Privacy Policy

Information you give us

There are two places on this site where you can send us information.

The contact form. We ask for your name, email address, phone number, company, the project address if you give one, and whatever you write in the message field. We use it to answer you. It reaches us as an email; we do not store it in a database.

The employment application. Applying for a job asks for considerably more: your name, contact details, date of birth, Social Security number, up to ten years of address history, education, employment history, skills, certifications, answers to screening questions, your signatures, and any documents you upload (for example a driver’s license, certifications, or a resume). We use this only to evaluate your application and, if you are hired, to complete onboarding.

Your Social Security number is encrypted before it is stored, and it is decrypted only when an authorized administrator generates the background check form. When your application reaches a final decision, hired or not, the encrypted number is erased immediately. The photograph of your Social Security card is kept with the rest of your application and is deleted on the schedule described below.

Information collected automatically

We do not use third-party analytics, advertising, or tracking cookies. No Google Analytics, no advertising pixels, no cross-site tracking.

We do count visits, using a first-party measure designed so that it cannot identify you. When a page loads, your IP address, browser user-agent, and the current date are combined and converted into an irreversible cryptographic hash. Only that hash is stored, and because the date is part of it the value changes daily, so the same visitor cannot be followed from one day to the next. For visit counting, your IP address and user-agent themselves are never stored.

Job applications are different. When you submit an application we do record the IP address and browser user-agent you submitted it from, and the IP address attached to each signature you give. That is kept with the application as part of its audit trail, and is deleted with it.

Cookies. We set a cookie when you enter the site access code, so you are not asked for it on every page, and administrators receive a cookie that keeps them signed in. Applying for a job does not require an account and sets no sign-in cookie. These cookies are strictly necessary for the site to work. We do not use cookies for advertising or profiling.

Who we share it with

We do not sell personal information, and we do not share it for advertising. We use a small number of service providers to run the site, and they may process your information on our behalf:

• Vercel hosts the website and processes requests to it.
• Supabase stores employment applications and uploaded documents.
• Resend delivers the emails this site sends, including your application confirmation.
• Google Maps supplies the map on our contact page and the address suggestions on the application form. Loading those features involves a request to Google, which is subject to Google’s own privacy policy.
• Sentry receives error reports when something goes wrong on the site. Those reports can include the page you were on, your browser, and the technical details of the error.
• Bemrose Consulting receives background check information for candidates who reach that stage. This happens only after you have signed a separate written disclosure and authorization, which we provide on paper when you come in.

We may also disclose information where the law requires it, or where it is needed to establish or defend a legal claim.

How long we keep it

Applications that are rejected or archived, along with any documents uploaded with them, are automatically deleted two years after the date of that decision. Applications that are started but never submitted are deleted by a job that runs once a day, once they are more than a day old, so one can persist for up to about two days. Social Security numbers are erased earlier, when a final hiring decision is recorded.

Contact form messages live in our email, and we keep them as long as we need them for the conversation and our records.

How we protect it

The site is served over HTTPS. Application documents are stored in private storage that is not publicly reachable; administrators receive short-lived download links rather than permanent URLs. Social Security numbers are encrypted at rest. Administrator accounts require a second factor to sign in, and every view or export of an application is recorded in an audit log.

No system is perfectly secure, and we cannot guarantee that information sent over the internet is safe from interception.

Your choices

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to us using the details below and we will respond. Some information we may need to keep in order to meet legal or recordkeeping obligations.

You can refuse cookies in your browser settings, but the site access code will not work without them.

Children

This site is not directed to children, and we do not knowingly collect information from anyone under 18. Employment applicants must be at least 18 years old; age is verified from photo identification in person at intake, not by this website.

Changes

If we change this policy we will update the effective date at the top. Material changes will be noted on this page.

Contact us

Privacy questions and requests go to hello@harlensdrywall.com, or reach us at:

Harlen's Drywall Co., Inc.
14615 NE 13th Court, Suite A-100
Vancouver, WA 98685
(360) 574-1424
Washington UBI 600 322 928

You can also reach us through our contact page.