Privacy Policy

1. Who we are

The data controller responsible for your personal information is:

We have not appointed a Data Protection Officer. Please direct all privacy questions to the email address above.

2. Information we collect

2.1 Information you provide

• Contact form: your name, email address and the content of your message.
• Homeowner request: your name, email address, optional phone number, Texas ZIP code, project timing, foundation type, requested service and optional project description.
• Listing submission or claim: the business name and details, and your name, role and contact details when you add or claim a contractor listing.
• Contractor introduction: the delivery email a contractor gives us, the agreed fee, our manual record of whether it was received, and delivery status.
• Newsletter (optional): your email address, if you choose to subscribe.

2.2 Information collected automatically

• Server logs: IP address, browser/user-agent, request time and URL path, kept for security and diagnostics (via Cloudflare).
• Cookies: see section 8.
• Analytics (only with your consent, if enabled): anonymized usage statistics such as pages viewed and approximate location.
• Directory interaction metrics (only with your consent): clicks on phone, website, email and directions links. A salted IP hash is kept for no more than five minutes solely to prevent duplicate counts; persistent event records contain the listing, interaction type and time, not the IP address.
• Homeowner request security and consent record: request time, source page, campaign tags when present, the displayed consent version and a salted IP hash used for abuse prevention and evidence of the request. We do not collect precise GPS location.

2.3 Business directory data

The contractor names, addresses, phone numbers, websites, opening hours, ratings and review counts shown in our directory are compiled from publicly available sources - including Google Business Profile data (through our data provider, DataForSEO) and the businesses’ own websites. This is business contact information about the listed contractors, not personal data about you as a visitor. Business owners can claim, correct or request removal of a listing (see section 5).

3. How we use your information & legal bases

Under the EU/UK General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Responding to your inquiries - legitimate interest, or steps taken at your request (Art. 6(1)(b)/(f)).
• Reviewing and checking availability for a homeowner request - your affirmative consent and steps taken at your request (Art. 6(1)(a)/(b)). The initial form permits us to show an individual contractor only a contact-free summary containing the ZIP code, requested service, foundation type and timing. It does not permit us to disclose your name, email address, optional phone number or free-text project description. Providing a phone number does not itself authorize calls or texts.
• Publishing and managing listings - legitimate interest in operating a business directory, or performance of a contract where you submit/claim a listing (Art. 6(1)(b)/(f)).
• Security and abuse prevention - legitimate interest (Art. 6(1)(f)).
• Newsletter and analytics - your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Sharing and service providers

We do not disclose homeowner request data for unrelated advertising. To check availability, we may manually give individual contractors a contact-free summary containing the property ZIP code, requested service, foundation type and timing. That summary excludes your name, email address, optional phone number and free-text description. When you submit from a contractor profile, we store that listing as your first routing preference and review it first, but we may consider another suitable contractor. We also share data with providers who help us run the service:

• Cloudflare, Inc. (USA) - hosting, content delivery (CDN), web application firewall, and the D1 database and R2 storage.
• Resend, Inc. (USA) - delivery of transactional emails (it processes only the message content and recipient address).
• Stripe, Inc. (USA) - payment processing for optional paid listing plans. Stripe receives the business’s payment and billing data; we do not store complete card numbers. The homeowner-lead workflow does not create Stripe checkout sessions.
• Analytics provider (only if analytics is enabled and you consent) - aggregated, anonymized usage statistics.

Optional contractor introduction: if a contractor is interested, we may email you its business name. We will identify that proposed recipient and ask you to confirm the exact disclosure before releasing your contact information or project description. If you supplied a phone number, the named confirmation explicitly asks whether that contractor may use it for a live, manually dialed call solely about the request; it does not authorize texts. The contractor receives the full request only after your confirmation and after we manually record the agreed introduction fee as received. A selected contractor is an independent business, becomes responsible for its own use of the disclosed data and may have its own privacy notice. We receive compensation for the introduction; that fact is disclosed before confirmation. We do not authorize a contractor to resell the request, use it for unrelated marketing, or make automated, prerecorded or AI-voice calls or marketing texts based on the initial form.

International transfers: these providers may process data in the United States. Transfers outside the European Economic Area are covered by the EU Standard Contractual Clauses and appropriate safeguards.

5. Business listings and public data

If you own or represent a contractor listed on Foundation Compass and want to claim, correct or remove your listing, email hello@texasfoundationcompass.com. After we verify your connection to the business, we will update or remove the listing promptly.

6. Your rights

If you are in the EEA or UK, you have the right to access, rectify, erase, restrict or port your data, to object to processing based on legitimate interest, and to withdraw consent at any time.

If you are a resident of Texas, California or another US state with an applicable consumer privacy law, you may have rights to know, access, correct, delete or obtain a copy of personal information and to opt out of a legally defined sale, targeted advertising or certain profiling. The initial availability check uses only the contact-free summary described above; your contact information and project description are not disclosed unless you confirm a named introduction. You can withdraw the request before disclosure by contacting us. We will not discriminate against you for exercising a privacy right. Optional analytics remains off unless you consent; you can change that choice under Your Privacy Choices in the footer, and we honor Global Privacy Control (GPC) for analytics.

To exercise any of these rights, email hello@texasfoundationcompass.com. We respond within 30 days.

7. Data retention

• Contact messages - up to 12 months after our last correspondence.
• Unqualified or unmatched homeowner requests - assigned a 90-day retention review date and then deleted through our administrative cleanup process, subject to short operational delays or a legal hold.
• Qualified requests and their consent/status records - up to 24 months after the last action, unless a longer period is required to resolve a complaint or establish, exercise or defend legal claims.
• Listing submissions - while the listing is published, plus a reasonable period afterwards for record-keeping.
• Server logs - about 30 days (Cloudflare).
• Newsletter - until you unsubscribe.

8. Cookies

Foundation Compass uses essential browser storage for your privacy preference. Google Analytics 4 is optional and is not loaded until you explicitly allow analytics.

• Essential (always active): session and your saved privacy choice. The site does not work properly without them.
• Analytics (Google Analytics): aggregated usage statistics, disabled by default and enabled only after your affirmative choice. Advertising storage and personalization remain disabled.

Use Your Privacy Choices in the footer to allow or withdraw analytics consent at any time. A Global Privacy Control (GPC) signal overrides a stored permission and keeps analytics off. We save the choice in this browser and apply it through Google Consent Mode v2.

9. Security

We use technical and organizational measures to protect data, including HTTPS/TLS encryption, restricted administrative access, a web application firewall, and Standard Contractual Clauses for transfers outside the EEA. No method of transmission over the internet is completely secure, but we work to protect your information.

10. Children

Foundation Compass is intended for adults and is not directed to children under 16. We do not knowingly collect personal information from children.

11. Complaints

If you believe we have mishandled your personal information, please contact us first at hello@texasfoundationcompass.com. You may also contact a regulator:

• United States: your state Attorney General or consumer-protection office. California residents may contact the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General (oag.ca.gov).
• EEA / UK: your local data protection authority.

12. Changes to this policy

We may update this Privacy Policy from time to time. The version date at the top of this page will always reflect the latest revision, and we will communicate material changes where required.