Website request privacy
How request information is handled.
Learn what our forms collect, how requests are protected, where copies are kept, and what choices you have.
Website request privacy
How Dream Floor handles online requests.
Last updated: August 30, 2026
Who operates this website
Napa Surfaces operates this website and handles Dream Floor website requests. This notice applies to information collected through dreamfloorusa.com.
Information the forms collect
A business-account request asks for company name, contact name, business email, phone, business type, and required information about the business location, role, product or quantity interests, and account-support needs. A sample request asks for the same contact details, a selected Dream Floor product code, and optional project notes.
The forms do not ask for tax IDs, resale certificates, payment details, passwords, government IDs, or account credentials. Please do not place that information in the free-text field. Dream Floor does not use these forms for public checkout or payment processing.
The service also creates a request ID, timestamps, processing status, the version of this notice, and keyed retry and duplicate-prevention records. The raw browser retry identifier and the spam-protection token are not stored with the request.
How the information is used
Dream Floor uses the information to review and respond to the request, discuss wholesale account eligibility, prepare sample or product support, and follow up about pricing, availability, terms, quantities, and order requirements. It is also used to protect the form, prevent duplicate requests, maintain service reliability, and document the response status.
Dream Floor does not use form information for advertising, public profiles, or data-broker activity.
Cloudflare processing, database storage, and staff alerts
Cloudflare Workers runs the form, Cloudflare D1 stores an accepted request, Cloudflare Turnstile checks for abuse, and Cloudflare Email Routing sends the staff alert. Cloudflare may process an IP address, browser or device details, request metadata, and anti-abuse signals while delivering the site and operating Turnstile. Dream Floor does not place raw IP addresses or raw request headers in the D1 request record. The Turnstile token is sent to Cloudflare for verification and then discarded by the website.
After database storage is confirmed, the website starts a background staff alert through Cloudflare Email Routing from website@alerts.dreamfloorusa.com to contact@dreamfloorusa.com. The alert contains the submitted contact and request details. An hourly job provides a retry path. The stored D1 request is the authoritative website record; a successful form response confirms storage, not email delivery, staff review, or a response.
Limited operational logs may include a request ID, route, request type, outcome, safe error code, timing, and environment. They do not include the submitted company, name, email, phone, notes, or security token. Cloudflare may retain provider logs and recovery data under the account and service settings.
Submission readiness and information kept in your browser
The website accepts a submission only when the live service-readiness checks pass. If the service is not ready, the page does not claim success, keeps entered information in the form, and shows direct phone and email options. Closing and reopening an unfinished request keeps the entries on that page; a confirmed submission clears them.
Dream Floor’s site does not write form values to local or session storage, IndexedDB, cookies, page URLs, or console logs. Your browser may retain values through autofill or form-recovery features you control.
Thirty-day database retention and separate copies
The active website-request record and related D1 records are scheduled to expire after 30 days. Online submissions fail closed unless the automatic D1 cleanup is working and caught up. Cleanup removes the expired database records.
The staff-alert email is stored separately in Dream Floor’s business mailbox and is not deleted by the D1 cleanup. Mailbox-provider retention and recovery copies may apply. Cloudflare may also keep temporary recovery copies based on the account settings. Deleting an active request may not immediately remove those copies.
Phone and email links open the visitor’s own communication tools. Messages and information sent through those tools are outside the website-form database and may be retained with the resulting business correspondence.
Analytics and performance measurement
Dream Floor uses Google Analytics 4 (GA4) only after you grant optional analytics consent. Your choice is stored in the first-party dfw_analytics_consent decision cookie for 180 days. If you allow analytics, GA4 may set _ga cookies and related _ga_* cookies only after that grant; the site configures those cookies for no more than 180 days without extending them on later visits. You can revoke that choice and remove those GA cookies through Privacy settings. Revocation reloads the page with optional analytics disabled. Before consent, the optional GA4 script is not loaded. If a later site release disables optional analytics, the site automatically removes any remaining analytics decision and GA cookies.
Dream Floor sends GA4 bounded page and interaction measurements only. Analytics event parameters do not contain form values, names, email addresses, phone numbers, notes, other personal information (PII), or request IDs. Google may still receive ordinary browser and network metadata needed to provide the service. Ads storage, ad user data, ad personalization, and Google signals are always off; Dream Floor does not enable advertising or personalized advertising through this measurement. Read Google’s Privacy Policy (opens in a new tab).
Separately, Cloudflare Web Analytics measures basic site traffic and performance with a cookie-free beacon and without the optional-analytics consent cookie. It may measure pageviews, visits, and Core Web Vitals. Dream Floor does not add form values, personal information, request IDs, or raw query strings to analytics configuration; ordinary browser and network metadata may still be processed by the provider. Read Cloudflare’s Privacy Policy (opens in a new tab).
Google Maps
The Warehouse & Delivery page includes an optional interactive Google Map. The website does not contact Google for the map until you choose Load interactive map. Loading it may send technical request information, such as your IP address, browser details, and page referrer, to Google under itsPrivacy Policy (opens in a new tab).
The warehouse address and the direct Google Maps link remain available without loading the map.
Your choices and requests
You may ask Dream Floor about an active website request, request correction, or request deletion by emailing contact@dreamfloorusa.com, calling(626) 255-0104, or writing to Napa Surfaces at17019 Evergreen Pl, City of Industry, CA 91745. Dream Floor may verify your identity before acting.
Database deletion does not automatically remove separately retained staff-alert emails, business correspondence, provider logs, or recovery copies. Information may also be retained where required or permitted for security, recordkeeping, dispute handling, or other lawful business purposes.
Business audience, children, and changes
Dream Floor is a wholesale business website for flooring professionals and is not directed to children under 13. Dream Floor does not knowingly collect website requests from children under 13. This notice may be updated when the website’s collection, providers, or practices change. The date at the top shows the latest revision.
