TEMPLATE — FOR FLORIDA ATTORNEY REVIEW. NOT LEGAL ADVICE.

Foundation Audit Pro: Privacy Policy (Draft)

Effective date: [Month Day, Year]
Last updated: [Month Day, Year]

This policy explains what information Foundation Audit Pro collects, how we use it, who we share it with, and the choices you have.

"We," "us," and "our" mean Foundation Audit Pro, a business operated by Jon Quintero ([Legal entity name / owner name, once formed]). "You" means anyone who visits our website, contacts us, or hires us.

Questions? Email info@foundationauditpro.com, or write to [mailing address].

1. The short version

• We collect only what we need to help you compare foundation repair quotes.
• We share your information only with the contractors and engineers you approve, and with service providers that help us run the business.
• We do not sell your information, and we do not share it for targeted advertising.
• Your information may be accessed or stored outside the United States by us or our service providers (see Section 7).
• You can ask to see, correct, or delete your information at any time.

2. What we collect

When you visit our website - Technical data that your browser sends automatically, such as your IP address, browser type, the page you visited, and the time. Our website is hosted by Cloudflare [confirm at launch], which may log this. [How long Cloudflare keeps these logs.] - Fonts and images. Our site's fonts and photos are stored on our own website, so loading them doesn't send your information to any other company. - Cookies and analytics. Our site does not set any cookies and does not use advertising pixels or tracking tools. [If turned on at launch:] We use Cloudflare Web Analytics to count page views and measure how fast pages load. Cloudflare says this tool does not use cookies or other browser storage and does not "fingerprint" visitors. If we add any other tool (such as a scheduler, contact-form service, chat widget, or embedded video), we'll update this policy first.

When you contact us - Your name, email address, and anything you write to us. - If we add a contact form: your phone number, preferred contact method, property ZIP code and county, where you are in the repair process, how many quotes you have, the best time to call, and anything else you choose to tell us. [Match this list to the final form.]

When you hire us - Your home's address, plus the contact details of everyone who signs the client agreement. - Photos and videos of your home, and the location labels and notes you add. Phone photos often carry hidden location data (GPS coordinates). See Section 6. - Documents such as contractor quotes, drawings, engineer's plans and letters, contracts, warranties, permits, and past reports. - Notes from our calls and messages with you, and with the contractors and engineers you approve. - Call recordings, only if everyone on the call agreed to the recording first (see Section 4). - Payment information. Payments are handled by our payment processor, [processor name]. We do not see or store your full card or bank account number. We receive only a confirmation, the amount, and limited details such as the last four digits. - Your e-signature and the signed agreement, through [e-signature provider].

We don't ask for Social Security numbers, driver's license numbers, health information, or insurance policy numbers. Please don't send them. If a document you send contains them, we'll ask you to remove them or we'll remove them ourselves.

3. How we use your information

We use your information to: 1. Reply to you and set up an intro call. 2. Provide the services in your client agreement. That includes (when needed) arranging estimate appointments, organizing your photos and documents, comparing quotes, preparing your questions, and assembling your Binder, including its Closeout Packet section. 3. Check contractors' license status on public government websites. 4. Take payment, keep business and tax records, and meet legal obligations. 5. Protect our rights and handle disputes. 6. Improve our service. For example, we may count how many quotes clients usually have. We never publish anything that identifies you.

We do not use your information for targeted advertising, and we do not sell it. We will send marketing emails only if you ask for them, and you can unsubscribe at any time. [Jon to decide whether there will be any marketing emails.]

4. Calls and recordings

• Calls are by video or phone through [Zoom / Google Meet / WhatsApp / other].
• We never record a call unless everyone on the call agrees first. That includes any contractor or engineer on the call. Florida law generally requires all parties' consent to record a conversation (Fla. Stat. §934.03(2)(d)).
• If a call is recorded, we use the recording only for your project. We keep it for [__ days/months], then delete it.

5. Who we share your information with

We share your information only as follows.

1. Contractors, engineers, and other providers you approve. For example, we send the repair companies we book your contact details, your address, and your photos, so every company sees the same material. You choose who gets what, and you can approve by email. Once they receive your information, their own privacy practices apply.
2. Service providers who help us run the business, and only as much as they need. These include: [email provider], [file storage / private upload link provider], [video call provider], [e-signature provider], [payment processor], Cloudflare (website hosting and, if turned on, Web Analytics) [confirm at launch], and [accounting/bookkeeping provider]. They are not allowed to use your information for their own marketing.
3. If the law requires it, for example in response to a valid subpoena or court order, or to protect someone's safety.
4. If the business changes form. Jon may form a business entity to run Foundation Audit Pro. If that happens, your information will move to that entity, and this policy will still apply.

We do not sell your personal information, and we do not share it for targeted advertising. We do not share it with anyone in exchange for money or anything else of value.

