Privacy Policy
Last updated: September 19, 2026
This Privacy Policy is provided in good faith and describes our actual data practices. It is not a substitute for legal advice. If you have specific legal questions, please consult an attorney.
1. Who We Are
This Privacy Policy describes how The Total Wash Co. LLC ("The Total Wash Co.," "we," "us," or "our") collects, uses, shares, and safeguards information when you visit https://www.thetotalwash.com, request a quote, or engage us for exterior cleaning services. The Total Wash Co. acts as the data controller for personal information collected through our website and during service delivery.
2. Information We Collect
We collect the following categories of personal information:
- Contact information: full name, email address, phone number, and mailing/service address.
- Service information: property type, property characteristics, requested services, service history, preferred schedule, access instructions, notes you provide.
- Payment information: payment method details processed securely by Stripe (we do not store raw card numbers on our servers). We retain the last four digits, card brand, and transaction metadata only.
- Communications: messages, call recordings (where disclosed), SMS conversations, email correspondence, and any content you submit through forms.
- Technical & usage data: IP address, browser type, device type, pages visited, referring URLs, time on site, clicks, and similar analytics data — see Section 5 (Cookies).
- Marketing data: UTM parameters, ad click IDs (e.g.,
gclid,fbclid), source/medium, and campaign attribution. - Photos: before/after photographs of your property taken during service. Photos are used for (a) quality documentation and job records; (b) insurance and liability documentation; and (c) marketing — our website, social media, and advertising. You can opt out of marketing use at any time, before or after service, and we will take your photos down — email info@thetotalwash.com or call (608) 360-5818. We photograph the exterior of the property only — never people, never interiors — and we never publish your address, house number, or any other detail that identifies where you live. Before any photo is published we screen it for faces, licence plates, and house numbers (see Section 4).
We do not knowingly collect information from children under 13.
3. How We Use Your Information
We use your information to:
- Respond to quote requests, schedule and perform services, and provide customer support.
- Process payments and issue invoices/receipts.
- Send service-related communications (confirmations, reminders, arrival notifications, follow-ups, review requests, and invoices).
- Send marketing communications with your consent (which you may withdraw at any time).
- Improve our website, services, and operations through analytics and error monitoring.
- Measure ad effectiveness on Google and Meta platforms.
- Prevent fraud, abuse, and security incidents.
- Comply with legal, tax, accounting, and insurance obligations.
4. Third-Party Service Providers
We share personal information with trusted service providers ("processors") strictly for the purposes described above. We do not sell your personal information. Our current processors include:
- Stripe — payment processing. Stripe privacy policy.
- Brevo (transactional and marketing email delivery). Brevo privacy policy.
- Twilio — SMS and voice messaging. Twilio privacy policy.
- Google Analytics 4 — traffic and conversion analytics. Google privacy policy.
- Meta Pixel (Facebook/Instagram) — ad measurement and retargeting. Meta privacy policy.
- Vercel — website hosting and edge infrastructure. Vercel privacy policy.
- Supabase — primary database and customer data storage. Supabase privacy policy.
- n8n Cloud — workflow automation (internal routing of quote requests, scheduling, notifications). n8n privacy policy.
- Sentry — error monitoring and performance tracking.
- Google (Gemini API, paid tier) — automated privacy screening of service photos before publication. Photos are checked for faces, licence plates, and visible house numbers so those images can be held back or blurred. We use the paid tier specifically because Google does not use paid-tier content to train or improve its models. Gemini API terms.
We may also disclose information (a) to comply with a valid legal process (subpoena, court order); (b) to enforce our Terms of Service; (c) to protect the rights, property, or safety of The Total Wash Co., our customers, or others; or (d) as part of a business transfer (merger, acquisition, sale of assets) — in which case, any successor will be bound by this policy.
5. Cookies & Tracking Technologies
We use cookies, pixels, and similar technologies to operate the site, remember preferences, and measure performance. We group cookies into three categories:
- Essential: Required for the site to function (session state, CSRF protection, cookie consent preference storage). Always active.
- Analytics: Google Analytics 4 — helps us understand how visitors use the site (page views, traffic sources, bounce rate). Active only with your consent.
- Marketing: Meta Pixel and Google Ads conversion tracking — measures ad effectiveness and enables remarketing. Active only with your consent.
