Privacy Policy

Last Updated: July 3, 2026

Introduction

Palm Build provides property restoration and construction services. This Privacy Policy explains how we collect, use, share, and protect your information. When This Policy Applies: • When you visit our website • When you contact us (phone, text, email, or chat, including AI chat and AI voice assistants) • When you schedule a site visit or callback • When you sign service documents • When we perform Services for you or your property By using our services, you agree to this Privacy Policy. Additional terms are described in our Terms of Service, SMS Terms, and AI Disclosure.

Information We Collect

What You Provide to Us: • Contact Details Name, phone number, email, mailing address • Service Details Property location, damage photos/videos, damage descriptions, insurance policy numbers, claim information • Business Information If you represent an organization or HOA • Payment Information Invoice approvals and online payments (handled by secure payment processors) • Communication Records Calls, texts, chats, and emails (including AI chat and AI voice interactions) • Emergency Contacts For urgent access or coordination

Information We Collect Automatically

What We Collect When You Use Our Website: • Device and Usage Data IP address, browser type, device identifiers, pages visited, date/time stamps, referring URL • Location Information Approximate location from IP address (for service availability and fraud prevention) • Cookies and Tracking For site performance, analytics, preferences, and fraud prevention (see "Cookies, Tracking, and Cookie Categories" below)

How We Use Your Information

We use your information to: • Service Delivery Provide, schedule, and manage restoration, remediation, and reconstruction services • Documentation Prepare estimates, work statements, change orders, and invoices • Insurance Claims Process claims and coordinate with carriers, adjusters, and representatives • Communication Contact you about scheduling, safety, emergencies, and service updates • AI-Assisted Support Answer questions, route requests, schedule callbacks, and support live team members via our AI chat and AI voice assistants • Improvement Enhance our services, website, and operations (using de-identified or aggregated data where practical) • Legal and Safety Meet legal, regulatory, contractual, insurance, and safety obligations; detect and prevent fraud, abuse, or security incidents; establish, exercise, or defend legal claims

Texts, Calls, and Recordings

Phone Communication Consent: By providing your phone number, you agree to receive calls and text messages (SMS/MMS) about: • Scheduling, appointment confirmations, and callback requests • Emergencies and safety alerts • Account, estimate, and invoice updates • Service information and project status Messages are sent through our messaging platform provider (currently Twilio) and may also be initiated or assisted by our AI chat and AI voice assistants (see "AI-Assisted Interactions (Website Chat & Phone)" below). Message and Data Rates: Message and data rates may apply. Message frequency varies and depends on your project, scheduling activity, and how you interact with us. Opting Out and Help: • Reply STOP to opt out of marketing texts. • Reply HELP for help, or contact us at (888) 245-5155 or admin@palmbld.com. • You will still receive important transactional, scheduling, and safety messages required to deliver services you have requested. Mobile Opt-In and Consent Data — Carrier / 10DLC Notice: No mobile information, phone numbers, or SMS/MMS opt-in consent data will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontracted service providers that support our own messaging program (such as our messaging platform provider, currently Twilio) is permitted only to deliver the messages you have requested. All other categories of Personal Information described in this Policy exclude text-messaging originator opt-in data and consent — this information will not be shared with any third parties for their own marketing purposes. Call Recording: We may record and transcribe inbound and outbound calls for quality, training, scheduling, dispatch, safety, and service purposes, as permitted by law. Calls handled or assisted by our AI phone assistant may also be recorded and transcribed on the same basis (see "AI-Assisted Interactions (Website Chat & Phone)" below). Two-Party Consent States: Some states — including California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, Vermont, and Washington — require all parties to a call to consent to recording. Where required, we provide a spoken or recorded notice at the start of the call informing you that the call may be recorded and giving you the opportunity to decline or request a non-recorded call. Continuing the call after this notice constitutes your consent to recording.