Your Binder and client file. Your Binder is the downloadable set of homeowner-facing documents we release to you (your documents, quotes and contracts received for your project, photo index, comparison report, question lists, match check, included revised-quote comparisons, and the Closeout Packet section). Our client file is broader and includes internal working notes and drafts; we do not share the internal file except as stated above or as required by law. Communications we sent to a contractor or engineer for you, at your direction or with your approval, may be included in your Binder.

6. How we protect your information

We take reasonable steps to protect your information. These include: - password-protected accounts with two-step login where available - a private upload link for photos and documents instead of public folders - limiting access to Jon (and any assistant who has agreed to keep your information confidential) - deleting information when we no longer need it (Section 8) - sending the Binder and returned documents by ZIP file or a private download link (not a public link), and using encrypted connections where our providers offer them

If there is a security breach. We will investigate, try to contain it, and notify affected people and regulators as required by law (see Section 12). Do not send documents through public links or public social-media messages.

Photo location data. Before we share your photos with anyone, we [remove hidden location data (GPS) from them / ask you to turn it off]. [Jon to decide which approach, and which tool to use.]

No system is perfectly secure. If a security breach affects your personal information, we will notify you as required by law (see Section 12).

7. Where your information is accessed and stored

Your information may be accessed or stored outside the United States by us or our service providers. So: - the laws of those places may differ from U.S. and Florida law, and in some cases a foreign government may be able to request access - we protect your information the same way wherever it is accessed

By using our services, you understand that your information may be accessed and stored outside the United States.

8. How long we keep your information

You can ask us to delete your information sooner (Section 9). We may keep what we need for legal, tax, or dispute purposes. Litigation hold: if we receive a claim, dispute, subpoena, or legal notice, we will not delete records that may be relevant to it until the matter is resolved or our attorney says deletion may resume.

9. Your choices and rights

You can ask us to: 1. See the personal information we have about you. 2. Correct anything that's wrong. 3. Delete your information, except what we must keep for legal, tax, or dispute reasons. 4. Get your own documents back at any time, including if your service ends early: email us and we will send copies of documents and photos you gave us by ZIP file or private download link within [10 business days] at no charge. The final Binder is released under your client agreement after the balance clears. 5. Stop sharing your information with a contractor or engineer you approved earlier. Information already sent can't be recalled. 6. Withdraw consent to a recording, or to marketing emails.

To make a request, email info@foundationauditpro.com. We may need to confirm your identity. We'll respond within [30] days. We won't charge you, and we won't treat you differently for asking.

[Attorney note: Florida's Digital Bill of Rights doesn't appear to apply to this business (see Section 12), so these rights are offered voluntarily. Depending on where clients and Jon are located, other laws could add rights.]

10. Children

Our website and services are for adult homeowners. They are not directed to children under 13, and we do not knowingly collect information from children under 13. If you believe a child has sent us personal information, email us and we'll delete it.

11. Changes to this policy

We may update this policy. We'll post the new version on this page with a new "Last updated" date. If a change materially affects how we use information we already have, we'll tell current clients by email before it takes effect.

12. Florida law notes

Florida Information Protection Act (Fla. Stat. §501.171). - Who it covers: The Act applies to any "covered entity," which includes a sole proprietorship or other commercial entity that "acquires, maintains, stores, or uses personal information." - What counts as personal information: a person's name together with certain items, such as: - a Social Security number, ID or passport number - a financial account or card number with its access code - medical or health insurance information - biometric data - "any information regarding an individual's geolocation" - or an email address or username with its password - Our duties: - Take "reasonable measures to protect and secure" that data (§501.171(2)). - If a breach occurs, notify affected Florida residents "no later than 30 days after the determination of a breach or reason to believe a breach occurred," with limited exceptions (§501.171(4)). - Notify the Florida Department of Legal Affairs within 30 days if 500 or more Floridians are affected (§501.171(3)). - Notify consumer reporting agencies if more than 1,000 people are notified at once (§501.171(5)). - Service providers that store data for us must tell us about a breach within 10 days (§501.171(6)). - Dispose of customer records securely when they're no longer needed (§501.171(8)). - Enforcement: The Act is enforced by the Department of Legal Affairs. It does not create a private right to sue (§501.171(10)).

Florida Digital Bill of Rights (Fla. Stat. §§501.701–.722). - The main duties likely don't apply. Most of its duties apply only to a "controller," which must, among other things, make "in excess of $1 billion in global gross annual revenues" (§501.702(9)). - The sensitive-data rule doesn't apply either. One section reaches smaller businesses: anyone who sells "sensitive data" must get consent and post a notice (§501.715). We don't sell any personal data, so that section doesn't apply to us.

13. Contact us

Foundation Audit Pro
[Legal entity name / owner name, once formed]
Email: info@foundationauditpro.com
Mail: [mailing address]
Phone: [U.S. business phone number]

TEMPLATE — FOR FLORIDA ATTORNEY REVIEW. NOT LEGAL ADVICE.