Privacy Policy and Cookies
Effective Date: September 17, 2025
Introduction
- Visit our website
- Use our online tools or forms
- Communicate with us by phone, SMS/text message, email, or chat
- Schedule or request services online
Business Name: Buffalo Customs & Collision
Information We Collect About You and How We Collect It
- Directly from you, when you: Fill out a contact or estimate form, Request an estimate or schedule an appointment, Call, text, or email us, Communicate with us via chat or messaging tools
- Automatically, through cookies and other tracking technologies when you navigate our website.
- From third parties in limited cases, such as: Online estimation, scheduling, or messaging tools, Advertising and analytics partners, if enabled.
Information You Provide to Us
- Your Name, Phone number, Email address, Vehicle information (such as make, model, year, VIN, and damage description)
- Notes or comments about your repair needs
- Preferred contact method
- Information submitted through: Contact forms, Estimate or appointment request forms, Chat widgets or messaging tools
Information We Collect Through Automatic Data Collection Technologies
- Browser type and operating system
- IP address and approximate location
- Pages visited and time spent on each page
- Clicks, scrolls, and other interactions with our website
- Device information and referral sources (e.g., which website or ad brought you to our site)
- Understand how visitors use our website
- Improve performance and user experience
- Maintain security and detect potential issues
Cookies and Third-Party Technologies
- Remember your preferences
- Measure website traffic and performance
- Support online forms, chat tools, and scheduling tools
- Deliver and measure advertising (if enabled)
- Google Analytics
- Google Ads (including remarketing or conversion tracking, if enabled)
- Third-party scheduling or estimate tools
- Chat or messaging platforms
- Your browser settings (to block or delete cookies), and
- Any cookie consent/management banners we display on the website.
How We Use Your Information
- To provide services: Respond to your inquiries and service requests, provide estimates and schedule appointments, and perform and manage repair services
- To communicate with you: Send you updates about your estimate or repair, Confirm, remind, or reschedule appointments and Respond to your questions and feedback
- To operate and improve our business and website: Analyze website usage and performance, Improve site content, layout, and functionality, maintain internal records and documentation
- For legal, security, and compliance purposes: Detect and prevent fraud or abuse, Comply with applicable laws and regulations and enforce our terms and protect our rights
We may also use your information for marketing purposes, such as sending you information about services or promotions, but you can opt out of such communications as described below.
We do not sell your personal information.
Text Messaging and Communications
When you provide your mobile phone number through our website, in person, or over the phone, you may consent to receive SMS/text messages from us in connection with:
- Estimates and repair updates
- Appointment reminders and confirmations
- Follow-up messages regarding your service experience
Message frequency may vary based on your repair status and interactions with us.
Message and data rates may apply according to your mobile carrier plan.
- You can opt out of SMS/text messages at any time by replying “STOP” to any message you receive from us.
- You may reply “HELP” for more information or contact us using the contact details at the end of this Policy.
Your consent to receive SMS/text messages is not a condition of purchasing any goods or services from us.
Disclosure of Your Information
We do not sell your personal information.
- Service Providers and Contractors who perform services on our behalf, such as: Website hosting and maintenance, analytics and advertising tools, scheduling and estimation platforms and Call, SMS, and email communication providers
- These parties are allowed to use your information only to provide services to us and are subject to contractual obligations to maintain its confidentiality.
- Governmental or regulatory authorities and other parties when required to: Comply with legal obligations, court orders, or governmental requests, and Protect our rights, property, or safety, or that of our customers or others
- Business successors or assigns in connection with a merger, sale, restructuring, or other transfer of some or all of our business assets, in which case your personal information may be transferred as part of the transaction.
Your Choices and Controls
- Forms and data: You may choose not to provide certain information; however, this may limit our ability to provide some services (e.g., estimates or appointments).
- Cookies: You can control or delete cookies through your browser settings. If you disable cookies, some features of our website may not function properly.
- Email marketing: If you receive marketing emails from us, you can unsubscribe at any time by following the instructions in the email or by contacting us.
- SMS/text messages: You can opt out of SMS/text messages at any time by replying “STOP.”
Accessing, Correcting, and Deleting Your Information
If you wish to review, correct, or delete personal information you have provided to us, you may contact us using the contact information at the end of this Policy. We will respond to your request in accordance with applicable laws and may need to verify your identity before processing your request.
Please note that we may not be able to delete all information if we are required to keep it for legal, accounting, or legitimate business purposes.
Data Security
- Secure hosting environments
- Access controls and authentication
- Limiting access to personal information to authorized personnel
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. Any transmission of personal information is at your own risk.
Data Retention
- Providing services to you
- Maintaining business and tax records
- Complying with legal, accounting, or reporting requirements
- Customer service and repair records may be kept for up to seven (7) years or as required by law and our business needs.
- Automatically collected data (such as website usage analytics) is typically retained for a shorter period, depending on the tool, configuration, and its utility for our operations.
Comprehensive U.S. State Privacy Rights Notice
Categories of Personal Information Collected
Category A – Identifiers
Examples: Name, email address, phone number, IP address, Vehicle Identification Number (VIN).
Used for: Service requests, communication, security, and basic record-keeping.
Category B – Customer Records
Examples: Vehicle details, notes on repair needs, service history.
Used for: Providing estimates, scheduling, and performing repair services.
Category C – Internet/Network Activity
Examples: Browsing history, search history, information regarding interaction with our website and advertisements.
Used for: Analytics, improving website functionality, security, and marketing (if applicable).
Category D – Geolocation Data
Examples: Approximate physical location derived from IP address.
Used for: Website analytics, security, and regional service insights.
Purposes for Collecting and Using Personal Information
- Providing and managing collision repair and related services
- Communicating with you about services, estimates, and appointments
- Operating, maintaining, and improving our website and business
- Meeting legal and regulatory obligations
We do not process your personal information for the purpose of cross-context behavioral or targeted advertising in a way that would constitute a “sale” or “sharing” under applicable state laws.
Disclosure of Personal Information
We do not sell your personal information.
We do not share your personal information for cross-context behavioral or targeted advertising.
- Limit their use of personal information to providing services to us; and
- Require them to protect the confidentiality and security of the information.
Your Privacy Rights
- Right to Know / Access:
The right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclosed it. - Right to Correct:
The right to request that we correct inaccurate personal information that we maintain about you. - Right to Delete:
The right to request that we delete personal information we have collected from you, subject to certain legal exceptions (for example, when needed to complete a transaction, detect security incidents, comply with law, or maintain necessary business records). - Right to Opt-Out of Sale/Sharing:
The right to opt out of the “sale” or “sharing” of personal information, where applicable.
Note: We do not sell or share your personal information as those terms are defined under certain state laws. - Right to Non-Discrimination:
The right not to receive discriminatory treatment for exercising any of your privacy rights.
Exercising Your Rights
We may need to verify your identity before processing your request, which may require matching the information you provide with information we already have on file.
We will respond to your request within the time frames required by applicable law (typically within 45 days, with possible extensions as permitted by law).
You may also designate an authorized agent to make certain requests on your behalf, where permitted by law, subject to verification and documentation requirements.
Changes to This Privacy Policy
- Post the updated Policy on this page, and
- Update the “Effective Date” at the top of the Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.