Privacy

What we collect

• What you type into a form or an email: your name, how to reach you, the address or area of the property, and what you want done.
• The quote we showed you: stored with the enquiry, so that if a figure is ever disputed we can both see exactly what the site displayed on the day.
• A one-way scrambled version of your network address: kept as a defence against automated form abuse. The address itself is never stored, and the scrambled value cannot be turned back into it.
• If you arrived by an advertisement: the identifier the advertising system attached to that click, stored with your enquiry so we can tell which advertisement produced work. It identifies the click and not the person. The copy held beside the enquiry is deleted when the enquiry is. A second copy is saved in the browser before any of that, and the next section is about that one.
• Ordinary web server records held by our hosting provider, Cloudflare, which include network addresses and are kept on their retention schedule rather than ours.

What we do not collect

• No payment card details. Payment is handled outside this website entirely.
• No account, no password, and nothing you have to sign up for in order to read a price.

How this site is measured

Something on this site counts how it is used, so here is all of it: each vendor by name, what it records, how long that is kept, and what happens if you tell your browser you would rather not be counted.

Everything we put on the page ourselves checks for two browser signals first, Global Privacy Control and Do Not Track. If your browser sends either one, none of it loads and nothing is sent. We accept losing the numbers, because an opt-out that is only honoured when it costs nothing is not an opt-out.

There is one exception and it is the first entry below. The measurement our hosting provider adds at the edge is put into the page after our own build has finished, so we cannot stop it from inside the page and those two signals never reach it. Saying so is the point of this section.

Running on this site now

Cloudflare Web Analytics

Records: How many times each page was opened, how quickly it loaded, the country the request came from and the kind of device. It sets no cookie, saves nothing on your device, and does not follow you to other websites. It counts a visit by looking at which site the request came from, so there is no identifier for it to hold.

Kept: Cloudflare publishes seven days for the detailed measurements, after which they are reduced to roughly a one in ten sample, and six months for the summary charts. That schedule is Cloudflare's, and we cannot shorten it.

If you opt out: This is the one measurement here that does not honour Global Privacy Control or Do Not Track. Our hosting provider adds it at the edge, after our own build has finished, so the opt-out check that stops everything else on this site never runs for it. A browser extension that blocks third-party scripts does stop it.

PostHog

Records: Which pages are opened, which buttons are pressed, the price the calculator showed, and which link or campaign the visit arrived from. It does not record your screen. Session replay is switched off, and the code that would record a screen is never loaded onto the page at all.

Kept: We could not confirm a published retention period for events on the free plan, so this page states none rather than invent a figure. What is published is a volume limit, a million events a month. The retention figure is settled and written here before any key goes in.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track.

Microsoft Clarity

Records: A replay of how a page was used: pointer movement, scrolling and clicks. Content and typed input are masked, so the words you type are not recorded. It is never loaded on any page carrying our enquiry form, because those are the pages where you would be typing. Microsoft receives all of it and holds its own copy under its own rules, which makes Microsoft a separate controller of it rather than a supplier acting only on our instructions.

Kept: Microsoft publishes three figures and these are all three of them. A replay you can watch is kept for 30 days. A session we label or mark as a favourite is kept for nine months. The click and pointer data behind the heat maps is kept for nine months. Microsoft says that after those periods the data is deleted from its servers and its backups and cannot be recovered.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track.

Google Analytics

Records: Page views, which pages lead to an enquiry, and which search or advertisement brought the visit. Google receives this too and holds its own copy under its own rules, which makes Google a separate controller of it rather than a supplier acting only on our instructions. Google Signals is switched on. For a visitor who is signed in to a Google account and has ads personalisation turned on, that lets Google tie the visit to the account, report age, gender and interests in bands, and recognise the same person across their devices. It applies to a subset of readers, we cannot tell which ones, and we never see an individual. Of everything running on this site, it is also the only one whose requests reach a Google advertising domain, and they do so although no advertisement of ours is running: no Google Ads account is linked to the property, so nothing here is being built into an advertising audience.

Kept: Google holds it under its own rules and deletes event-level data on a schedule set on the account, which is between two and fourteen months. We do not control that and we are not the ones who can delete it. Google-signals data carries its own ceiling of twenty six months and takes the shorter figure if the account is set below that. What we can delete is our own copy of anything you sent us, and that is the section below.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track. Separately from this site, turning off personalised ads in the ad settings of your Google account takes you out of the Google Signals part everywhere you go, not only here.

