What we know,
what we keep.

This website

This site is plain HTML and CSS served from Cloudflare Workers' edge. There is no analytics package, no tracking pixel, no third-party JavaScript, no advertising network, and no cookies set by our domain. Cloudflare may collect standard request logs (IP, referrer, user agent) for abuse prevention; their privacy policy applies to those. The site loads a small number of static assets from Google Fonts (the Fraunces, Hanken Grotesk, and IBM Plex Mono families); Google's privacy policy applies to those requests.

Customer data

If you become a WPCC customer, we keep the following data on you:

• Account record.

  Business name, billing address, premises addresses, primary contact name and phone, billing email, MWW account number(s), preferred test month.

• Test history.

  Every test we've run on your assemblies — date, tester, gauge serial, reading, pass/fail, notes. Kept for 10 years per WI regulatory requirement.

• Communications.

  Emails, SMS, voicemails about scheduling, test results, and filings. Kept for two years after account close.

• Payment.

  We accept ACH, check, and credit card. Credit card data is tokenized through Stripe; we never store full card numbers. Their privacy policy governs that.

What we share, with whom, why

• With the AHJ for your premises

  Every test report is filed with Milwaukee Water Works (or the relevant suburban water utility). This is mandatory under SPS 382. We file your business name, premises address, MWW account number, assembly serial, and the test result.

• With our payment processor (Stripe)

  For processing your invoice payments.

• With our email provider (Fastmail)

  Because we use email.

• Never with third parties for advertising or data brokering.

  We do not sell or rent customer data. We are uninterested in the data-broker economy.

Your rights

You can:

• See your data.

  Email privacy@wpccrossconnect.example. We respond in PDF within 10 business days.

• Correct your data.

  Same address.

• Delete your data.

  Same address. Test records older than 10 years are deleted on the annual purge; newer records can be deleted only after you close the account and the regulatory retention has lapsed.

• Take your data with you.

  If you change testers, we'll send you and the new tester a complete account export.

Security

Customer data lives in a Supabase Postgres database hosted in U.S.-East-1; access is via TLS 1.3, row-level security enforced; backups are AES-256 encrypted at rest. Office staff devices are MDM-managed with full-disk encryption. Office WiFi is WPA3. The four-drawer cabinet is locked outside business hours; nothing on the cabinet is customer-personally-identifying.

Contact

Privacy questions to privacy@wpccrossconnect.example. Tomás Lasalle is the data owner; A. Ferraro is the responsible partner.