Last updated: July 30, 2026
This Privacy Policy is published by HTX Floor, the operating name of HTX FLOORING AND CARPET LLC, a Utah limited liability company with its principal place of business at 8881 S 400 E, Sandy, Utah 84070-2472, United States. Throughout this document, references to HTX Floor, we, us, or our refer to HTX FLOORING AND CARPET LLC.
HTX Floor is committed to protecting the privacy and security of every individual who interacts with our digital properties and services. This Privacy Policy explains in plain language how we collect, use, disclose, retain, and safeguard your personal information when you visit our website at htxfloor.autos, submit inquiries through our contact forms, engage us for design systems or digital transformation services, or otherwise communicate with HTX FLOORING AND CARPET LLC from our offices in Sandy, Utah.
We have designed this policy to align with applicable data protection frameworks including the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and, where applicable, the General Data Protection Regulation (GDPR). We believe transparency builds trust, and trust is the foundation of every client relationship we cultivate.
By accessing our website or using our services, you acknowledge that you have read and understood the practices described in this policy. If you do not agree with any part of this policy, please discontinue use of our website and refrain from submitting personal information through our digital channels. This policy applies solely to information collected by HTX Floor; it does not govern data practices of third-party websites that may be linked from our pages.
We collect several categories of information, each serving a distinct purpose in our ability to deliver and improve our services. The types of information we gather depend on how you interact with us.
When you fill out our contact form, request a quote, subscribe to updates, or email us directly, you may provide us with identifiers and professional details including your full name, work email address, phone number, company name, job title, project budget range, service category of interest, and any free-form messages describing your project requirements. We collect only the information you voluntarily share.
When you browse htxfloor.autos, our servers and analytics tools automatically record certain technical data. This includes your Internet Protocol (IP) address, browser type and version, operating system, referring URL, pages viewed, the date and time of each visit, time spent on individual pages, and clickstream data. This information is aggregated and does not identify you personally unless combined with other data you have provided.
We may use essential cookies necessary for the proper functioning of our website (session management and security), as well as analytics cookies that help us understand how visitors navigate our pages. We do not deploy advertising or tracking cookies, and we do not engage in cross-site behavioral tracking. Most browsers allow you to control cookie settings; disabling cookies may affect certain site features.
When you correspond with us via email, phone, or our contact form, we retain records of those communications, including timestamps, message content, and any attachments. These records help us maintain continuity in client conversations and improve our response quality.
Every use of your personal information is tied to a specific, legitimate business purpose. We never use your data for purposes incompatible with the original reason for collection without first obtaining your explicit consent.
We use the information you provide to respond to inquiries, prepare project proposals and scope-of-work documents, negotiate contracts, deliver design and development services, manage ongoing projects, and provide post-launch support. Your contact details enable our team to communicate efficiently throughout the engagement lifecycle.
Aggregated usage data helps us identify popular content, detect navigation friction points, optimize page performance, and make informed decisions about site architecture and content strategy. All analytics data is anonymized or pseudonymized before analysis.
We may process your information as necessary to comply with applicable laws, regulations, court orders, or governmental requests; to enforce our Terms of Service and contractual agreements; to detect, prevent, and address fraud or security incidents; and to protect the rights, property, and safety of HTX FLOORING AND CARPET LLC, our clients, and the public.
Internally, we use aggregated and anonymized data for financial reporting, capacity planning, service quality assessments, and operational analytics. No individually identifiable information is used for these purposes unless required for billing or contractual obligations.
HTX Floor does not sell, rent, lease, or trade your personal information to any third party for monetary or other valuable consideration. Sharing is limited to the specific circumstances described below, and we require all recipients to honor confidentiality and data protection commitments at least as stringent as our own.
We engage trusted third-party vendors to perform functions on our behalf, including cloud hosting and infrastructure providers, email delivery services, analytics platforms, and customer relationship management tools. These providers receive only the minimum data necessary to perform their designated functions and are contractually bound to process such data exclusively per our documented instructions.
We may disclose information if required by law, subpoena, court order, or other binding legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request with proper jurisdiction.
In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, client information may be among the transferred assets. We will notify you via email and a prominent notice on our website of any such change in ownership or control of your personal information.
