Privacy Policy

Information We Collect

Information you provide

When you submit an Online Presence Review request or otherwise contact us, we may collect:

• your name;
• business name;
• business email address;
• phone number;
• preferred contact method;
• city and state;
• primary service area or market;
• whether your business has a website and, when applicable, its website address;
• whether your business has a Google Business Profile and, when provided, a link to it;
• information about your business’s public profiles, listings, directories, booking platforms, or ordering platforms;
• your concerns about how the business appears online;
• the action you most want customers to take;
• confirmations concerning your authority to act for the business, the price and nature of the Online Presence Review, and our permission to contact you about the submission; and
• other information you choose to include in your communications with us.

Please do not submit passwords, verification or recovery codes, administrative credentials, payment-card information, banking information, government identifiers, private customer records, private analytics information, legal or tax records, or other sensitive information through the public inquiry form.

Information collected automatically

Our website and service providers may process limited technical information needed to deliver, protect, and troubleshoot the website and form. This may include:

• Internet Protocol address;
• browser and device information;
• request date and time;
• pages or resources requested;
• security and fraud-prevention signals;
• form-delivery status; and
• diagnostic or error information.

We use Cloudflare to host and protect the website and Cloudflare Turnstile to help distinguish legitimate submissions from automated abuse. Turnstile may process browser, device, network, interaction, and security signals to evaluate a submission. Successful completion of a Turnstile challenge does not by itself cause Baker Online Services to accept an inquiry or begin a client relationship.

To prevent duplicate submissions, manage uncertain delivery, and protect the form from abuse, we may temporarily store minimized submission-control information through Cloudflare. This information is limited to operational metadata and a keyed cryptographic representation of the canonicalized submission. It does not contain or reproduce the submission itself and is not used for advertising, marketing, profiling, or tracking visitors across websites. This temporary submission-control information is ordinarily deleted within seven days.

We use Cloudflare Web Analytics to measure page views and understand how the website performs for visitors. Cloudflare automatically injects a performance-measurement beacon across workwithbaker.com, except that the current configuration excludes visitors in the European Union.

Cloudflare Web Analytics does not use cookies, local storage, session storage, or other browser storage. It processes page-view and browser-performance information and does not log URL query strings. Cloudflare receives a visitor’s source Internet Protocol address as part of normal request handling but states that it discards the address at the nearest Cloudflare data center rather than storing it in its core databases or logs. Web Analytics data may be processed through Cloudflare’s global network, and aggregated dashboard history is available for up to six months.

We do not use advertising pixels, remarketing technology, session-replay tools, or analytics designed to track individuals across unrelated websites. We will update this Privacy Policy before materially changing those practices.

How We Use Information

We may use information to:

• receive, review, and respond to inquiries;
• determine whether a requested service appears to be a suitable fit;
• communicate about a submission;
• prepare a scope summary, proposal, agreement, or invoice;
• create and maintain client records if an inquiry becomes a client relationship;
• provide and support approved services;
• maintain records of communications, approvals, work, ownership, access, payments, and transfers;
• operate, secure, troubleshoot, and improve the website and submission process;
• detect spam, abuse, duplicate submissions, fraud, and security threats;
• enforce agreements and protect our rights, property, systems, clients, and users;
• address disputes, investigations, insurance matters, or legal claims; and
• comply with legal, tax, accounting, insurance, contractual, and recordkeeping obligations.

Submitting an inquiry does not guarantee acceptance, create a client relationship, or begin the Online Presence Review. Implementation work is separate from the Online Presence Review.

How We Disclose Information

We may disclose information:

• to service providers that operate or protect our website, email, storage, communications, or business systems;
• when necessary to prepare, provide, support, or document an approved service;
• to professional advisers, insurers, accountants, or legal advisers when reasonably necessary;
• when required by law, legal process, court order, subpoena, or government request;
• to investigate or respond to fraud, misuse, security incidents, disputes, or threatened claims;
• to protect the rights, safety, property, and systems of Baker Online Services, our clients, or others; or
• in connection with a merger, sale, reorganization, financing, or transfer of all or part of the business, subject to appropriate safeguards.

