Privacy Policy.

This policy describes how FireShields actually works as of the effective date shown above. Where it says we do not do something, we checked.

FireShields is operated by Firezat, Inc. dba FireFoil, part of AACI Group. Reach us about anything on this page at privacy@firefoil.com.

This site sells things, so this policy says more about orders and payment than our other sites do. Read the advertising section carefully: unlike our other brands, this site does share information with an advertising platform, and you can stop it.

What we collect

What you type into our forms. Depending on which form you use: your email address, your name, your company, the kind of property you are protecting, a ZIP code, and your message.

What you type when you accept the waiver. Your typed legal name, your email address, and your affirmative agreement. We also record the IP address and browser your acceptance came from, and the exact version and content hash of the waiver you agreed to. Without those the acceptance would not be worth anything as a record.

Your order, in part. When an order completes, our systems receive the order number, the order ID, the email address on the order, and where the order came from, so that we can match it to your signed waiver. We do not receive your card details, your shipping address or your billing address.

Your consent record. The exact wording you agreed to, and when.

Analytics about your visit, and, if you have not opted out, advertising identifiers. Both are described below.

Ordinary server logs. Your IP address, browser type, and pages viewed, kept for security and troubleshooting.

California privacy law covers information about you in your professional capacity, so the rights below apply to a business contact exactly as they apply to a consumer.

Why we use it

• To sell you what you asked to buy and get it to you.
• To keep a record that you accepted the product waiver, which we are required to hold.
• To reply to you.
• To tell you when something is back in stock, if you asked.
• To send you marketing email, if you agreed to it, and to stop when you say stop.
• To measure whether our advertising works, unless you opt out.
• To keep the site working and secure, and to find and fix faults.
• To meet our own legal, tax and product-liability record-keeping obligations.

Payment

No card number, bank detail or payment field ever touches this site. When you check out, you leave this site for our store provider's own checkout on its own domain, and that is where your card and your addresses are entered. If you choose to pay over time, the financing application happens on the financing provider's own domain, under its own terms and its own privacy policy. We never see, receive or store a payment instrument.

Who receives it

We share your information with these kinds of recipients, and only for these reasons:

• Our own and AACI Group's internal systems, so a person can fulfil your order or answer you.
• Our store and payment providers, to take your order, take payment, and ship to you.
• A financing provider, but only if you choose to apply, and only through its own application.
• An advertising platform, as described in the next section, unless you opt out.
• Service providers that operate parts of this site for us, including hosting, web analytics, product analytics, email delivery, and document storage. They act on our written instructions and are not permitted to use your information for their own purposes.
• Anyone we are legally required to give it to, such as in response to a valid legal demand or to protect someone from harm.

One of those services records how visitors move through the pages, including a replay of the visit. Form fields are masked so what you type is not captured. You can switch this off at any time using Your Privacy Choices.

A copy of your signed waiver is archived to a document storage service that only our own staff can reach.

Advertising and tracking on this site

This site loads a tag manager, a product-analytics tool, a financing provider's script, and one advertising pixel: the Meta pixel. It loads no Google Ads remarketing tag and no Microsoft, LinkedIn, TikTok or Reddit tag. We verified this in the site's own source code on the effective date above.

The Meta pixel is gated. It does not load, and no advertising identifier is read or written, if you have opted out using the link at the bottom of any page, or if your browser sends a Global Privacy Control signal. If you have not opted out, the pixel reports your activity on this site to Meta, and we store an advertising click identifier in a cookie on this domain for up to one year so that a purchase can be matched back to the ad that led to it.

Optional analytics, including the tool that replays visits, run behind the same consent gate.

The video on our proof page loads from the video provider when that page opens, and the provider may set its own cookies.

Selling and sharing

We do not sell your personal information for money.

We do share it, in the specific sense California law means. Running the Meta pixel is cross-context behavioral advertising, which California law calls sharing. We are telling you so plainly rather than hiding behind the word.

You can stop it. Use Your Privacy Choices, or send a Global Privacy Control signal from your browser, and no advertising identifier is read or written from that point on. We will not treat you differently for it, and nothing about your order changes.

Our affiliated insurance agency

AACI Group includes Five Bays Insurance Agency, a licensed insurance agency and a separate company from the one that operates this site.

Nothing you do here sends your details to Five Bays automatically. It only happens if you ask to be connected, and asking is always a separate, clearly labelled step you have to take yourself.

We treat any such referral as a sharing of your personal information that you can stop. If you opt out, we will not pass your details to Five Bays, whatever you clicked before, and we will not restart it without asking you again.

Your choices, and how to use them

You can, at any time and without giving a reason:

• Opt out of the sale or sharing of your personal information.
• Tell us to stop sending you marketing email.
• Tell us to stop sending you text messages.
• Ask what personal information we hold about you.
• Ask us to delete it.
• Ask us to correct it.

Use the Your Privacy Choices link at the bottom of any page, or submit a privacy request. You do not need an account and we will not ask you to create one. Opting out takes no more steps than opting in did.

One limit, stated up front. Asking us to delete your information does not cancel an order, and it does not erase records we are required to keep for tax, warranty and product-liability reasons, including your signed waiver. We will tell you exactly what we kept and why.

We will not treat you differently for exercising any of these rights. You will get the same service, at the same price.

How long we take

Opting out needs no proof of identity, and we will not ask for any. Asking us to hand over, delete, or correct your data does need us to check you are who you say you are, because handing your data to the wrong person would be the greater harm.

Global Privacy Control

If your browser or an extension sends a Global Privacy Control signal, we read it as a valid opt-out of sale and sharing for that browser, and we act on it immediately. You do not have to tell us twice.

Someone acting for you

An authorized agent can make a request for you. Say so on the request form. We may contact you to confirm you authorized it.

How long we keep things

We keep your inquiry and the record of your consent for as long as we need it for the purpose you gave it, and then for as long as we are required to keep records of it. We keep your signed waiver and the order it belongs to for as long as product-liability and tax law requires. We keep server logs for a short operational period. When you ask us to delete your information, we delete it except where the law requires us to keep a record, and we tell you what we kept.

Keeping it safe

Your information sits in access-controlled systems, encrypted in transit. Only people who need it to do their job can reach it. No system is perfectly secure and we will not pretend otherwise.

Children

This site is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to privacy@firefoil.com and we will remove it.

If you are outside California

The rights above are written to California law because that is where most of the people who use this site live. If you are in another state with its own privacy law, or in the United Kingdom or the European Economic Area, you have rights under that law too, and the same request form reaches us. Tell us where you are and we will apply whichever rules give you more.

Changes

If we change this policy we publish the new version here with a new version number and effective date, and we keep the old one on file. A change that would newly allow us to sell or share your information will not be applied to information we already hold without asking you first.

Contact

privacy@firefoil.com

Firezat, Inc. dba FireFoil