Privacy Policy

1) Scope; Effective Date

This Privacy Policy describes how Metrolux Solutions Inc. ("Metrolux," "we," "us") collects, uses and discloses information through metrolux.net, it.metrolux.net and led.metrolux.net (the "Sites"). It does not apply to information collected offline or under a separate written agreement.

Metrolux is a Florida corporation with its place of business in Coral Gables, Miami-Dade County, Florida. Privacy enquiries: [email protected] or (305) 360-6023.

Effective date: September 9, 2026.

2) Information We Collect

The categories of personally identifiable information we collect through the Sites are:

• Identifiers and contact information. Only what you choose to send us: your email address, telephone number and business name when you write, call or message us. The Sites contain no form that collects them.
• Commercial information. What you tell us you are interested in. The budget tool on the IT site calculates entirely in your browser: nothing you select in it is sent to us unless you email or message us the result yourself.
• Internet activity information. Server request data inherent to delivering a web page: IP address, the resource requested, the referring page and the user agent string. Where you accept analytics, also the pages viewed, approximate city-level location, and the device and browser characteristics Google Analytics reports.
• Correspondence. The contents of what you send us in writing, by email or messaging, and the notes we write ourselves about a telephone call. We do not record calls. No recording therefore exists that could be produced under Section 6 or in response to legal process. Section 19A of the Terms says the same thing and commits us to telling you out loud, before any recording began, if that ever changed.

We do not request, and ask that you do not submit through the Sites, payment card numbers, government-issued identifiers, health information or any other sensitive category of information.

How long we keep it. The periods differ by category, and for the two categories a third party holds they are that third party's periods rather than ours:

• Correspondence stays in our mailbox and on our phones. We run no automatic deletion schedule for it, because an inquiry may resume months after it was last active. Where it became part of an engagement, it is kept with the accounting record for that engagement, for as long as tax law requires that record to exist. You can ask us to delete what we hold under Section 6.
• Server request data is held by Cloudflare under Cloudflare's own retention policy, not ours. We do not keep a separate copy and we do not build visitor profiles from it.
• Google Analytics data, where you accepted analytics, is held by Google for the periods set on our property: 2 months for event-level data and 14 months for user-level data, after which Google deletes it. The aggregated totals Google derives from it are not covered by those settings and Google keeps them. Where you never accepted, none of this data was created.
• Cookies and local storage expire on your own device on the schedule in the table in Section 3: one year for the record of your answer, two years for the Google Analytics cookies. Clearing your browser removes them sooner.

3) Cookies; Local Storage; Google Analytics

The Sites use cookies and browser local storage to collect data. No analytics cookie is set, and no request is made to Google, unless and until you accept. If you decline, or leave without answering, none is set.

Google Analytics. Where you accept, we use Google Analytics, a service provided by Google LLC, to measure how the Sites are used. Google Analytics sets the cookies listed below, receives the internet activity information described in Section 2, and processes it on our behalf and for its own purposes as described in its own terms. For a description of how Google uses information from sites that use its services, see How Google uses information from sites or apps that use our services. We do not pass information to Google that Google could recognise as personally identifiable.

Collection across other sites. Google Analytics cookies are set by Google and Google may recognise the same browser on other sites that use its services, which means a third party may collect information about your online activity over time and across different websites. Apart from Google Analytics and the embedded map described below, we do not permit any third party to collect information about your activity on the Sites.

Google Analytics Advertising Features. We have Google Signals switched on. With Google Signals active, Google Analytics collects the internet activity information described in Section 2 and, for visitors who are signed in to a Google account and have Ads Personalization turned on, associates it with information Google already holds for that account. Google states that this may include the account holder's location, search history and YouTube history, and data from sites that partner with Google. It gives us cross-device reporting and the demographics and interests reports. Our Google Analytics property is also linked to a Google Ads account; personalized advertising is disabled on that link.

How the cookies work together. The Google Analytics cookies in the table below are first-party cookies, set on our own domain. Google's advertising cookies are third-party cookies, set on Google's domains as you move around the web. Where Google Signals is active Google may read the two together, which is how a visit to our Sites can be connected to a signed-in Google account and to activity on other websites.

