The rules we work by

Accessibility, HIPAA & compliance

How we keep this site usable for everyone, how we handle your information and your customers' information, and the lines we won't cross. Plain English, and honest about the limits.

The short version

  • Built to be accessible. We build and test this site to WCAG 2.2 Level AA, the benchmark used for ADA website accessibility. If anything gets in your way, tell us and we'll fix it.
  • Not a HIPAA business associate. We don't sign Business Associate Agreements or handle patient records. Healthcare practices, read the HIPAA section before you choose a plan.
  • Your information is never for sale. No ad trackers, no tracking cookies of our own, and card details go straight to Stripe, never through our servers.
  • Recorded calls are always announced. Every tracked number tells callers the call may be recorded, on every single call.
  • Honest reviews only. We ask every customer, never just the happy ones, and we never pay for, write, or hide reviews.

1. Accessibility, the ADA, and WCAG

We want everyone to be able to use this site, including people who use a screen reader, get around with a keyboard instead of a mouse, zoom in to read, or need stronger contrast.

The standard we hold ourselves to

Our target is the Web Content Accessibility Guidelines (WCAG) version 2.2, Level AA. The Americans with Disabilities Act doesn't spell out a technical standard for private business websites, but WCAG is the one courts, the U.S. Department of Justice, and settlements consistently point to.

What that means on this site

  • Every page works with a keyboard alone, with a visible focus outline so you can always see where you are.
  • Pages are built with real headings, landmarks, and labels, so a screen reader can announce each section and jump between them.
  • Text and buttons meet WCAG contrast ratios, in both light and dark mode.
  • Images that carry meaning have text descriptions.
  • Every form field has a label, and a screen reader announces whether your message went through.
  • Pages reflow down to a 320 pixel wide screen, so zooming in to 400% doesn't cut anything off.
  • If your device asks for reduced motion, animated transitions switch off.
  • Nothing flashes, and nothing plays sound on its own.

How we check it

Every page is tested with axe-core, a widely used automated accessibility checker, at desktop and phone sizes. Then we check by hand: keyboard-only navigation, focus order, contrast, and zoom and reflow. Automated tools catch only part of the problem, which is why the hand checks matter. Most recent review: September 10, 2026.

Known limitations

  • Booking a call. The scheduling popup comes from Calendly, so its accessibility is in Calendly's hands. If it gives you any trouble, email or call us and we'll book the time for you.
  • Checkout. Payment happens on Stripe's own checkout page, which Stripe designs and maintains.
  • Other companies' sites. Instagram, and the SMM panel at stratoswm.org, are run by other companies.

Tell us about a problem

If anything here is hard to use, email support@lookgoodonline.com or call (214) 702-3717, Mon–Fri 9–5 ET. Tell us the page and what happened. A real person replies within one business day, and if you need anything from this site in a different format, we'll send it to you.

The sites we build for you

Your site gets the same approach: real headings, labeled forms, keyboard access, readable contrast, and text descriptions for images, checked before it goes live. We don't use or sell accessibility overlay widgets, the one-line scripts that claim to make any website compliant. They don't fix the code underneath, and the FTC has taken action against one overlay company for claiming they do.

No website can promise it will never draw a complaint, and nothing on this page is legal advice.

2. HIPAA and healthcare practices

HIPAA protects patients' health information. It applies to healthcare providers and health plans, and to the outside companies that handle patient information for them, which HIPAA calls business associates.

We are not a HIPAA business associate, and we do not currently sign Business Associate Agreements (BAAs). Our plans are built for marketing, not for patient records. That doesn't stop us working with a medical, dental, or therapy practice. It shapes how we set things up:

  • Your website is marketing, not patient information. Services, team bios, hours, location, and the insurance you accept are all fine.
  • Forms ask for contact details only. Appointment requests and contact forms on a healthcare practice's site ask for a name, a phone number or email, and a good time to reach you. They never ask about symptoms, conditions, medications, or insurance numbers.
  • Anything clinical stays in your own system. Intake paperwork, patient portals, and secure messaging belong in the HIPAA-compliant tools your practice already uses. We link to them from your site. We don't host them.
  • Review replies never confirm someone is a patient. When we answer reviews for a healthcare practice, we never mention a visit, a treatment, or that the reviewer is a patient at all, even to thank them. A friendly reply can still disclose patient information.
  • Call tracking and review requests need a conversation first. A recorded call to your front desk can include a patient describing their health, and sending review requests means working from a patient list. Both touch patient information, so talk to us before you choose a plan and we'll tell you straight which parts fit your practice.

