Privacy Policy

Introduction

This Privacy Policy describes how [Legal entity name — TO BE COMPLETED] (Delisted, “we,” “us”) collects, uses, stores, and protects information when you visit our website or request an exposure review.

What we collect

The only personal information we collect is what you enter in the exposure review intake form: your full name, optional aliases, city, state, optional ZIP code, email address, optional phone number, and an explicit consent checkbox.

We do not collect any information automatically from visitors to this site. We do not use cookies, localStorage, sessionStorage, pixel tags, or similar device-storage or tracking technologies.

Consent is required

Consent is required to submit the intake form, and that requirement is enforced at the database level — not just in the form. A submission without the consent flag is rejected by the database itself, so no record can be created unless you affirmatively authorize us to proceed.

How we use your information

We use your information for only two purposes: to prepare your complimentary exposure review and to contact you with the results. We do not add you to a marketing list, sell your information, or use it for any other purpose.

How we store and protect it

Your submission is stored in our own Supabase database, which runs on PostgreSQL. The database uses Row Level Security: the public-facing website can write submissions but cannot read them back. Reading any submission requires privileged server credentials.

Analytics

We record only which explanatory sections of this page are opened. This is a first-party event logged to our own database. There is no third-party analytics provider, no advertising network, no cookies, no localStorage, no sessionStorage, and nothing stored on your device.

The session reference is a random value held in memory that is destroyed when the tab closes. If your browser sends a Do Not Track or Global Privacy Control signal, we record nothing at all.

Subprocessors

The following service providers process data on our behalf:

• Supabase — database hosting
• Lovable — site hosting
• Google Fonts — webfont delivery
• Google Workspace — email correspondence

Your rights

You may request access to, correction of, or deletion of your information at any time by emailing us at [Privacy contact email — TO BE COMPLETED]. We will action your request promptly.

Retention

Intake data is kept for the life of the engagement and deleted on request.

Contact us

For privacy questions, contact us at [Privacy contact email — TO BE COMPLETED] or write to [Business postal address — TO BE COMPLETED].