Privacy Policy
This is a quote-and-paperwork business. We keep what we need to respond to you and to run the yard. We don't sell data, we don't run ads, and we don't operate a CRM in the industrial sense.
What we collect
Whatever you put in a form on this site: your name, address (for quote/delivery), email, phone, company, and the details you provide about your job.
How we use it
Only to answer your inquiry, build your quote, process your order, and document the transaction in the ledger. A record is retained for our accounting and warranty obligations.
Who sees it
Our five-person team, plus the occasional trusted freight partner when delivery is required. We do not sell, rent, or share customer data with marketing partners.
Cookies
We use only strictly necessary cookies. No advertising trackers, no third-party analytics.
Your rights
You can request a copy of the information we hold about you, or ask us to delete it, by emailing the yard. We'll comply within 30 days.
The specifics, in detail.
Exact data fields we collect
Only what appears on our forms. As of this writing, that means:
- Name (first + last)
- Company (optional on most forms)
- Email address
- Phone (optional, for freight coordination only)
- Street address or delivery ZIP (when a quote requires it)
- Free-text message describing your job
- Tank quantity, grade, and liquid type when the form asks
We do not collect date of birth, government ID numbers, IP geolocation, or payment card data. Card processing happens on a PCI-compliant processor that we do not host or mirror.
How long we keep it
Contact form submissions are retained for 36 months from the last meaningful interaction. After that, records are archived to cold storage and scrubbed of personally identifying fields. Transaction records (invoices, bills of lading, tank ledger entries) are retained for 7 years to meet Pennsylvania's sales and use tax recordkeeping requirements.
Third parties that touch your data
We keep the list short on purpose.
- Our upstream CRM: a U.S.-hosted contact database used only by our five-person team. No marketing automation, no data enrichment, no third-party integrations.
- Our email provider: stores messages you send us, subject to the provider's own privacy terms (we can share on request).
- Payment processor: for the card-pay link. They see only payment data, never your quote history.
- Occasional freight partner: a contracted trucking company receives your delivery address and tank count when we subcontract a specific lane.
- Our accountant: sees aggregate financial data for tax filing. Does not see individual inquiries or unsigned quotes.
We do not share data with ad networks, social media platforms, or data brokers. We have never sold customer data and we will not start.
Children
This site is business-to-business and not directed at children. We don't knowingly collect information from anyone under the age of 16. If you believe a minor has submitted a form, email us and we'll delete the record immediately.
Security
Forms transmit over HTTPS. Contact records sit on U.S.-based servers with role-based access restricted to the five-person yard crew. Our email is 2FA-enforced. We run no on-yard Wi-Fi that touches sensitive records — the office machines are wired. Physical intake paperwork is locked in the office filing cabinet at day's end.
Your rights, specifically
Whether or not your state has a specific privacy statute, we extend the following by policy to any visitor:
- Access: you can request a copy of the records we hold about you. We'll reply within 30 days.
- Deletion: you can request deletion by emailing us with “DELETE MY RECORD” in the subject. We'll comply within 30 days unless we're legally required to retain specific items (e.g., completed invoices).
- Correction: if a field is wrong, tell us and we'll fix it on the same day.
- Portability: we'll send your records in a plain-text or CSV format on request.
- No marketing: we don't run a marketing list, so there's nothing to opt out of. If we ever start one, it will be opt-in only.
Breach protocol
If a data breach occurs, we will notify affected individuals by email within 72 hours of confirmed detection, describe what was accessed, and outline the remediation we've already taken. We will also notify the Pennsylvania Attorney General as required under Pennsylvania's Breach of Personal Information Notification Act.
Changes to this policy
We revise this page when something real changes — not as a marketing exercise. The last material update was February 2025 (rewritten for plain English). Prior versions are archived and available on request.
Applicable law
This policy is governed by the laws of the Commonwealth of Pennsylvania. Disputes are resolved in Allegheny County. We comply with the Pennsylvania Unfair Trade Practices and Consumer Protection Law, and to the extent applicable, with CCPA/CPRA (California) and GDPR (EU) principles where a visitor is protected by those frameworks.
Contact
Questions, requests, or concerns about this policy? Email the yard. Mail also works: Pittsburgh Totes Recycling, 1243 Thompson Avenue, McKees Rocks, PA 15136. A written reply will be sent within ten business days.