Privacy policy.

About this policy

Harper Mechanical Inc. (Harper, we, us) provides this policy for harpermechanical.com, including its contact and quote-request features, subcontractor account features, office access and QR-linked information pages. It explains the information involved in those features, how it is used and how to contact us about privacy.

The separately hosted Forms & Review Office has its own privacy notice. Employee payroll, tax and other third-party services linked from the main website are governed by the notices and instructions for those services.

Visit the separate Forms & Review Office information page.

Information you provide

Contact and quote requests include your name, email address, optional company and phone number, selected service and the project details you choose to provide. We also receive information you include in later correspondence.

If you use an authorized subcontractor account, we process account and invitation information, such as your email address, user identifier, company association, access status and authentication information. Office access also involves the name supplied at sign-in, session information and records of administrative activity.

Online ACH authorization, vendor intake and subcontractor prequalification submissions are currently paused. Do not enter or send bank details, tax identifiers or supporting documents through those forms or the general contact form. Previously submitted records may still be held; pausing new submissions does not delete earlier records. Those records may include business and contact information, qualifications, insurance or tax documents, signatures and banking information, depending on what was submitted.

Technical information and browser storage

Quote-request records include the IP address and browser information supplied with the request, along with the submission time. Website operation and account protection also involve request, authentication, security and activity records. For quote requests, we also record the approval text, its version and the time the server receives the approved request.

The website records operational reports about errors, slow or failed requests and connection problems. These reports identify a general website area, event type and, where relevant, response status or timing. A limited queue of these reports is kept in browser local storage for retrying delivery. Where enabled, Lovable diagnostic reporting may also receive runtime error details, such as an error message, stack trace and page path.

When a QR-linked information page is used, the scan-count feature can record the page, time and a request identifier. It derives a daily changing identifier from an IP address to limit duplicate counts and abuse. That scan-count feature does not store the raw IP address or browser user-agent string. This limitation does not describe separate hosting, security or quote-request records.

Cookies and browser storage support sign-in, access controls and operational features. The office session cookie is configured to last up to four hours. Account session information may persist in browser storage. You can clear or block cookies and site data in your browser, but this may interrupt sign-in and other features. Expiration of a session does not necessarily delete all associated records.

How information is used

We use information to respond to inquiries, prepare and follow up on requested quotes, manage business relationships, administer authorized accounts and access, maintain records of submissions and administrative actions, operate QR information pages, diagnose website problems and protect the website against misuse. Records may also be needed to meet applicable legal obligations.

Harper does not use personal information submitted through this website for marketing or advertising. Service replies, confirmations, account invitations and security messages relate to the requested service or website operation.

Service providers and external features

The main website uses Lovable services and a Supabase integration for website operation, records and account features. Quote requests are stored through that integration and sent to the Harper personnel designated to receive them through Resend using Lovable’s connector gateway. A confirmation email may also be sent to the address you provide. These providers and the relevant email services process information needed to perform those functions.

When configured, security alerts may also be sent through Twilio using Lovable’s connector gateway to designated Harper personnel. These alerts can include the security event, IP address and device information derived from the browser details.

The contact page links to Google Maps without loading an embedded map. Choosing that link opens Google Maps in a new tab, where Google's own privacy practices apply. The website also loads fonts from Google Fonts. Loading those fonts connects your browser to Google and provides technical information such as your IP address and browser details. Harper's no-marketing policy does not describe or override Google's separate practices.

If you follow a link to another service, its own privacy notice applies to its handling of your information. The main website’s provider arrangements differ from those of the separately hosted Forms & Review Office.

Approval before sharing

The online quote form asks for your approval before sending your contact and project details to Harper Mechanical and the providers identified in the form. The approval identifies the information, recipients and purpose. It is required for that request and is not approval for marketing or unrelated disclosures. You may call Harper instead of using the online form.

Routine website delivery, font loading and security processing occur when you browse the website, before you submit a quote request. The quote-form approval controls sending your quote details; it does not prevent that earlier technical processing. This policy explains those practices and does not itself supply approval for a disclosure.

Harper’s policy requires prior approval before additional voluntary sharing of personal information. The information, recipient and purpose must be identified before approval is obtained. Service-provider access is not automatically exempt from this requirement.

If disclosure is required by applicable law or binding legal process, it is limited to what is legally required.

Retention and security

Harper’s retention policy is to keep personal information only as long as needed for its stated purpose, subject to applicable legal requirements. Relevant factors include the inquiry or business relationship, the type of record, accounting and tax obligations, disputes and legal holds. A single retention period does not apply to every record.

A deletion request may be limited by applicable requirements and the circumstances of the record. Removing a record from the website does not necessarily remove copies in email, backups or provider systems at the same time.

The website uses access controls and technical safeguards, but no website, email service or transmission method can guarantee absolute security. Do not send passwords, Social Security numbers, full bank account numbers, tax forms or identity documents in an initial privacy inquiry. Contact us first about an appropriate way to provide anything needed to handle your request.

Your choices and requests

You can choose not to submit optional information or use optional website features. Required information is identified on the relevant form. If you prefer not to use the online quote form, call Harper at (970) 539-5535.

Depending on the law that applies to your information, you may have rights to access or obtain a copy, correct or delete information, withdraw consent, object to or restrict certain processing, opt out of certain uses, or appeal a decision. These rights have conditions and exceptions. Contact the privacy contact below to make a request or explain an appeal. We may need information sufficient to verify your identity or authority and locate the relevant records.

This website is intended for business inquiries and authorized business users, not for children. If you believe a child has provided personal information through the website, contact us.

Privacy contact and policy changes

Updates to this policy will be identified by a revised date. Material changes to information handling must be reflected in the policy, with any notice or approval required by applicable law.