Instructions, scope, and separation
The contractor determines its form, service purpose, follow-up, pricing, and authorized accounts. Form Champions operates the hosted workflow and reporting under those configurations, with separate handling for its own account security and service administration. Workspace access is checked on the server. Platform administrators have operational access; a client login does not grant access to other client workspaces.
Processing particulars
Activities include receiving completed form details, storing inquiries and estimate selections, sharing authorized inquiries with the contractor’s Housecall Pro company, reading authorized advertising metrics, linking converted jobs, and hosting the private dashboard. An optional address lookup sends the submitted address to RentCast.
Data subjects include homeowners who submit a form and people authorized to use a contractor workspace. Data includes contact and project fields, source identifiers, business account details, authorized provider references, and technical/security records described in Privacy. Retention and backup practices are also described there.
Recipients and safeguards actually in use
Hostinger supplies the hosting environment. Meta, Housecall Pro, and RentCast receive or supply information only through the applicable features and account authorizations described in Privacy. Provider roles and contracts need review for the relevant customer and jurisdiction.
Implemented controls include HTTPS, password hashes, encrypted provider credentials, application-level workspace authorization, bounded inputs, login throttling, and restricted server files. This summary does not promise universal encryption of all data at rest, independently audited compliance, completed staff training, a fixed breach-response SLA, or signed international-transfer clauses where these have not been established.
Items for the customer agreement
Before relying on a formal DPA, the parties must confirm the legal contracting entity, applicable law and roles, lawful instructions, confidentiality obligations, vendor terms, security responsibilities, request assistance, incident handling, deletion/return arrangements, audit terms, and any required international-transfer safeguards. Those contractual terms require owner and legal review rather than automatic reuse of another service’s document.
Use the privacy contact below to request the applicable processing agreement or discuss data-return/deletion instructions. Do not treat disconnecting a provider as a request to delete every retained record.
Contact
Form Champions is operated by Yelu Marketing. For privacy, accessibility, or data-processing questions, contact privacy@yelumarketing.com. Include the relevant contractor name and the kind of help you need, without passwords or API keys.