Privacy policy

Handrail Audit is a sole proprietorship at 3108 Glendale Blvd #105, Los Angeles, CA 90039. This page says what we collect, why, who sees it, and how to ask us to delete it.

What this website collects

  • The price form. You type your website address and your email address. Our host, Netlify, records the entry with the time, your IP address and the name of your browser, then emails it to us. We use it to answer you and to price the work. We keep an entry until the inquiry is closed, and no longer than twelve months.
  • The scan form. You type your website address and your email address to ask for a free scan. Netlify records and emails it to us in the same way as the price form. We use it for two purposes. One is to scan the public pages of that website and send you the result. The other is to write to you one time when we scan the county again. Reply with the word stop and we write no more. We keep an entry for 12 months from the last message we send, and then we delete it.
  • Email. Mail you send us is held in Google Workspace, on Google's servers.
  • Server logs. Netlify keeps a log of each request, with the IP address, the page and the time, for a short period for its own operation. We do not read these logs.
  • Google Analytics. This website uses Google Analytics 4 to count the pages that readers open. It is off until you allow it. We ask on your first visit, and the answer is no until you give one. While it is off, it sets no cookie and sends nothing to Google.

    When you allow it, it sets two cookies in your browser. It records the page, the time, the type of device, the approximate location from your IP address, and the website that sent you here. It does not record your name, your email address, or what you type in the price form. We do not let it collect data for advertising, and that setting is off whatever you answer.

    Google holds the data for 14 months and then deletes it. Google Signals is off, so Google does not connect this data to a Google account and does not use it to sell advertising.

    You can change your answer at any time. The button below clears it and asks you again. Your answer is kept in your own browser, and we never see it.

  • Nothing else. This website has no advertising and no tracking pixel. The only script from a third party is the Google Analytics tag above. The font comes from our own server. Links to other websites, for example WebAIM or the W3C, take you to their pages and their policies.

What the scanner collects

Our scanner reads the public pages of practice websites to test them for barriers. It records the markup of those pages and the findings. It collects no data about the persons who visit those websites. It identifies itself in its user-agent string, it obeys robots.txt, and it records a website that opts out so that it skips that website in later runs. To opt a website out, add the two lines User-agent: HandrailAuditBot and Disallow: / to its robots.txt, or write to us and we will add it to the skip list.

What we hold about a practice that is not a client

We write to optometry practices in Los Angeles County that we have not worked with. About each one we hold four things:

  • The name of the practice.
  • The address of its website.
  • The findings of our scan.
  • One work email address, and in most cases the name of the person it belongs to.

Three sources give us this. The practice's own published pages give the email address and the name in most cases. Hunter, an email lookup service, gives an address when the pages do not. The NPPES registry, which the federal government publishes, gives the practice address. That address is how we know the practice is in this county.

We hold it for two purposes. One is to write to the practice one time about what our scan found. The other is to stop writing to a practice that asks us to stop. We keep it for 12 months from the last message we send, and then we delete it. We do not sell it, we do not give it to an advertiser, and we do not give it to another practice.

Write to edison@handrailaudit.com to read what we hold about your practice, to correct it, or to have all of it deleted. A deletion also stops each later message. We answer in one business day and we act within ten business days. A California resident has this right in law, and we give it to every practice.

What an audit holds

When you buy a report, we hold your website address, your name and email address, the findings, and screenshots of your public pages. We keep them for the term of the work and for two years after it, because the re-scan and the annual monitoring refer to them. We do not publish a client's name. The sample report on this website is of a real practice with its name, location, personnel, photographs and suppliers removed.

Who sees it

We do. Netlify sees what its hosting and its form service handle. Google sees mail, and Google Analytics sees which pages readers open. No one else sees your data. We do not sell it and we do not give it to an advertiser. The one exception is a court or an authority that the law says we must answer.

Your rights

Write to edison@handrailaudit.com to ask what we hold about you, to correct it, or to have it deleted. We answer in one business day and we act within ten business days. A California resident has the same rights. We do not sell personal information and we do not share it with an advertiser.

Changes

When this policy changes, the date at the top changes with it. A change that affects data we already hold is sent to the email address we hold.