You can choose which categories to allow through our cookie banner on first visit, or update your preferences at any time via the cookie settings link in our site footer. Declining non-essential cookies does not affect your ability to use the site.
6. SMS/Text Message Program
Text messages are your choice. Giving us your phone number does not by itself sign you up for texts: you opt in only by checking the separate, unchecked-by-default text-updates box next to the number in our quote and booking forms (see it at /text-updates). If you check it, you agree to receive service-related text messages from The Total Wash Co., which may include quote confirmations, appointment reminders, crew arrival notifications, invoice links, and service follow-ups. Details are in our SMS Policy. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time; reply HELP for assistance.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent will not be shared with any third parties. See Section 4 for SMS delivery processors.
7. Data Retention
We retain personal information for as long as necessary to provide our services and meet our legal, tax, accounting, and insurance obligations. Key periods:
- Customer records, invoices, and financial data: 7 years (IRS and Wisconsin tax retention requirements). Cannot be deleted earlier.
- Closed/lost quote requests: 2 years after closed date, then automatically deleted.
- Incomplete form submissions (partial leads): 90 days, then automatically deleted.
- Site analytics events and visitor location data: 90 days, then automatically deleted.
- Email engagement data (opens, clicks): 1 year, then automatically deleted.
- Call and voice session records: 1 year, then automatically deleted.
- Employee and HR records: 7 years post-termination (IRS Pub. 15-A).
- Privacy request (DSAR) records: 7 years as a compliance audit trail.
- Cookie consent records: 1 year, then automatically deleted.
- Analytics data (GA4, Meta Pixel): retained by the respective provider per their settings (GA4: 14 months default).
When you submit a verified deletion request (see Section 8), we will delete records except where a legal obligation requires continued retention. We will tell you which records are exempt and why.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information. We honor these rights regardless of whether a specific law technically applies to you:
- Right to know / access — request a copy of the personal information we hold about you.
- Right to correct — request correction of inaccurate or incomplete data.
- Right to delete — request deletion of your personal information, subject to legal retention obligations.
- Right to opt out of marketing — unsubscribe from marketing emails or SMS at any time.
- Right to data portability — receive your data in a commonly used, machine-readable format.
- Right to object / restrict processing — object to certain processing, particularly for direct marketing.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
California residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") provide you the rights listed above, plus the right to opt out of the "sale" or "sharing" of your personal information. The Total Wash Co. does not sell personal information for monetary consideration. Use of analytics and advertising pixels (see Sections 4 and 5) may constitute "sharing" under CPRA; you can opt out of such sharing through our cookie banner or by contacting us as described below.
EU / EEA / UK visitors (GDPR)
The Total Wash Co. is a Wisconsin-based business and does not target services to residents of the EU, EEA, or UK. If you are visiting our website from one of those regions, the General Data Protection Regulation ("GDPR") and UK GDPR may apply to your personal data. Our legal bases for processing are: (a) consent (for marketing, non-essential cookies); (b) contract (to deliver services you request); (c) legitimate interest (fraud prevention, website security, site analytics); and (d) legal obligation (tax and recordkeeping). You may lodge a complaint with your local supervisory authority. Contact us as described below to exercise any right.
How to submit a request
To exercise any of the rights above, email us at info@thetotalwash.com. We will verify your identity and respond within 30 days (extendable to 60 days for complex requests, with notice). There is no charge for reasonable requests.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information, including encryption in transit (HTTPS/TLS), access controls on our database, audit logging, and vendor due diligence. However, no method of transmission or storage is 100% secure. You are responsible for keeping account credentials confidential.
10. International Data Transfers
The Total Wash Co. operates from the United States. If you access our website from outside the United States, your personal information will be transferred to, stored, and processed in the United States. By using our website, you consent to such transfer and processing consistent with this policy.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect when posted to this page with an updated "Last updated" date. Material changes will be communicated via email or website notice where reasonably possible.
12. Contact Us
Questions, concerns, or requests regarding this Privacy Policy or your personal information? Contact us:
The Total Wash Co. LLC
Attn: Privacy
7610 Welton Dr
Madison, WI 53719-3024
Email: info@thetotalwash.com
Phone: (608) 360-5818