This policy is written to be accurate about how this site actually works, but privacy law changes frequently and varies by state. Have qualified privacy counsel review and adapt this document before publication, and re-review it whenever the data flow, the partner list, or the tracking technologies on this site change. Nothing here is legal advice.
Notice at Collection
This section is the summary California law requires us to give you at or before the moment we collect anything. The rest of the policy expands on it.
| Question | Answer |
|---|---|
| What categories do you collect? | Identifiers (name, email, phone, ZIP, IP address), commercial/service-request information, internet activity, and inferences drawn from those. |
| Why? | To connect you with one licensed professional in your area, to prove and record your consent, to prevent fraud and abuse, to respond to you, and to operate and improve the site. |
| Do you sell or share it? | Yes. Passing your contact details to a licensed partner in exchange for a referral fee is a "sale" under the CCPA, and cross-context behavioural advertising activity may be a "share." See the sale and share disclosure. |
| Do you collect sensitive personal information? | We do not intentionally collect sensitive personal information as defined by the CCPA, and we do not use or disclose it for purposes requiring a "Limit the Use" link. Please do not send us health information, government ID numbers, or financial account numbers. |
| How long do you keep it? | See retention. Lead and consent records are kept for at least the period needed to evidence consent under applicable telemarketing rules. |
| How do I opt out? | Use the Do Not Sell or Share My Personal Information form, or send a Global Privacy Control signal from your browser. |
Who we are
FloodReady Florida is an independent consumer information website covering flood risk, flood insurance, and water damage for Florida homeowners. We are the business responsible for the personal information described here.
We are not an insurance agency, agent, broker, or public adjuster, and we are not a restoration contractor. We do not perform work on your home and we do not sell insurance. Our role is to connect you, at your request, with one independent licensed professional. This is explained in full on our About and editorial policy page.
What we collect
Information you give us
- Contact and request details submitted through a form on this site: first and last name, ZIP code, phone number, email address, and the type of help you selected (water damage now, flood insurance, or a claim question).
- Consent record. When you check the consent box and submit, we store a timestamp and a cryptographic hash of the exact consent wording displayed on your screen, so there is a record of the specific language you agreed to.
- A third-party consent certificate. Our forms use ActiveProspect TrustedForm, which creates an independent session certificate recording what was presented to you and what you did on the page. This is standard practice for consent evidence and is referenced by a hidden field on our forms.
- Anything you volunteer in free-text or in correspondence with us. Please keep it to what is necessary.
Information collected automatically
- IP address, approximate location derived from it, browser and device type, operating system, and language.
- Pages viewed, time on page, referring URL, and the page URL you submitted a form from (we store these two explicitly with each submission).
- Cookie and similar identifiers, where used. See cookies and tracking.
CCPA statutory categories
| Category | Examples we handle | Collected? | Sold or shared? |
|---|---|---|---|
| A. Identifiers | Name, email, phone, ZIP, IP address | Yes | Yes — sold |
| B. Customer records information | Name and phone in combination, as in Cal. Civ. Code § 1798.80 | Yes | Yes — sold |
| C. Protected classification characteristics | Age, race, gender and similar | No | No |
| D. Commercial information | The service you asked about; records of requests made | Yes | Yes — sold |
| E. Biometric information | — | No | No |
| F. Internet or network activity | Pages viewed, referrer, submission page URL, interaction data | Yes | May be shared for cross-context behavioural advertising if such tags are enabled |
| G. Geolocation data | ZIP code you enter; approximate city-level location from IP | Yes (coarse only) | Yes — ZIP is sold |
| H. Sensory data | — | No | No |
| I. Professional or employment information | — | No | No |
| J. Education information | — | No | No |
| K. Inferences | That you are likely a homeowner in a given area with a current water damage need | Yes | Yes — sold |
| L. Sensitive personal information | — | Not intentionally collected | No |
Why we collect it
- To do the thing you asked for — connect you with one licensed professional serving your ZIP code.
- To create and keep proof of your consent, including the timestamp, the consent-text hash, the submission page URL, the referring URL, and the TrustedForm certificate. This exists to protect both you and us: it records exactly what you were shown.
- To respond to you and to handle privacy requests, complaints, and corrections.
