Your information, explained.
Website policy · Updated 12 November 2026 · Contracting business identity must be confirmed before a commercial engagement.
Information you provide
The inquiry form on the quote, contact and support pages records your name, email, company if provided, service selection, route details, project description, consent, and a request reference. Do not submit passwords, payment-card information, or confidential technical material. The situation check at /start works differently and is described in the next section.
The situation check at /start
The situation check asks questions one screen at a time. We record each answer you give, including any text you type for an Other choice and your own words about your biggest problem. At the end we ask for your name, email address and company name, and optionally your website and phone number, and we record your tick confirming how your details are used. We also record your score and result, the one question you type for the call, and your call request or booking if you make one. We store a hashed form of your connection address, not the address itself, and use it to limit repeated starts from one connection. Answers are saved as you go, so a partly finished check stays in our database. Your result and call agenda are built from your own answers.
Where the situation check data goes
The data is stored in the site’s Cloudflare D1 database. After you give your email address, we send your details, answers, score and result to our customer relationship system, HighLevel (also called GoHighLevel), as a contact record with notes. We use it to prepare for and arrange your call. HighLevel is a separate service and holds that copy under its own terms.
Automatic lookups
After you give your contact details, our server makes two lookups. It uses your website if you gave one. Otherwise it uses the domain of your email address, unless that is a free mailbox provider such as Gmail. It asks Cloudflare’s public DNS service for the mail records of your email address domain, to see which mail provider you use, and for the address records of the website domain, to make sure it points to a public address. It then fetches the public homepage of that website, following a few redirects, and reads only the page title, description and site name. We keep the domain, the title, the description, the site name, the names of the mail servers and the mail provider, and send the mail provider to HighLevel. We do not log in to anything. If you leave the website blank and use a free mailbox, no lookup is made.
Booking a call
The result page lets you pick a call time. While the Cal.com calendar is not switched on, you see a Request a call time form. It records the days and time window you choose and your time zone, and stores them with your other quiz data and in HighLevel. It is not a confirmed booking. When the Cal.com calendar is switched on, the result page loads a booking widget from Cal.com, a separate service. Cal.com receives your name, your email address and your quiz session reference when the widget opens, and handles the booking under its own terms. Cal.com then tells our server the booking details: the time, your time zone and the event title. Our server uses your email address to match the booking to your quiz. We store them with your quiz data and pass them to HighLevel.
Backups
Each day a copy of the quiz records, inquiry records and the HighLevel contact data is taken from our systems and transferred over an encrypted connection to storage at Hetzner. The copy holds the same personal details as the originals.
Email sign-up
The sign-up boxes on the home page, on the service, industry, region and guide pages and in the footer ask for an email address only. We record the address, the page you signed up on, the website you came from and any utm_ campaign tags in the link you followed. We send the address to our customer relationship system, HighLevel (also called GoHighLevel), as a contact tagged nurture-optin, and keep a copy in the site’s Cloudflare D1 database. We store a hashed form of your connection address to limit repeated sign-ups. The first email explains what a first call covers and what to have ready. After that we send short emails about checking suppliers and ordering from factories. Every email has an unsubscribe link. The site keeps the website you came from and the campaign tags in session storage in the current browser tab so they can be recorded with the sign-up.
How it is used
Inquiry information is stored to review and manage the request, clarify the project, and prepare a possible commercial response. For signed-in visitors, we also store a hashed, site-specific account identifier with the inquiry to limit repeated submissions and bind retries to the same account. Service requests without a visitor identity share a common submission budget. Submitting the inquiry form does not subscribe you to marketing emails. Situation check details are used to build your result and call agenda, to arrange the call and to manage your inquiry.
Storage and access
Requests are stored in the site’s Cloudflare D1 database. Website hosting is provided by Cloudflare. The site owner can access inquiry records through the hosting account. The inquiry form does not automatically send an email or forward your details to a supplier. Situation check data is also sent to HighLevel, as described above.
Device storage and cookies
The site uses session storage for a request identifier and temporary inquiry drafts in the current browser tab. The situation check also keeps your session reference, answers, contact details, result and call question in session storage in the current browser tab so a refresh keeps your place. It is removed when the tab closes or when you start again. After submission, the downloadable request summary is kept only in the current page’s memory. The planning workspace keeps product drafts, cost assumptions and checklists in local browser storage without cloud sync. Other people using the same browser profile may see them. Export a backup before clearing site data; clearing site data removes these local drafts. Opening a sourcing request copies the selected brief to temporary storage in the current tab; it is removed after a successful submission or when the tab closes. No advertising or optional analytics scripts are included in the authored site. The only third-party script is the Cal.com booking widget, which loads only on /start, only on the result page, and only when the Cal.com calendar is switched on. Hosting may use essential authentication or security cookies under its own policies.
Retention and choices
Automatic deletion of inquiry records, situation check records, the HighLevel copy and the backups is not currently implemented. The operator should review and delete information when no longer needed. For access, correction, or deletion, use the contact form and include your request reference.
Operator details
Factory & Freight is a working business identity. The legal operator, contact details, and jurisdiction-specific notices must be finalized before offering the site to external customers. Contact requests are available through this website.