Privacy

What we collect

• What you type into a form or an email: your name, how to reach you, the address or area of the property, and what you want done.
• The quote we showed you: stored with the enquiry, so that if a figure is ever disputed we can both see exactly what the site displayed on the day.
• A one-way scrambled version of your network address: kept as a defence against automated form abuse. The address itself is never stored, and the scrambled value cannot be turned back into it.
• If you arrived by an advertisement: the identifier the advertising system attached to that click, stored with your enquiry so we can tell which advertisement produced work. It identifies the click and not the person. A link followed from Facebook or Instagram can carry Facebook's own click identifier, and that one is stored in the same way. The copy held beside the enquiry is deleted when the enquiry is. A second copy is saved in the browser before any of that, and the next section is about that one.
• Ordinary web server records held by our hosting provider, Cloudflare, which include network addresses and are kept on their retention schedule rather than ours.
• If you apply to clean for us: what the application form asks (your name, mobile number, ZIP code or town, the best time to call, and your answers about the work) and anything you add, with your browser's own description of itself, used only to spot automated junk. Applications are kept apart from enquiries, sent to the mailbox we read them in, and used for nothing but considering your application. If you tick the box for texts, we may also text you about your application; reply STOP to end them, or HELP for help.

What we do not collect

• No payment card details. Payment is handled outside this website entirely.
• No account, no password, and nothing you have to sign up for in order to read a price.

How this site is measured

Something on this site counts how it is used, so here is all of it: each vendor by name, what it records, how long that is kept, and what happens if you tell your browser you would rather not be counted.

The job application pages, and the pages you see after applying, load none of what follows apart from the hosting provider's own count described first below, which we cannot remove from inside a page. No answer on an application is ever sent to a measurement vendor.

Everything we put on the page ourselves checks for two browser signals first, Global Privacy Control and Do Not Track. If your browser sends either one, none of it loads and nothing is sent. We accept losing the numbers, because an opt-out that is only honoured when it costs nothing is not an opt-out.

There is one exception and it is the first entry below. The measurement our hosting provider adds at the edge is put into the page after our own build has finished, so we cannot stop it from inside the page and those two signals never reach it. Saying so is the point of this section.

Running on this site now

Cloudflare Web Analytics

Records: How many times each page was opened, how quickly it loaded, the country the request came from and the kind of device. It sets no cookie, saves nothing on your device, and does not follow you to other websites. It counts a visit by looking at which site the request came from, so there is no identifier for it to hold.

Kept: Cloudflare publishes seven days for the detailed measurements, after which they are reduced to roughly a one in ten sample, and six months for the summary charts. That schedule is Cloudflare's, and we cannot shorten it.

If you opt out: This is the one measurement here that does not honour Global Privacy Control or Do Not Track. Our hosting provider adds it at the edge, after our own build has finished, so the opt-out check that stops everything else on this site never runs for it. A browser extension that blocks third-party scripts does stop it.

PostHog

Records: Which pages are opened, which buttons are pressed, the price the calculator showed, and which link or campaign the visit arrived from. It does not record your screen. Session replay is switched off, and the code that would record a screen is never loaded onto the page at all.

Kept: We could not confirm a published retention period for events on the free plan, so this page states none rather than invent a figure. What is published is a volume limit, a million events a month. The retention figure is settled and written here before any key goes in.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track.

Microsoft Clarity

Records: A replay of how a page was used: pointer movement, scrolling and clicks. Content and typed input are masked, so the words you type are not recorded. It is never loaded on any page carrying our enquiry form, because those are the pages where you would be typing. Microsoft receives all of it and holds its own copy under its own rules, which makes Microsoft a separate controller of it rather than a supplier acting only on our instructions.

Kept: Microsoft publishes three figures and these are all three of them. A replay you can watch is kept for 30 days. A session we label or mark as a favourite is kept for nine months. The click and pointer data behind the heat maps is kept for nine months. Microsoft says that after those periods the data is deleted from its servers and its backups and cannot be recovered.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track.

