The short version.
This site does very little. There is no account to make, nothing to log into, and no advertising network watching you here. Simply reading these pages hands us nothing about you personally.
There are exactly three ways you can hand us something, and you choose all three of them: you book a call, you place an order, or you write to us. Each one is described below, in the order you would meet it.
Booking a call.
Every button on this site that offers you a call is a link, not an embed. It opens Cal.com, which is a different company’s website with its own privacy policy. Nothing from Cal.com runs here, and this site does not hand it anything about you.
What you type once you are on Cal.com is entered on Cal.com, and Cal.com’s privacy policy governs it. If you go ahead and book a time, we see the booking details you chose to give them: your name, your email address, and whatever you wrote in the booking notes.
Ordering, and what happens to your card.
Orders are taken through Stripe. When you order, you leave this site and land on Stripe’s secure checkout, which is Stripe’s page under Stripe’s privacy policy.
Your card number never reaches us. We do not see it, we do not store it, and there is nowhere on our side that it could be kept. Stripe handles the card and tells us the payment succeeded.
- What we receive from an order: your name, your email address, your business name, the size and payment path you chose, and anything you chose to tell us in the checkout fields.
- What we receive for a subscription: the same, plus the billing record Stripe keeps for it, so we can answer a question about a charge and so you can cancel yourself in the Stripe billing portal.
- What we never receive: your full card number, your CVC, or your bank login.
When you write to us.
If you email us, it arrives in our inbox the way any email from a customer does. We read it and we write back, and we use your email address to answer you.
There is no database behind that. Your message lives in our mail, not in a marketing system, and writing to us does not put you on a list.
Hosting, and the traffic figures we see.
This site is built as static pages and served by Cloudflare on Cloudflare Pages and Cloudflare Workers. Like every host, Cloudflare records the requests it serves, which is the ordinary server log any website generates: the page asked for, the time, the IP address that asked, and the browser that asked.
What we get back from that is a set of totals: page views, performance, roughly where visitors are, and which sites they arrived from. It is not tied to your name and we cannot use it to pick you out. We do not run Google Analytics, an advertising pixel, or any cross site tracking.
What else a page loads. Nothing.
No third-party services or trackers load on these pages; every font, icon and script is served from our own domain. No advertising network and no analytics product, so no third party is told that you visited.
That is checked mechanically rather than promised. The build refuses to publish if an analytics or advertising loader appears anywhere in the site it produced.
Cookies and what is left in your browser.
We set no advertising cookies and we do not follow you across other websites. There is no account here and no profile of you being assembled anywhere.
Cloudflare’s security layer is the only thing here that may set anything, and what it is for is keeping the site standing rather than building a picture of you. Anything left in your browser can be cleared from your browser settings at any time.
The lead data we hold on a customer’s behalf.
This part is not about visitors to this site. It is about the websites we build and host for concrete contractors, and the homeowners who contact them there.
When a homeowner submits an estimate request or a message on a customer’s site, that submission is stored and delivered to the contractor on the contractor’s behalf. For that data the contractor is the business the homeowner is dealing with, and we act as the contractor’s service provider: we store it and deliver it for them, we do not use it for our own marketing, and we do not sell it.
- Marketing consent is recorded with evidence. If a homeowner ticks the optional marketing box, we record the exact consent wording, its version, and the time it was granted. Any marketing email sent under that consent carries an unsubscribe link, and an unsubscribe is honored everywhere.
- Review requests. The AI Office Manager can ask a contractor’s customer for a Google review after a completed job. It asks for honest reviews only. What somebody writes is theirs, and we never write, edit, or filter it.
- Homeowner rights. A homeowner can exercise their privacy rights through the contact details published on the contractor’s own website, or by writing to us at support@concreteauthority.dev.
What we do not do.
Plainly, so there is nothing to infer:
- We do not sell, rent, or trade anything about you. Not to anyone, at any price, and not to a data broker or a lead marketplace.
- We do not share your personal data for targeted advertising. Under Texas and California law a “sale” can include disclosing personal data for other valuable consideration; the providers named on this page are here to run the business, not to advertise at you.
- We do not run advertising networks or advertising pixels.
- We do not follow you around other websites.
- We do not put you on a mailing list because you wrote to us. You wrote to us, so you get a reply.
- If any of that ever changes, this page changes first, clearly, and with whatever notice or opt-out the law requires before the change takes effect.
How long we keep it.
Only as long as it is doing a job, and then it goes.
- Enquiries and booking details: kept while we are talking, and for a limited period after that in case you come back.
- Customer and billing records: kept for the life of the engagement and then for as long as tax, accounting and legal obligations require us to keep them.
- Lead data we hold for a contractor: kept while that contractor’s site and service are active, along with the consent records that document a homeowner’s choice.
- Server logs: short-lived, and kept by our host for security and performance rather than by us for marketing.
- Unsubscribe records: kept, because that is how an unsubscribe stays honored.
Your rights, wherever you live.
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or ask us to send it to you in a portable form. We do not charge for that and we do not treat you differently for asking.
We are based in North Carolina and our customers are elsewhere, so your rights travel with you: Texas residents keep their protections under the Texas Data Privacy and Security Act, California residents keep theirs under the CCPA and CPRA, and visitors from the EU or the UK are covered by the GDPR-aware terms of this page. Where the law requires it, we honor recognized browser opt-out signals such as Global Privacy Control.
This is a service sold to businesses and it is not directed at children. We do not knowingly collect personal data from anyone under 13, and if we learn we have, we delete it.
Texas residents may also contact the Office of the Texas Attorney General about the TDPSA.
Asking us what we hold, or telling us to delete it.
Write to support@concreteauthority.dev and say what you want: a copy of what we hold about you, a correction to it, or deletion. Put “privacy request” in the subject line so it routes cleanly. General questions go to hello@concreteauthority.dev.
Post reaches us at 210 Harmon Creek Road #1004, Kernersville, NC 27284.
Concrete Authority is a brand of Waz Investments LLC, a North Carolina limited liability company, and it is operated from North Carolina. That company is the one answering.
If this changes.
This page describes the site as it is built today. If what the site does changes, this page changes with it, and the date at the top moves.