We may share your information for any other purpose if you have given us affirmative, explicit consent to do so. You retain the right to withdraw such consent at any time by contacting us using the details in Section 10 of this policy.
Safeguarding your information is a responsibility we take seriously. Our security posture combines administrative policies, technical controls, and physical safeguards designed to protect data against unauthorized access, alteration, disclosure, or destruction. Below we detail the specific measures and retention practices we maintain.
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law. Inquiry and contact form data is retained for up to twenty-four months after the last interaction, unless a client engagement is established, in which case retention follows the contractual plus statutory period. Analytics and server log data is automatically purged or anonymized after twenty-six months. Legal and financial records are retained for the duration prescribed by applicable regulations, typically seven years for tax and accounting purposes.
We adhere to the principle of data minimization. Our forms and data collection touchpoints request only the fields strictly necessary to fulfill the stated purpose. We regularly review our data inventory to identify and securely dispose of information that is no longer needed. Automated processes support this review through periodic retention audits.
All data transmitted between your browser and our servers is protected using Transport Layer Security (TLS) 1.3, the current industry standard for secure web communication. Data at rest within our infrastructure is encrypted using AES-256 encryption. Backup archives are encrypted with separate key management protocols to ensure recoverability without compromising confidentiality. We monitor cryptographic standards and update our implementations as stronger algorithms become available.
We enforce role-based access control (RBAC) across all systems that store or process personal information. Access is granted on a least-privilege principle, meaning team members can access only the specific data required for their role. Multi-factor authentication (MFA) is mandatory for all administrative accounts. Access grants are reviewed quarterly, and credentials for departing personnel are revoked within one business day. Audit logs track every access event and are retained for a minimum of twelve months.
Our hosting infrastructure employs network-level firewalls with deny-by-default ingress rules, intrusion detection and prevention systems (IDS/IPS), distributed denial-of-service (DDoS) mitigation via our cloud provider, and regular vulnerability scanning and penetration testing conducted by independent security researchers. Software dependencies are continuously monitored for known vulnerabilities, and critical patches are applied within twenty-four hours of release. Development, staging, and production environments are strictly segregated.
Physical access to servers and infrastructure supporting htxfloor.autos is controlled by our cloud hosting provider, which maintains SOC 2 Type II and ISO 27001 certifications. Their data centers employ biometric access controls, 24/7 on-site security personnel, video surveillance with ninety-day retention, redundant power and environmental controls, and seismic bracing in applicable geographic regions. Our office premises in Sandy, Utah, maintain access-control systems and locked storage for any physical records containing personal information.
We maintain a documented incident response plan that defines escalation paths, containment procedures, forensic investigation methodology, and communication timelines. In the unlikely event of a data breach involving personal information, we will notify affected individuals without undue delay, and no later than seventy-two hours after becoming aware of the breach where feasible. We will also notify relevant supervisory authorities as required by applicable data protection laws. Notifications will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take to address the situation.
All HTX Floor personnel with access to personal data complete mandatory privacy and security training upon onboarding and annually thereafter. Training covers data classification, secure handling procedures, phishing awareness, incident reporting obligations, and the privacy principles outlined in this policy. Compliance with training requirements is tracked, and completion is a condition of continued system access. We foster a security-conscious culture where team members are encouraged to report potential vulnerabilities without fear of reprisal.
HTX FLOORING AND CARPET LLC is headquartered in Sandy, Utah, United States, and our primary data processing activities occur within the United States. However, certain service providers we engage may operate or maintain infrastructure in other jurisdictions. When personal information is transferred across international borders, we implement appropriate safeguards in accordance with applicable law.
For transfers from the European Economic Area (EEA), the United Kingdom, or Switzerland to the United States or other third countries, we rely on mechanisms such as the EU Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or adequacy decisions issued by the relevant regulatory authority. We conduct transfer impact assessments to evaluate the legal framework of the destination country and implement supplementary measures when necessary to ensure an essentially equivalent level of protection.
You may request a copy of the specific safeguards we apply to international transfers by contacting us using the information in Section 10.
