Privacy Policy

Last Updated: May 11, 2026

Introduction

GSS Builders LLC (“we,” “us,” or “our”) is a luxury custom home builder located at 6723 Curran Street, McLean, Virginia 22101. We are committed to protecting your personal information and your right to privacy under applicable law, including the Virginia Consumer Data Protection Act (CDPA), Va. Code Ann. §§ 59.1-575 et seq.

This Privacy Policy explains what information we collect through our website at gssbuilders.com, how we use it, your rights as a Virginia consumer, and how to contact us with questions or requests. By using our website or contacting us, you agree to the practices described herein.

Information We Collect

We collect only the personal data that is adequate, relevant, and reasonably necessary for the purposes described in this policy. The categories of personal data we may collect include:

Contact and identification data: Name, email address, phone number, and mailing address — provided when you fill out a contact form, schedule a consultation, or reach out to us directly.
Project inquiry data: Preferences about home design, location, budget range, and project specifications — provided voluntarily to help us understand your custom home needs.
Usage and technical data: IP address, browser type, operating system, pages visited, referring URLs, and time spent on pages — collected automatically through cookies and analytics tools to optimize website performance.
Communications data: Records of emails, phone calls, and messages exchanged with our team in the course of business inquiries.

We do not intentionally collect sensitive personal data (such as racial/ethnic origin, health information, biometric data, or precise geolocation data) through this website. If any such data is inadvertently submitted, we will delete it promptly upon discovery.

How We Use Your Data

We process your personal data only for the following disclosed purposes, in accordance with § 59.1-578 of the Virginia CDPA:

Responding to inquiries: To reply to consultation requests, home-building inquiries, and scheduling requests submitted via our website or email.
Project communication: To communicate with prospective and current clients about custom home projects, timelines, specifications, and related services.
Website analytics: To analyze aggregated website traffic patterns, improve our website experience, and understand how visitors navigate our content using analytics services (e.g., Google Analytics or similar tools).
Legal and compliance obligations: To comply with applicable federal and Virginia state laws, respond to legal processes, and enforce our agreements.
Business operations: For internal record-keeping, business administration, and follow-up communications with interested clients.

We will not process your data for purposes that are incompatible with those disclosed above without first obtaining your consent, as required by § 59.1-578(A)(2).

We do not sell your personal data to third parties. We may share your personal data with the following categories of recipients only as necessary to operate our business and fulfill the purposes disclosed in this policy:

Service providers (processors): Website hosting providers, email platforms, customer relationship management (CRM) systems, and analytics services that process data on our behalf under contractual obligations consistent with § 59.1-579 of the CDPA.
Professional advisors: Attorneys, accountants, or insurers when legally required or for business protection purposes.
Legal authorities: Government bodies, law enforcement, or courts when required by law, court order, or to protect our legal rights.
Business transfers: In the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction, with continued privacy protections.

All third-party processors are contractually required to use your data only for the specific purposes we have authorized and to maintain appropriate security measures.

Data Sales & Targeted Advertising

As required by § 59.1-578(D) of the Virginia CDPA, we clearly disclose the following:

Sale of personal data: We do not sell personal data to third parties for monetary consideration.
Targeted advertising: Our website may use analytics tools (such as Google Analytics) that collect behavioral data across websites to analyze usage. We do not currently engage in third-party targeted advertising campaigns directed at individual consumers based on cross-site behavioral data. If this practice changes, we will update this policy and provide an opt-out mechanism as required by law.
Profiling: We do not use automated profiling that produces legal or similarly significant effects concerning consumers.

Your Virginia CDPA Rights

If you are a Virginia resident acting in an individual or household context, you have the following rights under the Virginia Consumer Data Protection Act (Va. Code Ann. § 59.1-577). You may invoke these rights at any time by submitting a request to us using the contact information below.

Right to Access

Confirm whether we process your personal data and request a copy of the data we hold about you.

Right to Correct

Request correction of inaccuracies in your personal data, taking into account the nature and purpose of processing.

Right to Delete

Request deletion of personal data provided by or obtained about you, subject to legal retention obligations.

Right to Portability

Obtain a portable copy of your personal data in a readily usable format to transmit to another controller.

Right to Opt Out

Opt out of the processing of your personal data for targeted advertising, sale of personal data, or profiling with significant effects.

Right to Appeal

Appeal our decision if we decline to act on your request, within a reasonable timeframe after receiving our response.

We will respond to your authenticated request within 45 days of receipt, with a possible 45-day extension if necessary and with advance notice to you. We will provide this service free of charge up to twice annually. If we decline to take action, we will explain our reasons and provide instructions to appeal our decision.

To appeal a denied request, please contact us in writing. If your appeal is also denied, we will provide you with a link or method to submit a complaint to the Virginia Attorney General’s Office in accordance with § 59.1-577(C).

Data Security

We maintain reasonable administrative, technical, and physical data security practices designed to protect the confidentiality, integrity, and accessibility of your personal data, as required by § 59.1-578(A)(3) of the Virginia CDPA. These practices include:

Encrypted data transmission via HTTPS (SSL/TLS) across our website
Access controls limiting personal data access to authorized personnel only
Secure hosting infrastructure with industry-standard data protection practices
Regular review of our data handling procedures

While we implement these safeguards, no method of internet transmission or electronic storage is 100% secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by Virginia law (Va. Code Ann. § 18.2-186.6).

Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

Inquiry and contact data: Retained for up to 3 years after the last communication, unless a business relationship continues or legal obligations require longer retention.
Client project data: Retained for the duration of the project and up to 7 years afterward to satisfy contractual and legal obligations.
Analytics and usage data: Retained per the data retention policies of our analytics service providers (typically 14–26 months).

When personal data is no longer necessary, we securely delete or de-identify it in accordance with applicable law.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or our services. When we make material changes, we will update the “Last Updated” date at the top of this policy. We encourage you to review this page periodically.

Continued use of our website after changes are posted constitutes your acknowledgment of the updated policy. If we make changes that require your consent under the CDPA, we will seek your consent before implementing those changes.

Contact Us

To exercise your consumer rights under the Virginia CDPA, submit a privacy request, ask questions about this policy, or submit a complaint, please contact us through any of the following methods. We will respond within the timeframes required by law.