In short
To be unambiguous: this service does process personal information about website visitors. When somebody submits the quote-request form, their details are stored in a database and sent to Lomax staff as an email and a text message so that staff can respond.
The service sends messages only to Lomax staff. It never emails or texts the visitor, and it is not used for marketing of any kind.
What is collected
When a visitor submits the quote-request form, these fields are collected:
- Name
- Email address
- Phone number
- Postcode (ZIP)
- The service they are interested in
Where the visitor arrived from a marketing link, the website also records referral
metadata alongside the inquiry: the landing page, the referring page, campaign
parameters (utm_source, utm_medium, utm_campaign,
utm_content, utm_term) and advertising click identifiers
(gclid, fbclid).
How it is used
Solely to let Lomax Window & Door Co. respond to the inquiry, and to understand which marketing channel produced it. It is not used for any other purpose.
Where it goes
1. The database
Stored in a Cloudflare D1 database operated for the Lomax website. The inquiry fields and the referral metadata are both stored there, and the database is the system of record. If the inquiry cannot be stored, the submission is rejected and the visitor is told to telephone instead — an inquiry is never silently accepted and lost.
2. An email to Lomax staff
An email notification is sent to a Lomax staff address through Twilio SendGrid. It contains the name, email address, phone number, postcode, service, an internal reference and a timestamp. The referral metadata is stored in the database but is not included in the email.
3. A text message to Lomax staff
A short text message is sent through Twilio to a single Lomax staff telephone number configured by the operator. It contains less than the email does — only the name, telephone number, the service asked about and the internal reference. It does not contain the visitor's email address, postcode or referral metadata.
About these text messages: they go only to a Lomax staff number that Lomax controls. The service does not text visitors, customers or any number submitted through the form, and it sends no marketing, promotional or bulk messages. Because no message is ever sent to a member of the public, there is no subscription to join and nothing for a visitor to opt out of. Standard carrier message and data rates may apply to the Lomax staff number that receives them.
The two notifications are sent independently. If one fails, the other is still attempted, and the inquiry remains stored either way.
Who receives it
Lomax Window & Door Co. staff, the technical service provider that maintains the service on Lomax's behalf, and the infrastructure providers used to store and deliver it: Cloudflare for website hosting and the database, and Twilio (including Twilio SendGrid) for email and text-message delivery. Delivering a text message also requires passing it to the mobile carrier that serves the receiving number.
These providers process the information only to provide their service. The information is not sold, rented, shared with advertisers, or used to train machine-learning models.
No customer email or text is sent
The service does not email or text the visitor. A visitor who submits the form receives only an on-page confirmation. Any later contact comes from Lomax staff directly.
How long inquiries are kept
Lomax keeps inquiry details for 24 months after the last meaningful contact about that inquiry, and then deletes them. An inquiry may be kept longer only where it is needed to meet a legal obligation, to resolve a dispute, or for necessary business records such as a completed sale. You may ask us to delete yours sooner.
Two things about this are worth being plain about, because a privacy policy should describe what actually happens:
- Deletion is carried out by a person, not automatically. There is no automated expiry in the system today. Inquiries are deleted when you ask, and otherwise during a periodic review against the 24-month policy above.
- Deleted information lingers briefly in backups. The database keeps a recovery window of 30 days, which cannot be switched off. After that window the data cannot be recovered.
Copies of the notifications also sit outside the database: the email remains in the Lomax staff mailboxes it was delivered to, and the text message remains on the staff telephone that received it, until someone deletes them. The providers that deliver them keep their own delivery records for their own retention periods, which they set. Deleting an inquiry from the database does not remove those copies, so they are cleared by hand as part of handling a deletion request.
Your choices
To ask what is held about you, to correct it, or to ask for it to be deleted, contact digital@lomaxcolorado.com. Submitting the form is voluntary; the inquiry cannot be answered without it.
This website
The pages on this domain exist only to document the service. They contain no forms, no analytics and no third-party content, they set no cookies, and they collect nothing about you. Standard server request logs may be retained by the hosting provider.
If the delivery method changes
The notification channels described above — Twilio SendGrid for email and Twilio for text messages — are the ones in use today. If Lomax later changes how a notification is delivered, for example by sending the email through a different provider, this policy will be updated to name that provider before the change is made. What is collected, who it is for and how long it is kept would not change; only the delivery route would.
Who is responsible for this information
Lomax Window & Door Co., 5748 S College Ave., Unit B, Fort Collins, CO 80525, (970) 225-3869, is the business responsible for inquiries submitted through its website and for the information in them.
The notification service is operated on Lomax's behalf by an authorized technical service provider engaged by Lomax. The provider acts only on Lomax's instructions and handles that information only to deliver the service. It does not own Lomax's customer information, and does not use, sell, rent or share it for its own purposes.
Where this policy is published
This policy is published at lomax-legal.pages.dev, a location
administered by Lomax's technical service provider on Lomax's behalf, so that the
messaging service can be registered with the providers that deliver the notifications.
It is intended to move to lomaxcolorado.com once Lomax's own policy pages
are in place. That move changes where the policy is published, not who owns the inquiry
information — that is Lomax Window & Door Co. throughout.
Changes and contact
If this policy changes materially, the date above will be updated. Questions, and requests to see or delete your information: digital@lomaxcolorado.com.