Privacy Policy

1. Who We Are, and What This Covers

Twin Oak Landscaping LLC ("we," "us," or "our") is an owner-operated landscaping business serving Weston, Westport, Easton, Wilton, Redding, and Fairfield, Connecticut.

This policy covers two websites we operate:

• www.twinoaklandscaping.com — this site, including the short estimate form on the home page.
• book.twinoaklandscaping.com — our online booking system, which asks a good deal more about your property and can accept photographs.

The two collect different information and store it in different places, so they are described separately throughout. For questions about either, contact info@twinoaklandscaping.com.

2. The Short Estimate Form

The form on our home page asks for your name, an email address or a phone number (either is enough), your town, an optional street address, the service you are interested in, and an optional message about your lawn. Ticking the consent box is required to submit it.

Where it goes. When you submit the form, those fields are sent to a Google Apps Script endpoint that we control. It writes one row into a Google Sheet in our Google account and emails us a copy of the same details. Nothing about the estimate form touches our booking system or its database.

Google stores that spreadsheet and that email on its servers as our service provider. See Google's Privacy Policy.

3. The Online Booking System

Our booking system at book.twinoaklandscaping.com asks for considerably more than the estimate form does, because it is trying to work out whether a job can be quoted without a visit. Depending on the services you select, it may collect:

• Contact details — first and last name, email address, phone number, and how you would prefer to be reached.
• Property details — street address, town, ZIP code, property type, approximate lawn size, terrain, and how equipment can get onto the property (gate widths, parking, where materials can be dropped).
• Things that affect how we work on the property — whether there is irrigation, an invisible pet fence, or a septic field; any buried hazards you tell us about; pets; and access instructions.
• Your answers to service-specific questions, and any notes you add.
• Photographs of your property, if you choose to add them. See section 5.
• Your consent to be contacted about the request.

Where it goes. All of it is stored in a Supabase project we control — a hosted Postgres database with private file storage — separate from anything the estimate form touches. Photographs are held in a private storage bucket, not on a public URL. See Supabase's Privacy Policy.

Emails the booking system sends you — a confirmation, a request for more information, a scheduled visit — are delivered through Resend, an email delivery provider. The text of every message we send you is also kept in our own database so we have a record of what was said. See Resend's Privacy Policy.

4. Why We Collect It

We use what you give us only to:

• reply to your request and answer questions about it;
• work out whether we can quote the job from what you have told us, or whether we need to come and look;
• estimate how long the work will take and what it will cost;
• schedule and carry out a visit, and turn up prepared — knowing about a septic field or an invisible fence beforehand is the difference between a routine job and an expensive mistake;
• send you messages about your request and any appointment;
• keep a record of the work and of what was agreed.

We also count how many booking requests came from the same internet connection in the last hour, so that the form cannot be flooded. That count uses a one-way scrambled version of your IP address, described in section 7.

We do not sell, rent, or trade your personal information. We do not share it with anyone for their own marketing. The only third parties who hold it are the service providers named in this policy, who process it on our behalf.

5. Photographs

Photographs are optional. You can complete a booking request without adding any.

Location data is removed. A photograph taken on a phone usually carries hidden metadata, which can include the exact GPS coordinates where it was taken, the time, and the device that took it. When you upload a photograph, our server strips that metadata out before the image is stored. We keep the picture; we do not keep the coordinates. This happens on our server, so it does not depend on your browser or your phone settings.

They are not public. Uploaded photographs go into a private storage bucket. They are not published, not indexed by search engines, and cannot be reached by guessing a URL. When they are displayed — to you on your own booking page, or to us in our admin view — they are shown through a temporary link that stops working shortly afterwards.

We do not use your photographs in advertising, on our website, or on social media. If we ever want to, we will ask you first.

