Privacy policy.

Who operates the site

Chris Wright Enterprises, LLC, a Pennsylvania business, operates cwright.co. Chris Wright is the person and direct contact presented on the site. Privacy questions may be sent to [email protected] or submitted through the privacy choices page.

Superior Access Solutions, Inc. (SAS) is Chris’s employer and the systems integrator and equipment reseller that handles technology sales, contracting, product fulfillment, installation, and related services it accepts. SAS is also the Samsara partner for the connected operations offering described on this site. Samsara Inc. is a separate company. Those relationships affect how an SAS or Samsara inquiry may be routed, as described below.

Information collected

The information depends on whether a visitor browses public pages, chooses to submit a form, or changes a privacy choice.

• General inquiries: name, email, optional organization and phone, optional state, selected service, message, consent choices, source page, and limited campaign or referrer information.
• Quote requests are saved in restricted server storage with an opaque reference before email notification. Pending notifications are retried using the same saved request. The reference is included in the notification email. Quote requests: name, email, phone, equipment category, request description and permission to respond; optional ad measurement is a separate choice; organization, timing and purchasing details are optional.
• SAS technology and procurement inquiries: name, work email, organization, requirement description, and consent choices; phone and additional project details are optional. These may include role, buyer type, state, quantities, sites, budget status, sourcing requirements, and timing.
• Samsara inquiries: name, work email, organization, message, and consent choices; phone and additional fleet, installation, timing, and account details are optional.
• Privacy requests: name, email, state, request type, information needed to understand the request, and verification correspondence.
• Essential security data: a short lived session cookie, CSRF token, form start time, CAPTCHA result when the security challenge is enabled, rate limit counters, and a non content event record.
• Standard server logs: request time, requested URL, response status, user agent, referrer, and network address as received by the hosting stack. Cloudflare or other infrastructure may process connection data before it reaches this server.
• When you allow website analytics, HubSpot may receive: IP address, timestamps, a visitor identifier, pages and full page paths visited, sessions and page view counts, referrer and campaign information, browser or device signals, and cookie consent status. HubSpot may associate earlier browsing activity with a contact after that visitor identifies themselves through a supported form or tracked HubSpot interaction.
• Campaign attribution: only explicitly permitted source, medium, and campaign values are retained after you allow analytics. Browser session storage keeps those values, a known public landing-page path without queries or fragments, and a recognized referrer origin. Arbitrary campaign values are discarded by the HubSpot analytics integration. OpenAI ad attribution is separately controlled, as described below. Denying or revoking analytics clears this session attribution. The service ID and page where you submit remain part of the inquiry so Chris can understand the request.

How information is used

• Respond to the request and determine the responsible next step.
• Coordinate product fit, vendor or commercial validation, engineering, integration, procurement, installation, scheduling, delivery, support, or account questions when the visitor requests SAS or Samsara related help.
• Provide a requested consulting or educational conversation.
• Protect the forms, diagnose errors, prevent abuse, and maintain service reliability.
• When optional analytics is allowed, measure page views, sessions, traffic sources, and content performance through HubSpot to improve the site.
• When ad measurement is separately allowed, report successful quote requests to OpenAI to understand advertising performance.
• Keep necessary business records, honor privacy choices, and comply with lawful obligations.
• Send optional marketing email only when the separate, unchecked marketing choice is affirmatively selected. A service request alone does not enroll a visitor in marketing.

When information is shared

General consulting inquiries and privacy requests are delivered to Chris at [email protected] without an automatic SAS copy. Technology inquiries submitted through the quote request, SAS, Samsara, procurement, or HPE forms are also copied to Chris’s SAS work address, [email protected], for the requested response.

For an SAS technology request, relevant inquiry information may be handled by Superior Access Solutions and shared with manufacturers, distributors, subcontractors, integration partners, or other providers involved in evaluating, routing, configuring, quoting, contracting, installing, fulfilling, or supporting the requested opportunity. For a Samsara request, that may also include Samsara. The applicable form makes this routing visible before submission.

The site also relies on hosting and security infrastructure, HubSpot for optional website analytics and the optional HPE hosted form, OpenAI and Google for optional advertising measurement, the server’s Postfix mail transport, and Mailjet as the existing outbound email relay. Those providers process information needed to deliver, measure, or protect the service. Information may also be disclosed to professional advisers or authorities when reasonably necessary for legal obligations, security, fraud prevention, or the protection of rights.

Chris Wright Enterprises does not sell personal data. This site uses OpenAI and Google advertising tags after you allow measurement through separate optional measurement controls on the quote form or privacy choices page. You can manage each provider on the privacy choices page; Global Privacy Control keeps measurement off. Depending on the HubSpot account setting, HubSpot may use certain tracking code data to improve its products and services, including its commercial dataset. That HubSpot intent data access setting can be disabled in the HubSpot account without removing ordinary site analytics.

Cookies, CAPTCHA, and analytics

The protected form uses a short lived, secure, HttpOnly, SameSite session cookie for CSRF protection. If an hCaptcha challenge is presented, hCaptcha processes limited device and interaction information to distinguish people from automated abuse; its own privacy terms apply.

