Privacy Policy

Commercial Maintenance Services Inc. (DBA CMS)

Effective Date: November 9, 2026 | Website: https://www.cmsmetro.com

1. Introduction

Commercial Maintenance Services Inc., doing business as CMS (“CMS,” “we,” “us,” or “our”), respects the privacy of individuals whose personal information we collect and process in connection with our website, commercial maintenance and facility services, business relationships, employment activities, and related operations.

This Privacy Policy explains what personal information we collect, how we use it, the circumstances in which we disclose it, how we protect and retain it, and the choices and rights individuals may have concerning their information.

CMS is a New York corporation providing commercial maintenance, cleaning, staffing, and related services in New York, New Jersey, and Connecticut.

This Policy applies to:

Visitors to CMSMetro.com.
Individuals who contact CMS or submit business, service, or project inquiries.
Clients, prospective clients, building owners, property managers, tenants, vendors, and other business contacts.
Individuals whose information CMS processes in connection with services at client properties.
Individuals who communicate or interact with CMS through social media, including LinkedIn.

Certain employment-related information is subject to separate employment, applicant, or contractor notices and applicable laws. This Policy is not intended to replace those notices.

2. Personal Information We Collect

The information CMS collects depends on the nature of an individual’s interaction with us.

A. Website visitors and inquiries

When someone visits CMSMetro.com or contacts us through the website, we may collect information such as:

First and last name.
Business or personal email address.
Telephone number.
Company or organization name, when provided.
Project, maintenance, cleaning, or service details.
Information included in a message or inquiry.

Website contact and service inquiry submissions are directed to a CMS email inbox. CMS does not currently operate a customer login account or online customer portal through the website.

B. Clients, prospective clients, and business contacts

In the ordinary course of business, CMS may collect and maintain:

Names, business titles, and professional contact information.
Employer, company, or organization information.
Business addresses and other contact details.
Communications, including emails, telephone conversations, and text messages.
Information about buildings, properties, service requirements, maintenance requests, and project arrangements.
Contracts, invoices, payment records, and related business documentation.

These individuals may include building owners, property managers, management companies, tenants, vendors, suppliers, building representatives, and other individuals involved in CMS’s business relationships.

C. Building and service-related information

When providing services at client properties, CMS may process information reasonably related to performing and documenting those services, including:

Maintenance requests, complaints, and service records.
Building access information, visitor logs, access cards, and security credentials.
Work schedules, assignments, and service coordination information.
Photographs, videos, and other documentation of work performed, maintenance conditions, completed projects, and building areas.

CMS takes photographs or other documentation to record work and property conditions. CMS does not intentionally photograph or record individuals as part of this documentation practice.

D. Employee, applicant, contractor, and workforce information

In connection with employment, recruitment, staffing, and contractor relationships, CMS may collect information such as:

Names, addresses, telephone numbers, and email addresses.
Resumes, applications, employment histories, qualifications, and references.
Social Security numbers, tax identification numbers, and government-issued identification information.
Employment eligibility and verification information.
Payroll, banking, tax, and compensation information.
Emergency contact information.
Attendance, schedules, work assignments, and performance-related information.
Background-check and reference-check information, where applicable.
Photographs, identification badge information, and work-related records.
Information concerning independent contractors, subcontractors, temporary personnel, and staffing personnel.

CMS uses third-party workforce and payroll services, including ADP, to support payroll and related business functions.

This information is used for employment, recruitment, payroll, scheduling, workforce administration, legal compliance, and related operational purposes. Additional employment-specific notices may apply.

E. Social media information

If an individual interacts with CMS through social media platforms, including LinkedIn, we may receive information made available through that interaction, such as:

Name and public professional profile information.
Employer, job title, and professional contact details.
Messages, comments, inquiries, and other communications.
Information the individual chooses to provide or make available through the platform.

Social media platforms operate under their own privacy policies and practices.

F. Professional contact information obtained from third parties

CMS may obtain professional contact information from third-party business contact list providers. This information may include names, corporate positions, job titles, employer information, and professional contact details.

CMS uses this information for legitimate business development and professional outreach, including outreach through LinkedIn. CMS seeks to work with providers that represent they have appropriate rights to provide the information and that the information may lawfully be used for the intended communications.

3. How We Use Personal Information

CMS may use personal information for the following purposes:

Responding to website inquiries, requests for proposals, and service inquiries.
Preparing estimates, proposals, contracts, and service arrangements.
Providing commercial maintenance, cleaning, staffing, and related services.
Communicating with clients, prospective clients, building representatives, vendors, and other business contacts.
Coordinating access to client properties and performing scheduled work.
Documenting maintenance conditions, work performed, and completed projects.
Managing employees, applicants, contractors, subcontractors, and other personnel.
Processing payroll, compensation, scheduling, attendance, and workforce administration.
Managing vendor and supplier relationships.
Maintaining accounting, invoicing, payment, tax, insurance, and business records.
Protecting the security of our personnel, operations, systems, and client properties.
Investigating complaints, resolving disputes, and addressing potential fraud or unauthorized activity.
Complying with applicable legal obligations and enforcing contractual rights.
Conducting business development and professional outreach, including through LinkedIn.
Managing and responding to social media communications.

