quoroom.org
Privacy policy
This describes what actually happens on this site, not what a template says usually happens. If you read the reference pages we learn nothing about you beyond a server log line. If you send an enquiry we keep what you typed, on our own server, to answer you.
The short version
No cookies. No analytics. No advertising, no pixels, no fingerprinting, no session recording. No third-party request of any kind is made when a page loads — the fonts are served from this site rather than from Google, which is why. The only personal information we hold is what you choose to put in the enquiry form, and the only thing we do with it is reply to you.
Reading the site
Every page here is a static file. Nothing is personalised, so nothing needs to know who you are.
Our web server writes an ordinary access log: your IP address, the time, the page requested, the response code, the referring page if your browser sent one, and your browser's user-agent string. That log exists to keep the server running and to see abuse — it is not analysed for behaviour and it is not joined to anything else. It is rotated daily and kept 14 days, after which it is deleted.
The deadline calculator
The calculator runs entirely in your browser. The meeting date you type is never sent to us — the arithmetic happens on your machine.
It does put that one date in your browser's sessionStorage, under the key
quoroom:meeting, so that if you go on to the enquiry form the date is already filled in.
Session storage is cleared by your browser when you close the tab, it is readable only by this site,
and it never reaches us.
The enquiry form
If you send an enquiry, we store exactly the fields you filled in:
- Association name — so we know who we are quoting for.
- Number of separate interests — the quote is priced on it.
- Annual meeting date — it decides which statutory deadlines are still reachable.
- Email address — the only way we have to reply.
- What you need, and anything else you wrote.
- The language of the form you used, so we reply in it.
- The time the message arrived.
That record is written to a file on our own server, readable only by the account that runs the site. It is not sent to a third-party form service, a CRM, or a mailing list provider, because we do not use any.
What we do not do with it
We do not sell it, rent it, share it, or trade it. We do not add you to a newsletter. We do not use it to advertise to you anywhere. We do not use it to train anything. If you send an enquiry and we turn out not to be the right fit, you get a reply saying so and that is the end of it.
Two things the form does that are worth naming
A hidden field. The form carries a field named company that is hidden
from you and visible to automated submitters. If it arrives filled in, the message is discarded. If
you are using a screen reader or an unusual browser and it is not hidden from you, leave it empty.
A rate limit. We count recent submissions per IP address to stop a flood. Those counts live in memory only, for an hour, and your IP address is not written into the stored enquiry.
How long we keep an enquiry
Until it has served its purpose. If we work together, the enquiry becomes part of the engagement record and is kept with it. If we do not, we keep it long enough to remember the conversation — 12 months — and then delete it. You can ask us to delete it sooner, at any point, and we will.
Your choices
Write to privacy@quoroom.org and ask for any of the following. We will act on it and tell you we have, normally within a few business days.
- A copy of what we hold about you.
- A correction if something is wrong.
- Deletion of your enquiry.
- An explanation of why we still hold something, if we think we should.
We will not ask you to create an account to exercise any of these, and we will not charge for it.
On the California Consumer Privacy Act
We will say this plainly rather than imply more than is true. The CCPA, as amended by the CPRA, applies to businesses above thresholds — annual revenue, or the personal information of 100,000 or more consumers, or deriving half of revenue from selling personal information. This site is nowhere near any of them, so the Act does not currently impose its obligations on us.
We honour access and deletion requests anyway, as set out above, because the right thing to do does not depend on a revenue threshold. If we ever cross one, this page will say so and will set out the statutory rights in the form the Act requires.
Links out of the site
The reference pages link to the Legislative Counsel's own publication at
leginfo.legislature.ca.gov and, for verification, to
california.public.law. Those are other people's sites with their own practices. Nothing
about you is passed to them by us; following a link is an ordinary visit made by your browser.
Children
This site is addressed to association boards, managers and owners. It is not directed at children, and we do not knowingly collect anything from anyone under 16.
Security, stated honestly
The site is served over HTTPS. The enquiry file is stored with permissions that restrict it to the account running the service, and the service itself runs with the operating system's privileges stripped back — no new privileges, a read-only filesystem apart from the one directory it writes to, and a memory cap.
No one can promise a server will never be breached. What we can say is that the amount of personal information here is deliberately small: there are no accounts, no passwords, no payment details and no browsing profiles to lose.
Changes
If this policy changes, the effective date at the top changes with it, and the change is described here rather than applied silently. The current version is dated 10 October 2026.
Related
- Legal notice — what this site is, and what it is not.
- Terms of use — the terms on which it is published.
- Accessibility — what works, and what we know does not.