Privacy Policy

1. Entity Scope, Regulatory Licensing & Jurisdiction

This Privacy Policy governs the collection, processing, storage, and protection of personal data by National Design & Contracting Corp (doing business as NDCCNY, referred to herein as "NDCCNY," "we," "our," or "us"). We operate as a licensed Home Improvement Contractor in the City of New York under Department of Consumer and Worker Protection (DCWP) License Number #2127843-DCWP, with principal operations located at 96 Ada Dr, Staten Island, NY 10314.

This policy applies to all personal information submitted through our official website (https://ndccny.com), telephone communications, on-site structural consultations, project estimation forms, architectural filings, and contractual agreements across Staten Island, Brooklyn, Queens, Manhattan, and the Bronx.

2. Categories of Information We Collect

In order to deliver general contracting, masonry, concrete flatwork, driveway pavers, structural lintel replacement, waterproofing, and remodeling services, NDCCNY collects the following classes of information:

A. Personal Identification & Contact Information

• Full legal name and authorized representative designations.
• Property street address, borough, state, and postal code.
• Billing and correspondence addresses (if different from project location).
• Primary telephone numbers (mobile and landline) and electronic mail addresses.

B. Property, Structural & Engineering Specifications

• New York City Tax Map parcel identifiers, including Borough-Block-Lot (BBL) numbers.
• Architectural blueprints, site surveys, structural drawings, and engineering calculations.
• Property photographs and site images depicting facade cracking, mortar joint deterioration, sidewalk displacements, parapet conditions, or driveway foundations.
• Historical building specifications, landmark designations (where applicable under NYC LPC rules), and existing permit histories.

C. Municipal Regulatory & Violation Records

• NYC Department of Transportation (DOT) Sidewalk Notice of Violation records, summons numbers, and inspection deficiency lists.
• NYC Department of Buildings (DOB) Environmental Control Board (ECB) violations, stop-work orders, or facade compliance notices submitted to us by property owners for professional resolution.

D. Financial & Payment Records

• Records of contract deposits, milestone progress payments, and final retainage payments.
• Billing receipts, invoices, and payment confirmations. Note: We do not store raw credit card numbers or banking account credentials on our web servers; all digital transactions are routed through Level-1 PCI-DSS compliant financial merchant gateways.

E. Automated Technical & Device Analytics

• Internet Protocol (IP) address, approximate geographic location (city level), internet service provider, and network routing telemetry.
• Browser identity, device operating system, screen dimensions, language preferences, and referring URLs.
• Interaction telemetry, including pages viewed, session durations, click paths, and form submission timestamps.

3. Methods of Data Collection

We collect information through multiple verified interaction touchpoints:

• Direct Consumer Inquiries: Submitting estimate requests via our web contact forms, calling our dedicated line at (347) 335-5005, or sending direct electronic correspondence to contact@ndccny.com.
• On-Site Structural Consultations: In-person property inspections conducted by founder Adeel Cheema or senior field supervisors, during which measurements, soil conditions, and site photographs are documented.
• Contract Execution: Formal signing of home improvement contracts, change orders, work authorizations, and lien waiver documentation.
• Public Municipal Archives: Accessing public land and property records via the NYC Department of Finance (ACRIS), NYC DOB Building Information System (BIS/DOB NOW), and NYC Open Data portals to verify property boundaries and existing filings.
• Automated Web Technologies: First-party cookies, tracking tags, and server access logs operating during website visits.

4. Permitted Purposes & Legal Grounds for Data Processing

NDCCNY processes customer data solely for lawful, legitimate business operations directly associated with residential and commercial construction services:

• Detailed Project Estimation: Calculating accurate labor hours, material volumes, equipment rental needs, and carting requirements.
• Filing Municipal Permits: Preparing and submitting formal permit applications to the NYC Department of Buildings (DOB NOW) and NYC Department of Transportation (DOT Permits for street openings, curb cuts, and sidewalk reconstruction).
• Contractual Execution & Field Operations: Coordinating crew scheduling, dispatching commercial mixers, staging material deliveries, and supervising site safety.
• Quality Assurance & Warranty Administration: Maintaining photographic records of work in progress, foundation depth verifications, and completed masonry to support our multi-year workmanship guarantees.
• Statutory Compliance & Recordkeeping: Fulfilling record-retention mandates established under New York General Business Law, the NYC Administrative Code, and DCWP home improvement regulations.

5. Absolute Zero Data Sale Guarantee

6. Third-Party Disclosures & Agency Interactions

We share information only with trusted third parties strictly necessary to execute your project or fulfill legal mandates:

• NYC Municipal Regulatory Agencies: We transmit property documents, surveys, and contractor certifications to the NYC Department of Buildings (DOB), NYC Department of Transportation (DOT), NYC Landmarks Preservation Commission (LPC), and NYC Department of Consumer and Worker Protection (DCWP) for permitting, special inspections, and violation sign-offs.
• Licensed Design Professionals: Registered New York State Professional Engineers (PE) and Registered Architects (RA) retained to produce structural drawings, foundation stabilization designs, or NYC building code compliance filings.
• Expediting & Permit Handlers: Specialized New York City filing expediters registered with the DOB to manage plan examiner submissions and permit issuance.
• Certified Subcontractors & Suppliers: Vetted material suppliers (concrete batch plants, brick yards, stone quarries) and specialized equipment operators (e.g. licensed crane operators or scaffolding riggers) requiring site address details for material delivery and staging.
• Financial Institutions & Payment Processors: Merchant processors and banks for authorizing secure electronic transactions and processing project milestone payments.
• Legal & Law Enforcement Compliance: Disclosures strictly required to comply with a valid court order, judicial subpoena, statutory audit, or to defend NDCCNY in formal legal disputes.

