Effective date: May 28, 2026 Last updated: May 28, 2026
This Privacy Policy explains how The Locksmith Express (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit locksmithexpress.com (the “Site”) or contact us about our locksmithing products and services. Please read it carefully. If you do not agree with this Policy, please do not use the Site.
1. Who We Are
The Locksmith Express is the controller responsible for personal information collected through this Site.
- Business name: The Locksmith Express
- Address: 450 Central Avenue, Dubuque, IA 52001, USA
- Phone: (563) 556-4442
- Web contact form: /pages/contact-us/
If you have any question about this Policy or want to exercise your privacy rights, please use any of the methods above. For privacy-specific requests, mark your message “Privacy Request.”
2. Information We Collect
We collect only what we need to operate the Site, respond to your inquiries, and improve our services. Specifically:
a. Information you give us directly
- Contact form submissions: your name, email address, phone number, and the contents of your message when you fill out the contact form.
- Communications: records of phone calls, emails, or messages you send us, and our responses.
b. Information collected automatically
- Log data: our hosting provider (Cloudflare) automatically records standard request data such as IP address, user agent, referring URL, and timestamps. This data is used for security, abuse prevention, and to keep the Site online.
- Cookies and similar technologies: small files placed on your device. We use a strict, consent-first model:
- Strictly necessary cookies (always active) — store your privacy choice and support basic Site function. They do not identify you.
- Analytics cookies (off by default) — Google Analytics 4 (GA4), loaded only after you grant consent. See Section 5.
- Marketing / advertising cookies (off by default) — not currently used, but reserved for future opt-in advertising measurement. Enabling this category in Preferences also opts you in to “sale/share” of personal information under CCPA/CPRA (Section 8).
- Functional cookies (off by default) — reserved for optional personalization features.
You can change your choices at any time using the “Cookie Preferences” link in the Site footer.
c. Information we do not collect
- We do not knowingly collect information from children under 13. See Section 9.
- We do not collect government IDs, financial-account numbers, biometric identifiers, or precise geolocation through this Site.
- We do not sell personal information for money.
3. How We Use Information
We use personal information to:
- Respond to your inquiries and service requests;
- Provide quotes and schedule on-site or in-store locksmithing services;
- Maintain records of customer transactions and service history;
- Keep the Site secure, operational, and free of abuse;
- With your consent, measure aggregate Site usage (page views, traffic sources, popular content) so we can improve the Site;
- Comply with legal obligations and enforce our terms.
We do not use information collected through this Site for automated decision-making that produces legal or similarly significant effects.
4. Legal Bases for Processing (GDPR / UK GDPR)
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar rules, we rely on the following lawful bases:
| Purpose | Lawful basis |
|---|---|
| Responding to your inquiries and providing services | Performance of a contract or pre-contractual steps (Art. 6(1)(b)) |
| Security, abuse prevention, log retention | Legitimate interests in operating a secure Site (Art. 6(1)(f)) |
| Analytics cookies, marketing cookies | Your explicit consent (Art. 6(1)(a)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw analytics or marketing consent, open Cookie Preferences in the footer and toggle the relevant category off, then save.
5. Google Analytics 4
When — and only when — you grant Analytics consent:
- We load the Google Analytics 4 (GA4) tag from
googletagmanager.com. - GA4 sets cookies (e.g.,
_ga,_ga_<id>) to measure traffic, sessions, and on-page behavior. - We have enabled IP anonymization, Google Consent Mode v2, ads data redaction by default, and URL passthrough, so that no advertising identifiers are sent unless you explicitly opt in to Marketing as well.
- Google acts as a processor on our behalf, but also processes some data as an independent controller for its own product improvement under its own terms. See Google’s privacy notice at https://policies.google.com/privacy.
- GA4 transfers data to the United States. Where required, transfers from the EEA/UK rely on Google’s Standard Contractual Clauses and additional safeguards.
If you do not grant Analytics consent, no GA4 script is loaded and no analytics cookies are set.
6. How We Share Information
We share personal information only as described below:
- Service providers (processors) who help us operate the Site or the business — for example, our hosting provider (Cloudflare), and, where you have consented, Google Analytics. These providers are contractually limited to using the data only to provide their service to us.
- Legal and safety disclosures when required by law, valid legal process, or to protect the rights, safety, or property of The Locksmith Express, our customers, or the public.
- Business transfers if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, in which case appropriate confidentiality and successor-controller protections will apply.