How to opt out. Any one of these is sufficient on its own:

• Decline when asked, or use the button at the end of this section. Nothing loads and no analytics cookie is set; Google Signals does not engage. This is the only option that stops the collection before it happens.
• Turn off Ads Personalization on your Google account at Google Ads Settings, or in the Google app on a mobile device.
• Install the Google Analytics Opt-out Browser Add-on, which stops Google Analytics on every site you visit.
• Use the Network Advertising Initiative consumer opt-out.
• Send a Global Privacy Control or Do Not Track signal from your browser. See Section 5.

Cookies set only after you accept:

Set regardless of your answer, because they exist to record and honour it, or to make the Sites work:

Embedded map. Our contact section embeds a map served by Google. It does not load until you press the button on it, or until you accept the embedded map in the cookie bar, because loading it discloses your IP address to Google. Accepting analytics alone does not load it: they are separate choices. Pressing the button records that choice in the ml_consent cookie, so you are not asked again. Our address and telephone number appear in text beside it.

You may also block or delete cookies through your browser settings. Blocking the ml_consent cookie means we cannot record your answer and will ask again.

Change your cookie choices

4) Categories of Third Parties

The categories of third parties with whom we may share personally identifiable information collected through the Sites are:

• Hosting and infrastructure providers, which serve the Sites and receive the request data described in Section 2. Cloudflare, Inc. performs this function. Cloudflare also runs its own page measurement on the Sites, which counts page views and reports them to us in aggregate. It sets no cookies, does not use local storage, and does not follow you to other websites. Because it is added by Cloudflare as the Sites are served rather than loaded into the page by us, it runs on every visit: the choice described in Section 3 does not hold it back, and neither does the Global Privacy Control signal described in Section 5, both of which govern only what our own pages load. It can be switched off only for the whole site, not for an individual visitor. A request to switch it off may be sent under Section 10; it would take effect for all visitors.
• Analytics providers, as described in Section 3. Google LLC performs this function, and only after you accept.
• Professional advisers, under a duty of confidence, where we need advice on a matter to which the information relates.

We also disclose information where required by law, subpoena or other legal process, and where necessary to establish or defend a legal claim or to investigate suspected fraud or abuse of the Sites. If Metrolux is party to a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

We do not sell personally identifiable information. Apart from the Google Analytics Advertising Features described in Section 3, we do not disclose it to third parties for their own advertising purposes.

5) Do Not Track; Global Privacy Control

Some browsers can transmit a "Do Not Track" signal, and some transmit a Global Privacy Control signal. We honour both. Where either signal is present, our pages load no analytics, do not ask you to accept any, and delete any analytics cookie already on your device. The embedded map likewise stays behind its button and never loads on its own. If you press that button, we treat it as consent for that map specifically and remember it, so you are not asked again; analytics stays off regardless. Neither signal reaches the page measurement Cloudflare adds as the Sites are served, described in Section 4; it is not loaded by our pages and is therefore outside their control.

Declining when asked, or using the button in Section 3, has the same effect.

6) Reviewing or Changing Your Information

To review, correct or delete the information you have given us, write to [email protected] and describe what you would like done. We respond within 30 days. We may require information sufficient to verify your identity before acting on a request, and we may retain what we are required to retain by law or need in order to establish or defend a legal claim.

7) Security

The Sites are served over HTTPS only: what passes between your browser and us is encrypted. Nothing you do in the budget tool is submitted to us: it calculates in your browser, and the buttons under the result hand the text to your own messaging or mail app. From that point the message is protected by that channel and not by the Sites. WhatsApp is encrypted end to end; a text message is readable by the mobile network that carries it; email between providers is usually encrypted in transit but not guaranteed to be. Do not send sensitive information through any of them. No method of transmission or storage is completely secure. Where a security breach affecting personal information requires notification, we provide it within the period and to the persons and authorities that Florida law requires.

8) Children

The Sites offer business services, are not directed to children, and we do not knowingly collect information from a child under 13. If you believe a child has provided information to us, write to us and we will delete it.

9) Changes to This Policy

We may revise this Policy. Where a revision is material, we will post the revised Policy at this address with a new effective date and a note of what changed, at least 14 days before it takes effect, and we will not apply it retroactively to information already collected. Where a revision changes a purpose you consented to, we will ask again rather than rely on the earlier answer.

10) Contact

Metrolux Solutions Inc., Coral Gables, Miami-Dade County, Florida. Email [email protected], telephone (305) 360-6023.

This Policy is governed by the laws of the State of Florida. See also our Terms and Conditions and our Accessibility Statement.