Data Protection

1. Scope and responsibilities

The information covered includes contractor inquiries, business contact details, homeowner contact and project information, and service records. Our team, service providers, and contractors receiving leads each have responsibilities for information within their control. Their precise legal roles depend on the activity and applicable law.

2. Lawful and transparent use

Collect and use information for a defined service purpose, with the notices, permissions, or other legal basis required by applicable law. Explain relevant sharing before it occurs. Do not treat an inquiry or project request as unlimited permission for unrelated processing or marketing.

US federal and state privacy and communications laws may apply. GDPR obligations should be assessed where the activity falls within its scope; this page does not claim universal GDPR compliance or rely on consent as the basis for every processing activity.

3. Purpose limitation and minimization

Request only information relevant to qualifying a lead, responding to an inquiry, delivering the service, or meeting a lawful obligation. Avoid sensitive information that is not necessary. Contractor recipients should use homeowner data only for the requested project and related administration, not resale or unrelated outreach.

4. Accuracy and retention

Reasonable processes should allow inaccurate information to be corrected. A homeowner’s plans may change after qualification; the relevant record should reflect known corrections rather than assuming the original information remains current indefinitely.

Retention and deletion practices must account for the purpose of each record, contractual responsibilities, opt-out records, disputes, and legal obligations. Specific retention periods and deletion methods must be confirmed operationally; this draft does not certify that a deletion schedule has been implemented.

5. Access and safeguards

Safeguards should be proportionate to the risks and include appropriate access restrictions, secure handling, and staff awareness. Contractor recipients should restrict access to people working on the relevant inquiry and protect information in their own systems.

The company must verify its actual technical and organizational measures before adopting this draft. No specific encryption standard, audit, certification, or guarantee against unauthorized access is asserted here.

6. Providers, disclosures, and transfers

The website uses a LeadConnector-hosted demo form and a Vimeo-hosted interview. Providers may process information under their own terms, and processing may occur outside the visitor’s state or country. Any necessary vendor agreements, disclosures, and transfer safeguards should be assessed for the relevant use.

Homeowner data is supplied to the relevant contractor as part of a paid lead service. Permitted recipient use and any legally required sale/sharing opt-outs must be addressed; information should not be disclosed more broadly than the service purpose or law permits.

7. Requests and communications preferences

Contact us to ask about your information, request a correction or deletion, or exercise applicable access, portability, sale/sharing opt-out, restriction, objection, or appeal rights. Requests should be handled subject to identity verification, legal deadlines, and lawful exceptions.

Contractors receiving leads must honor applicable opt-outs and contact restrictions in their own communications. Records needed to respect a suppression request may need to be retained even where other information is deleted.

8. Incidents and policy review

Suspected unauthorized access, accidental disclosure, or misuse should be reported promptly through our contact address without including unnecessary sensitive details. An incident should be assessed, contained where possible, and notified to affected parties or authorities where legally required.

This draft does not promise a fixed notification period or establish an implemented incident-response program. The policy should be reviewed as services, vendors, risks, and applicable requirements change.