Google Analytics

Records: Page views, which pages lead to an enquiry, and which search or advertisement brought the visit. Google receives this too and holds its own copy under its own rules, which makes Google a separate controller of it rather than a supplier acting only on our instructions. Google Signals is switched on. For a visitor who is signed in to a Google account and has ads personalisation turned on, that lets Google tie the visit to the account, report age, gender and interests in bands, and recognise the same person across their devices. It applies to a subset of readers, we cannot tell which ones, and we never see an individual. Of everything running on this site, it is also the only one whose requests reach a Google advertising domain, and they do so although no advertisement of ours is running: no Google Ads account is linked to the property, so nothing here is being built into an advertising audience.

Kept: Google holds it under its own rules and deletes event-level data on a schedule set on the account, which is between two and fourteen months. We do not control that and we are not the ones who can delete it. Google-signals data carries its own ceiling of twenty six months and takes the shorter figure if the account is set below that. What we can delete is our own copy of anything you sent us, and that is the section below.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track. Separately from this site, turning off personalised ads in the ad settings of your Google account takes you out of the Google Signals part everywhere you go, not only here.

Not running, and named here anyway

None of these is loaded on this site. They are described here as they will work, and each one moves up into the list above on the day it starts running, in the same update that changes the line in the footer.

Google Ads

Would record: Whether a click on one of our advertisements led to an enquiry. If you arrive by an advertisement, the identifier the advertising system attached to that click is stored with your enquiry, so we can tell which advertisement produced work. It identifies the click, not you.

Would be kept: Google holds the conversion records under its own rules, as a separate controller. The click identifier held beside an enquiry goes when the enquiry goes, on the twenty four month schedule below. The copy saved in the browser is a separate thing on a separate clock, and it has its own section on this page.

If you opt out: Nothing loads and nothing is sent if your browser sends Global Privacy Control or Do Not Track.

What is saved in your browser

Some of this is not held on a server at all. It sits in the storage a website is allowed to use inside your own browser, on your own device, and clearing site data for this website removes every item named here.

• An advertising click identifier, and where a visit came from. Arriving at any page of this site from an advertisement saves that identifier in the browser for ninety days, with the time of the click, which is the same period the advertising platform gives its own record of the click. It is saved on arrival, before any enquiry exists, and it stays for those ninety days whether or not a form is ever filled in. Facebook's click identifier, which a link followed from Facebook or Instagram can carry, is saved in the same way and for the same ninety days. A link that says where it came from, such as an advertisement or the code on a printed card, has those few words saved with it in the same way, so they still apply on the next page you open. A later visit from another such link replaces everything saved before. Deleting a stored enquiry does not remove any of this, because none of it is part of the enquiry. Clearing site data does, and nothing is saved at all if your browser sends Global Privacy Control or Do Not Track.
• A visit reference and a repeat-visit reference. Two random strings, so that pages opened in one sitting are counted as one visit rather than several, and a return visit is counted as the same browser rather than a new person. Neither carries a name, an address or anything typed into a form. The first disappears when the tab closes.
• Cookies set by Google's tag. Google's advertising tag writes its own records of an advertisement click into this website's own cookies. They belong to Google's system rather than to ours, and Google's documentation is what governs how long they last.

None of it is written if your browser sends Global Privacy Control or Do Not Track. On those signals nothing is read from the address bar and nothing new is saved. The advertising identifier is also deleted, the next time any page of this site is opened.

Turning one of those signals on later stops the two measurement references being written again, but does not by itself remove ones already saved. Clearing site data for this website does, and that is the only thing that does, because a value sitting in your browser is not something we can reach in to delete on request.

Who else touches your information

• Cloudflare serves this website and your client page, and stores enquiries and job applications sent through this site and the client page's copy of a client's records. When you send a job application it also checks, in the background and without a puzzle, that a person sent it.
• Microsoft carries our email, so anything you email us, and every job application, sits in a mailbox there.
• Twilio carries our phone calls and text messages.
• Stripe takes card and bank payments made online by clients, on its own page, as the next section describes.
• The measurement vendors named above, and only the ones listed there as running.

