1) Who We Are & How to Contact Us

Controller: RMR & Brothers LLC (New Jersey, USA)

Phone: (973) 914-9503
Email: privacy@rmrandbrothers.com

If you have questions or would like to exercise a privacy right, email us with the subject line “Privacy Request.”

2) What We Collect

a) Information you provide directly

• Contact details (name, email address, phone number)
• Service address and project details (photos, measurements, preferences)
• Account and authentication information for the client portal
• Communications (form submissions, emails, messages, support inquiries)
• Payment-related information processed by our payment processors (we do not store full card numbers)

b) Information collected automatically

• Device and usage data (IP address, browser, pages viewed, referring URLs, timestamps)
• Cookies and similar technologies for functionality, analytics, and fraud prevention
• Security signals (e.g., reCAPTCHA tokens) to prevent spam/abuse

c) Information from third parties

• Referrals from customers or partners
• Payment and billing details from payment processors
• Aggregate analytics/engagement metrics from service providers

3) How We Use Information

• Provide estimates, proposals, and services; manage projects and schedules
• Communicate about quotes, appointments, invoices, and support
• Process payments and send receipts
• Operate and secure our websites/portal (including fraud/spam prevention)
• Improve our services, website performance, and user experience
• Comply with legal obligations and enforce our agreements
• With consent, send marketing communications you can opt out of at any time

Notes for NJ: We do not sell personal information, share it for cross-context behavioral advertising, or conduct targeted advertising. If this changes, we will update this policy and provide required NJ notices and opt-out choices.

4) Cookies & Similar Technologies

We use cookies and similar technologies to enable core functions (login, session, preferences), perform analytics, and protect against spam and abuse. You can manage cookies in your browser settings. If your browser sends a valid New Jersey opt-out preference signal (e.g., Global Privacy Control), we will treat it as an opt-out request where required.

5) Disclosures of Information

We may disclose personal information to:

• Service providers that help us operate our business (hosting, portal/CRM, email, analytics, customer messaging)
• Payment processors that handle card and wallet payments (we do not store full card numbers)
• Professional advisors (legal, accounting) and authorities when required by law
• Successors in a business transaction (e.g., merger or asset sale), subject to confidentiality

We do not sell personal information or share it for cross-context behavioral advertising.

6) Payment Processing

If you pay an invoice or save a payment method, payment information is collected and processed by our payment processors (e.g., Stripe and associated digital wallets like Apple Pay/Google Pay). These processors are independently responsible for the personal information they process. Please review their privacy policies for details.

7) Text Messages & Calls

If you provide a mobile number, we may send transactional messages (appointment reminders, scheduling updates, job status, invoices). Message and data rates may apply. You can reply STOP to opt out of non-essential texts.

8) Data Retention

We keep personal information only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type (e.g., project records, billing records) and applicable law.

9) Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10) Your Privacy Choices (NJ)

• Marketing: Unsubscribe from marketing emails via the link in the message. Transactional emails may still be sent when needed.
• Cookies: Control cookies via your browser; blocking some may affect site functionality.
• Universal Opt-Out Signals: If in the future we engage in activities that require an opt-out (e.g., sale of personal data or targeted advertising), we will honor universal opt-out mechanisms recognized under NJ law (e.g., Global Privacy Control) within the timelines required by the NJDPA.

11) Your Rights Under New Jersey Law (NJDPA)

If you are a New Jersey resident, you may have the right to:

• Confirm & Access whether we process your personal data and obtain access to it.
• Correct inaccuracies in your personal data.
• Delete personal data, subject to certain exceptions.
• Portability: obtain a portable copy of personal data you provided to us.
• Opt Out of processing for (a) targeted advertising, (b) sale of personal data, or (c) certain profiling producing legal or similarly significant effects.

How to exercise: Email privacy@rmrandbrothers.com with the subject “Privacy Request.” We will respond within 45 days (with one 45-day extension where reasonably necessary) as permitted by NJ law. If we deny your request, you may appeal by replying to our decision or emailing us with the subject “Privacy Appeal.” We will not discriminate against you for exercising your rights.

Small-business note: Based on our size and current practices, RMR may not meet NJDPA applicability thresholds. Nonetheless, we voluntarily offer these rights to NJ residents and will honor valid requests consistent with NJ law.

12) International Transfers

If you access our services from outside the United States, your information may be transferred to, stored, and processed in the U.S. or other countries with different data protection laws.

13) Third-Party Links & Services

Our sites may link to third-party websites or services (e.g., client portal, payment pages, social media). We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies.

14) Changes to this Policy

We may update this policy from time to time. The “Last updated” date at the top indicates when this policy was most recently revised. Material changes will be posted on this page, and we may notify you by email or through our services when appropriate.