- To detect and prevent fraud, abuse, and automated form submissions.
- To operate, secure, measure, and improve the website.
- To comply with law, including telemarketing, consumer protection, and record-keeping obligations.
We do not use your information for purposes materially different from these without telling you first.
The sale and share disclosure
We sell your personal information as that term is defined by the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
When you submit a request, we transfer your name, phone number, email address, ZIP code and the nature of your request to one independent licensed third-party professional, and we are paid a flat referral fee for that transfer. Because personal information moves to a third party for monetary consideration, that transfer is a "sale" under Cal. Civ. Code § 1798.140(ad). We are not going to argue that it is something else.
Separately, if this site runs advertising or analytics tags that disclose your internet activity to a third party for cross-context behavioural advertising, that disclosure is a "share" under § 1798.140(ah), whether or not money changes hands.
You have the right to opt out of both, at any time, including before you ever submit anything. Use the Do Not Sell or Share My Personal Information form, or send a Global Privacy Control signal. Opting out is free, and we will not deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.
Two important limits on what we do:
- One recipient, not an auction. We transfer your details to a single licensed professional serving your ZIP code. We do not ping a list of bidders and we do not resell the same submission to multiple buyers.
- Fixed fee, not commission. The referral fee is flat and agreed in advance. It does not depend on whether you buy anything or on the size of any job. We receive no commission, override, or payment contingent on a sale.
- We do not sell or share the personal information of consumers we know to be under 16. This site is not directed to children and we do not knowingly collect their information.
Who we disclose information to
| Recipient type | What they get | Why | Is it a sale or share? |
|---|---|---|---|
| The one matched licensed professional (restoration contractor or licensed insurance agency) | Name, phone, email, ZIP, request type, consent record | To contact you about the help you requested | Sale |
| Consent-certification provider (ActiveProspect TrustedForm) | Session and page interaction data used to create the certificate | Independent evidence of what you were shown and agreed to | Service provider |
| Hosting, email, and CRM providers | Whatever is needed to run the service | Operating the site and handling requests | Service provider |
| Analytics and advertising providers, where used | Internet activity and identifiers | Measurement and marketing | Potentially a share — opt out applies |
| Legal and regulatory recipients | Only what is legally required | Subpoena, lawful request, or defence of legal claims | Neither |
| A successor in a merger or acquisition | Business records including customer data | Business transfer | Disclosed as required by law |
The current list of the licensed professionals we pass information to is published on our partners page. Once your information reaches a partner, that partner's own privacy policy governs what they do with it. We require partners contractually to contact you only in line with the consent you gave and to honour your opt-out requests, but we do not control their systems.
Cookies and tracking
We use only what the site needs to function and to be measured honestly. Where analytics or advertising technologies are enabled, they may set cookies or similar identifiers that disclose your activity to third parties.
- Strictly necessary — security, form integrity, and fraud prevention. These cannot be switched off without breaking the site.
- Measurement — aggregate page and traffic statistics.
- Advertising — if enabled, may constitute "sharing" for cross-context behavioural advertising. Your opt-out and your Global Privacy Control signal apply to these.
Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies may prevent forms from working. We do not respond to legacy "Do Not Track" browser headers, which lack a common standard; we do honour Global Privacy Control, which has one.
Your privacy rights
If you are a California resident, the CCPA/CPRA gives you the rights below. We extend the same process to residents of every U.S. state, regardless of whether their state law requires it of a business our size.
| Right | What it means |
|---|---|
| Know / access | Ask what categories and specific pieces of personal information we collected about you, where it came from, why we collected it, and who we disclosed it to. |
| Delete | Ask us to delete personal information we collected from you, subject to legal exceptions — including our need to retain consent records where a telemarketing or consumer protection rule requires it. |
| Correct | Ask us to fix inaccurate personal information we hold about you. |
| Portability | Receive the specific pieces of personal information we hold about you in a portable, readily usable format. |
| Opt out of sale and sharing | Direct us to stop selling and sharing your personal information. Use the opt-out form or a GPC signal. |
| Limit use of sensitive personal information | We do not intentionally collect sensitive personal information or use it for purposes that trigger this right, so we do not publish a separate "Limit the Use" link. If that ever changes, this policy and our footer will change with it. |
| Non-discrimination | We will not deny you goods or services, charge you a different price, or give you a different level of quality because you exercised a privacy right. |
| Appeal | If we decline your request, you may appeal. Tell us you are appealing and we will re-review and respond in writing with our reasoning. |
Global Privacy Control
We honour the Global Privacy Control (GPC) signal. If your browser or extension transmits a GPC signal, we treat it as a valid request to opt out of the sale and sharing of the personal information associated with that browser, and we apply it automatically — you do not need to fill in a form as well.
