Data processing terms

What this covers

When we build and run your website, people who visit it send information through it, mostly through your quote form: a name, phone number, email, the work they need, their town and a message. Your site also counts taps on its call and text buttons, without saying who tapped.

That information belongs to you and is about your customers. We handle it only for you, to run your site and show it to you. In privacy-law terms you are the business it is collected for, and we are your service provider. These terms are part of your agreement with us.

What we do with it

We use your customers’ information only to:

• Deliver each quote request to you by email and show it in your dashboard.
• Count calls, texts and requests for your monthly report.
• Keep your site secure, stop spam and fix problems.

What we never do with it

We never:

• Sell it, rent it or trade it.
• Use it to market our own services, or anyone else’s, to your customers.
• Combine it with information from other clients’ sites.
• Share it, except with the service providers listed below, or when the law requires it.

Service providers we use

These companies process data for us, each under its own security and privacy terms. If we add or change one that handles your customers’ information, we’ll update this list and tell you.

• Cloudflare: hosts your website, the dashboard and the database; sends email; provides the bot check on forms and privacy-friendly visit counts.
• Stripe: card payments between you and us. Stripe never receives your customers’ information.
• Google: only with your permission, we read your Search Console and Business Profile numbers for your reports. We don’t send your customers’ information to Google.

How we protect it

Among other things:

• Everything travels encrypted (HTTPS), and the database sits on Cloudflare’s encrypted storage.
• Only the owners of NXG Technologies can open our back office, behind Cloudflare sign-in. Your dashboard shows only your own business’s data, and our tests check that one client can’t see another’s.
• Passwords are stored scrambled, sign-ins are rate-limited, and two-step sign-in is available.
• Form spam checks use a scrambled version of the sender’s internet address, kept for one day.

If something goes wrong

If we learn that your customers’ information was accessed by someone who shouldn’t have it, we’ll tell you without unreasonable delay and give you what you need to notify people as Nevada law requires (NRS 603A.220). We’ll also do what we can to stop it and to keep it from happening again.

Requests from your customers

If one of your customers asks to see, correct or delete their information, send the request to us and we’ll help you answer it. If a customer contacts us directly, we’ll send them to you.

How long we keep it

We keep quote requests and counts while you’re a client, so your history and reports stay complete. You can ask us to delete any request at any time.

When you stop being a client, ask us for a copy and we’ll send one. We delete the rest within 90 days of your last day as a client, except anything the law requires us to keep.

Your part

Your website needs a privacy notice that tells your customers what the form collects and why. We write one into every site we build, and you approve it. Tell us if your business has rules of its own about customer information, and we’ll work within them.