Privacy Policy — CedarsHVAC.com
CedarsHVAC.com is a registered DBA (doing-business-as) name of Benavente Ventures LLC, a Florida limited liability company (collectively, “we,” “us,” “our,” or “CedarsHVAC.com”). This Privacy Policy explains how we collect, use, share, and protect personal information when you visit cedarshvac.com (the “Site”), place an order, contact us, or otherwise interact with our business.
By using the Site, you agree to the terms of this Privacy Policy.
1. Who We Are
Legal Entity: Benavente Ventures LLC
DBA / Trade Name: CedarsHVAC.com
Business Address: 10737 SW 104th St #1, Miami, FL 33176
Contact Email: [email protected]
Phone: (305) 850-6693
2. Information We Collect
We collect the following categories of information:
Information you provide to us:
– Name, billing address, shipping address
– Email address and phone number
– Payment information (processed by our payment providers — we do not store full card numbers on our servers)
– Order history and product preferences
– Communications you send to our support team
– Account login credentials (if you create an account)
– Reviews, ratings, and other content you submit
Information collected automatically:
– IP address, browser type, device identifiers, operating system
– Pages visited, links clicked, time on site, referring URL
– Cookies and similar tracking technologies
– Approximate geographic location based on IP
Information from third parties:
– Order and fulfillment data from suppliers and shipping carriers
– Fraud-screening data from our payment processors
– Analytics data from Google Analytics and Google Tag Manager
3. How We Use Your Information
We use the information we collect to:
- Process, fulfill, and ship your orders
- Communicate with you about orders, returns, support requests, and shipping
- Authenticate your account and prevent fraud
- Send marketing emails (only if you opt in — you can unsubscribe at any time)
- Improve our Site, products, and customer service
- Comply with legal obligations including tax, accounting, and consumer-protection laws
- Enforce our Terms and Conditions and protect our legal rights
4. Payment Processing and Security
We do not store full credit card numbers on our servers.
All payment transactions are processed by PCI-DSS compliant third-party payment processors, including:
- PayPal (and PayPal-owned services such as Braintree, when applicable)
- Stripe (via WooCommerce Payments)
- Afterpay (for buy-now-pay-later purchases)
When you submit payment information at checkout, that information is transmitted directly to the payment processor over a 256-bit SSL/TLS encrypted connection. We receive only a transaction confirmation, the last 4 digits of your card (for reference), and a tokenized reference ID — never your full card number or CVV.
Site security measures we maintain:
- HTTPS / SSL encryption sitewide (TLS 1.2 or higher) — your connection to cedarshvac.com is encrypted from the moment you arrive
- PCI-DSS compliant payment infrastructure — all card data is handled by PCI-DSS Level 1 providers (PayPal, Stripe)
- Cloudflare web application firewall (WAF) filtering malicious traffic and bot attacks
- Strong administrative access controls including limited admin accounts and strong-password requirements
- Regular security monitoring for unauthorized access attempts
- Encrypted database storage for customer records
While no system is 100% impenetrable, we use commercially reasonable, industry-standard safeguards to protect your information.
5. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged into your account
- Remember items in your shopping cart
- Measure site performance and traffic patterns (Google Analytics)
- Improve the user experience
- Deliver relevant marketing (only with your consent where required)
You can disable cookies in your browser settings, but parts of the Site (including checkout) may not work properly without them.
6. How We Share Your Information
We share personal information only as needed to operate our business:
- Payment processors (PayPal, Stripe, Afterpay) — to process payments
- Shipping carriers (UPS, FedEx, USPS, freight carriers) — to deliver orders
- Suppliers / drop-ship partners — to fulfill orders we don’t ship from our own warehouse
- Service providers that host our site, send our emails, or provide analytics
- Legal authorities when required by valid subpoena, court order, or law
- Successors in the event of a merger, acquisition, or sale of business assets
We do not sell your personal information to third parties.
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your personal information (subject to legal record-keeping obligations)
- Opt out of marketing communications
- Request a portable copy of your data
- Lodge a complaint with a data-protection authority
California residents (CCPA / CPRA): You have the right to know what categories of personal information we collect, the right to delete personal information, the right to opt out of the “sale” or “sharing” of personal information (we do not sell or share for cross-context behavioral advertising), and the right to non-discrimination for exercising these rights.
EU / UK residents (GDPR): Our lawful bases for processing are contract performance (orders), legitimate interests (site security, fraud prevention, customer service), legal obligation (tax, accounting), and consent (marketing). You have the right to access, rectify, erase, restrict, port, and object to processing of your data.
To exercise any of these rights, email [email protected] with the subject line “Privacy Request.” We respond within 30 days.
8. Data Retention
We retain personal information only as long as needed to:
- Fulfill your orders and provide customer service (typically the life of your account plus 4 years)
- Comply with tax, accounting, and audit obligations (typically 7 years)
- Resolve disputes and enforce agreements
When data is no longer needed, we delete or anonymize it.
9. Children’s Privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact [email protected] and we will delete it.
10. International Transfers
We are based in the United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the U.S. By using the Site, you consent to this transfer.
11. Third-Party Links
Our Site may link to third-party websites. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email or by prominent notice on the Site.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact:
CedarsHVAC.com (a DBA of Benavente Ventures LLC)
10737 SW 104th St #1
Miami, FL 33176
Email: [email protected]
Phone: (305) 850-6693
Hours: Monday–Friday, 9:00 AM – 6:00 PM ET