CMS does not currently use website visitor tracking technologies for behavioral advertising, retargeting, or website analytics. If CMS introduces such technologies in the future, this Policy will be updated as appropriate, and any required notices, consent mechanisms, and choices will be provided.

4. Employee Geofence Clock-Out Functionality

For certain employees, CMS uses a timekeeping process involving an NFC tag connected to an application on the employee’s phone.

Employees use the NFC tag to clock in and are expected to use the same process to clock out. If an employee forgets to clock out, the application may use the employee’s departure from the geofence associated with the assigned work location to automatically record a clock-out.

This functionality is used for limited workforce and operational purposes, including:

Timekeeping and attendance records.
Payroll administration.
Scheduling and workforce coordination.

CMS does not use this functionality to continuously track employees’ movements or monitor their routes throughout the day. The geofence functionality is limited to the clock-out process described above.

5. How We Disclose Personal Information

CMS does not sell personal information. We do not sell, rent, or license customer or business contact information to third parties for their independent marketing or commercial use.

However, CMS does disclose or make personal information available to certain third parties when reasonably necessary for business operations, service delivery, or legal compliance.

A. Service providers and business vendors

CMS uses third-party companies to support its operations. These providers may process or access personal information on CMS’s behalf, including:

Payroll and workforce providers, including ADP.
Cloud storage and productivity providers, including Microsoft 365 and Google Workspace.
Accounting, communications, scheduling, customer relationship, and other business software providers.
Professional service providers, including accountants, attorneys, insurers, and financial advisors.

These providers are permitted to access information as necessary to perform services for CMS or support our business operations. CMS seeks to require appropriate confidentiality and information-protection obligations from service providers.

B. Clients, property managers, and building representatives

CMS may share relevant information with clients, building owners, property managers, management companies, and other authorized building representatives when necessary to:

Provide contracted services.
Coordinate employee or contractor assignments.
Arrange building access and security credentials.
Communicate about maintenance requests or service issues.
Verify staffing, scheduling, or work completion.

This may include limited employee or contractor information when necessary for staffing, identification, scheduling, or building access.

C. Professional and business advisors

CMS may disclose relevant information to attorneys, accountants, insurers, financial institutions, and other professional advisors when necessary for business, legal, financial, insurance, or compliance purposes.

D. Legal, regulatory, and safety disclosures

CMS may disclose information when we reasonably believe disclosure is necessary to:

Comply with applicable laws, regulations, subpoenas, court orders, or other legal processes.
Respond to lawful requests from governmental authorities.
Protect the rights, property, safety, or security of CMS, our clients, employees, or others.
Investigate suspected fraud, security incidents, or unlawful activity.

E. Business transactions

If CMS is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to appropriate protections and applicable law.

6. Website Cookies and Tracking Technologies

CMS has confirmed with its website developer that the website does not currently have Google Analytics, Google Tag Manager, Google Ads tracking, Meta Pixel, LinkedIn Insight Tag, or similar website analytics and advertising tracking technologies installed.

Accordingly, CMS does not currently use these technologies through CMSMetro.com to:

Track visitors’ browsing activity across websites.
Build advertising profiles based on website activity.
Conduct website visitor retargeting.
Measure advertising conversions through third-party tracking pixels.
Perform website analytics through the services listed above.

The CMS website includes links or icons that direct visitors to CMS’s social media pages, including LinkedIn. Clicking an external social media link takes the visitor to that third-party platform, which may collect information under its own privacy practices.

Some website hosting or technical functions may use basic technologies necessary to operate, secure, or deliver the website. The precise use of any essential cookies, server logs, or similar technical functions should be confirmed with the website developer and hosting provider.

CMS may consider using Google Ads, Meta advertising services, LinkedIn Insight Tag, conversion measurement, or retargeting technologies in the future. If those services are introduced, CMS will review the information collected and shared, update this Policy, and implement any legally required notices, consent tools, and choices before or when the technologies are deployed.

7. Marketing and Professional Outreach

CMS may communicate with prospective and existing business contacts for legitimate business development and relationship purposes.

Professional outreach may use information obtained directly from individuals, through business relationships, from professional contact list providers, or through publicly available professional profiles and social media platforms.

CMS may use LinkedIn to identify and contact business professionals and organizations that may be interested in CMS’s services.

CMS does not currently upload customer or business contact lists to advertising platforms to create matched audiences. CMS also does not currently use website retargeting pixels or similar technologies to advertise to people based on their visits to CMSMetro.com.

