Privacy Notice

This notice describes what this website collects and why, as the site works today. Each organization (the commercial company, the Alliance and the Foundation) keeps its own records and does not share them with the others.

What we collect

• Forms. Only what you type into a form: for example name, email, trade, deadline, a short description, or tip details. Each form says what it is for. No form accepts file uploads. Each organization's submissions go to that organization's own restricted spreadsheet, so Alliance and Foundation messages are not stored with commercial inquiries.
• Abuse prevention. A one-way hash of your network address, used only to limit repeated submissions. We do not store the address itself.
• Usage counters. Optional and currently off. If turned on they count fixed events (for example a page view or a completed signup) by day. They record no names, emails, form contents, IP addresses or cookies, and they respect Do Not Track and Global Privacy Control.
• Cookies. This site sets no cookies and uses no advertising or analytics trackers, so there is no cookie banner or cookie-settings control.
• Fonts. Pages load fonts from Google Fonts, which can receive your network address and browser details. We plan to host fonts ourselves; until then, this is a disclosed exception.

What we do not do

• We do not sell personal information.
• We do not use form contents for advertising profiles.
• We do not ask for confidential documents, passwords, payment cards, Social Security numbers, or hardship, medical or children's information through public forms.
• We do not send marketing email unless you separately opted in, and joining a list for one organization never subscribes you to another.

How information is used

To reply to you, to review requests, to keep the site secure, and to run the service you asked about. AI assistants help sort and draft, but a person approves anything that is published or sent. See AI use and human review.

Where it is stored and for how long

Ordinary forms (contact, estimate requests, advisory and partnership inquiries, Alliance interest, corrections and responses, newsletter requests, education suggestions) are sent by our hosting service (Cloudflare) to a Google Apps Script that writes them to a restricted Google Sheet in the Google Workspace account of IronGate Safety & Risk Solutions. Only the account owner and anyone the owner adds can open those sheets. A short notification email names the form and a reference number; it does not include what you wrote. Our hosting service also keeps a log with the reference, form name, result and a one-way hash of your network address, but no message content.

Safety Watch tips and all Foundation messages are never stored in Google Sheets, are not copied into notification emails, and are not written to application logs. They are stored only in a separate restricted database. Only named administrators can open it, they must sign in through a protected login, and every view or change is recorded in an access log that does not contain what you wrote. The database does not store your network address; a one-way hash of it is kept for at most one hour to limit repeated submissions.

• Ordinary inquiries and estimate requests that do not become work: deleted 12 months after the last meaningful interaction.
• Foundation preliminary interest inquiries: deleted after 6 months unless you ask us to keep in touch.
• Tips that are unpublished and unsubstantiated: reviewed by a person at 90 days, then deleted unless there is a documented reason to keep them.
• Member records: reviewed for deletion or reduction 12 months after membership ends.
• Contracts, financial records, donor records, assistance cases and client evidence: kept under separate schedules that are not yet set. Records under a legal preservation requirement are not deleted on schedule.

Services that handle information for us

Cloudflare (hosting and form processing), Google (Workspace email, Sheets and Apps Script, and Google Fonts) and, if later enabled, an email-sending service. We have not given any of them permission to use form contents for their own marketing.

Your choices

You can ask to see, correct or delete information you gave us, or withdraw marketing consent, by writing to the organization concerned through the contact page. A person handles these requests; we have not promised a response time.