Privacy Policy

Scope

This Privacy Policy applies to personal information FLEX it Handyman Services (“FLEX it,” “we,” “us,” or “our”) collects through flexithandyman.com and through related calls, text messages, emails, quote requests, scheduling, payments, and service records. It does not control the privacy practices of websites, applications, or services operated by others.

Privacy at a Glance

• We collect contact, property, and project information that helps us review and perform requested work.
• Within FLEX it, access to quote details and uploaded project photos is currently limited to Jamie Boyd.
• We do not sell or rent personal information for money.
• The quote form is for service-related communication, not consent to unrelated marketing.
• Do not send financial account details, access codes, medical information, identity documents, or photos of people who have not agreed to be shown.

Information We Collect

Information you provide

Depending on how you interact with FLEX it, we may collect:

• Contact information, such as your name, email address, telephone number, and preferred contact method.
• Property and project information, such as the service address, city, state, ZIP code, property type, your role or work authorization, requested timing, repair list, measurements, product information, access or occupancy considerations, and other details you choose to provide.
• Photos and attachments, including the visible content, file name, file type, and metadata that may be contained in a file.
• Communications, including messages, call or text details, follow-up answers, scheduling preferences, and feedback.
• Business and service records, such as quotes, accepted scopes, change information, invoices, payments, project notes, before-and-after documentation, and records needed to support a customer or commercial relationship.

You may decline optional information, but missing details can limit our ability to evaluate a project, confirm coverage, prepare a quote, or provide requested service.

Information collected automatically

When you use the website, its hosting and security systems automatically receive limited technical information needed to deliver and protect the site. This can include an IP address, browser and device type, operating system, requested page, referring page, date and time, and diagnostic or security events. On the quote form, Cloudflare Turnstile processes technical and security signals to help distinguish people from automated abuse; its verification token is checked by the website server and is not treated as permission for unrelated marketing.

The website also loads the existing Google Tag Manager container to support continuity of website and advertising measurement. Before the container loads, the site sets Google consent signals for advertising storage, advertising user data, advertising personalization, and analytics storage to denied. Depending on the tags configured in the container, Google services may still receive limited technical, consent, or event information that does not rely on those storage permissions. FLEX it does not intentionally send quote-form contents, uploaded files, or customer contact and property details to Google Tag Manager.

Information from other sources

If you contact FLEX it through a third-party service, payment provider, referral source, social platform, or other website, we may receive information you choose to provide through that service. The third party’s own privacy policy governs its collection and use before it sends information to FLEX it.

How We Use Information

We may use personal information to:

• respond to an inquiry and communicate about the requested project;
• confirm service-area coverage and evaluate whether a project fits FLEX it’s scope;
• ask follow-up questions, prepare a quote, schedule work, and document an agreed scope;
• perform, manage, photograph when authorized, and document services;
• create invoices, process payments through an approved provider, maintain accounting records, and address disputes;
• operate, maintain, secure, troubleshoot, and improve the website and business;
• detect misuse, fraud, security incidents, or other harmful activity; and
• comply with legal obligations and protect the rights, safety, and property of customers, FLEX it, and others.

We will not use quote-form contact information for unrelated marketing unless you separately choose to receive it or another lawful basis applies. Any future promotional email or text program must provide the disclosures and opt-out choices required for that channel.

Calls, Text Messages, and Email

When you provide contact information and ask FLEX it to respond, we may use the contact method you select—or another contact method you provided—to communicate about your inquiry, quote, appointment, active project, invoice, or other request. Message and data rates may apply to texts. Providing a number through the quote form is not consent to unrelated marketing, and marketing consent is not a condition of purchasing services.

You may ask us to stop optional promotional communications at any time. We may still send non-promotional communications reasonably necessary to respond to your request, provide service, address an account or payment, or comply with law.

When We Disclose Information

We may disclose personal information only as reasonably necessary for the purposes described in this policy, including to:

• Operational providers that support hosting, form delivery, file storage, email or text delivery, scheduling, payment processing, accounting, security, support, analytics, or advertising measurement. Current website providers include Cloudflare for hosting, security, form processing, and private quote storage, and Google services for Tag Manager and limited quote notifications.
• People involved in authorized work, such as a customer-authorized contact, property representative, or contractor whose involvement is reasonably necessary for the agreed project.
• Professional advisers, such as legal, insurance, tax, and accounting advisers.
• Government authorities or other parties when required by law or reasonably necessary to protect rights, safety, property, investigate wrongdoing, or respond to a legal process.
• A successor organization as part of a proposed or completed sale, transfer, merger, financing, reorganization, or similar business transaction, subject to applicable law.

FLEX it does not sell or rent personal information for money. FLEX it does not intentionally disclose quote-form contents, uploaded files, or customer contact and property details for cross-context behavioral advertising. If a future advertising or analytics change affects that statement under an applicable privacy law, we will update this policy and provide any required choice before enabling that use.