When you opt in to website analytics, HubSpot uses first party cookies and similar technologies to recognize a browser and measure activity. Depending on the site and consent settings, these may include __hstc and hubspotutk for a visitor identifier and visit history, generally for up to six months; __hssc for session and page view counts, generally for 30 minutes; and __hssrc for the browser session. HubSpot also sends a page view beacon.

The privacy choices page lets you turn optional analytics on or off. Turning them off prevents the loader from running on subsequent page views and removes its known analytics cookies. Browser settings or extensions may also block or clear cookies. Website analytics are off by default. They load only after you choose “Allow website analytics” on the privacy choices page. Global Privacy Control overrides an earlier opt-in. Your preference is stored locally in this browser.

Optional OpenAI ad measurement

Ad measurement is off by default. The required contact checkbox does not enable advertising measurement. Google and OpenAI have separate optional controls. You can manage each provider separately on the privacy choices page. Website analytics and marketing email remain separate choices. When allowed, the OpenAI pixel loads on the quote page and may finish reporting a confirmed request on the confirmation page. It reports lead_created only after the server accepts the request. Failed submissions and merely opening the confirmation page do not create leads.

OpenAI receives event time, a random event ID, website origin, browser/network signals and, when available, an ad click identifier and browser reference. Automatic advanced matching is enabled for this pixel: the SDK can detect supported contact fields, normalize them and hash them in the browser before sending them. Raw contact values are not sent through automatic matching. Our event payload does not include your request text, organization, equipment choices or raw name, email or phone.

When permitted, the pixel uses __oppref for ad attribution (up to 30 days) and __obref for a browser reference (up to 365 days). A separate consent preference is stored locally, and the SDK may use __oaiq_consent. Turning OpenAI measurement off stops future events and clears the two attribution cookies. Global Privacy Control overrides a saved opt-in.

A random conversion ID may be kept in browser session storage for up to ten minutes to finish reporting across the confirmation redirect. If server-side conversion reporting is enabled, it uses the same ID to prevent double counting and sends only the event metadata and available attribution/browser references. Unsent server events are retried for up to six days, then removed; accepted events are removed from the local queue. OpenAI processes received measurement data under its applicable terms.

Optional Google Ads measurement

Google Ads measurement is off by default. The required contact checkbox does not enable Google measurement. Use the separate optional Google control to allow it. Earlier bundled preferences require a new explicit Google choice. On the privacy choices page, each provider can be managed separately; changing OpenAI or HubSpot preferences there does not enable Google. When you allow Google Ads measurement, the Google tag loads on public pages to measure advertising visits and activity. Global Privacy Control overrides a saved opt-in.

Google may receive page URLs, referrer information, ad click identifiers, timestamps, browser or device signals and network information. The tag may use first party advertising cookies such as _gcl_*. We do not add form names, email addresses, phone numbers or request text to this tag. Advertising personalization is disabled in our consent settings.

After the backend saves and accepts a quote, Google can receive a lead conversion with a nominal reporting value of USD 1 and the random submission ID as its transaction ID. This is a lead value, not sales revenue, a charge or a quote price. An opaque submission reference is kept in the form session to make retries safe. A dispatched ID is retained in browser local storage until cleared to prevent repeat events; the confirmation page does not send Google conversions. Failed submissions do not create conversion events. Tracking failures never undo a saved request.

Your choice is saved locally in this browser. Turning Google measurement off updates Google consent to denied, clears known first party Google advertising cookies and prevents the tag from loading on subsequent page views. An already loaded tag may send a consent update without advertising cookies. Google handles received data under its applicable privacy terms.

Retention and security

Inquiry and related correspondence are retained only as long as reasonably necessary to respond, manage a business relationship, document consent or commercial activity, resolve disputes, meet operational needs, and satisfy legal obligations. Security counters expire automatically; server and mail logs follow the host’s restricted log rotation practices. HubSpot analytics records follow the account’s HubSpot retention settings, while the browser cookies use the periods described above. Records may be retained longer when a contract, dispute, legal hold, accounting duty, or security investigation requires it.

The implementation uses HTTPS, restricted server permissions, server side validation, CSRF protection, rate limits, spam controls, header injection defenses, security headers, and private logs that do not record full form messages. No internet service can promise absolute security.

Privacy requests and state rights

Visitors may request reasonable access, correction, deletion, or a copy of information associated with an inquiry, and may object to future marketing or unnecessary sharing. These choices are offered voluntarily even when a particular state privacy law threshold or exception means a statutory right does not apply.

Identity and authority must be reasonably verified. A request may be limited or denied when records cannot be reliably matched, another person’s rights would be affected, an exception applies, or retention is needed for security, fraud prevention, contracts, accounting, legal claims, or other lawful obligations. An explanation will be provided when practical.

• Use the privacy choices form on this site.
• Email [email protected] with “Privacy request” in the subject line.
• Call (952) 312 9317 if an accessible alternative is needed.

Children and student information

This website is directed to adult organizational and business visitors. It is not designed for children and does not knowingly collect information from children under 13. K 12 content is written for adult district, transportation, procurement, technology, and administrative buyers. Do not submit student data, routes, rosters, education records, footage, audio, or incident information.

Changes and contact

Material changes will be reflected on this page with a revised review date and, when appropriate, an additional notice. Questions may be sent to Chris Wright Enterprises, LLC at [email protected] or (952) 312 9317. Location: Coatesville, PA 19320.