Privacy notice

Draft for owner review. This notice describes the website's current data flow. Before launch, the business owner must complete every item shown in [brackets], confirm the vendors listed, and have the notice reviewed. Last updated September 23, 2026.

Who we are

This website is operated by Palm & Stone Outdoor Living ("we," "us"). Questions about this notice or your information can be sent to [owner to add a privacy contact email]. [Owner to add the legal business name and a mailing address for privacy requests, if required.]

Demo mode

While this website is in demo mode, the consultation form does not send, email, or store anything you enter. It checks your entries in your browser and shows a demo confirmation. Call, text, and email buttons explain that the site is a concept and do not contact anyone.

Information you give us

When you request a consultation, the form collects:

• Required: your name, phone number, the ZIP code of the project, and the type of project.
• Optional: approximate size, a comfortable budget range, timing, your email address, and notes about the project.

Please don't include sensitive information — such as financial account numbers or health information — in the notes.

Information collected automatically

• Server and security logs. Like most websites, our hosting provider ([owner to name the hosting provider]) records technical information such as IP addresses, browser type, and pages requested, to operate and secure the site.
• Abuse and rate limiting. To block spam and repeated automated submissions, the form handler uses a one-way hashed version of your IP address for a short time. It is held in server memory or, if configured, in a rate-limiting data store, and expires automatically. [Owner to confirm whether a shared rate-limiting store is used and name its provider.]
• Campaign parameters. If you arrive from an ad or a tagged link, the site can store campaign details — for example utm_source, utm_campaign, and Google click identifiers such as gclid — in your browser's session storage and include them with a consultation request so we know which campaign it came from. Session storage is cleared when the browser session ends.
• Spam protection. If enabled, the form uses Cloudflare Turnstile to check that a person — not an automated script — is submitting it. Turnstile processes technical signals from your browser for that purpose. [Owner to confirm whether Turnstile is enabled.]

Analytics and advertising

Analytics and advertising tags are turned off unless the business configures them. If they're enabled, the site may use Google Analytics and Google Ads to understand how visitors find and use the site and to measure ad performance. Depending on the site's settings, you'll be asked for permission first or shown a notice, and you can change your choice below.

We don't send your name, phone number, email address, ZIP code, or notes to analytics or advertising services. Analytics events describe actions — for example, that a phone link was tapped or that a consultation request was accepted — not who you are.