Privacy Policy

• We collect what we need to quote and write your safety program. Nothing else.
• We do not sell your information, share it for advertising, or use it to build a profile of you.
• There is no analytics, tracking or advertising script on this site, and our own code sets no cookies.
• You can ask for a copy of your information, or its deletion, at any time.

From the intake form — company name; your name, job title, email and phone; your company address; the address of each fixed location your program must cover; current and peak employee counts; the trades you perform; other states you work in; your answers to the trade questions; what you are trying to achieve and which prequalification platforms you need; your current documentation status and timeline.

From the questionnaire and correspondence — which safety topics apply to you, are subcontracted, or do not apply, and anything else you send us while we build your program.

Automatically — standard server logs from our host, including IP address, browser type and the pages requested. We use these to keep the site working and secure.

Payment information — handled entirely by Stripe. We receive confirmation that a payment succeeded and the last four digits of the card; we never receive or store the card number.

To calculate your quote; to determine which regulations and topics your program must cover; to write, verify and deliver the document; to run your monitoring subscription and send the monthly report; to invoice you and keep accounting records; and to answer you when you get in touch.

Your address and employee counts are not administrative detail — they decide which jurisdiction’s rules the program is written against and whether recordkeeping obligations apply to you. That is why we ask for them precisely.

We use a small number of service providers. They act on our instructions and may not use your information for their own purposes.

If you choose to message us on WhatsApp, that conversation is handled by WhatsApp under its own terms. Nothing on this site sends anything to WhatsApp unless you click the button.

We will also disclose information where the law requires it, or to establish or defend a legal claim.

The assistant in the corner of this site is a fixed list of questions and answers. It has no text box, makes no network request, and is not connected to a language model. Nothing you do with it is transmitted or recorded, because there is nothing to transmit.

We say this because the alternative is common and worth knowing about: many site chat widgets log everything typed into them.

We set no cookies of our own, and there are no analytics or advertising cookies on this site. If you proceed to card payment, Stripe’s checkout sets cookies necessary for the payment to work, on Stripe’s own pages and under Stripe’s policy.

Quotes and intake answers are kept while you are a client and for seven years afterwards. We keep superseded versions rather than overwriting them, because the scope a program was written against needs to be reconstructable later — that is what makes a scope decision defensible in an audit or a dispute.

Delivered programs and their verification records are kept for the same period, for the same reason.

Quotes that never became clients are deleted on request, and otherwise after two years.

Invoices and payment records are kept as long as tax law requires.

Email the contact method shown on this site and we will, without charge:

• tell you what we hold about you, and give you a copy;
• correct anything wrong;
• delete it, except records we must keep for tax or for the defensibility of a program we issued and signed — we will tell you exactly what is being kept and why;
• stop sending you anything you did not ask for.

You can cancel monitoring by email at any time, with no fee and no notice period. Every report we send has an unsubscribe link.

Depending on where you live you may have additional rights under state privacy law, including the right not to be discriminated against for exercising them. We do not sell personal information and have not done so.

The site is served over TLS. Database access is protected by row-level security, so the key present in your browser cannot read client records. Keys that can are held on the server only and are never exposed to the browser. Access is limited to the people who need it to do the work.

No system is perfect. If we ever discover a breach affecting your information, we will tell you and the relevant authority within the time the law requires, and we will tell you what actually happened.

In the United States. We serve United States clients only at present, so information is not routinely transferred elsewhere.

This is a service for businesses. It is not directed at children and we do not knowingly collect information from anyone under 16.

If we change this policy we update the effective date above and, where the change is significant, tell existing clients by email. Questions, requests, or anything that looks wrong: the contact method shown on this site.