Our trust center, what we hold and how we protect it.

Encrypted connections only

Every page loads over HTTPS. Plain HTTP and www addresses are sent to the main address, and browsers are told to use HTTPS only for the next year.

Browser protections on every page

A content security policy limits which outside hosts the pages can load from. Other sites cannot frame our pages, and pages cannot ask for your camera, microphone or location.

Bot and abuse checks on forms

A hidden field catches bots. A signed timer refuses a form that arrives seconds after the page loaded. One connection can send at most six forms an hour, and the counter is swept as new forms come in.

No public duplicate of the site

The test address Cloudflare offers by default is switched off. Any other host that reaches the site is told to stay out of search results.

Server keys kept out of the code

The keys the site uses to send email and reach the CRM are stored as Cloudflare Worker secrets. They are not in the code or the page files.

Saved first, then sent on

A form is written to the database before any email or CRM copy is attempted. If an email fails, the request is still kept, and the failure is recorded against it.

Tax IDs are never stored in plain text

On the client onboarding form, a tax ID is encrypted before it is saved. If the encryption key is not available, only the last four digits are kept. The email we receive shows the last four digits only, and the number is not written to logs.

An invite-only onboarding page

The client onboarding page opens only with a one-time invite that expires. It is kept out of search, and analytics are removed from it.

Written retention and deletion

If you ask for an audit or a walkthrough and do not become a client, we keep the request up to 24 months. You can ask us to delete what we hold at any time, and we delete it no later than 30 days after we receive the request, unless the law requires us to keep something.

The wording is shown before you send

Forms that ask for a phone number show the consent wording directly above the button. The wording, the time and the page you sent it from are saved with your contact record.

Marketing email is a separate, optional choice

The box for tips and offers by email is unticked by default. When you tick it, we save the exact wording and the time you agreed.

Written opt-out terms

Our SMS Terms say how to stop: reply STOP to any text, or email or call us to stop calls. They also say how often we message and that message and data rates may apply.

Do Not Track and Global Privacy Control are respected

If your browser sends either signal, the analytics scripts do not load at all.

Analytics cookies only after you say yes

Google Analytics starts with its cookies off. They are set only after you choose Accept in the cookie banner, and Cookie settings at the bottom of every page changes your choice.

Google signals and ad personalization are off

Google Analytics counts visits and form sends. We have turned off Google signals and ad personalization for it.

Cloudflare Web Analytics is skipped in Europe

For visitors in the EU, the EEA, the UK and Switzerland, the Cloudflare Web Analytics script is removed from the page before it is sent.

Checked before every deploy

Every deploy runs the code checks first: lint, the server tests, a full build and the site tests. A failed check stops the deploy.

Merging code does not publish it

A person starts each deploy. The only automatic run is a morning check that publishes a guide we have already approved, on its scheduled date.

History and rollback

Every change is recorded in version control. A bad release can be rolled back to the previous version from the Cloudflare dashboard.

Encryption and access by role

The platform's data processing terms describe encryption in transit and at rest, and a login for each person on your team with roles that decide what they can see and change.

STOP, do-not-call and calling hours

Anyone can reply STOP, and do-not-call is respected. Calls are placed only inside each lead's allowed local calling hours, and spam monitoring watches the numbers.

An AI that says it is an AI

If a lead asks, the AI says it is an AI. You hear the voice and approve each script before anything goes live.