Veterinary clinics aren't covered by HIPAA, which protects human health information, so none of this limits a vet practice.

3. Law firms

A law firm's website counts as attorney advertising under the Georgia and Texas bar rules. You review and approve every word before your site goes live, and clearing the content with your bar's advertising rules stays with you. Contact forms on a law firm's site carry a short notice that sending a message doesn't create an attorney-client relationship, and that visitors shouldn't share confidential details until the firm agrees to take the matter.

4. Privacy and your information

  • We don't sell, rent, or trade your information. Not to advertisers, not to data brokers, not to anyone.
  • No ad trackers. This site sets no tracking cookies of its own. We count visits with Cloudflare Web Analytics, which uses no cookies and doesn't follow you to other sites. The Calendly booking widget can set its own cookies once it loads, and our Privacy Policy explains that.
  • Our fonts and files load from our own server, so opening a page doesn't send your details to font or ad networks.
  • Only what you choose to send. Contact forms go to Formspree, bookings to Calendly, and payments to Stripe. Each one handles only what you give it.

The full details are in our Privacy Policy.

5. Payments

Every plan is paid through Stripe. You enter your card on Stripe's own checkout page, so card numbers never pass through or get stored on our servers. Stripe is certified as a PCI DSS Level 1 service provider, the highest level of the card industry's security standard. Prices don't include sales tax, which is added where the law requires it.

6. Call recording

The Masterpiece, The Gallery, and custom packages with call tracking include a tracked phone number that forwards to your real line. Calls to that number are recorded so we can report on your leads, and every tracked number plays an announcement at the start of every call saying the call may be recorded. It's always on, and we don't switch it off for anyone. So every caller is told, wherever they're calling from, including states where everyone on a call has to agree to a recording.

Calls to your own business line are never recorded. Recordings go to you and our team only, and they are never sold. Section 9 of our Terms of Service has the details.

7. Online reviews

Every plan includes a review engine that asks your customers to leave a Google review. We run it by Google's review policies and the Federal Trade Commission's rule on consumer reviews:

  • We ask every customer, not only the ones we expect to be happy. Picking and choosing who gets asked, often called review gating, breaks Google's rules.
  • We never offer money, discounts, or gifts in exchange for a review.
  • We never write reviews or post them under anyone else's name, and we don't ask your staff or family to review you.
  • We never hide or bury bad reviews. If one is fake or breaks Google's rules, we help you report it through Google's own process.

Breaking those rules can get reviews removed or a Business Profile restricted, and the FTC can fine businesses for fake or suppressed reviews. It isn't worth it, and it isn't how we work.

8. Security

  • Every page loads over HTTPS only, and browsers are told never to fall back to an unencrypted connection.
  • Standard browser protections are switched on, including a content security policy that blocks scripts we haven't approved, and protection against other sites loading this one inside a frame.
  • Our email domain is authenticated with SPF, DKIM, and DMARC, which makes messages pretending to come from us easier to catch.
  • Your domain, website, and content are registered in your name and belong to you, not us.

9. Who you're dealing with

Look Good Online (LGO Solutions) is a trade name of Stratos Dynamics, LLC, organized in Georgia. We work with businesses in Georgia and Texas. Every plan comes with a plain-English written agreement that you sign electronically, and our Terms of Service, Privacy Policy, and Website Terms of Use are all public.

10. Questions

For anything on this page, or something we haven't covered, email support@lookgoodonline.com or call (214) 702-3717, Mon–Fri 9–5 ET. We reply within one business day.

This page describes how we operate. It isn't legal advice and it doesn't change any signed agreement. If the two ever differ, your signed agreement controls. Last reviewed: September 10, 2026.