What we collect and why.

We collect the information you enter into our quote form so we can match you to an agency, and we share a limited, hashed copy of that information with Meta (Facebook) to measure how our ads perform. We don't sell your data. We don't add you to marketing lists. The agency we match you to receives your submission so they can reach out about the project.

• What you enter in the quote form: project type, a description, budget band, timeline, name, email, phone number, optional company name, and — if you're redesigning — the URL of your current site.
• Standard request metadata: IP address, user agent, referrer, the page you're on.
• A cookie set by Meta's Pixel (_fbp, and _fbc if you arrived from a Facebook or Instagram ad). These help Meta attribute your visit to an ad campaign.
• UTM parameters and a short-lived attribution record kept in Cloudflare Workers KV (up to 90 days) so we can stitch your Meta Lead Ad submission to the match report we send you by email and SMS.
• A small amount of behavioural telemetry from Microsoft Clarity so we can see which parts of the site people struggle with. No recording of form input values.

• To match you. Your answers determine which of our three studios fits your project best.
• To send you the match report.We email you a link to a personalized report (via Azure Communication Services) and — if you gave us a phone number — we also text you the same link (via OpenPhone). You won't receive marketing email or SMS from us; only the report and transactional follow-ups tied to your request.
• To pass the project brief on.Once we've made a match, your submission goes to the agency so they can reach out.
• To let you book a call.If you pick a time on the report, we pass your name, email, and chosen slot to Calendly so the agency's calendar can confirm and hold it.
• To measure advertising. We send hashed versions of your email, name, IP, and user agent to Meta via the Conversions API so Meta can report how many people who saw our ads ended up requesting a quote. Meta only receives SHA-256 hashes of identifiers, not the plaintext values, and only after you submit the form.

We share your full submission with the single agency we match you to. Beyond that, we use a handful of infrastructure providers — each one sees only the slice it needs to do its job:

• Cloudflare — hosting, edge routing, and Workers KV where submissions and attribution records live.
• Google (Apps Script + Sheets) — staging row for leads that arrive through a Meta Lead Ad before they reach our ingest endpoint.
• Azure Communication Services(Microsoft) — delivers the match-report email.
• OpenPhone — delivers the match-report SMS, if you gave us a phone number.
• Calendly — receives your name, email, and selected slot when you book an intro call.
• Meta — receives SHA-256 hashed identifiers and non-identifying event data via the Conversions API for ad measurement.
• Microsoft Clarity — anonymous session telemetry so we can see which parts of the site people struggle with.

We do not sell your data, and we do not share it with any other third party. Every subprocessor above is bound by their own terms with us.

• Global Privacy Control. If your browser sends a Sec-GPC signal (or has Do Not Track enabled), we disable the Meta Pixel entirely and suppress the corresponding server-side events.
• Stop the texts. Reply STOPto any message we send from +1 (438) 533-5861and we'll end SMS contact immediately. Reply HELP for support. Message and data rates may apply. SMS is only ever transactional — the report link and one short follow-up — never marketing.
• Opt out after the fact. Email hello@website-quotes.com and we'll delete the submission from our records and request deletion from our ad-measurement downstream.
• Cookie controls. You can clear the _fbp and _fbc cookies from your browser at any time. Doing so doesn't affect your ability to use the site.

If you reached us through a Meta Lead Ad or a lead generation messaging experience, Meta's Lead Ad Terms apply. We use Lead Generation Data only to provide the service described in the ad (matching you to a web design agency and passing the brief to them). We do not sell or augment it, and we do not target minors. If you want to know exactly what we received about you, email the address above and we'll tell you.

Submissions are kept for 24 months so we can follow up on referrals and handle support. After that we delete them. Meta applies its own retention policy to hashed identifiers shared via the Conversions API; their terms govern that side.

Website Quotes is for businesses. It is not directed to anyone under 16, and we do not knowingly collect data from minors. If you believe we have, email us and we'll delete it.

Questions or requests related to your data: hello@website-quotes.com. We reply within two business days.