At launch, public inquiry submissions are processed through a Cloudflare Worker and Cloudflare Turnstile, delivered through Resend, and received by Baker Online Services through Google Workspace. Gmail serves as the official initial lead-record system.

Resend acts as a transactional-email service provider for this delivery. Open and click tracking are disabled for this workflow. We do not use a public-form database, Google Sheet, or third-party form backend to store complete launch submissions or maintain the official lead record.

We do not sell personal information. We do not disclose inquiry information to third parties for their independent advertising or marketing purposes.

Retention

We retain information according to its status, purpose, and legal or business significance.

Public inquiries

• New inquiries: retained for no more than 90 days unless the inquiry moves to another status.
• Contacted inquiries: retained for up to 12 months after the last substantive communication.
• Qualified inquiries: retained for up to 24 months after the last substantive communication or active proposal or invoice activity, whichever is later.
• Declined inquiries: retained for up to 12 months after the final decision or substantive communication.
• Converted inquiries: when an inquiry becomes a client relationship, material information is transferred to the restricted client record. The original Gmail lead copy is ordinarily deleted within 24 months after that transfer.
• Spam, invalid, duplicate, and test submissions: deleted within 30 days or sooner when no longer needed.

Other records

Technical, delivery, authentication, administrative, and security records are retained for limited periods appropriate to operating, protecting, troubleshooting, and documenting our systems.

Resend retains email activity, delivery events, dashboard logs, API logs, and production backups for 30 days. Individual emails and logs cannot be deleted separately before they expire from that retention period. Resend stores account data in the United States.

Resend may retain certain account, usage, billing, security, fraud-prevention, legal, or similar provider-controlled records for longer when reasonably necessary for those purposes or required by law. Those records may follow different retention and deletion rules from Baker Online Services’ official Gmail lead records.

Information that becomes part of a client, contractual, ownership, financial, insurance, tax, dispute, security-incident, or legal record may be retained longer. Retention depends on the nature of the record, the business purpose for keeping it, applicable agreements, insurer requirements, tax and accounting needs, ownership and transfer obligations, limitation periods, and other legal requirements.

We may suspend normal deletion when information is relevant to an actual or reasonably anticipated dispute, claim, chargeback, investigation, subpoena, insurance matter, security incident, government inquiry, or legal hold. After the applicable reason ends, the information returns to the normal retention schedule unless another valid retention requirement applies.

The periods described above are operating rules and maximums for ordinary circumstances. They do not override a legal obligation or require us to retain information that no longer has a legitimate purpose.

Security

We use administrative and technical safeguards intended to protect information, including business-controlled accounts, multifactor authentication, restricted access, server-side form validation, spam protection, and documented retention practices.

No website, email system, transmission method, or storage system is completely secure. We therefore cannot guarantee absolute security.

Your Choices and Requests

You may contact us to:

• ask what inquiry information we maintain about you;
• request correction of inaccurate information;
• request deletion of information that is no longer needed;
• ask us to stop contacting you about an inquiry; or
• ask a question about this Privacy Policy.

We may need to verify your identity or authority before acting on a request. We may decline or limit a request when retention is reasonably necessary for a client relationship, agreement, financial or tax record, ownership or transfer record, security purpose, dispute, investigation, legal hold, or other legal obligation.

Because Baker Online Services works with businesses, a request submitted for a business should come from the business owner or another person authorized to act for it.

Children’s Privacy

The website and services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the public inquiry form. A parent or guardian who believes a child submitted personal information may contact us to request review and deletion.

External Websites and Platforms

The website may link to Google Business Profiles, social networks, directories, booking platforms, ordering platforms, or other external services. Their privacy practices are governed by their own policies. Baker Online Services does not control those external services.

Changes to This Policy

We may update this Privacy Policy when our services, vendors, website features, data practices, or legal obligations change. We will post the revised policy at workwithbaker.com/privacy/ and update the effective date.

If a change materially affects information already collected, we will take reasonable steps to provide notice when appropriate.

Contact Us

Questions or privacy requests may be sent to:

Baker Online Services LLC

Email: contact@workwithbaker.com

Website: workwithbaker.com