We do not sell personal information for money. If you enable the Marketing cookie category in Cookie Preferences, the resulting cross-context behavioral data sharing with advertising providers may qualify as “sale” or “sharing” under California law; see Section 8.
7. Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including providing the products and services you request, responding to your inquiries, maintaining reasonable business and transaction records, resolving disputes, enforcing our agreements, and complying with applicable legal, tax, accounting, warranty, and regulatory obligations. The criteria we use to determine retention include: the nature and sensitivity of the information; the purpose for which it was collected; whether an ongoing customer or business relationship exists; and the applicable statutory or contractual record-keeping requirements.
When information is no longer needed, we delete or anonymize it. Analytics data (when you have consented) is retained per the data-retention setting in our Google Analytics property and is then automatically deleted by Google; aggregated, non-identifying reports may be kept longer. Your cookie-consent choice is stored locally in your browser, not on our servers, until you clear it or change it.
8. Your Privacy Rights
You have rights over your personal information. Some apply to everyone; others depend on where you live. To exercise any right, contact us using the methods in Section 1.
a. Rights for residents of the EEA, UK, and Switzerland (GDPR / UK GDPR)
- Access a copy of the personal information we hold about you;
- Rectify inaccurate or incomplete information;
- Erase your information (“right to be forgotten”) where applicable;
- Restrict or object to certain processing, including processing based on legitimate interests;
- Data portability — receive your information in a structured, commonly used, machine-readable format;
- Withdraw consent at any time (Section 4);
- Lodge a complaint with your local supervisory authority. In the EEA you can find your authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en; in the UK, the Information Commissioner’s Office at https://ico.org.uk/.
b. Rights for California residents (CCPA / CPRA)
You have the right to:
- Know what categories and specific pieces of personal information we have collected about you, the sources, purposes, and categories of third parties with whom we share it;
- Delete personal information we have collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of “sale” or “sharing” of personal information for cross-context behavioral advertising;
- Limit the use and disclosure of sensitive personal information (we do not currently use sensitive PI for purposes that would trigger this right, but you may still submit a request);
- Non-discrimination — we will not deny goods or services, charge a different price, or provide a different level of quality because you exercised a privacy right.
To opt out of “sale/share,” click “Do Not Sell or Share My Personal Information” in the Site footer, or toggle Marketing off in Cookie Preferences and save. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request for that browser/device.
You may designate an authorized agent to make a request on your behalf; we will require reasonable proof of authorization and may verify your identity directly.
c. Rights for residents of other U.S. states with comprehensive privacy laws
(e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, and others) You generally have analogous rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling. To exercise any of these rights, contact us using the methods in Section 1.
d. Verification and response times
We will verify your identity using information already on file (such as your name, email, and phone number) before fulfilling rights requests. We respond within the time required by applicable law (generally 45 days under CCPA, 30 days under GDPR), and may extend once where permitted, with notice to you. There is no fee for reasonable requests.
9. Children’s Privacy
This Site is intended for adults seeking locksmithing products and services. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us with personal information, contact us and we will delete it.
10. Do Not Track and Global Privacy Control
Because there is no industry consensus on how to interpret “Do Not Track” (DNT) browser signals, we do not respond to DNT. We do treat the Global Privacy Control (GPC) signal as a valid CCPA/CPRA opt-out of sale/share for the browser sending the signal.
11. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, misuse, and unauthorized access. The Site is served over HTTPS. No method of transmission or storage is 100% secure; if you believe your interaction with us is no longer secure, please contact us immediately.
12. International Transfers
The Site is operated from the United States. If you access it from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where we or our service providers operate. Where required, we rely on appropriate transfer mechanisms (such as the European Commission’s Standard Contractual Clauses) and additional safeguards.
13. Third-Party Links
The Site may link to third-party websites. We are not responsible for the content or privacy practices of those sites. Review their policies before providing any personal information.
14. Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top. Material changes will be highlighted on the Site or communicated by other reasonable means. If we materially expand our use of cookies or change consent categories, we will re-prompt for consent.
15. Contact Us
For questions, complaints, or to exercise any privacy right, contact us:
- Mail: The Locksmith Express, 450 Central Avenue, Dubuque, IA 52001
- Phone: (563) 556-4442
- Web form: /pages/contact-us/ — please write “Privacy Request” in the subject or first line.
You can manage your cookie choices at any time by clicking “Cookie Preferences” in the footer of any page.