AI-Assisted Interactions (Website Chat & Phone)

We use artificial intelligence ("AI") tools to help us respond to you more quickly through two channels: our website chat assistant and our phone system. Website Chat Assistant: Our website may offer an AI-powered chat assistant that answers questions, provides information about our services, helps you request service or a quote, and can schedule appointments or callbacks. When you use it, we collect and store the information you provide (such as your name, contact details, property location, and a description of your project or question) along with a log of the conversation. We use this to respond to you, provide the services you request, improve our tools, and for the other purposes described in this Policy. AI Phone Assistant: When you call us, your call may be answered or assisted by an automated AI voice assistant. It can help route your call, answer common questions, provide information about your project or claim, schedule appointments or callbacks, and take a message when our team is busy or outside business hours. These calls may be recorded and transcribed as described in "Texts, Calls, and Recordings" above. We use this AI assistant only for calls you place to us; we do not use it to make automated marketing or sales calls to you. How the AI Works: To provide these features, the content of your chats and calls (including recordings and transcripts) may be processed by trusted third-party AI service providers on our behalf, subject to their terms and privacy commitments. These providers process this information to generate responses and are not permitted to use it to build their own unrelated products. Bot Identification (California SB 1001): In interactions where our AI chat or AI voice assistant is used to communicate with a California resident in a manner intended to knowingly influence a commercial transaction, we identify the assistant as an automated system. You can always ask to speak with a live team member. AI Training Opt-Out: We do NOT permit our AI service providers to use your chats, calls, recordings, or transcripts to train their general-purpose foundation models. Content submitted through our AI tools is processed only to serve you and, where applicable, to improve Palm Build's own workflows in a controlled manner. Where our providers offer a "zero-retention" or "no-training" mode, we make commercially reasonable efforts to enable it. Important: AI responses are generated automatically and may not always be complete or accurate. They are provided for convenience and general information only, are not professional, legal, or insurance advice, and do not create a binding agreement, estimate, or authorization. You can ask to speak with a live team member at any time by requesting a person or by calling us at (888) 245-5155. See our AI Disclosure at /legal/ai-disclosure for more detail.

Automated Decision-Making

Palm Build does not use solely automated decision-making — including profiling — to produce legal or similarly significant effects concerning you. Our AI chat and AI voice assistants provide information, route requests, take messages, and schedule appointments, but they do not make final decisions about pricing, scope of work, service denial, claim approval, or credit eligibility. Binding decisions, estimates, and authorizations are reviewed and made by human Palm Build personnel. If you would like additional information about how our AI tools inform Palm Build's business decisions, contact admin@palmbld.com.

Insurance-Specific Data Sharing

By requesting Services on an insured loss, you authorize Palm Build to communicate with, and share loss-related information with, parties involved in your claim, including: your insurance carrier(s); the assigned adjuster or third-party administrator (TPA); your public adjuster (if you have retained one); your mortgagee, lender, escrow agent, or lienholder; independent adjusters, appraisers, engineers, industrial hygienists, and other third-party experts engaged in connection with the loss; and government inspectors when required. Information shared may include photos and videos of the loss, scopes of work, moisture and psychrometric readings, sketches and measurements, estimates and invoices, work authorizations, change orders, chain-of-custody records, and correspondence.

When and How We Share Information

We share information only as needed to provide our services or as required by law: • Service Providers and Subcontractors Specialty trades, labs, equipment vendors (under confidentiality agreements) • Insurance Companies Carriers, adjusters, brokers, and representatives involved in your claim • Payment Processors Financial institutions that handle payment collection and processing • Technology Vendors Analytics, hosting, communications, AI, and security providers (see "Service Providers and Subprocessors" below) • Legal, Safety, and Compliance Law enforcement, courts, regulators, professional advisors, and other parties when required by law, court order, subpoena, or to protect the rights, property, or safety of Palm Build, our team, our customers, or the public • Business Transfers In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business (subject to this Policy) Sale/Share of Personal Information: We do not "sell" personal information for money. We may "share" limited online identifiers, IP address, and browsing activity with advertising and analytics partners for cross-context behavioral advertising (for example, Google Ads remarketing). California residents and residents of other states with similar rights may opt out — see "California Privacy Rights (CCPA/CPRA)" and "Other US State Privacy Rights" below.