6. What Is Stored In Your Browser

The booking form's draft. While you are filling in the booking form, your answers are saved in your browser's session storage under the name twin-oak-booking-v1, so that a reload or an accidental back button does not lose your work. That copy stays on your device — it is not sent anywhere by being stored. It is cleared when you close the tab, and again when your request is submitted successfully. Your consent tick is deliberately not restored from it; you have to tick it yourself each time.

If you are on a shared or public computer and would rather not leave a draft behind, close the tab when you are finished.

Cookies. The booking system sets two, both strictly necessary, neither used for advertising or tracking:

• one that identifies the draft you are filling in, which lasts 12 hours;
• one that lets you return to your submitted booking to check on it or pick a time, which lasts 120 days.

Both are signed, cannot be read by JavaScript, and grant access to one booking and nothing else. The link we email you carries a signed token that expires 30 days after it is sent; every later message about the same booking carries a fresh one.

This marketing site sets no cookies at all. There are no advertising pixels and no cross-site trackers on either site.

7. Technical Information

Analytics. This marketing site uses Vercel Analytics and Vercel Speed Insights to count page views and measure load times. They are cookieless: no tracking cookie, no cross-site identifier, and no form field or contact detail is ever sent to them. The booking system runs no analytics at all.

IP addresses. When you submit a booking request we do not store your IP address. We store a salted one-way hash of it — a fixed-length scramble that cannot be turned back into an address — purely so we can count repeat submissions from the same connection and stop the form being abused. We also record the browser identification string your browser sends, shortened, as a diagnostic.

Hosting. Both sites are hosted on Vercel, which handles the connection and keeps standard server logs. See Vercel's Privacy Policy.

8. Who Can See Your Information

Twin Oak Landscaping is an owner-operated business. In practice one person reads your request, and that is the owner.

Access to the booking system's admin area is limited to a short list of approved email addresses. Signing in is by a single-use link sent to one of those addresses; there is no password to guess and no way to create an account. The database refuses to return another customer's booking to anyone who is not on that list, and your own booking page will only ever show you your own request.

Beyond that, your information is held by the service providers named above — Google, Supabase, Resend, and Vercel — who process it on our behalf and under their own agreements. We may also disclose information if the law requires it.

9. How Long We Keep It

Abandoned booking drafts are deleted automatically. If you start a booking request and do not submit it, the draft and any photographs attached to it are removed 12 hours later. Nothing is kept from a form you did not finish.

Submitted requests are kept until you ask us to delete them. We keep estimate requests, booking records, photographs, and the messages we sent you for as long as they are useful for servicing your property and answering questions about past work. We have not set a fixed deletion schedule, and we would rather say so than publish a period we do not actually follow. If you want your information removed, ask and we will remove it — see section 11.

Some records may be kept longer where we are required to, for example a record of work invoiced.

10. Communications Consent

By submitting the estimate form or a booking request, you authorize Twin Oak Landscaping LLC to contact you by email, phone, or text message in connection with that request. You may opt out at any time by replying "STOP" to any text message or emailing info@twinoaklandscaping.com. Message and data rates may apply. Consent is not a condition of purchase.

11. Seeing, Correcting, or Deleting Your Information

Email info@twinoaklandscaping.com and ask. You can ask us to:

• tell you what we hold about you;
• correct anything that is wrong;
• delete your information, including any photographs you uploaded;
• stop contacting you.

Include the email address or phone number you used, and the booking reference if you have one, so we can find the right record. We will confirm when it is done.

12. Security

Both sites are served over HTTPS. Booking data is held in a database that refuses requests from anyone who is not signed in as an approved administrator, photographs are in a private bucket rather than on a public URL, and the links that grant access to a booking are cryptographically signed and expire.

We take reasonable precautions, but no website or transmission over the internet can be guaranteed completely secure, and we do not claim otherwise.

13. Children's Privacy

Our websites are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

14. Changes to This Policy

We may update this policy. Changes will be reflected by updating the effective date above. If a change materially affects what we collect or what we do with it, we will say so here rather than only changing the date.

15. Contact

If you have questions about this Privacy Policy, or want to see or delete what we hold, please contact us: