01Who we are
QuoteSurge builds websites and lead systems for residential HVAC and roofing contractors.
Responsible for your information: QuoteSurge, Milan, Italy. Email: andrea@thequotesurge.com.
We are based in the European Union, so we follow the EU General Data Protection Regulation (GDPR) as well as the US privacy laws that apply to us.
02Information we collect
We only collect what we need. Depending on how you interact with us, that is:
- Forms. When you send our contact form, request a Lost Jobs Report or request a homepage preview: your name, company, email address, phone number, website, city and state, service area and your message, depending on the form.
- Calls, texts and email. Your phone number, email address and what you tell us when you contact us or we contact you.
- Booking a call. The details you enter in Calendly, our scheduling tool, when you book a call.
- Clients. Contact, billing and account details of the companies and people we work with.
- Website visits. Technical data such as IP address, browser type and the pages requested, processed by our hosting provider to deliver the website and keep it secure.
- Public business information. To prepare a report or preview, we look at information about your business that is already public: your website, Google Business Profile and reviews, and those of competitors in your area.
03How we use it
- To reply to you and provide what you asked for, such as a report, a homepage preview or a call.
- To contact you about your request by email, phone call or text message, with your consent.
- To deliver our services to clients and to bill for them.
- To keep this website and our systems secure.
- To meet our legal, tax and accounting obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
04Text messages and calls
If you give us your phone number and check the consent box on our forms, we may call or text you about your request, including with automated technology. How often depends on the conversation.
Message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. Consent is not a condition of buying anything from us.
We do not share your phone number or your text-message consent with third parties or affiliates for their marketing.
05Business contacts we reach out to
We contact HVAC and roofing companies by email about our services. For this we use business contact details that are publicly available, for example on a company’s own website or in business directories: name, company name, business email address and phone number, and the area the company serves.
Every email tells you how to stop further messages. If you ask us to stop, we stop and keep only what we need to respect that choice.
06Homeowner information we handle for clients
When we run the Full Calendar System for a contractor, we handle the contractor’s leads, the homeowners who respond to their ads or website, on the contractor’s behalf and under our agreement with them.
For that information, the contractor decides how it is used and the contractor’s own privacy policy applies. Homeowners who want to see or delete their information can contact the contractor, and we will help the contractor respond.
07Legal bases (GDPR)
Under the GDPR, we rely on these legal bases:
- Forms and requests: your consent, given with the checkbox, and steps you ask us to take before a possible agreement (Article 6(1)(a) and (b)).
- Clients: performance of our agreement and our legal obligations for tax and accounting (Article 6(1)(b) and (c)).
- Outreach and website security: our legitimate interests in offering our services to businesses and in running a secure website (Article 6(1)(f)).
08Analytics
We do not use analytics or tracking tools on this website.
10Where your information is processed
We are based in Italy, and our service providers operate in the United States and the European Union. Your information may be processed in either.
When information moves between the EU and the US, we rely on safeguards recognized under EU law, such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the EU–U.S. Data Privacy Framework.
11How long we keep it
- Messages, report requests and preview requests that do not lead to an agreement: up to 12 months after our last contact.
- Business contacts we reached out to: up to 12 months after our last contact, or less if you ask us to stop.
- Client records: for the duration of the agreement, and afterwards as long as tax and accounting law requires. In Italy, where we are based, that is generally ten years.
- Technical data from website visits: for a short period, as set by our hosting provider for security purposes.
12How we protect it
We use reasonable safeguards, including encrypted connections, access controls and providers with strong security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
13Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you;
- correct information that is wrong;
- delete your information;
- give you a copy in a portable format;
- stop contacting you: reply STOP to any text, or use the opt-out link in any email.
Depending on your state, such as California, Colorado, Connecticut, Virginia, Texas, Oregon and others, state privacy laws may give you additional rights, including the right to opt out of the sale of personal information or of targeted advertising. We do not sell personal information or use it for targeted advertising. We will not treat you differently for using your rights.
If you are in the European Union or the United Kingdom, you also have the rights given by the GDPR, including the right to object to processing based on our legitimate interests, to withdraw consent at any time, and to complain to a data protection authority. In Italy, that is the Garante per la protezione dei dati personali.
To make a request, email andrea@thequotesurge.com. We reply within 45 days, or within one month for GDPR requests, and we may ask you to confirm your identity first. Where the law allows, an authorized agent can make a request for you.
14Do Not Track and Global Privacy Control
This website does not track you across other websites. Because we do not sell or share personal information, Do Not Track and Global Privacy Control signals do not change how we handle your information.
15Children
This website and our services are for businesses. They are not directed at children under 13, and we do not knowingly collect their information.
16Changes to this policy
We may update this policy. The date at the top shows when it last changed. If we make important changes, we will say so on this page.
17Contact
Questions about this policy or your information? Email andrea@thequotesurge.com.