Two practical limits, stated honestly so you are not surprised:
- A GPC signal is tied to the browser and device that sent it. It cannot, by itself, be connected to information you gave us earlier from a different device or before the signal was received.
- If you want the opt-out applied to your identified records — your name, phone, and email — submit the Do Not Sell or Share form as well. That is the only way we can match the request to a specific person rather than a specific browser.
You can find GPC-enabled browsers and extensions at globalprivacycontrol.org.
How to submit a request
- Opt out of sale or sharing: use the Do Not Sell or Share My Personal Information form. No account and no verification of identity is required to opt out.
- Access, delete, correct, or port: contact us through the contact page and say which right you are exercising.
- Authorised agents may submit a request on your behalf with written permission signed by you. We may contact you to confirm the agent's authority and to verify your identity.
Verification
For access, deletion, correction, and portability requests we need to be reasonably sure you are who you say you are, because handing your data to the wrong person is also a privacy failure. We will normally ask you to confirm two data points already in our records — for example the phone number and ZIP code used on the form. We use verification information only for verification, and we delete it afterwards. Opt-out requests require no verification.
Response times
| Request type | We confirm receipt | We complete |
|---|---|---|
| Opt out of sale or sharing | Immediately on submission | Within 15 business days, and we notify recipients we sold to in the preceding 90 days |
| Access, delete, correct, port | Within 10 business days | Within 45 calendar days, extendable once by a further 45 days with notice to you |
| Appeal of a declined request | Promptly | Within 45 calendar days, in writing, with our reasoning |
| Requests to stop calls or texts | Immediately | Reply STOP to any text; tell any caller to stop; or use the opt-out form. We also pass the instruction to the partner you were matched with. |
Retention and security
- Lead and consent records are retained for at least as long as is needed to evidence the consent you gave under applicable telemarketing rules, and then deleted or de-identified. We keep them because being able to show exactly what you consented to protects you as much as it protects us.
- Website analytics data is retained in aggregate form only, and personal identifiers within it are retained for no longer than needed for measurement.
- Correspondence is kept for as long as needed to resolve the matter and to show that we did.
- Security. We use reasonable administrative and technical safeguards appropriate to the sensitivity of the data — encrypted transmission, access limited to those who need it, and vendor agreements requiring the same. No method of transmission or storage is perfectly secure, and we will not claim otherwise.
Other states, children, and changes
Residents of other states
Several U.S. states — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana, among others — grant rights similar to those described above, typically including access, correction, deletion, portability, and opting out of targeted advertising and of the sale of personal data. Florida's own Digital Bill of Rights applies principally to businesses meeting high revenue thresholds that we do not meet. Rather than sorting readers by state, we apply the process described on this page to everyone. If your state gives you a right we have not listed, tell us and we will honour it.
Children
This site is intended for adults responsible for a property. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of consumers we know to be under 16. If you believe a child has submitted information, contact us and we will delete it.
Links to other sites
We link to government agencies, standards bodies, and other third parties. Their privacy practices are their own and this policy does not cover them.
Changes to this policy
When we change this policy we update the "Last updated" date at the top. If a change materially affects how we handle information already collected — for example a new category of recipient — we will say so prominently rather than relying on you to notice a date change.
Summary of the commercial relationship, in one paragraph. FloodReady Florida is not an insurance agency, agent, broker, public adjuster, or restoration contractor. If you ask to be contacted, we pass your details to one independent, appropriately licensed third-party professional serving your ZIP code, and we are paid a flat referral fee, fixed in advance, that does not depend on whether you buy anything. Under California law that transfer is a sale of personal information, and you may opt out at any time through our Do Not Sell or Share My Personal Information form or by sending a Global Privacy Control signal. Nothing on this page is legal advice.