Service Providers and Subprocessors

To operate our website and Services, Palm Build uses trusted third-party service providers ("subprocessors"). Categories and current providers include (list may change and is illustrative, not exhaustive): • Website hosting and infrastructure — Vercel (US) • Database and back-end services — Supabase (US) • Messaging platform (SMS/MMS and voice) — Twilio (US) • AI language and voice services — OpenAI (US), Anthropic (US) • Transactional and marketing email — Resend (US) • Call tracking and dynamic number insertion — CallRail (US) • Workflow automation — n8n (self-hosted / US) • Background job processing — Trigger.dev (US) • Web analytics and product analytics — Google Analytics 4 (US/global), Microsoft Clarity (US/global), Vercel Analytics (US) • Advertising and remarketing — Google Ads (US/global) • Payment processing — third-party PCI-compliant processors as identified on the applicable payment page We select subprocessors that provide appropriate technical and organizational safeguards, and we contract for them to process personal information only on our instructions and consistent with this Policy. Some providers are US-based companies with global infrastructure; where information is transferred outside the United States, we rely on standard contractual clauses or other lawful transfer mechanisms as required.

Cookies, Tracking, and Cookie Categories

We use cookies and similar technologies to operate the site and understand usage. Cookies fall into the following categories: • Strictly Necessary Required for the site to function (session, security, load balancing, form CSRF). These cannot be disabled without breaking the site. • Performance and Analytics Help us understand how visitors use the site so we can improve it. Examples: Google Analytics 4, Microsoft Clarity, Vercel Analytics. • Functional Remember preferences (such as consent choices or region), and support features such as CallRail dynamic number insertion. • Marketing and Advertising Used to measure and personalize advertising and remarketing. Examples: Google Ads conversion and remarketing tags. Managing Cookies: You can control most cookies through your browser settings and through the opt-out links referenced in the Google Analytics and Advertising sections below. Blocking Strictly Necessary cookies may cause parts of the site to stop working. Do Not Track and Global Privacy Control (GPC): Some browsers send Do Not Track ("DNT") signals. Because there is no consistent industry standard for DNT, we do not currently respond to DNT signals. Where we are required by law to honor the Global Privacy Control ("GPC") browser signal — including for California and Colorado residents — we treat a GPC signal received from your browser as a valid request to opt out of the "sale" or "sharing" of your personal information and to opt out of targeted advertising for that browser and device.

Microsoft Clarity

We partner with Microsoft Clarity to capture how users interact with our website through behavioral metrics, heatmaps, and session recordings. This data helps us understand usage patterns, improve site functionality, enhance user experience, and optimize our services. Website usage data is collected using first- and third-party cookies and other tracking technologies. This information may also be used for security, fraud prevention, and marketing purposes. By using our website, you consent to the collection and use of data by us and Microsoft Clarity as described above. For more information on how Microsoft collects and processes data, please review the Microsoft Privacy Statement at https://www.microsoft.com/en-us/privacy/privacystatement

Analytics & Usage Data (Google Analytics 4)

We use Google Analytics 4 ("GA4") to understand how visitors interact with our website. GA4 collects information such as pages visited, time on site, device type, browser type, approximate location (city/region), and interaction events (for example: page views, button clicks, form submissions, and phone link clicks). Google Analytics processes this data using cookies and similar technologies. The information collected may be transmitted to and stored by Google on servers in the United States. We have configured Google Analytics with IP anonymization where applicable and have set data retention controls to automatically delete user-level and event-level data after 14 months.

Event Tracking

We track interaction-based events to measure website performance and user engagement. These events may include: • Page views • Button clicks • Form submissions • Phone number clicks • Booking or contact confirmations These events are used strictly for analytics, performance measurement, and marketing optimization purposes.

Advertising & Remarketing

We may use Google Ads and related remarketing services to promote our services across the web. These services use cookies and similar technologies to display ads to users who have previously visited our website. Google may use information about visits to this and other websites to provide relevant advertisements based on user interests. Users can opt out of Google's use of advertising cookies by visiting: https://adssettings.google.com

Call Tracking & Dynamic Phone Number Insertion

We may use call tracking technologies, including dynamic phone number insertion (DNI), to measure the effectiveness of our marketing campaigns. Depending on the visitor's location or traffic source, different phone numbers may be displayed on our website. When a phone call is placed, we may collect call-related data such as call time, duration, source, and general geographic location. Calls may be recorded for quality assurance, training, and marketing performance analysis where permitted by law. This information is used solely for internal analytics, attribution, and service improvement purposes.

Data Security

We protect your personal information with multiple safeguards: • Administrative Controls Role-based access to your information • Technical Security Encryption during transmission and, where practical, at rest; hardened cloud infrastructure; monitoring and logging • Physical Security Secure storage systems • Vendor Screening We work only with trusted subprocessors under written agreements Important Note: No security method is 100% secure. You share information at your own risk.

