Last Updated: March 6, 2026
Applicability
This Privacy Policy applies to all divisions of The CHE Companies, including CHE Residential (Custom Home Exteriors, LLC & CHE SC, LLC), CHE Commercial & Multifamily (CHE Commercial, LLC), CHE Signature Division, and Cornerstone Exterior Remodeling (a dba of Custom Home Exteriors, LLC) (collectively, “the Company,” “we,” “our,” or “us”). It governs how we collect, use, disclose, and safeguard personal information across all business operations, digital platforms, and communications.
1. Information We Collect
1.1 Personal Information Provided Directly
We collect personal information that you voluntarily provide to us in the course of doing business, including but not limited to:
- Full name, mailing address, email address, and phone number(s)
- Property address and project details related to exterior construction services
- Payment and billing information, including credit/debit card numbers, bank account details, and invoicing data
- Employment-related data for employees and subcontractors, such as Social Security numbers, tax identification numbers, driver’s license information, work authorization documents, and emergency contacts
- Contractual documents, signatures, and related correspondence
- Customer feedback, reviews, and communications submitted through any channel
1.2 Information Collected Automatically
When you interact with our websites, digital platforms, or communication systems, we may automatically collect:
- IP address, browser type and version, operating system, and device identifiers
- Pages visited, time spent on pages, referring URLs, and clickstream data
- Cookie data, pixel tags, and similar tracking technologies (see Section 8)
- Geolocation data derived from your IP address or device settings
1.3 Information from Third Parties
We may receive personal information from third-party sources, including:
- Production homebuilders and general contractors with whom we partner
- Lead generation platforms and referral partners
- Background check and employment screening providers
- Credit reporting agencies (for payment or financing purposes)
1.4 CRM and Business Systems Data
We use Leap CRM and related business management tools across our divisions to manage customer relationships, project workflows, and sales pipelines. Information entered into these systems—including contact details, project notes, estimates, contracts, and communication records—is stored and processed in accordance with this policy.
2. How We Use Your Information
We use the personal information we collect for the following purposes:
- Providing, managing, and improving our exterior construction services across all divisions
- Processing payments, generating invoices, and managing financial transactions
- Communicating with you regarding project status, scheduling, estimates, and service-related matters
- Responding to inquiries, requests, and customer service communications
- Marketing and promotional communications (where consent has been obtained or as otherwise permitted by law)
- Managing employment and subcontractor relationships, including payroll, benefits administration, and compliance
- Complying with applicable laws, regulations, and legal processes
- Protecting our rights, property, safety, and the rights of our employees, customers, and partners
- Analyzing business performance, improving operations, and developing new services
- Conducting quality assurance through call monitoring and recording (see Section 7)
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers: We share information with trusted third-party vendors who assist in our business operations, including payment processors, IT service providers, CRM platforms (such as Leap CRM), cloud storage providers, marketing agencies, and communication system providers.
Business Partners: We may share project-related information with production homebuilders, general contractors, architects, and other construction industry partners as necessary to fulfill our contractual obligations.
Employees and Subcontractors: Relevant customer and project information is shared with our employees and subcontractors on a need-to-know basis to perform their job duties.
Legal and Regulatory: We may disclose information when required by law, court order, subpoena, or governmental regulation, or when we believe disclosure is necessary to protect our legal rights, enforce our agreements, or ensure the safety of our employees, customers, or the public.
Business Transfers: In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will provide notice if your information becomes subject to a different privacy policy.
4. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to satisfy legal, accounting, and reporting requirements. Specific retention periods include:
- Customer and project records: Retained for a minimum of seven (7) years following project completion, or as required by applicable statute of limitations or warranty obligations
- Employee and subcontractor records: Retained in accordance with federal and state employment law requirements
- Financial and payment records: Retained as required by tax and accounting regulations
- Call recordings: Retained for up to twenty-four (24) months unless a longer retention is required for legal or compliance purposes
- Website analytics data: Retained for up to thirty-six (36) months
When personal information is no longer required, we securely delete or anonymize it in accordance with our data destruction procedures.
