Legal
Privacy Policy
This Privacy Policy describes how Toccainvest, Inc. ("we", "us") collects, uses, and protects information when you visit toccainvest.com.
1. Information we collect
We only collect information you voluntarily provide, plus minimal anonymous analytics.
- Contact form submissions — name, email, property address, APN (optional), property type, and message. Submitted via Netlify Forms and emailed to us.
- Cookies & analytics — if you accept the cookie banner, we use Google Analytics 4 to collect anonymous usage data (pages visited, approximate location, device type, referral source). IP addresses are anonymized. We do not use advertising cookies or cross-site tracking.
- Server logs — our hosting provider (Netlify) records standard web-server logs (IP address, user agent, request timestamp) for security and uptime purposes.
2. How we use your information
- To respond to your inquiry and evaluate your property.
- To improve the website experience (aggregate analytics only).
- To protect the site from abuse and spam.
We do not sell, rent, or share your personal information with third parties for marketing purposes. Ever.
3. Third-party services
- Netlify — hosts our website and processes form submissions. Netlify Privacy Policy
- Google Analytics 4 — collects anonymous usage statistics if you accept cookies. Google Privacy Policy
4. Cookie choices
When you first visit the site, a banner asks whether to allow analytics cookies. You can accept or decline. Declining means no Google Analytics tracking. Essential cookies (session, security) are always on and contain no personal data.
To change your choice later, clear your browser's site data for toccainvest.com — the banner will appear again on your next visit.
5. Your rights (California residents — CCPA)
If you are a California resident, you have the right to:
- Know what personal information we have about you.
- Request deletion of your personal information.
- Opt out of the sale of personal information — we do not sell personal information, so this is already the default.
- Not be discriminated against for exercising these rights.
To exercise any of these rights, use the contact form and mention "Privacy Request" in your message.
6. Data retention
Contact form submissions are kept as long as the inquiry is active and for up to 3 years afterward for business records. Google Analytics data is retained for 14 months (the default). You may request earlier deletion at any time.
7. Security
The site uses HTTPS (SSL/TLS) for all connections. Form submissions are transmitted encrypted. We do not store credit card or payment information on the site.
8. Children's privacy
The site is not directed to children under 13. We do not knowingly collect personal information from children.
9. Changes to this policy
We may update this policy as the site evolves. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the homepage briefly.
10. Contact
Questions about this Privacy Policy? Use the contact form. We aim to respond within 24 hours.