Not running, and named here anyway

None of these is loaded on this site. They are described here as they will work, and each one moves up into the list above on the day it starts running, in the same update that changes the line in the footer.

Google Ads

Would record: Whether a click on one of our advertisements led to an enquiry. If you arrive by an advertisement, the identifier the advertising system attached to that click is stored with your enquiry, so we can tell which advertisement produced work. It identifies the click, not you.

Would be kept: Google holds the conversion records under its own rules, as a separate controller. The click identifier held beside an enquiry goes when the enquiry goes, on the twenty four month schedule below. The copy saved in the browser is a separate thing on a separate clock, and it has its own section on this page.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track.

What is saved in your browser

Some of this is not held on a server at all. It sits in the storage a website is allowed to use inside your own browser, on your own device, and clearing site data for this website removes every item named here.

• An advertising click identifier. Arriving at our booking page from an advertisement saves that identifier in the browser for ninety days, which is the same period the advertising platform gives its own record of the click. It is saved on arrival, before any enquiry exists, and it stays for those ninety days whether or not a form is ever filled in. Deleting a stored enquiry does not remove it, because it is not part of the enquiry. Clearing site data does.
• A visit reference and a repeat-visit reference. Two random strings, so that pages opened in one sitting are counted as one visit rather than several, and a return visit is counted as the same browser rather than a new person. Neither carries a name, an address or anything typed into a form. The first disappears when the tab closes.
• Cookies set by Google's tag. Google's advertising tag writes its own records of an advertisement click into this website's own cookies. They belong to Google's system rather than to ours, and Google's documentation is what governs how long they last.

None of it is written if your browser sends Global Privacy Control or Do Not Track. On those signals nothing is read from the address bar and nothing new is saved. The advertising identifier is also deleted, the next time our booking page is opened.

Turning one of those signals on later stops the two measurement references being written again, but does not by itself remove ones already saved. Clearing site data for this website does, and that is the only thing that does, because a value sitting in your browser is not something we can reach in to delete on request.

Who else touches your information

• Cloudflare serves this website and stores enquiries sent through it.
• Microsoft carries our email, so anything you email us sits in a mailbox there.
• The measurement vendors named above, and only the ones listed there as running.

That is the whole list. We do not sell, rent or trade your information, and we do not pass it to anyone for their own marketing.

How long we keep it

Enquiries and job records are kept for as long as the business is running. They are the record of who asked for what and what was done about it, and they are kept for the business's own use rather than deleted on a schedule. Email threads are kept the same way.

Nothing is deleted automatically, so there is no date after which yours disappears on its own. If you want it gone, ask, and it is deleted within thirty days, in the office system as well as on this site. That is the only erasure there is, and it happens because a person asked rather than because a clock ran out.

One honest limit on that, because it is truer than a flat promise. The office system keeps an append-only record of changes made in it, for the business's own accounting, and a deletion is itself a change. Your enquiry goes from every live record and every screen. What remains is that internal history of the change, kept for the same period as the accounting records above, and it is not used to contact you or reachable from anything customer facing.

Measurement records are a separate thing, and each one is kept on the schedule named beside its vendor above. Those schedules belong to the vendors rather than to us.

Text messages

We do not send text messages. If a form ever asks whether you are happy to receive them, the exact wording you agreed to is stored alongside your enquiry with the date, so there is a record of what you actually consented to rather than an assumption about it.

Getting a copy, or getting it deleted

Email hello@faithfullykept.com and ask. You can have a copy of everything we hold about you, corrections to anything wrong, or the whole lot deleted. We will do it within thirty days and we will not ask you why.

Measurement records are not filed under your name, so a vendor often cannot find one visit inside them. Ask anyway. We will tell you what each one holds, delete anything that can be identified as yours, and say plainly where it cannot.

The only thing we may keep after a deletion request is the minimum needed for tax and accounting records, which we are required to hold.

If something goes wrong

If information about you is exposed, we will tell you, and Florida law gives us thirty days to do it. We have a written plan for that situation rather than intending to work it out at the time.