← Back to Site
This Privacy Policy explains how Old Capitol Limousine Inc ("Express Midwest," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit www.expressmidwest.com, place an order, request a quote, book a service, create an account, or otherwise interact with us (collectively, the "Services").
By using the Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Services.
This Policy does not apply to information we collect offline, or to any third-party website or service we link to.
| When you… | We may collect |
|---|---|
| Create an account | Name, email address, phone number, username, password |
| Place an order or make a payment | Billing name, billing and shipping address, email, phone, order contents, and payment card information (processed by our payment processor — see Section 5) |
| Request a quote or book a service | Name, contact information, service address, and any details you include about your request |
| Sign up for emails or texts | Email address, mobile phone number, and your consent preferences |
| Contact us | Name, contact information, and the contents of your message |
| Apply for employment or submit a form | Any information you choose to include |
When you use the Services, we and our analytics and advertising partners automatically collect:
We collect this through cookies, pixels, web beacons, SDKs, and server logs. See Section 4.
We may receive information about you from:
In the preceding 12 months, we have collected the following categories of personal information as defined by the California Consumer Privacy Act, as amended ("CCPA"):
| CCPA Category | Collected | Examples | Disclosed for a business purpose to | Sold or Shared |
|---|---|---|---|---|
| A. Identifiers | Yes | Name, postal address, email, phone, IP address, account ID, cookie IDs | Analytics, advertising, payment, hosting, email/SMS, shipping vendors | Yes — shared for cross-context behavioral advertising |
| B. Customer records (Cal. Civ. Code §1798.80) | Yes | Name, address, phone, payment card number | Payment processor, order fulfillment vendors | No |
| C. Protected classifications | No | — | — | No |
| D. Commercial information | Yes | Orders placed, services requested, purchase history, quote requests | Payment, fulfillment, analytics, advertising vendors | Yes — shared for cross-context behavioral advertising |
| E. Biometric information | No | — | — | No |
| F. Internet or network activity | Yes | Browsing and search history on our site, ad and page interactions | Analytics and advertising vendors, hosting provider | Yes — shared for cross-context behavioral advertising |
| G. Geolocation data | Yes | Approximate location from IP address; service address you provide | Analytics, advertising, fulfillment vendors | Yes — approximate location shared for advertising |
| H. Sensory data | Yes | Customer service and reservation call recordings | Telephony and call-recording vendor | No |
| I. Professional or employment information | Yes | Résumé, work history, driving record, certifications | Applicant tracking and background-check vendors | No |
| J. Education information | No | — | — | No |
| K. Inferences | Yes | Preferences and audience segments derived from browsing and purchase behavior | Analytics and advertising vendors | Yes — shared for cross-context behavioral advertising |
| L. Sensitive personal information | Yes | Account login credentials (username + password); payment card number in combination with a security code | Payment processor, hosting provider | No |
Sensitive personal information. We use sensitive personal information only for the purposes permitted under CCPA §1798.121(a) and its regulations — performing services, security and fraud prevention, and ensuring quality. We do not use or disclose it to infer characteristics about you. Accordingly, we are not required to offer, and do not offer, a "Limit the Use of My Sensitive Personal Information" option.
We honor the Global Privacy Control (GPC) signal. If you visit our site with GPC enabled, we treat it as a valid request to opt out of the sale and sharing of personal information associated with that browser. Because GPC is browser-specific, it will not apply to other browsers or devices, and it will not apply to your account-level data unless you are logged in when the signal is received.
We do not store full payment card numbers on our servers. Payment card information you enter is transmitted directly to and processed by Fullsteam, which acts as an independent controller of that data under its own privacy policy at fullsteam.com/privacy. We receive only limited transaction data, such as the last four digits of your card, card brand, expiration date, authorization result, and billing ZIP code.
If you provide your email address, we may send you order confirmations, service updates, and account notices. These are transactional and are not subject to opt-out while you have an active order or account.
If you opt in to marketing emails, you may unsubscribe at any time using the link at the bottom of any marketing email or by contacting us at dispatch@express-limos.com. We honor opt-out requests within 10 business days as required by the CAN-SPAM Act.
By providing your mobile number and opting in, you consent to receive [transactional and/or marketing — specify] text messages from Express Midwest at that number, including messages sent using an automatic telephone dialing system. Consent is not a condition of any purchase. Message and data rates may apply. Message frequency varies.
No third-party sharing of SMS consent. We do not sell, rent, or share mobile phone numbers or SMS consent with third parties or affiliates for their own marketing purposes. Mobile information is shared only with subcontractors that support our messaging program (such as our SMS platform provider), and those subcontractors are prohibited from using it for any other purpose.
We use personal information to:
We do not use personal information for materially different, unrelated, or incompatible purposes without providing you notice.
We disclose personal information to:
We do not disclose personal information to third parties for their own independent marketing purposes.
Our use of advertising and analytics cookies and pixels may constitute a "sale" or "sharing" of personal information under the CCPA, even though we receive no money for it. The categories involved are identifiers, commercial information, internet activity, approximate geolocation, and inferences (Categories A, D, F, G, and K in Section 3). The recipients are advertising networks and analytics providers.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
To opt out, use the "Do Not Sell or Share My Personal Information" link in our site footer, enable Global Privacy Control in your browser, or contact us using Section 12.
If you are a California resident, you have the right to:
Submit a request by:
To protect your information, we will verify your identity before responding to a request to know, delete, or correct. Verification typically requires you to confirm two to three data points we already maintain, such as your email address, phone number, and a recent order number. We will not use information you provide for verification for any other purpose.
You may designate an authorized agent to submit a request on your behalf. The agent must provide written permission signed by you, or a valid power of attorney. We may separately contact you to confirm the authorization.
We will acknowledge your request within 10 business days and respond within 45 calendar days. If we need more time, we will notify you and may take up to an additional 45 days.
California Civil Code §1798.83 permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. As stated in Section 8.1, we do not make such disclosures.
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including:
Where a longer period is required by law or necessary to establish or defend legal claims, we retain the information for that period.
Security. We use administrative, technical, and physical safeguards including TLS encryption in transit, access controls, and vendor due diligence. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children. The Services are not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us at dispatch@express-limos.com and we will delete it.
Call recording. Calls to and from our reservations and dispatch lines may be recorded or monitored for quality assurance and training purposes. Where required by law, you will be notified at the start of the call and may request that recording be stopped.
Third-party links. The Services may link to sites we do not operate. We are not responsible for their privacy practices, and this Policy does not apply to them.
Do Not Track. Our Services do not respond to browser "Do Not Track" signals, which lack a common standard. We do honor Global Privacy Control as described in Section 4.3.
Changes. We may update this Policy. We will post the revised version with a new "Last Updated" date, and for material changes we will provide additional notice by [email to account holders / a banner on the site]. Your continued use after the effective date constitutes acceptance.
840 Liberty Way
North Liberty, Iowa 52246
Email: dispatch@express-limos.com
Phone: (319) 626-5466
For privacy requests, please write "Privacy Request" in the subject line.