Privacy Policy
Last updated: 8 September 2026
1. Summary
- If you ask for a quote, your details go to one business at a time — first the one you chose, and if they do not open it, possibly to one or two others. Never more than three in total, never two at once. Section 7.
- We use Google Analytics, and it runs on every visit. There is no cookie banner. Section 4 says how to stop it.
- We do not run advertising on this site and do not share your information for advertising.
- Most of what is on a business’s profile came from public records and that business’s own public website, not from the business. Section 5.
- Correcting or removing information is free, and is not conditional on a subscription.
Where this summary and the detail differ, the detail governs.
2. Who this covers
This policy applies to FloridaPoolz.com (the “Site“), operated by FloridaPoolz (“we“, “us“).
| You are | The relevant sections |
|---|---|
| A homeowner, or anyone browsing or requesting a quote | 3, 4, 6, 7, 8, 9 |
| A business with a profile, claimed or not | All, and particularly 5 and 9 |
| Someone who emailed us or sent a correction | 3, 6, 9 |
This policy does not cover what a business does with your information after we pass it on. That business is an independent controller with its own practices. It does not cover other websites we link to.
3. What we collect
3.1 When you request a quote
Your name; your email address; your telephone number if given; the town of the project; a budget band if selected; your description of the project; the profile you submitted from; and the fact and time of your acceptance of our Terms.
Recorded alongside it:
- The town used to route the request. This is the registered town of the business whose profile you used, not what you typed. What you typed is treated as a fact about the job and shown to whoever answers.
- The pool specification, where given.
- Which businesses the request was offered to, when, and whether each opened it.
- Whether you have another request in circulation. To prevent one enquiry reaching several businesses at once, a new request is checked against your recent ones by email address, and failing that by telephone number. This links your requests to one another.
3.2 When you claim a profile or hold an account
Your name; email address; role at the business; password, stored hashed; a record of sign-ins and of changes you make to the listing; and, on acceptance of our Terms, the version accepted, the date and time, the route by which acceptance was given, and the IP address it came from.
3.3 When you subscribe
Subscription status, plan, and the identifiers Stripe provides to link a subscription to a listing. We do not receive or store payment card numbers.
3.4 When you send a correction or contact us
What you put in the form or the email — typically your name, email address, the business concerned, and what you say is wrong.
3.5 When you use the profile manager
The content you publish about the business, the areas you register for, and your notification preferences.
3.6 Automatically
IP address, browser and device type, referring page, and the pages you view and when. Our host keeps standard server logs.
We do not collect, and do not want, financial account details, government identifiers, biometric or health information, precise geolocation, or information about children.
4. Cookies and analytics
Google Analytics, via Google Site Kit, counts visits and records how the Site is used. It sets cookies and collects your IP address, the pages you view and your referring page. It runs on every visit. There is no consent banner and we do not ask you to accept cookies before the Site works.
To stop it: block cookies for this site, use a private window, use a content blocker, or install Google’s opt-out browser add-on. The Site works normally either way.
Also loaded on every page:
- Google Fonts — sets no cookie, but requesting a font file discloses your IP address to Google.
- Cloudflare — our host sits behind it. It sets a cookie (
__cf_bm) to distinguish people from automated traffic. We do not control it and cannot disable it.
We do not use advertising cookies, retargeting pixels or third-party ad networks, and we do not sell advertising on the Site. There is no cross-context behavioural advertising here. We honour a Global Privacy Control signal where a browser sends one.
Forms on the Site carry a security token and rate limits. The token sets no cookie and identifies nobody.
A cookie setting is not the consent on a quote form. Blocking analytics does not withdraw a request already sent, and accepting cookies authorises nothing about a request. Those are governed by section 7 and by the Terms.
