Minimal information, owner review and a defined retention period.

Who operates this site

Florida Radon Pros is operated by Brian Higdon, sole proprietor. It is an independent informational and lead-introduction website, not a Florida-certified radon measurement or mitigation business.

What a project request collects

The form collects your name, email, request type and project description. Phone, project ZIP and an existing radon result are optional. Do not provide medical history, smoking status, payment information or other sensitive data.

Security verification

The form loads Cloudflare Turnstile in Managed, interaction-only mode to distinguish ordinary visitors from automated abuse. Turnstile processes browser and network security signals and returns a short-lived token. Your browser submits that token with the form. This site's Worker sends the token and, when Cloudflare supplies it, the network address to Cloudflare's server-side Siteverify service. The Worker requires the exact floridaradonpros.com hostname and this form's exact action before accepting a request. Form fields are not sent to Siteverify, and failed verification is not stored or emailed.

Consent, IP hashing and private storage

For each accepted request, the site stores the normalized request fields, exact consent text and version, affirmation, UTC timestamp, source-page path, Turnstile provider/hostname/action result and a receipt digest in the dedicated private florida-radon-pros-leads R2 bucket. When Cloudflare supplies a client IP, the Worker combines it with this property's private random salt and stores only a one-way SHA-256 hash. The Worker never writes the raw IP, Turnstile token or Turnstile secret into R2, application logs or notification email. Cloudflare still processes network and verification data as the hosting and Turnstile provider. The hash supports abuse controls and the consent record; it is retained with the request record for the period below.

Property-specific email notification

After the private lead-and-consent record is written, Cloudflare Email Sending attempts a plain-text notification from noreply@floridaradonpros.com only to contact@floridaradonpros.com, the property's Microsoft 365 mailbox. Visitor text is quoted as untrusted data and is never used as generated HTML or as mail-routing instructions. A failed notification is recorded when storage remains available and produces a visible error. Cloudflare acceptance means only that the provider accepted the notification; it does not prove inbox delivery. A secondary delivery marker is attempted after acceptance, and its failure does not encourage a duplicate submission.

Analytics, pixels and cookies

This site is configured without marketing analytics, advertising pixels, session recording, chat widgets or marketing cookies. Cloudflare provides hosting and security processing, including Turnstile, but the site does not use Cloudflare Web Analytics. Cloudflare Bot Fight Mode and its automatic JavaScript Detections injection are also disabled so the browser does not receive that additional script and clearance cookie.

How the information may be used

The owner may review your request, reply directly, or—with your further knowledge—use it to consider a possible introduction to an independent provider. The form consent does not authorize automated dialing, prerecorded or artificial voice calls, repeated marketing texts or automatic contractor sharing. Information is not combined with another property's leads or sold as a list.

Retention

Request, consent, delivery and failure records in the dedicated private bucket expire after five years (1,825 days). Cloud storage lifecycle deletion may complete after the expiration time rather than at the exact minute. Operational email copies in Microsoft 365 are governed separately by the owner's mailbox controls and are not promised as a permanent archive.

Deletion and correction

Email contact@floridaradonpros.com with the request identifier if available. We will use reasonable steps to locate and delete or correct the owner-controlled request record and email copy when legally permitted. A request already shared later with your knowledge would also be subject to the independent recipient's own privacy practices.

Security and children

Cloudflare hosts the website and private request workflow. The site uses exact-host and same-origin checks, strict parsing, two abuse-control stages, encrypted secrets and restrictive security headers. No internet service can promise absolute security. The site is intended for adults making property decisions and is not directed to children under 18.

Contact

Privacy, consent, deletion and correction questions: contact@floridaradonpros.com.