Online quote workflow

The online quote workflow uses Cloudflare Pages and Workers to receive and validate submissions, Cloudflare Turnstile to reduce automated abuse, and a private Cloudflare Workers KV namespace to store quote details and project photos. A Google Apps Script web application uses Gmail to notify Jamie that a request is available. The email notice is designed to contain only a service category, submission time, reference, and expiring private review link—not the customer’s full contact, property, project details, or photo files.

The private review and photo links are signed, are not listed publicly, and expire after 30 days. Uploaded photos are served as downloads with restrictive browser headers. These measures reduce risk but do not make any internet system completely secure. Provider terms and privacy practices also apply to information they process on FLEX it’s behalf.

Project Photos and Sensitive Information

Project photos can reveal people, possessions, security features, addresses, documents, or location metadata. Upload only images you are authorized to share and that are reasonably necessary to review the project. Do not upload door or alarm codes, account or payment information, identity documents, medical information, private correspondence, confidential business records, or images of people who have not agreed to be shown.

Submitting a photo for project review does not grant FLEX it permission to use it publicly for advertising, a portfolio, or social media. Public use requires separate authorization.

Payments

If an approved third-party payment provider is used, that provider collects and processes payment information under its own privacy terms. Do not enter payment-card or bank-account information in the general quote form. FLEX it does not intend to receive or store complete payment-card numbers through this website.

Cookies, Analytics, Advertising, and Browser Signals

The website uses Cloudflare Turnstile on the quote form for fraud and abuse prevention and loads the existing Google Tag Manager container for measurement continuity. The site sets Google advertising and analytics storage, advertising user-data, and advertising-personalization consent signals to denied by default before Tag Manager loads. The current website does not provide a control that changes those defaults. Google tags may use limited cookieless or technical signals depending on their configuration and Google’s policies.

FLEX it records non-sensitive website events for call-link clicks, text-link clicks, quote-form starts, and successful quote submissions. These events identify the page and general action, not the customer’s name, email, phone number, street address, ZIP code, project description, or uploaded photos. Before storage-based analytics, advertising personalization, session replay, or a new tracking provider is enabled, FLEX it must review the actual purpose and provider, update this policy when needed, and provide consent or opt-out controls where required.

FLEX it does not intentionally use these default-denied settings to build a profile of your activities over time and across different websites. Browser “Do Not Track” and Global Privacy Control signals do not currently change the website’s behavior because advertising and analytics storage remain denied by default. When legally required and technically supported, recognized browser-based privacy choices will be honored. A third party may collect information under its own policy if you follow an external link, use an external payment page, or interact with an approved embedded service.

Retention and Deletion

Unaccepted quote inquiries and associated uploaded photos are scheduled for deletion 90 days after submission, unless the inquiry remains active or the information is reasonably needed for security, fraud prevention, a dispute, a legal hold, or another legal obligation. The private quote storage assigns an automatic 90-day expiration to every quote record, photo, and photo-metadata entry stored in Cloudflare Workers KV. If a project is accepted or remains active, relevant information must be moved into the controlled project record before that automatic deletion occurs. Minimal email-notification records may be retained as ordinary business and security records, but the notification is designed not to contain the customer’s full submission or photo files.

Retention can vary by record type and legal requirement. Deletion from active systems may not immediately remove information from limited-duration backups. When information is no longer reasonably needed, we take steps to delete it or de-identify it, subject to applicable requirements.

Security

The current quote workflow uses encrypted transmission, private storage, automatic deletion, server-side field and file validation, anti-automation checks, rate limiting, encrypted secret management, and signed expiring review and photo links. Provider-account access should remain protected with strong unique credentials and multi-factor authentication where available. The workflow checks file size and verifies that the file begins with a supported JPG, PNG, or HEIC signature, but it does not include a separate commercial antivirus or content-scanning service. No website, email account, text service, storage system, transmission, or security measure can be guaranteed completely secure. Do not send information that the quote process does not request. If a security incident triggers a legal notice obligation, FLEX it will provide notice as required by applicable law.

Your Choices and Privacy Requests

Subject to applicable law and recordkeeping requirements, you may ask FLEX it to provide access to, correct, or delete personal information associated with you. You may also decline optional information and opt out of promotional communications.

To make a request, use the contact page or call 513-402-2626. State that you are making a privacy request and describe the information and action requested. Include enough contact information for us to locate the relevant record. We may take reasonable steps to verify your identity or authority before acting and may retain or decline to disclose information when permitted or required by law. We will respond within the period required by any law that applies to the request.

Residents of some states may have additional rights if the relevant law applies to FLEX it or to the processing involved. Where required, FLEX it will not discriminate against a person for exercising an applicable privacy right.

Children’s Privacy

The website and services are intended for adults seeking property repair and maintenance services. FLEX it does not knowingly collect personal information online from children under 13. If we learn that such information was collected, we will take reasonable steps to delete it.

Changes to This Policy

We may update this policy when our practices, providers, or legal obligations change. We will post the revised policy at this same URL and change the “Last updated” date. If a change is material, we will provide additional notice appropriate to the change and applicable law before using previously collected personal information in a materially different way.

Contact FLEX it

FLEX it Handyman Services
Lebanon, Ohio
513-402-2626
Contact page
flexithandyman.com