Data Breach Notification

If Palm Build discovers a security incident that has resulted, or is reasonably likely to result, in the unauthorized acquisition of your unencrypted personal information (or encrypted information together with the means to decrypt it), we will notify affected individuals and applicable regulators as required by applicable law, including the breach-notification statutes of all 50 US states, the District of Columbia, and US territories. Notifications will describe the nature of the incident, the categories of information involved, the steps we have taken in response, and any steps you can take to protect yourself. Where required by law, notice will also be provided to consumer reporting agencies and other authorities.

Data Retention

How Long We Keep Your Information: We keep your information only as long as needed to: • Provide services • Satisfy legal, insurance, tax, and accounting requirements • Resolve disputes and defend claims • Enforce agreements Illustrative Retention Periods (may be extended where required by law, active dispute, or legal hold): • Contact-form submissions and CRM records: up to 7 years after last contact • Project records (estimates, contracts, invoices, photos, moisture readings, correspondence): 7-10 years after project completion (consistent with insurance statutes of repose and Florida's construction statute of repose under §95.11, Florida Statutes) • Call recordings and transcripts (including AI voice assistant): up to 24 months, unless retained longer for an active claim, dispute, or legal hold • Chat logs (including AI chat assistant): up to 24 months, unless retained longer for an active claim, dispute, or legal hold • SMS/MMS message logs: up to 24 months • Google Analytics user- and event-level data: 14 months (automatically deleted) • Marketing consent and suppression-list records: retained indefinitely to honor opt-outs • Server logs and security telemetry: typically 90-365 days • Encrypted backups: cycled and overwritten on a rolling basis, typically within 90 days When information is no longer needed, we delete, de-identify, or securely destroy it.

Health Information Disclaimer

Palm Build is NOT a HIPAA-covered entity or business associate. We do not intentionally collect Protected Health Information ("PHI") under the Health Insurance Portability and Accountability Act. Because water intrusion, mold, sewage, biohazards, and fire damage can involve health-adjacent information, you may voluntarily share limited health details when describing a loss (for example, an occupant's allergies or sensitivities). Any such information we receive is treated as sensitive personal information under this Policy and applicable state law, is used only to deliver Services and coordinate related communications, and is not sold or shared for marketing purposes. Palm Build does not sell "consumer health data" as that term is defined under state laws such as the Washington My Health My Data Act, the Nevada consumer health data law (SB 370), or similar laws.

Biometric Data

Palm Build does not knowingly collect, use, or store biometric identifiers or biometric information — such as fingerprints, retina or iris scans, voiceprints used for identification, or scans of hand or face geometry — from users of our website, chat, phone, or Services. Our AI voice assistant records and transcribes call audio for the customer-service purposes described above but does not generate voiceprints or perform biometric identification. If Palm Build ever adopts a technology that would collect biometric identifiers, we will update this Policy and provide any required notice and consent in accordance with applicable laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and the Washington biometric identifiers law.

