dispatch only), and IT infrastructure providers, each bound by data processing agreements (DPAs) restricting use to providing services to Biozura.
Legal requirements: Where compelled by valid legal process (subpoena, court order, state agency request under proper authority).

3. Your Privacy Rights Under the Connecticut Data Privacy Act (CTDPA)

If you are a Connecticut resident, the Connecticut Data Privacy Act (Public Act 22-15) provides specific rights regarding your personal information. These rights took effect July 1, 2023 and are enforced by the Office of the Connecticut Attorney General.

Right of Access: You may request confirmation of whether we process your personal data and access to that data, including the categories of personal data we process, the categories of third parties with whom we share it, and the purposes of processing.
Right to Correct: You may request correction of inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of processing.
Right to Delete: You may request deletion of personal data provided by or obtained about you, subject to specific exceptions for data we are required to retain (warranty records, regulatory compliance records, tax records, refrigerant recovery records under EPA Section 608, and active service contracts).
Right to Data Portability: You may request a copy of your personal data in a portable, readily usable format (CSV, JSON, or PDF as the customer specifies).
Right to Opt-Out: You may opt out of (a) targeted advertising (we do not engage in this), (b) sale of personal data (we do not engage in this), and (c) profiling in furtherance of decisions producing legal or similarly significant effects (we do not engage in this).
Right to Appeal: If we decline a CTDPA rights request, you may appeal the decision through the appeal process described in Section 6 below. If the appeal is denied, you may contact the Connecticut Attorney General’s office at https://portal.ct.gov/AG.

How to exercise CTDPA rights: Submit a written request to info@biozuraheatingairconditioning.xyz with the subject line “CTDPA Request” or by mail to 10 N Main Street, Suite 377, West Hartford, CT 06107, Attn: Privacy Officer. We will respond within forty-five (45) days. We may extend the response period by an additional forty-five (45) days when reasonably necessary, with notice provided within the original 45-day window. We may require verification of identity before fulfilling requests, particularly deletion requests, to prevent fraud and protect customer accounts.

4. California Privacy Rights (CCPA / CPRA)

California residents have parallel rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act. These include the right to know what categories of personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, the right to opt-out of sale or sharing (we do not sell or share for cross-context advertising), the right to limit use of sensitive personal information (we do not use sensitive personal information for inferences), and the right to non-discrimination for exercising privacy rights.

California residents may exercise these rights through the same email or mail channels described in Section 3. We respond to verifiable consumer requests within forty-five (45) days, with one possible 45-day extension as permitted by California Civil Code § 1798.130.

5. European Privacy Rights (GDPR)

Although Biozura primarily serves Connecticut customers, we occasionally receive inquiries from EU and UK residents. Under the GDPR (Regulation (EU) 2016/679) and the UK GDPR, EU and UK data subjects have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing. Lawful bases on which we process EU/UK personal data: contract performance (where a service relationship exists), legal obligation (regulatory recordkeeping), and legitimate interest (responding to inbound inquiries). We do not transfer EU/UK personal data outside the United States except through standard contractual clauses with the small number of US-based processors handling our data (Google Workspace, HousecallPro, Stripe, Square, QuickBooks Online).

6. Appeal Process for Denied Rights Requests

If we deny any privacy rights request, you may appeal the denial within thirty (30) days of receiving our response. Appeals should be submitted to info@biozuraheatingairconditioning.xyz with the subject line “Privacy Appeal” and a brief explanation of why you believe the denial was incorrect. We respond to appeals within sixty (60) days. If the appeal is denied, our final response will explain the basis for the denial and provide contact information for the Connecticut Attorney General (for CTDPA appeals) or the relevant California or EU regulator.

7. Children’s Privacy (COPPA)

The Biozura website is not directed to children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has provided personal information to us, please contact info@biozuraheatingairconditioning.xyz and we will delete the information promptly.

8. Cookies, Pixels, and Web Beacons

The Biozura website uses the following categories of cookies and similar technologies:

Strictly necessary cookies: Required for the website to function (session management, form submission tracking, security tokens). Cannot be disabled.
Analytics cookies: Google Analytics 4 cookies (_ga, _gid, _gat) used to measure traffic patterns. These cookies set IP anonymization to truncate the last octet before storage. Can be disabled by visitors via the cookie consent banner.
Functional cookies: Cookies that remember visitor preferences (preferred contact method, last service page viewed). Optional.

We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking. Visitors using the Global Privacy Control (GPC) browser signal are treated as having opted out of any cross-context behavioral advertising activity (which we do not engage in regardless).

