Privacy Policy

We may obtain information about you from other sources, such as public databases, joint marketing partners, as well as from other third parties.

Examples of the information we receive from other sources include: social media profile information; marketing leads and search results and links, including paid listings (such as sponsored links).

We use personal information collected via our Sites for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

To send you marketing and promotional communications, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.

To post testimonials (with your consent), to deliver content and advertising tailored to your interests, to request feedback, to enforce our terms, conditions and policies, and to respond to legal requests and prevent harm.

We may process or share your data based on the following legal bases: your consent; our legitimate interests; performance of a contract with you; and our legal obligations (including disclosure to comply with applicable law, governmental requests, or legal process).

We may also share your information in connection with a business transfer (such as a merger, sale of assets, financing, or acquisition).

The specific third parties that process personal data collected through our Sites are:

• Google Analytics 4 — page views, events, and device/browser data, for traffic measurement.
• Google Ads, including Enhanced Conversions — click id and conversion events; Enhanced Conversions send a hashed (not plaintext) email/phone for ad attribution.
• Meta Pixel — page views and events, for Meta/Instagram ad attribution.
• Mailchimp — email and name, for our newsletter and nurture emails, only if you subscribe.
• Microsoft 365 / Microsoft Graph — used to send the notification and transactional emails your form submissions trigger.
• Amazon Web Services — hosts our Sites and stores any file you upload to us (encrypted, private, malware-scanned).
• None of these third parties receive personal information before you accept our cookie/consent banner, except AWS and Microsoft Graph, which are required to operate the Sites and respond to your requests.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

Read the full Cookie Policy.

When you submit a contact form, request an estimate, or upload an Access/Excel file for review, we collect the information you provide (name, email, phone if given, and the file itself) to respond to your request and evaluate the project.

Uploaded files are stored in a private, encrypted store (AES-256, US region, no public access) and scanned for malware on upload; infected files are removed immediately. Internal access is via links that expire after 6 hours — there are no standing credentials that read the file directly.

Our only subprocessor for this data is Amazon Web Services (storage and malware scanning). We are working on a defined retention/auto-deletion period for uploaded files and will update this section once one is set.

If you use RalphAI, our website chat assistant, we store the conversation transcript to answer your questions and improve the assistant. If you ask to talk to a human, we send your message to our team (via an internal notification) along with any contact details you volunteer in the chat.

The Sites may contain advertisements from third parties that are not affiliated with us and which may link to other websites, online services or mobile applications. We cannot guarantee the safety and privacy of data you provide to any third parties. Any data collected by third parties is not covered by this privacy policy. You should review the policies of such third parties and contact them directly with any questions.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law. No purpose in this policy will require us keeping your personal information for longer than 2 years.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible, we will securely store it and isolate it from any further processing until deletion is possible.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, please remember that we cannot guarantee that the internet itself is 100% secure. Transmission of personal information to and from our Sites is at your own risk; you should only access the services within a secure environment.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Sites, you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to their use of the Sites. If we learn that personal information from a visitor under 18 has been collected, we will take reasonable measures to promptly delete such data.

The public site does not require you to create an account — you can review, correct, or request deletion of the information you've submitted to us (via a form, upload, or email) by contacting us directly; see our Data Deletion Instructions for the fastest path.

If you are resident in the European Economic Area and believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies; doing so could affect certain features of our Sites. To opt out of interest-based advertising, visit http://www.aboutads.info/choices/.

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature you can activate. No uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT browser signals. If a standard is adopted that we must follow in the future, we will inform you about that practice in a revised version of this policy.

California Civil Code Section 1798.83 (the “Shine The Light” law) permits California residents to request, once a year and free of charge, information about the categories of personal information we disclosed to third parties for direct marketing purposes. To make such a request, please submit it in writing using the contact information below.

If you are under 18 and reside in California, you have the right to request removal of information you've publicly posted on the Sites (for example, a comment). Contact us with the email you used and a statement that you reside in California, and we will make sure the data is not publicly displayed.

We may update this privacy policy from time to time. The updated version will be indicated by an updated “Revised” date and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or by directly sending you a notification. We encourage you to review this policy frequently.

If you have questions or comments about this policy, you may contact us through our contact page, email us at [email protected], or write to us by post at: 5106 Madison Pike, #231, Independence, KY 41051, United States.

To request deletion of the personal information we hold about you, see our Data Deletion Instructions at /data-deletion.