Privacy
What this site
collects, and why
A plain-English account of what happens to information on this website. It describes how the site is actually built rather than what a template says.
Privacy
A plain-English account of what happens to information on this website. It describes how the site is actually built rather than what a template says.
Adopted 22 September 2026 · Updated 2 November 2026
This site has no advertising, no cookies, no login and no tracking that follows you anywhere else. It collects what you type into the inquiry forms and any file you choose to attach, and it loads fonts and a map from other companies, which means those companies can see your IP address. Customers can also have a private page with their test records and reports, and may get emails when a test is coming due. Nothing is sold.
The inquiry form on this site asks for some things it needs and some things that are optional. Depending on what you fill in, it can collect:
We use that information to reply to you, to work out what your property needs and which water provider governs it, to plan and perform service, and to keep the customer and compliance records that go with that work. We do not sell it, rent it, or share it for anyone else's marketing.
The quick request page lets you attach files — typically a photo of an assembly, a photo of a testing notice, or a device list as a spreadsheet or PDF. Anything you attach is uploaded to and stored by Netlify along with the rest of your submission, and we download it to work from.
Two practical notes. Photographs taken on a phone often carry location data and a timestamp inside the file; we do not use that, but it travels with the image. And please do not attach anything containing payment details, government identification numbers, tenant personal information, or similar — a device list with addresses is exactly right, a rent roll is not.
The form is processed by Netlify Forms, a service of Netlify, Inc., which also hosts this website. Your submission is stored in our Netlify account, where we can read it. It is not posted anywhere public. A copy of the text you type (not attached files) is also sent to our own records system, hosted by Supabase, so we can schedule the work. Only we can read it there.
The form contains a hidden field that real people never see or fill in. Automated spam tools fill it in, which is how those submissions get discarded. It collects nothing about you.
Like any website, this one is served by a host that records requests. Netlify receives your IP address, the page you requested, and basic browser information as part of serving the page. This happens for every visitor and is not something we switch on or off.
We use Cloudflare Web Analytics to count visits and see which pages get read. Cloudflare states that this product does not use cookies and does not fingerprint individuals. We use it to know whether anyone is finding the site — not to identify who.
This site sets no cookies. It does not use local storage or session storage. There is nothing to accept, decline, or clear, which is why you have not been shown a consent banner.
We can give a customer a private link to a page that shows their properties' backflow assemblies, their test dates and results, when each is next due, and a copy of each test report once it has been filed. The link is long and random and is not listed anywhere, but anyone who has it can open the page, so treat it like a key. Ask us and we will turn a link off and give you a new one. The page and the report files come from our records system, hosted by Supabase. Each report file has its own long, unlisted address, so someone who has that address can open that report.
The page also lets you pick a test or service day from the ones we offer, or leave a short note. Your choice and note go to our records system.
If we share a quote on your page, you can approve it by typing your name and signing on the screen, or decline it with a note. We keep your name, signature, the time and your note with the quote as the record of your approval.
You can also send us a service request from the page: what is going on, an optional note, your name and phone number, and an optional photo. The photo is shrunk on your device before it is sent. The request and photo go to our records system and are seen only by our staff.
When an annual test is coming due, we may email the address we have on file with the due dates and how to book. These emails are delivered by Resend (Plus Five Five, Inc.), which receives your email address and the content of the message in order to send it. Every reminder has a link to stop them, and once you use it we don't send more. Replies come to our own mailbox.
Parts of this site are served by other companies. When your browser loads them, it makes a request directly to those companies, and a request necessarily reveals your IP address and basic browser information to them. We do not control what they do with that, and their own policies apply.
| Company | What it provides | What it can see |
|---|---|---|
| Netlify, Inc. | Website hosting, the inquiry forms, and file uploads | Your IP address, requests, anything you submit through a form, and any file you attach |
| Google LLC | The typefaces used on this site (Google Fonts) | Your IP address and browser information when fonts load |
| Cloudflare, Inc. | Visitor analytics, and the mapping library used on the service-area map | Your IP address and browser information; the analytics product is stated by Cloudflare to be cookieless |
| Esri (Environmental Systems Research Institute, Inc.) | The map tiles on the service-area map | Your IP address when map tiles load |
| Supabase, Inc. | Our records system, which receives a copy of the text of form submissions, and serves customers' compliance pages, test and service reports | The text you submit through a form (not attached files), your IP address when the form sends or a compliance page or report loads, any day or note you choose on a compliance page, and quote approvals (name and signature) and service requests (note, name, phone, photo) sent from a compliance page |
| Resend (Plus Five Five, Inc.) | Delivery of reminder emails to customers | Your email address and the content of the reminder |
| Zoho Corporation | Our email (info@hammerheadflow.com) | The contents of any email you send us, which is stored in our mailbox |
Map data is credited to Esri, HERE, Garmin and OpenStreetMap contributors. Those credits are links; following one takes you to their site, where their policies apply.
Inquiries that do not lead to work are not kept indefinitely — we hold them long enough to respond and follow up, then remove them.
Test records are different. Water providers set a minimum we have to meet — three years across most of our service area, ten years for Virginia Beach and James City County — but we keep them longer than that on purpose. Backflow testing is an annual obligation, and a property's compliance history is only useful if someone still has it years later when an owner, inspector, insurer or buyer asks. We keep test reports and the records that go with them for the life of the account and afterwards, as our business records.
Email info@hammerheadflow.com and ask. We will tell you what we hold. We will remove contact and inquiry information on request. Test reports and their associated records are kept as business and compliance records, as described above, and are not removed on request. Where a test report has been filed with a water provider, that provider holds its own copy under its own rules, and we cannot remove that.
This site is for property owners and managers. It is not directed at children and we do not knowingly collect information from them.
The site is served over HTTPS. We take reasonable care with what you send us, but no method of transmitting information over the internet is completely secure, and we will not claim otherwise. Please do not send payment card details, government identification numbers, or anything similarly sensitive through the inquiry form — it is not built for that and nothing on this site will ever ask you for it.
If this policy changes, the date at the top of this page changes with it. This site is operating ahead of launch; the policy will be reviewed again when scheduling opens.
Hammerhead Flow Co LLC · Moyock, North Carolina · info@hammerheadflow.com