Your Choices and Rights

Your Rights (General): Depending on your location, you may have the right to: • Access your personal information • Correct inaccurate personal information • Delete your personal information • Restrict or object to certain uses of your information • Portability of information you have provided • Withdraw consent to processing based on consent • Opt out of marketing communications • Opt out of the "sale" or "sharing" of your personal information and targeted advertising • Limit the use of sensitive personal information • Not receive discriminatory treatment for exercising your rights How to Exercise Your Rights: Email: admin@palmbld.com Phone: (888) 245-5155 Mail: Palm Build, Attn: Privacy Officer, 786 S Military Trail, Deerfield Beach, FL 33442 We may need to verify your identity before processing your request. We will respond within the timeframes required by applicable law (typically 30-45 days), and we may extend that period once for complex requests where permitted. Important: Even if you opt out of marketing, you will still receive service-related messages about active or past projects. Opt-Out Options: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout You may also manage or disable cookies through your browser settings. Please note that disabling cookies may affect certain website functionality.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), grants you additional rights. Categories of Personal Information Collected (last 12 months) — mapped to Cal. Civ. Code §1798.140: • Identifiers (name, address, email, phone, IP address, unique online identifiers) • Customer records (contact and billing details) • Commercial information (services requested, transaction history) • Internet or other electronic network activity (browsing, cookies, session interactions) • Geolocation data (approximate, from IP address) • Audio and visual information (call recordings, chat transcripts, project photos and videos) • Professional or employment-related information (if you contact us on behalf of an organization) • Inferences (drawn from the above to understand service interest) Sensitive Personal Information: We do not intentionally collect Social Security numbers, driver's license numbers, financial-account log-in credentials, precise geolocation, race, religion, union membership, genetic data, or the contents of your mail, email, or text messages except as necessary to deliver Services and communications you have requested. Sources: You, your representatives, your insurer or adjuster, publicly available sources (such as property records), analytics and advertising cookies, and referrals. Business/Commercial Purposes: To provide, improve, and market our Services; to communicate with you; to process claims and payments; for security, fraud prevention, and legal compliance; and as otherwise described in "How We Use Your Information." Recipients: Service providers and subprocessors listed in "Service Providers and Subprocessors"; insurance and legal parties listed in "Insurance-Specific Data Sharing" and "When and How We Share Information"; and, for limited online identifiers used in advertising, third parties as described in "Sale/Share" below. Sale/Share: We do not "sell" personal information for money. We do "share" limited online identifiers, IP address, and browsing activity with advertising partners (such as Google Ads) for cross-context behavioral advertising ("targeted advertising"), which may constitute "sharing" under the CCPA. Retention: See "Data Retention." Your CCPA Rights: • Right to Know — the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients (12-month lookback) • Right to Delete — subject to statutory exceptions • Right to Correct — inaccurate personal information • Right to Opt Out of Sale/Sharing (including targeted advertising) • Right to Limit Use of Sensitive Personal Information • Right to Non-Discrimination — we will not deny Services, charge different prices, or provide a different level of Services because you exercised a right • Right to Data Portability — receive information you provided in a usable format How to Exercise CCPA Rights: • Email: admin@palmbld.com (subject line "CCPA Request") • Phone: (888) 245-5155 • Mail: Palm Build, Attn: Privacy Officer — CCPA, 786 S Military Trail, Deerfield Beach, FL 33442 Opt-Out of Sale/Share: You may opt out at any time by (a) emailing admin@palmbld.com with the request "Do Not Sell or Share My Personal Information," (b) enabling the Global Privacy Control (GPC) signal in your browser, which we honor for California residents, or (c) using the "Do Not Sell or Share" link that we may make available in the site footer. To limit use of sensitive personal information, email us with the request "Limit the Use of My Sensitive Personal Information." Authorized Agents: You may designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization (such as a signed permission or power of attorney) and may require you to verify your own identity directly. Agent requests may be sent to admin@palmbld.com. Verification: To protect your information, we will verify your identity before responding to Right to Know, Delete, or Correct requests. Verification typically requires you to confirm information we already have on file. Notice of Financial Incentive: We do not offer financial incentives or price/service differences in exchange for personal information. Minors: We do not knowingly sell or share the personal information of individuals under 16 years of age.

Other US State Privacy Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, Nebraska, New Jersey, New Hampshire, Kentucky, Rhode Island, Minnesota, Maryland, Indiana, or another US state with a comprehensive consumer privacy law, you may have rights similar to those described above, including: • The right to confirm whether we process your personal data and to access that data • The right to correct inaccuracies • The right to delete personal data • The right to obtain a portable copy of personal data • The right to opt out of (i) targeted advertising, (ii) the sale of personal data, and (iii) profiling in furtherance of decisions producing legal or similarly significant effects • The right to limit or opt out of the processing of sensitive data (such as data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data, precise geolocation, or data of a known child) We do not sell personal data for money, we do not knowingly process sensitive data without consent, and we do not use profiling to produce legal or similarly significant decisions about you. How to Submit a Request: See "Your Choices and Rights" and "How to Exercise CCPA Rights" above. In the message, please identify your state of residence so we can apply the correct process and timelines. We honor the Global Privacy Control (GPC) as an opt-out preference signal where required (currently including California and Colorado). Appeals: If we deny your request in whole or in part, you have the right to appeal. To appeal, reply to our decision or email admin@palmbld.com with the subject "Privacy Appeal" within 45 days of our response. We will respond in writing within the timeframe required by your state's law (typically 45-60 days), explaining our decision and any actions taken. If you disagree with the outcome of the appeal, you may contact the attorney general of your state.