5. Data Security
We take the security of your personal information seriously. All company and customer data is stored within enterprise-grade cloud platforms that maintain SOC 2 Type II compliance, undergo regular independent security audits, and employ advanced threat detection and prevention capabilities. In addition, we implement administrative, technical, and physical safeguards to protect personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data both in transit (TLS/SSL) and at rest using AES-256 or equivalent industry-standard encryption protocols
- Role-based access controls, multi-factor authentication, and granular permission settings enforced across all data storage and business management platforms
- Regular employee training on data privacy and security best practices
- Data hosted in geographically redundant, SSAE 18-audited data centers with 24/7 monitoring, physical access controls, and disaster recovery capabilities
- Comprehensive audit logging, activity monitoring, and incident response procedures for identifying and addressing potential data breaches
While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. However, by partnering with industry-leading platform providers that invest heavily in security infrastructure and maintain rigorous compliance certifications, we are committed to maintaining a level of protection that meets or exceeds industry standards for organizations of our size and scope.
6. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information, including:
- Access: The right to request a copy of the personal information we hold about you
- Correction: The right to request that we correct inaccurate or incomplete personal information
- Deletion: The right to request deletion of your personal information, subject to legal retention requirements
- Opt-Out of Marketing: The right to opt out of receiving promotional communications from us at any time
- Data Portability: Where applicable, the right to receive your personal data in a structured, commonly used format
To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within the timeframe required by applicable law.
State-Specific Privacy Rights. Residents of certain states—including California (CCPA/CPRA), Virginia (CDPA), North Carolina, and South Carolina—may have additional privacy rights under applicable state law, including the right to know what personal information is sold or shared, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising privacy rights. We do not sell personal information. To the extent additional rights apply to you based on your state of residence, please contact us using the information in Section 12 and we will respond in accordance with applicable law.
7. Telephone Communications and Call Recording
We may record and monitor telephone calls for quality assurance, training, dispute resolution, and compliance purposes. When calls are recorded, a notification or automated disclosure will be provided at the beginning of the call. By continuing the call after such notice, you consent to the recording.
Recorded calls are stored securely within our phone system infrastructure, subject to access controls, and retained in accordance with Section 4 of this policy. Call recordings may be reviewed by authorized personnel only and are not shared with third parties except as required by law or legal process.
8. Mobile Communications, SMS/Text Messaging, and Opt-In/Opt-Out
8.1 Consent and Opt-In
By providing your mobile phone number and opting in to receive text messages or other mobile communications from The CHE Companies—whether through a web form, verbal consent, written agreement, or other method—you expressly consent to receive the following types of messages:
- Project status updates, scheduling notifications, and appointment reminders
- Estimates, invoices, and payment-related communications
- Service-related alerts and follow-up communications
- Promotional and marketing messages (only where separately consented to)
Message frequency varies based on your interactions and project activity. Message and data rates may apply. Your carrier is not liable for delayed or undelivered messages.
8.2 Opt-Out
You may opt out of receiving text messages at any time by:
- Replying STOP, UNSUBSCRIBE, or CANCEL to any text message you receive from us
- Contacting us directly using the information in Section 12
- Updating your communication preferences through our online forms or by contacting us directly
Upon receiving your opt-out request, we will cease sending text messages to your number within a reasonable timeframe (typically within 48 hours). Opting out of text messages will not affect other forms of communication unless you separately request those changes.
8.3 Opt-In for Phone Calls
By providing your phone number through any of our intake forms, lead generation channels, or direct communications, you consent to receive phone calls from The CHE Companies, including calls related to your inquiry, project, or account. You may revoke this consent at any time by contacting us using the information in Section 12 or by informing any CHE representative during a call.
8.4 No Sharing for Third-Party Marketing
We do not share, sell, or rent your mobile phone number or opt-in data to third parties for their own marketing purposes. Your mobile information is used solely for the purposes described in this policy.
9. Cookies, Tracking Technologies, and Website Analytics
Our websites use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and support our marketing efforts. The types of technologies we use include:
Essential Cookies: Required for basic site functionality, such as navigation, security, and form submissions. These cannot be disabled without affecting site performance.
Analytics Cookies: Help us understand how visitors interact with our websites by collecting anonymized usage data. We may use tools such as Google Analytics for this purpose.
Marketing/Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns across platforms.
Functional Cookies: Remember your preferences (e.g., language, region) to provide a personalized experience.
You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may limit your ability to use some features of our websites.
We may also use pixel tags, web beacons, and similar technologies in emails and on our websites to track engagement and improve our communications.
10. Children’s Privacy
Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us using the information in Section 12.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will update the “Effective Date” at the top of this policy and, where required, provide additional notice (such as a statement on our website or direct communication). We encourage you to review this policy periodically to stay informed about how we protect your information.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
| Company: | The CHE Companies |
| Address: | 1540 Mechanical Blvd, Garner, NC 27529 |
| Phone: | 919-231-7433 |
| Email: | privacy@teamche.com |