About FreeQuotePro and This Policy
FreeQuotePro is a website for construction and home-improvement inquiries involving Our Network of Contractors. This page is an editorial draft for internal review, not a final approved privacy policy. FreeQuotePro does not directly perform construction work.
[Pending business approval: legal name of the website operator, business address, and applicable jurisdiction.] FreeQuotePro is the website name; verified operator information must be added before this draft is approved.
This draft describes service quote forms, related email processing, and technical security sessions. It also identifies business practices that remain unverified. Other contact channels and third-party resources need to be covered in the final policy once their handling of information is confirmed.
Quote submission and live email sending are currently disabled. This draft does not authorize customer-data collection. Normal form submission is blocked, but technical requests and security sessions still occur when review pages are visited, and a forced request can reach the server. [Pending approval: effective date and policy applicability.]
Any future policy must reflect verified website and business practices. Changes to collection, recipients, sharing, or retention need review before they are described as active. [Pending approval: policy review, versioning, and notification procedures.] No effective date has been assigned to this draft.
Information, Cookies and Sessions
The service quote forms request a full name, email address, optional phone number, ZIP Code, and project description. A privacy acknowledgment would be required once an appropriate policy and the acknowledgment are approved. The current forms are previews; use sample information during editorial review.
The forms also request a service category and project type from the existing catalogue. A security ticket records the source service page on the server. If email submission is later activated, messages would include the selected category and project type, source page, submission timestamp, and reference number.
Protected review pages start a session even when quote submission is disabled. A session cookie links the browser to security tokens, source-page identifiers, and duplicate-prevention state. The quote component does not save entered contact details in that session or in browser local storage.
The web server receives connection and request information, including an IP address. The quote code uses server-controlled connection details for access checks. Its error logging uses fixed event codes rather than submitted form content. [Pending approval: hosting logs, access permissions, and other technical records.]
Pages currently request Google Fonts from Google's servers. Loading those resources creates external network requests even while quote submission is disabled. The quote component does not add analytics or marketing cookies. [Pending approval: the complete third-party resource inventory and related processing arrangements.]
How Quote Requests Are Used and Shared
If separately approved and activated, the forms would receive contact and project information for reviewing inquiries about Our Network of Contractors. An inquiry would not confirm contractor availability, assignment, a price, or a response time. [Pending business approval: the final inquiry-handling purpose and workflow.]
PHPMailer is integrated for eventual authenticated SMTP delivery. While submission is disabled, the quote handler rejects requests before its customer-field capture and mail-processing steps. If separately approved and activated, it would validate entries and prepare HTML and plain-text email. SMTP acceptance would not confirm inbox receipt.
The intended recipient for future quote emails is estimate@freequotepro.com. This does not identify the SMTP username, authenticated sender, or privacy contact. [Pending business approval: the mail provider, authorized sender, mailbox access, and people responsible for reviewing requests.]
Our Network of Contractors refers to the professionals represented in the service categories. The quote backend does not automatically forward inquiries to contractors. [Pending business approval: whether, when, and with whom inquiry details would be shared.] No contractor-sharing arrangement is established by this draft.
Actual contractor-sharing and follow-up practices require verified business approval before publication and activation. [Pending approval: information shared, recipient selection, contact methods, and any required notices or permissions.] This draft does not establish consent procedures, contractual safeguards, automatic matching, or response commitments.
Security and Data Retention
Implemented controls include server-side validation, escaped output, CSRF checks, protected review access, and duplicate-submission safeguards. The SMTP integration requires authenticated, encrypted transport when enabled. These measures do not guarantee absolute security. Hosting and operational safeguards still require verification.
The quote-processing code checks required fields, email format, field lengths, and permitted service and project combinations. A honeypot, session rate limits, and shared rate limits help reject abusive requests. While submission is disabled, the handler rejects requests before its customer-field processing and delivery steps.
Session cookies are HttpOnly and SameSite=Lax; Secure is enabled under HTTPS. Local review over HTTP uses a development cookie. The server stores token hashes, source identifiers, submission status, and counters. Session-storage access and cleanup require operational verification.
If sending is activated, quote emails would pass through the configured SMTP service and business mailbox. Email copies and technical records may remain in provider systems or backups according to practices that require verification. No lead database is implemented by the quote component. [Pending approval: provider arrangements, mailbox access, logs, and backups.]
Current security-control windows include 30-minute form tickets, 10-minute duplicate checks, and 60-second rate counters. These are not business retention periods or guarantees of immediate deletion. [Pending business approval: retention and deletion practices for inquiries, email, hosting logs, session records, and backups.]
Your Privacy Choices and Contact
Questions about this draft need an approved privacy-contact channel. [Pending business approval: privacy contact details and responsibility for handling questions.] Do not use the unavailable quote form to send a privacy request or sensitive documents.
The applicable process for requesting access to information depends on the verified operator and relevant jurisdiction. [Pending business and legal approval: applicable rights, request channel, scope, and response procedures.] This draft does not promise a particular right or response deadline.
Correction and deletion requests need an approved process that addresses information in email, operational records, and backups, together with any applicable retention requirements. [Pending business and legal approval: how requests are received, assessed, and handled, including any limits.] No automatic deletion process is promised by this draft.
The website has no implemented privacy-request verification workflow. [Pending business and legal approval: proportionate identity checks and who may perform them.] Do not send identity documents through the quote form. No verification method or additional identification requirement is established by this draft.
Operator and privacy-contact details remain pending business approval. estimate@freequotepro.com is the intended quote recipient, not an approved privacy-contact address. [Pending business approval: the legal operator's contact details and an approved privacy email address or other request channel.]