7. New York SHIELD Act Data Security Safeguards

Under the New York Stop Hacks and Improve Electronic Data Security Act (NY SHIELD Act), NDCCNY maintains a comprehensive data security program incorporating reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of private customer data:

• Administrative Safeguards: Designating designated privacy coordinators overseeing compliance with state and municipal standards, restricting access to customer files and financial documentation strictly to authorized personnel with a legitimate operational need, and conducting routine staff reviews regarding cybersecurity awareness and phishing prevention.
• Technical Safeguards: Enforcing modern 256-bit SSL/TLS encryption for all data transmitted across ndccny.com, enterprise-grade web application firewalls (WAF) blocking brute-force attacks and injection vulnerabilities, and strong multi-factor authentication protocols for administrative accounts.
• Physical Safeguards: Restricting physical access to office archives, hardcopy project folders, and printed architectural sets located at 96 Ada Dr, Staten Island, and cross-cut shredding of physical drafts, credit receipts, and obsolete project notes.

8. Data Retention & Project Record Custody

We retain customer and project records for durations defined by statutory obligations, tax regulations, and practical construction warranty administration:

• Executed Contracts & Milestone Invoices: Retained for a minimum of seven (7) years in accordance with New York Civil Practice Law and Rules (CPLR § 213) governing breach of contract limitations, IRS accounting rules, and New York State Department of Taxation requirements.
• Municipal Permits & Sign-Off Certificates: Retained indefinitely in our project archives to support homeowner title transfers, property refinancing, and future DOB/DOT inspection verifications.
• Workmanship & Warranty Documentation: Maintained for the full duration of any applicable written warranty covering masonry, concrete, or roofing installations.
• Unaccepted Estimation Inquiries: Estimate submissions that do not progress to an active project or executed contract are securely archived and purged within twenty-four (24) months.

9. Cookies, Web Beacons & Digital Analytics

Our website utilizes standard industry cookies and analytical technologies to optimize browsing speeds, maintain session continuity, and evaluate website performance across the five NYC boroughs:

• Strictly Necessary Cookies: Essential for platform navigation, security verification, and form submission integrity. These cookies do not require prior consent and cannot be switched off in our systems.
• Performance & Analytics Cookies: We utilize Google Analytics to understand aggregate visitor patterns, such as which masonry guides or service areas receive high consumer interest. Google Analytics collects anonymized IP addresses and device parameters. No direct personal identifiers (e.g. your full name or phone number) are transmitted to Google Analytics.

You retain full discretion to disable or clear cookies through your web browser preferences (Google Chrome, Apple Safari, Mozilla Firefox, or Microsoft Edge). Please note that disabling cookies may affect interactive elements of the website.

10. Communications Policy, TCPA Compliance & SMS Opt-Out

By providing your telephone number through our contact form, estimate request, or direct inquiry, you consent to receive direct communications from NDCCNY regarding your project. In compliance with the Telephone Consumer Protection Act (TCPA):

• Communications are strictly limited to estimate scheduling, site inspection coordination, weather-related job delays, permit updates, and customer service follow-ups.
• We do NOT use automated robodialers or unsolicited mass commercial broadcasts.
• You may opt out of SMS text communications at any time by replying "STOP" to any text message, or by emailing contact@ndccny.com with the subject line "SMS Opt-Out."

11. Your Privacy Rights Under New York Law

Property owners and consumers interacting with NDCCNY hold the following rights regarding their personal data on file:

• Right to Review & Access: You may request an itemized summary of all personal information, project files, and permit documentation associated with your account.
• Right to Rectification: If any property address, legal name, or contact detail is inaccurate or outdated, you have the right to request prompt correction.
• Right to Request Deletion: You may request the erasure of your personal data, subject to statutory exceptions where retention is legally required for tax compliance, building code warranty defense, municipal record permits, or ongoing litigation.
• Right to Non-Discrimination: We will never deny service, assess price surcharges, or alter the quality of our craftsmanship should you exercise any of your privacy rights.

To exercise any privacy right, submit a written inquiry to our compliance team at contact@ndccny.com or via postal mail to our Staten Island office.

12. Children's Online Privacy Protection (COPPA)

Our services and website are directed exclusively to adults, residential homeowners, property managers, and commercial building owners aged eighteen (18) and older. We do not knowingly solicit or collect personal information from individuals under the age of thirteen (13). If we discover that an individual under thirteen has submitted personal data to us, we will immediately delete that information from our active records.

13. Policy Amendments & Revision Notifications

NDCCNY reserves the right to amend or update this Privacy Policy periodically to reflect changes in our operational procedures, municipal regulatory adjustments (NYC DOB/DCWP), or updated state and federal data privacy legislation. When revisions occur, we will update the "Effective Date" timestamp prominently displayed at the top and bottom of this document.

14. Contact Information & Data Compliance Officer

For questions, legal notices, or inquiries regarding this Privacy Policy or our data security practices, please contact our designated privacy officer directly: