Content Security Policy

The website sends a Content Security Policy that limits where executable code, frames, network connections, images, and other browser resources may originate. It also blocks browser plugins, prevents other sites from framing H&N pages, restricts form submission, and upgrades eligible requests to HTTPS.

Additional response protections limit content-type guessing, unnecessary browser permissions, referrer information, and insecure transport. Authorized third-party origins are limited to services currently needed for customer authentication, mapping, payments, and privacy-conscious error monitoring.

Customer and internal accounts use managed authentication, verified identities, secure session cookies, rate limits, and database authorization policies. Internal permissions are assigned from protected business records rather than editable browser information.

Customers and staff should use unique passwords, protect access to their email accounts and devices, sign out of shared devices, and notify us promptly about suspected unauthorized access. H&N will never request a password or full payment-card number through appointment notes or ordinary email.

Customer and booking mutations are validated on the server, and pricing and payment amounts are calculated from trusted business records rather than browser-supplied totals. Database access is limited by role and row-level policies, and sensitive provider credentials remain server-side.

Payment-card entry is handled through an approved payment provider. H&N stores transaction references and payment state needed for booking and reconciliation, not complete card credentials. Refunds and payment updates use idempotent records and provider verification to reduce duplicate processing.

The website uses bounded rate limits, error monitoring, audit records, and operational review to identify failures and suspicious behavior. Error reporting is configured without session replay and is designed to exclude request bodies, cookies, authentication secrets, payment data, and other unnecessary customer information.

Hosting, authentication, database, mapping, email, rate-limiting, and payment providers maintain their own security programs and terms. Access is limited to the functions each provider performs for the business, and credentials are separated by deployment environment when practical.

Do not submit passwords, full card details, government identifiers, medical information, or other unnecessary sensitive data in contact messages or appointment notes. Do not attempt to bypass access controls, rate limits, service-area checks, or payment protections.

If an account, email link, or payment screen appears unusual, stop and confirm that the browser address is www.hnmobiledetailing.com before continuing. Use our contact page if you are uncertain.

Security concerns may be reported to contact@hnmobiledetailing.com with the subject “Security Report.” Include a clear description, the affected page, the date and time observed, and non-sensitive steps that help us reproduce the issue. Do not include passwords, active authentication links, card information, or data belonging to another person.

Please avoid accessing, changing, downloading, or sharing data beyond what is necessary to describe a concern; disrupting service; impersonating a customer; or demanding compensation. We will review good-faith reports and respond as reasonably appropriate for the issue and the size of the business.

If a security incident affects personal information, H&N will investigate, preserve appropriate records, work with relevant providers, and provide notice when required by law. Safeguards and this policy may change as the website, threats, vendors, and services evolve.

Questions may be submitted through our contact page. H&N Mobile Detailing LLC is based in Raymore, Missouri and provides mobile service throughout the Kansas City metro.