5. Where business profile information comes from
A profile is assembled before any business claims it, from:
| Source | What it provides |
|---|---|
| Florida DBPR licence register | Licence number, type, status, issue and expiry dates, the qualifying individual’s name |
| Public review platforms | Star ratings, review counts, and the text of published reviews, which we also summarise into themes |
| The business’s own public website and public social profiles | Description, services, service areas, opening hours, contact details, logo, photographs of work, and the towns it names |
| Domain registration records and the Internet Archive | When the domain was registered and when the site was first archived |
| Public business registration records | Entity name, status, formation date |
| The business itself, once it claims the profile | Everything in 3.5 |
We do not use building-permit records. They are not on a profile and are not used in the score.
Individuals. Where a licence is held by a named qualifying individual, that name is part of the public licence record and may appear on a profile. A personal telephone number, personal email address, personal photograph or personal social profile appears only on a profile a business has claimed and chosen to publish it on — never on an unclaimed profile. Any individual may ask us to remove their name; see /data-policy/.
Photographs. Photographs on an unclaimed profile came from that business’s own public website. Every photograph published on the Site was reviewed by a person before publication, and we hold a record of who reviewed it and when. The profile names where the photographs came from. Any business may have any photograph removed on request, without charge — see /data-policy/.
Dates. Every profile states when it was last refreshed. Information correct then may have changed since. The registers we link to are the authority.
6. How we use information
- To do what you asked — pass a request to a business, publish or correct a listing, answer your email, operate your account.
- To tell you what happened to a request you sent.
- To operate, secure and improve the Site, including counting visits and identifying faults.
- To prevent spam, abuse and fraud.
- To take payment for a subscription.
- To keep the records tax, accounting and legal obligations require, and to establish or defend legal claims.
We do not use your information for advertising, do not disclose it to data brokers or list resellers, and do not treat a quote request as permission to send you marketing.
Where a legal basis is required, ours is: performing the service you requested; our legitimate interest in operating an accurate directory and keeping it secure; your consent where given; and compliance with law.
7. Who we disclose information to
7.1 Businesses
A quote request is offered to one business at a time: first the business whose profile you used, then — if it is not opened — possibly to one or two others that have registered for that town and do the work described. Never more than three in total. Never two at once. The Terms §7.3 and /lead-rules/ set out the periods, the circumstances in which a request is or is not passed on, and how to withdraw.
What each business receives depends on whether we have confirmed its address:
- A business whose address we have not confirmed is not sent your name, telephone number, email address or message. It is told that a request exists and invited to verify itself.
- A business with a confirmed account is emailed the town, the budget band and the pool specification. Your name, telephone number, email address and your own words are not in that email. They are in that business’s profile manager.
- The business whose profile you used, where it holds a subscription, is emailed the whole request.
A business that opens your request holds all of it — every field, on every tier, paid or unpaid.
A business that lets a request expire without opening it retains only a masked record, sufficient to show that a request existed and was not taken, and not sufficient to contact you. Contact details are not displayed to a business that did not take the request. We continue to hold the full record ourselves, under section 8.
7.2 Service providers
Each is engaged for one function, under contract, and none is permitted to use your information for its own purposes:
| Vendor | Function | What it receives |
|---|---|---|
| Kinsta | Hosting | Everything stored on the Site; server logs |
| SMTP2GO | Email delivery | The content and recipients of our emails, and delivery and bounce results |
| Stripe | Payments | Subscribers’ billing details and card data, which we do not receive |
| Google — Analytics / Site Kit | Analytics | Page views, IP address, standard analytics data |
| Google — Fonts | Typefaces | Your IP address when a font is requested |
| Cloudflare | Sits in front of our host | Traffic metadata; a bot-detection cookie |
| Web3Forms | Relays the form on /contact/ |
Your name, email address and message |
A vendor that handles personal information is added to this table.
7.3 Others
- Aggregate figures that identify nobody.
- Where the law requires it, in response to valid legal process, or to establish or defend a legal claim.
