DRAFT — owner and counsel to confirm. Every factual statement below is true of the site as it is built. Two things still need confirming: the business's own name and contact address, and whether Washington's My Health My Data Act or any other statute imposes a duty this page does not yet state.

Privacy

Last drafted 2026-09-27.

What is collected

Only what the order form asks, and only when you send it. That is:

• Your name, company, email address and phone number. The email address is how the plan reaches you. The name and company print on the plan, because the agency's own title block asks for them. We use the phone number only to ask a question about the job.
• Everything you say about the job — the street, the cross street, the city, the work space, the closure, the dates, and anything you type in the free-text boxes. We keep this word for word. Where the form could not decide something for certain, what you actually said is what the plan is drawn from.
• Any files you attach — site photos, a site plan, permit paperwork. They are stored with the order and are not public in any listing. A file's own address is not secret, though, and anyone given that address could open it. A file you attach and then never send the job with is deleted within about a day.

There is nothing else. You get no account and no password, and no third-party analytics, advertising or tracking script runs on any page here.

This site sets one cookie, and no customer receives it. The person who draws your plan signs in to pages a customer never sees, and that sign-in sets a session cookie in that person's own browser. You get no cookie from this site when you order a plan, pay for it, or look it up.

What the server records anyway

When you send an order, one line goes to a private usage log:

• the time;
• the order reference;
• which kind of plan it was;
• the city;
• how many attachments came with it.

That line carries no name, no email address and no phone number. The hosting provider also keeps its own request logs, including IP addresses, on its own schedule.

Who sees it

The person who draws your plan. Nobody else, and nothing is sold, shared or used to market anything to anyone.

The services that hold it, and nothing more than they need to:

• Vercel, for hosting and file storage;
• Upstash, for the order records;
• an email provider, to send the notification and the plan.

Each of those is in the United States.

Stripe, where you pay by card. Stripe gets your email address, the amount, and the order's reference, so that its receipt reaches you and so the payment can be matched to your job. It is Stripe that takes the card details, on its own page: they are not typed into this site, do not pass through it, and are not stored by it. This site is told the amount, whether it succeeded, and Stripe's own identifiers for the payment, and that is what the order's record holds. Stripe keeps what it holds under its own privacy policy and for its own legal reasons, which this business cannot shorten.

How long it is kept

An order is kept while the job is live and for two years afterwards. After that it is deleted. Two years, because a revision to a delivered plan is regenerated from the inputs it was drawn from. A customer who comes back a year later should not have to describe the job again.

Ask and it is deleted sooner. Email with your order reference, and the record, the answers and the attachments go. The plan you were sent is yours, and it does not depend on the order staying here.

One thing cannot be deleted on request: the record Stripe keeps of a payment, and what this business has to keep of its own accounts. Deleting an order here removes the name, the answers, the files and this site's copy of the payment identifiers; a payment that happened remains a payment that happened, in Stripe's records and in the books.

Looking your own order up

There is still no account and no password. The page that shows where an order has got to asks for two things: the order's reference and an access code that came with the order. The code is random. It is shown once when the order is sent, and emailed to the address the order was placed with. This site keeps only a one-way hash of it.

The reference on its own is not enough, because it travels: it is printed, emailed and read out over the phone.

That page keeps nothing in your browser after you close the tab. While you are paying by card it holds the code in that one tab, so that it can bring you back to your order, and it never sends the code to Stripe. Come back tomorrow and the page asks again, or use the link in the confirmation email.

Asking for a copy, a correction, or a deletion

Email with your order reference and say which. There is no form and no fee.

To be settled: the address to email, and whether any statutory response time applies.

Children

This is a service sold to contractors and it is not directed at anyone under 18.

If this page changes

The date at the top changes with it. Two kinds of change would be told to the people whose orders are held: a change that makes the retention longer, and a change that adds anybody new who sees your order.