Individuals may ask CMS to stop sending them marketing or business development communications by contacting us at info@cmsmetro.com. Where applicable, CMS will honor opt-out requests and maintain suppression records to help ensure that individuals who have opted out are not contacted again for the same marketing purpose.

8. Data Retention

CMS retains personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, including providing services, maintaining business and employment records, satisfying contractual obligations, resolving disputes, protecting security, and complying with applicable laws.

Retention periods vary depending on the type of information and the reason it was collected.

CMS’s current general estimate is that many categories of business, client, employee, vendor, and inquiry records may be retained for approximately seven years. This is an estimate, not a fixed retention period that applies to every record. Certain information may be retained for shorter or longer periods when required or permitted by law, contract, operational needs, or legitimate business purposes.

When information is no longer reasonably necessary, CMS seeks to delete, securely dispose of, or de-identify it, subject to applicable legal and recordkeeping requirements.

9. Information Security

CMS uses administrative and technical safeguards intended to protect personal information against unauthorized access, use, disclosure, alteration, or destruction.

Depending on the system and information involved, these safeguards may include:

Password protection and access restrictions.
Limiting access to authorized ownership and management personnel.
Confidentiality obligations and internal access practices.
Use of established business software and cloud service providers.
Procedures for responding to suspected security incidents.
Appropriate disposal of information that is no longer needed.

No method of electronic storage or transmission is completely secure. CMS cannot guarantee absolute security, but seeks to maintain safeguards appropriate to the nature of the information and its business operations.

10. Privacy Choices and Requests

Individuals may contact CMS to ask about personal information we maintain about them or to request that we correct or delete information, subject to applicable legal requirements and exceptions.

Depending on the circumstances and applicable law, individuals may request to:

Confirm whether CMS maintains personal information about them.
Access or obtain a copy of certain personal information.
Correct inaccurate or incomplete information.
Request deletion of personal information.
Opt out of certain marketing or business development communications.
Exercise any additional rights available under applicable state privacy laws.

CMS may need to verify an individual’s identity and authority before responding to certain requests. We may also retain information when necessary to comply with legal obligations, maintain required business records, complete transactions, resolve disputes, or protect our rights and the rights of others.

To submit a privacy request, contact:

Privacy Contact: Elias Tsalatsanis

Company: Commercial Maintenance Services Inc. (DBA CMS)

Email: info@cmsmetro.com

Mailing Address:

Commercial Maintenance Services Inc.

7 Rye Ridge Plaza, #157

Rye Brook, NY 10573

Please describe the nature of your request and provide enough information for CMS to identify the relevant records. Do not include sensitive information such as a Social Security number or financial account credentials in an ordinary email unless CMS specifically provides a secure method for doing so.

CMS will review and respond to requests in accordance with applicable law. Where a particular state law provides a right to appeal a denied request, CMS will provide information about the applicable appeal process.

11. State Privacy Disclosures

Privacy laws vary by state and may provide additional rights to residents of certain jurisdictions. The availability of particular rights depends on the law’s applicability requirements, the individual’s relationship with CMS, and the type of information involved.

CMS will honor rights that apply to it under applicable law. These may include rights to access, correct, delete, or obtain a portable copy of personal information, and rights to opt out of certain types of data processing where applicable.

CMS does not currently sell personal information. CMS also does not currently use website tracking technologies for targeted advertising or retargeting.

Some state privacy laws distinguish between individuals acting in a personal or household capacity and individuals acting in a commercial, business, or employment capacity. Certain employment-related information and business-to-business communications may be treated differently under those laws. This does not affect any other rights or protections that may apply under employment, data security, consumer protection, or other laws.

Individuals may submit privacy requests using the contact information in Section 10.

12. Children’s Privacy

CMS’s website and services are intended for businesses, organizations, and adults. CMS does not knowingly direct its website or services to children under 18 and does not knowingly seek to collect personal information directly from children under 18 through its website.

If CMS becomes aware that a child has provided personal information through the website, CMS will review the circumstances and take appropriate steps consistent with applicable law.

13. Third-Party Websites and Services

CMSMetro.com may contain links to third-party websites or social media platforms, including LinkedIn.

CMS does not control the privacy practices, security, or content of third-party websites and services. When an individual follows a link to another website or platform, that individual’s information is governed by the third party’s applicable privacy policy and terms.

We encourage visitors to review the privacy policies of third-party services they use.

14. Changes to This Privacy Policy

CMS may update this Privacy Policy from time to time to reflect changes in our business practices, services, technology, legal obligations, or privacy practices.

When changes are made, CMS will update the Effective Date at the top of this Policy and post the revised version on CMSMetro.com.

If CMS introduces new website analytics, advertising pixels, retargeting tools, or other material tracking technologies, we will review and update the relevant disclosures and implement any required privacy choices or consent mechanisms.

15. Contact Us

Questions, concerns, or requests relating to this Privacy Policy or CMS’s handling of personal information may be directed to:

Elias Tsalatsanis

Privacy Contact