Florida Digital Bill of Rights

The Florida Digital Bill of Rights (Fla. Stat. §501.701 et seq.) applies to controllers that meet specific gross-revenue and processing thresholds. Palm Build does not believe it meets those thresholds and therefore is not currently a "controller" subject to the FDBR. Regardless, Florida residents may exercise the rights described in "Your Choices and Rights" and "Other US State Privacy Rights" above, and Palm Build will respond in good faith.

GDPR / UK GDPR (Visitors from the European Economic Area and United Kingdom)

Palm Build is a US-based company that provides Services in the United States. Our website is directed at users in the United States. To the extent the General Data Protection Regulation ("GDPR") or the UK GDPR applies to our processing of your personal data (for example, because you access our website from the EEA, UK, or Switzerland and we process your personal data in that context), the following applies. Controller: Palm Build, 786 S Military Trail, Deerfield Beach, FL 33442, USA. Contact: admin@palmbld.com. Lawful Bases: We rely on the following lawful bases: (a) performance of a contract with you (to provide Services you have requested and to communicate about them); (b) our legitimate interests (to operate and improve our website, provide customer service, ensure security, prevent fraud, and market our Services in a proportionate way, subject to your rights and interests); (c) compliance with legal obligations (tax, insurance, safety, and construction laws); (d) consent, where required (for example, non-essential cookies and marketing texts); and (e) protection of vital interests in emergency situations. Your GDPR Rights: You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You have the right to lodge a complaint with your local supervisory authority. In the UK, that is the Information Commissioner's Office (www.ico.org.uk). International Transfers: Personal data will be transferred to and processed in the United States. Where required, we rely on standard contractual clauses or other appropriate safeguards for such transfers. EU/UK Representative: Palm Build is not currently required to appoint an EU or UK representative under Article 27 of the GDPR because we do not offer Services to individuals in the EU or UK on a regular basis and our processing of EU/UK personal data is incidental. If this changes we will update this Policy. To Exercise GDPR Rights: Email admin@palmbld.com with the subject "GDPR Request."

Do Not Contact / Suppression Requests

You may request that Palm Build permanently suppress your contact information across all marketing channels — including SMS, email, phone, and direct mail — by: • Emailing admin@palmbld.com with the request "Do Not Contact" and identifying the phone number(s), email address(es), and mailing address(es) to be suppressed • Calling (888) 245-5155 • Replying STOP to any marketing SMS (SMS-only suppression) • Clicking the "unsubscribe" link at the bottom of a marketing email (email-only suppression) Suppression requests are honored across our systems, subject to a short administrative processing window. We retain a minimal record of the suppression request indefinitely so that we can continue to honor it. Transactional and safety messages related to active or past projects may still be sent as necessary.

Children's Privacy

Our services are not directed to children, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it as required by the Children's Online Privacy Protection Act ("COPPA"). Additionally, we do not knowingly sell or share the personal information of any individual under 16 years of age without the consent required by applicable law. If you believe a child has provided information to us, please contact admin@palmbld.com and we will investigate and delete the information as appropriate.

Employees, Applicants, and Contractors

This Privacy Policy is directed at users of our website and customers of our Services. Personal information provided by job applicants, employees, and independent contractors in connection with employment, hiring, or engagement is handled separately in accordance with our internal HR policies and applicable employment and privacy laws. Applicants and employees may request additional information about our HR data practices by contacting admin@palmbld.com.

International Use

We operate in the United States. All information is processed in the U.S. If you access our services from outside the U.S.: • You consent to transferring your information to the U.S. • U.S. data protection rules may differ from your country's rules

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top shows when we last revised this Policy. How You'll Know About Changes: • Material changes will be posted on this page with a prominent notice • We may also notify you through our services (for example, by email or in-app notification) where appropriate Continued use of the Services after the effective date of a change constitutes acceptance of the updated Policy.

Contact Us — Privacy Officer

For any questions, concerns, or requests related to this Privacy Policy or your personal information, please contact our Privacy Officer: Palm Build Attn: Privacy Officer 786 S Military Trail Deerfield Beach, FL 33442 Phone: (888) 245-5155 | FL: (754) 600-3369 | NC: (704) 464-0121 Email: admin@palmbld.com Response Times: We will acknowledge privacy requests promptly and respond within the timeframes required by applicable law (typically 30-45 days, with a permitted extension for complex requests).