Privacy policy

Who this applies to

This policy describes how OnSite Employer Testing handles information submitted through this website’s quote request and contact experiences, and related technical processing. It is written for visitors who work for or represent employers and partners inquiring about workplace testing services.

Information we collect through forms

Quote request (/quote): When you complete the multi-step quote flow, we collect the fields you enter, including name, company name, email address, phone number, selected program types, approximate headcount range, location or service-area notes, timeline, and free-text notes about your needs.

Contact (/contact): When you use the general contact form, we collect first name, last name, email address, phone number, and your message.

We may also derive or attach operational metadata when a submission is processed—such as a reference identifier, submission timestamp, and subject line used for internal routing—so our team can match replies to the correct inquiry.

How we use this information

We use form submissions to:

• Respond to quote requests and contact messages
• Follow up about employer drug and alcohol testing programs you ask about
• Operate, secure, and troubleshoot the submission flow (for example validation and delivery errors)

We do not sell your personal information as a standalone commercial product. If that stance ever changes, this policy must be updated and any required notices or consent mechanisms added under applicable law.

Legal bases for processing

Depending on location and context, processing may be described as necessary to respond to your inquiry before a contract, based on legitimate interests in operating a business website and replying to employers, or on another basis required by applicable law. The appropriate formulation depends on where you market, employ staff, and process personal data.

Retention

We retain quote and contact submissions long enough to respond to your inquiry, support follow-up about the services you asked about, and maintain ordinary business records. Retention periods depend on mail and backup policies and operational needs. We delete or anonymize information when it is no longer needed for those purposes unless a longer period is required by law.

Subprocessors and service providers

Delivering form submissions relies on infrastructure and providers outside this site’s HTML. As implemented today:

• Email delivery: Submissions are sent to our team using SMTP through your configured organizational email provider (for example Microsoft 365, Google Workspace, or a host-provided mailbox). That provider processes message content, headers, and routing information under its own terms and security practices.
• Website hosting: The application is hosted on Vercel, which processes HTTP requests, may log technical data (such as IP address and user agent) for security or operations, and stores deployment configuration. See Vercel's privacy policy and related agreements for how they handle service data.
• CRM or ticketing: If leads are copied into a CRM, help desk, or internal system, those tools process the fields you choose to sync under their own terms and security programs.
• Analytics: This site may use Vercel Web Analytics on deployments hosted with Vercel, which collects privacy-focused, aggregate usage metrics as described in Vercel's analytics privacy documentation. Additional marketing or analytics tools will be listed here if deployed, with what they collect and any opt-out or consent flows required by law.
• Bot or abuse protection: If bot or abuse verification (for example Cloudflare Turnstile) is enabled on forms, the provider may process technical signals such as tokens or risk scores to distinguish legitimate submissions.

Cookies and similar technologies

We use strictly necessary cookies and similar technologies required for the site and forms to function. We do not use optional marketing or advertising cookies on this site at present beyond the analytics practices described above. If that changes, this section will name each technology, its purpose, and retention.

Access, correction, deletion, and complaints

You may have rights under applicable law to access, correct, delete, or restrict processing of your personal information, or to lodge a complaint with a supervisory authority. To exercise those rights, contact us through the channels published on this site (for example /contact or the business phone number we list). We verify requests as permitted by law and respond within the timeframes applicable to your jurisdiction.

Security

We use reasonable technical and organizational measures appropriate to the nature of the data—for example transport encryption for email where supported by your mail configuration, access controls on operational accounts, and validation of form input on the server. No method of transmission or storage is perfectly secure.

Children

This site is intended for employer and business inquiries, not for children. We do not knowingly collect personal information from children as defined by applicable law.

Changes

We update this page when our practices or subprocessors change materially. The date below reflects the most recent revision.

Last updated: March 29, 2026