That is the whole list. We do not sell, rent or trade your information, and we do not pass it to anyone for their own marketing.

If you become a client

Your client page. A client has a page of their own at home.faithfullykept.com, showing the schedule, invoices, messages and agreement. You sign in with a code we email you, and there is no password. The code is kept only in scrambled form, works for thirty minutes, and its record is cleared within about a day. You stay signed in for ninety days from your last visit to the page, or until you sign out.

The page shows a copy of what our office system holds about your home and keeps no record of its own. An invoice you open as a PDF is held for ten minutes. An email we send you through it is held, with its address and words, only until Microsoft accepts it for delivery; after that the page keeps the subject and the words, with your email address partly hidden, to show in your messages.

Paying online. Card and bank payments go through Stripe. You type your card or bank details only on Stripe's own page, so we never see or keep a card number or security code. Stripe receives your household's name, the payer's email address and our reference for your home, and for each payment the amount, the invoice date and our invoice reference. A card or account you save for automatic payment stays with Stripe; we keep only Stripe's reference to it, its last four digits, its expiry, and who agreed to automatic payments and when. Stripe's own privacy policy covers what it does with them: stripe.com/privacy.

How long we keep it

Enquiries and job records are kept for as long as the business is running. They are the record of who asked for what and what was done about it, and they are kept for the business's own use rather than deleted on a schedule. Email threads are kept the same way, and so are a client's schedule, visits, invoices, payments, messages and agreement. Invoices, receipts and payments are also the business's tax and bookkeeping records.

Nothing is deleted automatically, so there is no date after which yours disappears on its own. If you want it gone, ask. It is erased in the office system, which then tells this site to erase its copy as well. That is the only erasure there is, and it happens because a person asked rather than because a clock ran out.

One honest limit on that, because it is truer than a flat promise. The office system keeps an append-only record of changes made in it, for the business's own accounting, and a deletion is itself a change. Your enquiry goes from every live record and every screen. What remains is that internal history of the change, kept for the same period as the accounting records above, and it is not used to contact you or reachable from anything customer facing.

Job applications, from people who want to clean for us, are the exception to all of that. They are kept for six months and then deleted: this site's copy automatically, and the copy that reaches our mailbox on the same schedule. If you want yours gone sooner, ask.

Measurement records are a separate thing, and each one is kept on the schedule named beside its vendor above. Those schedules belong to the vendors rather than to us.

Text messages

Texts from Faithfully Kept about your cleaning visits, and replies to your messages. That means confirmations, schedule changes, a note when a visit is finished or running late, and answers to your questions. We never text offers, promotions or requests for reviews, and we will not spam you.

We text you only if you ask us to, and saying no never affects a booking. Message frequency varies. Message and data rates may apply. Reply STOP to stop every text from us, or HELP for help, or call (727) 337-7775.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

When you agree to texts, the exact wording you agreed to is stored with the date, so there is a record of what you consented to rather than an assumption about it.

Getting a copy, or getting it deleted

Email hello@faithfullykept.com and ask. You can have a copy of everything we hold about you, corrections to anything wrong, or the whole lot deleted. We will do it within thirty days and we will not ask you why.

Measurement records are not filed under your name, so a vendor often cannot find one visit inside them. Ask anyway. We will tell you what each one holds, delete anything that can be identified as yours, and say plainly where it cannot.

The only things we may keep after a deletion request are the minimum needed for tax and accounting records, which we are required to hold, and a record that you asked us to stop texting, so a stop is never lost. The office system also keeps your phone number, and only that, on the record of any texting consent you gave, as proof of what was agreed, and on a do-not-contact list, so that we never call or text that number again.

If something goes wrong

If information about you is exposed, we will tell you, and Florida law gives us thirty days to do it. We have a written plan for that situation rather than intending to work it out at the time.