Privacy policy
What we collect, why we collect it, who sees it, and what we will never do with it — in plain language first, details after.
The short version
- Your address or ZIP is used server-side only, to identify a likely public water system. It never appears in your report link, in analytics, in ad parameters or in any URL.
- When you request contact from a professional, your details go to the one company named on your screen — never to a list of dealers, and never resold.
- Reports use anonymous, unguessable links containing no personal information, and are excluded from search engines.
- We never ask about health conditions, pregnancy, illness or medical vulnerability, and we do not build health profiles.
- Our analytics are first-party and contain no names, emails, phone numbers or addresses.
- You can request access, export or deletion of your data at any time.
Information you provide
- Water check answers: your ZIP code, water source, symptoms, project type, home basics (such as number of bathrooms), timing and preferences. These describe your water situation, not your identity.
- Contact details: your name, phone number and optionally email — collected only when you explicitly ask a named provider to contact you, or ask us to email you your report. We show you who receives them before you type them.
- Correspondence: anything you send to our contact or privacy addresses.
Information collected automatically
- Session data: an anonymous session cookie that keeps your answers together as you move through a water check. Essential for the service to work.
- First-party events: anonymous usage events (for example "quiz started," "report viewed") tied to a random session identifier. Payloads are automatically stripped of personal fields before storage.
- Google Analytics 4: we use Google Analytics to measure page views and the same anonymous milestones (quiz started, route decided, report viewed, request submitted). We send it no names, emails, phone numbers, addresses, report links or laboratory results — only anonymous event names, route codes and a reference code. Google's processing is governed by Google's privacy policy.
- Campaign parameters: if you arrive from an ad, we store the click identifiers and campaign parameters from the URL (such as gclid and utm values). These identify the ad click, not you.
- Server logs: standard web-server logs (IP address, user agent, requested URL) kept for security and troubleshooting, with retention limits.
How we use information
- To identify your likely water system and generate your report.
- To match your situation to a next step — a test, a product category or a professional route.
- To transmit your request to the one provider you selected, when you ask us to.
- To send you your report by email, when you request it.
- To measure which pages and campaigns lead to genuinely useful outcomes, using anonymous events.
- To secure the service, prevent abuse and comply with law.
What we do not do
- We do not sell or rent your personal information, and we do not share it with data brokers.
- We do not send your contact details to anyone other than the single provider you were shown and asked to be contacted by.
- We do not place your address, name, email or phone number in analytics, advertising parameters or URLs.
- We do not collect health information or build advertising audiences based on contaminants or water test results.
- We do not use dark patterns: marketing consent is always a separate, unchecked box, and it is never a condition of receiving your report or your provider match.
Who we share information with
- The provider you choose: when you submit a contact request, the named company receives your name, phone, optional email and the project context needed to respond. Their use of it is governed by their own privacy practices and our partner standards.
- Service providers: hosting, database and email-delivery vendors that process data on our behalf under contract, only as needed to run the service.
- Legal: when required by law, subpoena or to protect the rights and safety of users or the public.
- Business transfer: if Home Water Compass is acquired or merged, data may transfer under the same protections; we will notify you of material changes.
Cookies
We use essential first-party cookies — a session cookie (keeps your answers together) and a security token for forms — plus Google Analytics cookies (_ga and related) used solely for the anonymous measurement described above. We do not load advertising pixels or social-media trackers. You can opt out of analytics in privacy choices or with any standard cookie-blocking tool; the site works fully without it.
Retention
- Water check sessions and reports: retained while useful for your return visits, then deleted or anonymized on a schedule.
- Contact requests: retained as business records of the request you made, including the exact consent language you saw.
- Anonymous events: retained for analysis; they contain no personal information.
- Server logs: rotated on a short schedule.
Security
All traffic is encrypted in transit (HTTPS with HSTS). Personal information is stored in access-controlled databases, secrets are held server-side only, and administrative access is limited and logged. No system is perfectly secure; if a breach affects your personal information, we will notify you as required by law.
Your rights
You can ask us, at any time, to:
- Access or export the personal information we hold about you.
- Correct inaccurate information.
- Delete your personal information (we retain only what law requires, such as proof of an opt-out).
- Withdraw marketing permission — this never affects a report you already requested.
Exercise any of these at Privacy choices or by emailing [email protected]. We respond within the timelines required by applicable law and never discriminate against you for exercising your rights.
California and state privacy rights
If you are a resident of California or another state with a consumer privacy law, you have the rights described above, including the right to know, delete and correct. We do not sell personal information and we do not share it for cross-context behavioral advertising. If we ever introduce advertising technologies that qualify as "sharing," we will provide an opt-out mechanism first, including honoring the Global Privacy Control signal.
Children
This service is intended for adults making household decisions. It is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child provided us information, contact us and we will delete it.
Changes
We will post any changes here with an updated date. For material changes affecting how we use personal information, we will provide more prominent notice.
Contact
KYCASEWORKS LLC · 2810 N Church St #626078, Wilmington, DE 19802, US · +1 877 327 3089 · [email protected]