Privacy policy

Who we are

Cardinal Hall ("Cardinal Hall," "we," "us") is a business operated by Cameron Helt in North Carolina. This policy covers cardinalhall.co, cardinalverified.com, our dealer assessment, and the products Cardinal Verified, Cardinal Relay and Cardinal Owe. It explains what information we collect, why, and what you can do about it.

Our products are built for businesses, mainly car dealerships. When a dealership uses a product, the dealership decides what information goes into it and is responsible for its customers' information. We handle that information on the dealership's behalf and only to provide the service.

This website

cardinalhall.co sets no cookies, runs no analytics, and loads no fonts, scripts or images from other companies. Our hosting provider, Netlify, keeps standard server logs, such as IP address, browser type and the page requested, to deliver the site and protect it from abuse. We do not use those logs to identify you.

If you email us, we keep your message and address to reply to you.

The dealer assessment

If you complete our dealer assessment, we collect what you enter: your dealership's name and city, your name and title, how to contact you, and your answers. Your answers are also saved in your own browser as you type so you do not lose them, and stay there until you clear them.

When you press Send, your submission is stored by Netlify and a copy is emailed to us. We use it to prepare our findings for your store and to follow up with you. We keep submissions for up to 24 months unless you ask us to delete them sooner.

Our products

Cardinal Verified

Verified processes your lead export inside your web browser. The file and its contents are never sent to us. Scores, settings, notes and history are stored in that browser's local storage on the computer that ran them. Signing in to Verified uses Netlify Identity, which stores your email address and manages your password on our behalf.

Cardinal Relay and Cardinal Owe

These products run on servers hosted by Render in the United States. They store:

• Staff information: name, role, an optional email address, and a PIN stored as a keyed hash, not in readable form.
• Customer information: first name and last initial, stock number, and basic deal details such as new or used and deal type. They do not store customer phone numbers, email addresses, street addresses, or credit or financial information.
• Activity: stage times, checklist and promise status, notes, and a history of who did what and when.
• Devices: a sign-in cookie to keep staff signed in, and, if a staff member turns on phone alerts, the notification address their browser provides.

The dealership owns this information. We use it only to operate the product for that dealership and to prepare reports the dealership asks for. A dealership can export its data at any time. When service ends, we delete it within 30 days unless the dealership asks us in writing to keep it. Daily backups are kept for 14 days.

Who we share information with

We do not sell personal information, share it for targeted advertising, or use it to train artificial intelligence models. We share information only with the service providers that run our products, and only as needed to do so:

• Netlify hosts our websites, Verified's sign-in, and assessment submissions.
• Render hosts Cardinal Relay and Cardinal Owe.
• Google delivers assessment notifications and email to us.
• Namecheap hosts email for our domain.
• Apple, Google or Mozilla, depending on the phone, deliver Relay alerts to staff who turn them on. Alert contents are encrypted in transit.
• Google Fonts serves the typefaces on cardinalverified.com, and receives a visitor's IP address when those pages load. cardinalhall.co hosts its own fonts.

We may also disclose information if the law requires it, or to protect the safety and security of our users and services.

Security

We encrypt traffic in transit, store PINs as hashes, limit sign-in attempts, separate access by role, and keep a history of changes. No system is perfectly secure, and we will tell affected customers promptly if we learn of a breach involving their information. Our data page has more detail.

Children

Our websites and products are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children.

Your choices

You can ask us to show you, correct, or delete information we hold about you by emailing cameron@cardinalhall.co. If you are a customer of a dealership that uses our products, contact the dealership first, since it controls that information; we will help them respond. If you live in a state that gives you additional privacy rights, contact us and we will honor them as the law requires.

Changes to this policy

If we change this policy, we will update the effective date above. If a change materially affects how we use information we already hold, we will tell our customers directly before it takes effect.

Contact

Cardinal Hall, North Carolina. cameron@cardinalhall.co