Privacy Policy

Who we are

Mid Atlantic Heater & Control ("MAHC," "we") is a thermal systems integrator at 299 Gossett Road, Spartanburg, SC 29307. This site is operated by MAHC from the United States. Questions about this policy can go to sales@mahc.com or (864) 579-7144.

What we collect

• Information you send us. When you use the contact form we receive your name, email address, company, phone number, topic and message.
• Anti-spam data. Your IP address and the time of the submission are recorded with each message so we can block automated abuse, and Google reCAPTCHA checks that the form was filled in by a person.
• Server logs. Our web host keeps standard access logs (IP address, browser, referring page, timestamp) used only to run and secure the site.
• Live chat. If you use the chat widget, the chat provider processes the messages you exchange with us.

We do not use advertising or analytics trackers, we do not build profiles about you, and we do not sell your personal information.

Cookies and local storage

Our own use of storage is minimal: a security cookie that protects the contact form from forged submissions (CSRF), and browser local storage that remembers that you closed the notice banner at the bottom of this site. The third-party services above (Google reCAPTCHA, the chat widget) may also set their own cookies on your browser under their own policies.

Why we use it — legal bases

We use your information to answer your inquiry and prepare the quote you asked for (performance of a contract and its preparation), to keep the site working and free of spam (legitimate interest), and — for chat and spam-checking services — on the basis of your acknowledgment of the notice banner. If you decline, simply avoid the chat widget and email us directly instead.

Who we share it with

Only service providers that process data for us under contract: our hosting provider (Linode, USA), our email delivery provider (Mailgun, USA) and the chat provider. These are "service providers" in California terms — sharing for a business purpose only. No data is sold, shared for cross-context behavioral advertising, or used to target ads to you.

How long we keep it

Contact messages stay in our database until the relationship they belong to is finished or you ask us to delete them. Server logs are rotated regularly and kept no longer than needed for security.

Your rights

• Access, correction, deletion. Ask us for a copy of what we hold about you, fix it, or have it deleted.
• Opt out of sale or sharing. There is nothing to opt out of — we do not sell or share personal information for advertising.
• Objection, restriction, portability. Residents of the EU/UK have these rights under the GDPR; email us and we will honor them.
• No discrimination. Exercising your rights will never affect the prices or service you get from us.
• Agents. You may designate an authorized agent in writing to make a request for you; we will verify both of you.

We respond to verifiable requests within 45 days. California residents may also contact the California Privacy Protection Agency; EU/UK residents may lodge a complaint with their supervisory authority.

International visitors

This company is U.S.-based and this site is hosted in the United States. Visitors from the EEA, UK or Switzerland should note that their information will be processed in the United States, with our providers relying on standard contractual clauses where needed.

Children

This site is intended for business users and we do not knowingly collect information from anyone under 16.

Changes to this policy

If we make a material change we will update the date below and, where appropriate, the notice banner. This policy is effective September 29, 2026.