Depending on your jurisdiction, you may have specific rights regarding your personal information. HTX Floor honors all applicable rights and will not discriminate against you for exercising them. To submit a request, use the contact details in Section 10. We will verify your identity before processing any rights request and will respond within the timeframe mandated by applicable law, typically thirty to forty-five calendar days.
You have the right to request confirmation of whether we process your personal information and, if so, to obtain a copy of that data along with details about the categories of information collected, the sources from which it was obtained, the business purposes for collection, and the categories of third parties with whom we share it. For California residents under the CCPA, you may request this information covering the twelve-month period preceding your request, up to twice per twelve-month period.
If you believe that personal information we hold about you is inaccurate, incomplete, or outdated, you may request that we correct or update it. We will make reasonable efforts to verify the accuracy of the new information before making changes, and we will notify any third parties to whom we have disclosed the inaccurate data, where feasible and legally permissible.
You may request deletion of your personal information in certain circumstances, such as when the data is no longer necessary for the purpose for which it was collected, when you withdraw your consent and no other legal basis for processing exists, or when the data has been processed unlawfully. We will comply with valid deletion requests unless retention is required by law, necessary for the establishment or defense of legal claims, or needed to complete a transaction you initiated.
You may request that we limit the processing of your personal information if you contest the accuracy of the data (for a period sufficient for us to verify accuracy), if the processing is unlawful but you oppose erasure and request restriction instead, if we no longer need the data but you require it for legal claims, or if you have objected to processing pending verification of whether our legitimate grounds override yours.
Where processing is carried out by automated means and based on your consent or a contract, you have the right to receive your personal information in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another controller, where technically feasible. We provide data exports in open, non-proprietary formats such as JSON or CSV.
You may object at any time to the processing of your personal information for direct marketing purposes, including any profiling related to such marketing. Upon receiving an objection, we will cease processing for those purposes without undue delay. You may also object to processing based on our legitimate interests; we will assess the objection and cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
When processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal may be communicated through the contact channels listed in Section 10 or through the unsubscribe mechanism included in any marketing communications we send.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), grants you additional rights beyond those already described. These include the right to know the specific pieces of personal information we have collected about you; the right to opt out of the sale or sharing of your personal information (though we do not engage in such activities); the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising any of your privacy rights. To designate an authorized agent to submit a request on your behalf, please have the agent contact us with written proof of authorization.
Under Nevada Revised Statutes Chapter 603A, Nevada residents may opt out of the sale of their covered personal information. As stated throughout this policy, HTX Floor does not sell personal information. Nevada residents may nonetheless submit a verified request directing us not to sell their covered information by contacting us through the channels provided in Section 10. We will respond within sixty days as required by Nevada law.
Our website and services are not directed to, and we do not knowingly collect or solicit personal information from, anyone under the age of thirteen (13). If we become aware that a child under thirteen has provided us with personal information without verifiable parental consent, we will take prompt steps to delete such information from our systems. If you are a parent or guardian and believe your child has submitted personal data to us, please contact us immediately using the information in Section 10 so we may take corrective action.
For individuals between the ages of thirteen (13) and eighteen (18), we recommend reviewing this policy with a parent or guardian to ensure mutual understanding of its terms before providing any personal information through our website.
We may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or service offerings. When we make material changes, we will update the last updated date at the top of this page and, where appropriate, provide additional notice such as a banner on our website or a direct email notification to clients with whom we have an active relationship.
We encourage you to review this page whenever you visit our website to stay informed about our privacy practices. Your continued use of htxfloor.autos after the effective date of a revised policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with the revised policy, please discontinue use of our website and services.
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, you may reach our privacy team through any of the following channels. We aim to acknowledge all inquiries within two business days and resolve them within thirty calendar days.
Email: touch@htxfloor.autos
Phone: +1 (251) 758-9718
Postal Mail: HTX FLOORING AND CARPET LLC, Attn: Privacy Office, 8881 S 400 E, Sandy, UT 84070-2472, United States
If you believe we have not adequately addressed your privacy concern, you have the right to lodge a complaint with the supervisory authority in your jurisdiction. For U.S. residents, this may include your state attorney general's office. For EEA and UK residents, you may contact your local data protection authority. We welcome the opportunity to resolve any concerns directly before you escalate to a regulatory body.