- To a buyer or successor, if the business is sold or merged, as part of the assets. This policy continues to apply until the acquirer publishes its own, and we will give notice on the Site before any change takes effect.
We do not disclose your details to data brokers or list resellers, do not share them for advertising or cross-context behavioural advertising, and do not charge a business a fee for receiving your request. Businesses pay a monthly subscription for a listing and for notification; being offered requests is part of what a subscription includes.
8. Retention
We retain personal information no longer than set out below, and dispose of it securely.
| Quote requests | The full record for 24 months, then reduced to a record of the request with your name and contact details removed. Contact details are masked to any business that did not take the request as soon as it expires. |
| Accounts and profile content | While the account exists, plus 12 months |
| Terms-acceptance records | While the account exists, plus 6 years — they evidence an agreement |
| Subscription and payment records | 7 years, as tax and accounting law requires |
| Corrections and correspondence | 24 months |
| Server logs | 30 days, rolling |
| Analytics data | Per Google’s retention setting, currently 14 months |
| Backups | Overwritten on their own cycle after deletion elsewhere |
Public-record information about a business is retained while the profile is published, and is refreshed rather than accumulated — we hold the current state, not a history.
We may retain information for longer where required by law or where necessary to establish or defend a legal claim, and in that case only for that purpose.
9. Your choices
Stop our emails. Email hello@floridapoolz.com and we will stop, or use the unsubscribe instruction in any email we send. A business can also switch notifications off in the profile manager. A business that stops notifications still has requests offered to it on the normal schedule — it simply is not told, which in practice means it does not see them.
Correct something. Use the form at /data-accuracy/, or email us. Corrections from the business itself take priority. There is no charge.
Delete something, or be removed. A homeowner may ask us to delete their quote request. A business may ask for a profile to be removed, or suppressed from search while retaining the option to claim it later. /data-policy/ sets out both.
Access what we hold. Ask and we will tell you.
How to ask. Email hello@floridapoolz.com. We may need to verify your identity before disclosing or deleting personal information, usually by requiring a reply from the address the information is attached to. There is no charge and no purchase is required.
Automated decisions. We do not make automated decisions about individual people producing legal or similarly significant effects. The score is about businesses, is calculated from factors published at /how-we-rank/, and we will explain any individual score to the business concerned.
State privacy statutes. The Florida Digital Bill of Rights and the California Consumer Privacy Act apply above revenue and volume thresholds we do not meet, and we do not do business in California. The choices above are offered irrespective of whether a statute compels them.
10. Security and breach notification
The Site runs over HTTPS. Passwords are stored hashed. Administrative access is limited to those who need it. Forms carry a security token and rate limits. A quote request is bound to the profile it was submitted from, so one cannot be fabricated at a business that did not receive it. Changing an account’s password or email address requires the current password, even in a signed-in session. Sign-in links sent by email are single-use, expire, and do not sign anyone in until confirmed on the page.
No system is perfectly secure. In the event of a breach of security affecting personal information, we will notify affected individuals as required by Florida Statutes §501.171 and no later than 30 days after determining that a breach has occurred, and will notify the Florida Department of Legal Affairs where that section requires it.
If you believe you have found a vulnerability, email hello@floridapoolz.com. We will not pursue anyone who reports one in good faith.
11. Children
The Site is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us information, email us and we will delete it.
12. Where information is held
We and our vendors process information in the United States. If you contact us from outside the United States, your information will be handled there.
13. Do Not Track
There is no agreed standard for responding to Do Not Track signals and we do not respond to them. We honour Global Privacy Control, as section 4 states.
14. Changes
We may update this policy, and the “Last updated” date will change. For a change that materially affects how we use or disclose personal information, we will give 30 days’ notice by email to account holders and by notice on the Site before it takes effect. Earlier versions are available on request.
15. Contact
FloridaPoolz hello@floridapoolz.com
For anything concerning a specific profile, the fastest route is the form at /data-accuracy/.
