Privacy Policy

Last updated: September 16, 2026

1. Information we collect

If you submit a quote request to a listed business: your name, phone number, optional email, the service you're requesting, and your consent to be contacted (recorded with the time and the IP address you submitted from, so we have a real record that consent was given, not just that it was displayed).

If you apply to become an accredited business: your name, email, phone, city, and anything you tell us about your business in the application.

If you report a concern about a listed business: your name, email, and your message.

If you're an accredited business or work for one: your account information (through our sign-in provider, Clerk), business profile details, and the accreditation documents you submit for review (license, insurance, background check, and related records) — these are reviewed by our team and stored securely; we don't publish the documents themselves, only the dated status of each check.

We don't run advertising or analytics trackers on this site today. Our hosting and infrastructure providers (see below) log standard technical information — like IP address and browser type — the way any web host does.

2. How we use this information

To connect a quote request with the business it's for, to review and confirm accreditation checks, to notify accredited businesses and our team about activity relevant to them (a new quote request, a job update, an accreditation check nearing its expiry), to respond to questions sent through our WhatsApp assistant or support email, and to operate and improve the site.

3. Who we share it with

A quote request is shared with the specific business it's for — that's the whole point of submitting one. We don't sell your information, and we don't share it with other businesses, advertisers, or data brokers. We do use a small number of service providers to run the site, each only for the purpose of providing their service to us: Supabase (database and file storage), Clerk (sign-in for accredited businesses and staff), Vercel (hosting), Resend (email delivery), and Twilio (WhatsApp messaging). We may also disclose information if required by law.

4. How long we keep it

We keep quote request and application records for as long as reasonably useful for the purposes above, and accreditation records for the life of a business's listing plus a reasonable period after, for our own records. You can ask us to delete information that identifies you at any time (see Section 6).

5. Cookies

Accredited businesses and staff signing in use a session cookie from our sign-in provider, Clerk, to stay signed in. We don't use cookies for advertising or tracking your activity across other websites.

6. Your choices

You can ask us what information we have about you, ask us to correct it, or ask us to delete it, by emailing support@hctac.org. An accredited business can also turn off individual email notification types from their own account settings.

7. Children

This site isn't directed at children, and we don't knowingly collect information from anyone under 13.

8. Security

We store data with providers that support row-level access controls and encryption in transit, and we limit who on our team can see accreditation documents to the people reviewing them. No method of storing or transmitting data is 100% secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this policy as the site changes. Material changes will update the date at the top of this page.

10. Contact

Questions about this policy can be sent to support@hctac.org. This site is operated at hctac.org.