Privacy Policy

1. Introduction

United Fall Protection ("we," "our," or "us") operates the United Fall Protection Dashboard (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dashboard service for scheduling fall protection equipment inspection and cleaning services.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect the following personal information:

• Name: Your full name for account identification and service communication
• Email Address: Used for account authentication, service notifications, and communication
• Password: Encrypted and stored securely for account access (we cannot view your password)
• Phone Number: Used for service coordination and emergency contact
• Company Name: Optional field for business account identification
• Address: Required for scheduling pickup and delivery services

2.2 Service-Related Information

When you schedule services through our dashboard, we collect:

• Equipment types and quantities for inspection and cleaning services
• Preferred service dates and time slots
• Service type preferences (inspection, cleaning, or both)
• Delivery method preferences (pickup service or on-site service)
• Service notes and special instructions
• Waiver signatures and related documentation

2.3 Payment Information

We use Stripe, a PCI-DSS compliant payment processor, to handle all payment transactions. We do not store, process, or have access to your full credit card details. Payment information is securely processed directly through Stripe's secure payment infrastructure. We only receive and store:

• Payment transaction IDs and status
• Payment amounts and dates
• Billing information necessary for tax calculations

2.4 Automatically Collected Information

When you access our Service, we automatically collect certain information:

• IP address and device information
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Access dates and times

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To schedule, manage, and deliver fall protection equipment services
• Account Management: To create and manage your user account, authenticate your identity, and provide access to the dashboard
• Communication: To send service confirmations, status updates, appointment reminders, and respond to your inquiries
• Payment Processing: To process payments for services, calculate taxes, and manage billing
• Service Improvement: To analyze usage patterns, improve our services, and enhance user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address security issues and fraudulent activity
• Administrative Functions: To manage time slots, coordinate service delivery, and maintain service records

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Stripe: For secure payment processing (PCI-DSS compliant)
• Supabase: For secure database storage and authentication services
• Verdocs: For electronic waiver signature processing and document management
• Email Service Providers: For sending service notifications and communications
• Hosting Providers: For secure data storage and application hosting

All service providers are contractually obligated to maintain the confidentiality and security of your information and are prohibited from using your information for any purpose other than providing services to us.

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government investigations).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4.4 With Your Consent

We may share your information with your explicit consent or at your direction.

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS technology
• Secure Storage: Personal information is stored in secure databases with access controls and encryption at rest
• Access Controls: We use role-based access control (RBAC) to ensure only authorized personnel can access your information
• PCI Compliance: Payment processing complies with PCI-DSS standards, and we never store full credit card information
• Authentication: Strong password requirements and secure session management protect your account
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Data Masking: Sensitive information is masked in logs and audit trails

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: You can access and review your personal information through your dashboard account settings
• Correction: You can update your personal information at any time through your account settings
• Deletion: You can request deletion of your account and associated data by contacting us or using the account deletion feature
• Data Portability: You can request a copy of your data in a machine-readable format
• Opt-Out: You can opt-out of non-essential communications, though service-related emails are required for account operation

To exercise these rights, please contact us at the information provided in Section 10, or use the account management features in your dashboard.

7. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Account information is retained while your account is active and for a reasonable period after account closure
• Service records and transaction data are retained for legal and accounting purposes as required by law
• Waiver signatures and related documentation are retained in accordance with legal requirements for liability protection
• Payment transaction records are retained in accordance with financial regulations

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze Service usage. You can control cookie preferences through your browser settings, though disabling cookies may affect Service functionality.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Regional Privacy Rights

Depending on your location, you may have additional privacy rights:

12.1 California Residents (CCPA)

California residents have the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

12.2 European Residents (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to erasure, data portability, and the right to object to processing. Our legal basis for processing your data includes contract performance, legitimate business interests, and compliance with legal obligations.