What we collect, and what happens to it.

Short version: we set no cookies and use no advertising trackers. We collect what you type into a form and send us, and it goes to one mailbox; our hosting provider processes standard technical data, such as network addresses, to deliver and protect the site. It also runs a bot-protection script and a cookieless page-view counter on every page; all of this is described below.

Last updated 24 September 2026

What you send us

Every form on this site — the contact form, the instant cleaning estimate, the breakroom estimate, the town pages and the issue report — sends its contents to us by email. Depending on the form, that can include:

• Your name, email address, phone number and company
• The building or site the inquiry is about, and its approximate size
• Which services you are interested in and how often you want them
• For the two estimate tools, the figures you entered — square footage, schedule, service level, site type and add-ons for the cleaning estimate; headcount, days on site, service level and brewer for the breakroom estimate — and the estimate range you were shown, with a note of which version of our pricing produced it and whether you changed the settings
• Anything you write in the message field
• The page you submitted from

Nothing is required beyond what the form marks as required, and we would rather you left a field blank than filled it with something you would not want in an email.

What we do with it

We use it to answer you, to quote the work, and to run the account if you become a client. That is the whole purpose. It is delivered to a single business mailbox and is not loaded into a marketing platform, an advertising audience, or a mailing list you did not ask for.

If our delivery service is unavailable when you press send, the page falls back to opening your own email app with the message pre-filled, so it is then sent from your address by your email provider. The issue report does this only if you gave us your email address.

We do not sell it, rent it, or share it with anyone outside the business, other than the service providers that carry the message — our website host and our email provider — who process it only to deliver it.

What this site does not do

• No cookies of our own. KCC sets none. Our hosting provider, Cloudflare, runs a bot-protection script on every page, served from this domain under /cdn-cgi/, and may set strictly necessary security cookies, such as cf_clearance and __cf_bm, to tell browsers from automated traffic. We do not read those cookies and do not use them for analytics or advertising.
• No advertising trackers, and one page-view counter. There is no Google Analytics and no advertising pixel. Our hosting provider, Cloudflare, adds its Web Analytics script to the pages it serves. It counts page views and page load times, sets no cookie, and does not follow you to other sites. We look at the totals to see which pages get read; nothing in them identifies you.
• No external resources of our own. Every page is a single self-contained file. Apart from the hosting provider's two scripts described above and the error reports described below, your browser is not asked to fetch anything from another company while you read it, and the site's security policy blocks scripts from any other source.
• No account, no login, no stored profile. There is nothing to sign into.

Reporting a problem anonymously

Technical information

To stop automated abuse of the forms, each submission is rate-limited by the network (IP) address it comes from. If a submission is turned away by that limit, the log line keeps a shortened form of the network address, never the full address. Each form also sends how long you took to fill it in and carries a hidden field that people never see; both are used only to spot automated submissions. Submissions that look automated are handled in one of two ways. A form sent faster than a person could fill it is still delivered to us, marked for a second look. A form that fills in a field people never see is discarded, and the only record is a short-lived log line with your initials and a masked email address. Standard web-server logs are kept by our host in the ordinary course of serving the site.

If a page fails to load properly, your browser may also send our hosting provider a short technical error report (network error logging). It describes the failed request, such as the page address and the type of error, and is used to keep the site working.

How long we keep it

Inquiry emails stay in the business mailbox for as long as we need them to answer you and, if you become a client, to run and account for the work. Client records are kept as long as tax and insurance obligations require. If you want your inquiry deleted, ask and we will delete it from our inbox, the shared inbox's archive, and any record we keep of your inquiry — you do not need a reason.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@kccworkspace.com or call (478) 508-8787 and we will handle it ourselves — the business is owner-run and the request does not go into a queue.

Security

The site is served over HTTPS only, the forms are rate-limited, and the mail that carries your inquiry is authenticated so it cannot easily be forged. If you believe you have found a security problem with this site, please tell us at hello@kccworkspace.com; see also /.well-known/security.txt. There is no bug bounty, but a report reaches a person who can act on it and you will get a reply. Please do not run automated scanning or load testing against the site.

Changes

If this changes, the date at the top changes with it. We will not quietly start collecting something this page says we do not.