9. Data Security

We protect personal information using administrative, physical, and technical safeguards appropriate to the sensitivity of the data and the size of our organization. Specific measures include: encrypted data at rest in our CRM (HousecallPro) and accounting software (QuickBooks Online); TLS 1.3 encryption in transit for all customer-facing web pages; multi-factor authentication on all staff accounts accessing customer data; quarterly password rotation; least-privilege access controls (technicians see only their assigned customers); secure document destruction (shredding) for paper records past the retention period; PCI-DSS compliant payment processing through tokenized integrations with Stripe and Square. We do not store full payment card numbers on Biozura systems.

10. Data Retention

We retain personal data for the periods described below, after which it is securely deleted or anonymized:

Active customer service records: Retained for the duration of the customer relationship plus 7 years after the last service interaction (warranty period plus tax record retention).
Refrigerant recovery records: Retained for 3 years per EPA Section 608 recordkeeping requirements.
Permit and inspection records: Retained for 10 years per Connecticut Department of Consumer Protection requirements for licensed contractors.
Financial transaction records: Retained for 7 years per IRS recordkeeping requirements.
Website analytics data: Anonymized after 14 months in Google Analytics 4 retention settings.
Recorded customer service calls: Retained for 90 days unless flagged for dispute resolution or training.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new regulatory requirements, or new technologies. When we make material changes, we will update the “Last Updated” date at the top and, where feasible, notify customers with active service accounts via email at least thirty (30) days before the changes take effect. The current version is always available at https://biozuraheatingairconditioning.xyz/privacy-policy/.

12. Contact — Privacy Questions

For privacy questions, CTDPA / CCPA / GDPR rights requests, or appeals of denied requests, contact:

Privacy Officer, Biozura Heating and Air
Email: info@biozuraheatingairconditioning.xyz (subject line: “Privacy Request” or “Privacy Appeal”)
Mail: 10 N Main Street, Suite 377, West Hartford, CT 06107
Phone: (860) 955-4428

Frequently Asked Questions

Does Biozura sell my personal information?: No. Biozura does not sell personal information under any definition used by the Connecticut Data Privacy Act, California Consumer Privacy Act, or GDPR. We do not share data with data brokers, advertising networks, or third parties for monetary or other valuable consideration. The only third-party sharing we engage in is service-related (equipment manufacturers for warranty, Eversource for rebates, lenders the customer chose, payment processors, building departments for permits).
What’s the Connecticut Data Privacy Act (CTDPA)?: Public Act 22-15, codified at Connecticut General Statutes Sections 42-515 through 42-525, effective July 1, 2023. The CTDPA gives Connecticut residents specific rights over personal data collected and processed by businesses operating in the state: access, correction, deletion, data portability, opt-out of sale or targeted advertising, and the right to appeal denied requests. Enforcement is handled by the Office of the Connecticut Attorney General. Our policy describes how to exercise these rights in Section 3.
How long does it take to respond to a CTDPA request?: Forty-five (45) days from the date we receive a verifiable request. The law allows one additional forty-five (45) day extension when reasonably necessary; if we extend, we notify you within the initial 45-day window. Most access and correction requests are completed inside two weeks; deletion requests may take longer due to identity verification and the need to coordinate with our CRM and accounting systems to ensure complete removal where the law requires it.
Do you record customer service calls?: Yes, for quality assurance, training, and dispute resolution. We notify callers at the beginning of each recorded call that the call may be recorded. Recordings are retained for 90 days unless flagged for ongoing dispute or training use. Recorded calls are subject to the same access and deletion rights described in Section 3.
What happens to my data if I cancel a service agreement?: Active service-related personal data is retained for warranty and regulatory recordkeeping for 7 years following the last service interaction. Marketing-related contact preferences are honored immediately upon opt-out request. You may exercise the CTDPA right to deletion at any time, subject to the legal retention requirements described in Section 10. We do not retain customer data beyond the legal retention period without specific written consent.

Contact Biozura Heating and Air

For HVAC service requests, dispatch, scheduling, and all non-privacy inquiries, use the contact information below. Our 10 N Main Street office in West Hartford Center handles all customer service operations across the eleven-town Hartford County service area.

Emergency Line (24/7): (860) 955-4428
Address: 10 N Main St #377, West Hartford, CT 06107
Email: info@biozuraheatingairconditioning.xyz
Connecticut DCP Unlimited HVAC License: #S1-0414829
Connecticut B-2 Limited Boiler License: #B2-0287345
EPA Section 608 Universal: #608U-2008-381467

Office Hours

Emergency Service: 24 hours a day, 7 days a week
Office Staff: Monday – Saturday, 9:00 AM – 5:00 PM
Closed: Sundays and State/Federal Holidays (emergency line always active)

CTDPA Privacy Policy | Biozura HVAC W. Hartford CT