Privacy Policy

1. Information We Collect

You can browse our website without telling us your name or contact information. We receive information in two ways:

• Information you choose to provide, mainly through the project inquiry form on our Contact page or by emailing us.
• Technical information that is recorded automatically when your browser connects to the website, as described in Technical Information and Server Logs.

2. Contact-Form Information

When you submit the project inquiry form, we collect:

• Your full name, email address, inquiry type, and message or project description (required).
• Your company or organization, phone number, project name, and project location (optional).
• Any other information you choose to include in your message.

The form does not accept file uploads. Please do not include sensitive personal information, such as financial account numbers, in the form.

Each submission is sent by email to our company mailbox, info@mstallelectric.com, which is hosted by Bluehost. The email contains the information you entered and the date and time of your submission. Mail servers may also add standard technical information to the message headers.

We handle inquiries through our company email. They are not automatically entered into a customer relationship management (CRM) system, an estimating database, or a mailing list. The form handler on our website does not keep a copy of your full inquiry in a website database.

3. Technical Information and Server Logs

Like most websites, our website runs on servers that automatically record technical information when a browser requests a page or file. Our hosting provider, Bluehost, may record information such as:

• your IP address;
• the date and time of the request;
• the page or file requested;
• your browser and device type; and
• the address of the web page that linked to ours.

An IP address can be personal information, especially when it is combined with other information. These server logs are part of our hosting provider’s systems. We may use them to operate, maintain, troubleshoot, and protect the website. How long they are kept depends on our hosting provider’s configuration.

If the contact-form handler encounters a technical problem, it writes a short error message to the server’s error log. The handler is designed so that these messages do not include the contents of your inquiry.

4. Spam Prevention and Rate Limiting

To protect the form from automated spam and abuse, and to avoid sending the same inquiry twice, the form handler uses these measures:

• Hidden spam-detection field. The form includes a field that visitors do not see. Submissions that fill it in are treated as automated and discarded without being sent.
• Server-side checks. Each submission is checked for required fields, format, and length. Submissions that fail these checks are not sent.
• Rate limiting. The number of submissions accepted from one connection, and from all visitors combined, is limited within a one-hour period.
• Duplicate detection. If the same email address and message are submitted again within 15 minutes, the inquiry is not sent a second time.

To do this, the handler keeps a small record in a private file on our web server, outside the website’s public folders. The record contains a hashed value derived from your IP address, a hashed value derived from your email address and message, and the times of recent submissions. It does not contain your IP address, name, email address, or message in readable form.

These hashed values are not anonymous. They are created with a secret key that is stored on the same server, so a person with access to the file could link a hashed value back to an IP address or to a specific inquiry. We therefore treat these records as personal information and keep them in a location that is not publicly accessible.

Rate-limiting records are used for one hour and duplicate-detection records for 15 minutes. Expired records are not deleted at the moment they expire. They are removed the next time the form handler processes a submission, so an expired record may remain in the file until then.

5. How We Use Information

We use the information we receive to:

• respond to your inquiry and communicate with you about it;
• evaluate your project, bid invitation, or request and prepare a response;
• coordinate existing projects and vendor or supplier matters;
• keep a record of project-related communications;
• operate, maintain, and protect the website, including preventing spam and abuse; and
• comply with legal obligations.

We do not use contact-form information for marketing emails or mailing lists, and we do not use personal information for targeted advertising.

6. Email Communications

Form inquiries, emails you send us, and our replies are stored in our company email system, which is hosted by Bluehost. We reply to the email address you provide, and we use email to respond to inquiries and discuss projects.

We do not add your email address to a mailing list or send you marketing emails because you contacted us.

Email is not a fully secure way to send information. Please do not send sensitive personal information, such as financial account numbers, by email or through the form.

7. Cookies and Tracking

Our website does not use analytics, advertising, tracking pixels, social media plugins, or similar tracking technologies. The website’s own code does not set cookies or store information in your browser to identify or track you. We do not allow advertising or analytics companies to collect information about your activity on our website.

Our hosting provider and the third-party service described in the next section operate their own systems, which we do not control. They may use cookies or similar technologies for technical purposes, such as security or service delivery, under their own privacy policies.

Do Not Track. Some browsers can send a “Do Not Track” signal. Because our website does not track visitors over time or across other websites, it does not change its behavior in response to these signals.

8. Google Fonts and Other Third-Party Services

Google Fonts. Our website displays text in the Inter typeface, delivered by Google Fonts, a service of Google LLC. When you load a page, your browser requests the font directly from Google’s servers. As with any web request, Google receives technical information such as your IP address, browser details, and the website requesting the font. Google’s handling of that information is governed by the Google Privacy Policy.

Bluehost. Our website and company email are hosted by Bluehost, which processes website requests, server logs, form emails, and our company email on our behalf.

We do not use other third-party services on our website, such as analytics, advertising, maps, embedded videos, chat tools, or social media plugins.

9. Information Sharing

We do not sell personal information. We do not share personal information for targeted advertising, and we do not give it to other companies for their own marketing. We share information only as follows:

• Hosting provider. Bluehost hosts our website and company email, so information you submit through the website or send by email is stored on and passes through its systems.
• Project participants. Occasionally, when it is necessary to evaluate or respond to a particular inquiry, we may share relevant information from that inquiry with project owners, general contractors, suppliers, consultants, or other project participants. This is done only when needed for that inquiry, not for every inquiry.
• Legal requirements. We may disclose information when required by law, such as in response to a subpoena or court order.

10. Information Security

We use reasonable measures designed to protect the information we receive, including:

• serving the website over an encrypted HTTPS connection;
• checking form submissions on the server before they are sent;
• sending inquiries only to our company mailbox, never to an address entered in the form;
• not storing full inquiries in a website database; and
• keeping spam-prevention records as hashed values in a location that is not publicly accessible.

No website, email system, or method of electronic transmission or storage is completely secure, and we cannot guarantee the security of information you send us.

11. Data Retention

• Inquiry emails. MStall Electric has not established a fixed deletion schedule for inquiry emails. Form inquiries, emails you send us, and our replies remain in our company email system until they are deleted, which means they may be kept for an extended period, for example as a record of project communications. They are not deleted automatically after a set period. You can ask us to delete your inquiry (see Privacy Inquiries).
• Spam-prevention records. Used for one hour (rate limiting) or 15 minutes (duplicate detection), then removed the next time the form handler processes a submission, as described in Spam Prevention and Rate Limiting.
• Server logs. Kept according to our hosting provider’s configuration.
• Shared information. Information we share with project participants is handled by them under their own practices.

12. Children’s Privacy

Our website is intended for adults and organizations seeking electrical construction services. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, please contact us so we can delete it.

13. Privacy Inquiries

If you have a question about this Privacy Policy, or you want to ask what personal information we have from your inquiry or ask us to correct or delete it, please contact us using the details in Contact Us. Include “Privacy Inquiry” in your email subject line, along with enough information for us to find your inquiry, such as the name and email address you used.

We will review your request and respond. We may need to confirm your identity before acting on it. In some cases we may need to keep certain information, such as records of an active project or information we are required by law to retain, and we will tell you if that applies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if our website or practices change. When we do, we will post the updated policy on this page and revise the effective date at the top.

15. Contact Us