Privacy policy

Privacy Policy

Effective Date: August 22, 2026
Last Updated: August 22, 2026

The GreenHouse Group Inc (“GreenHouse,” “GHG,” “we,” “us,” or “our”) respects your privacy.

This Privacy Policy describes how information is collected, used, and disclosed when you visit and interact with https://thegreenhousegroupinc.com (the “website”). It is written to describe what this website actually does. It does not describe offline or internal business systems unless those systems receive information from this website.

1. Who We Are

2. Scope of This Policy

This Privacy Policy applies only to interactions that happen through this website. There are exactly two places on this website where you can submit information about yourself: the contact form and the resource request form. Everything else on the website is published content you can read without submitting anything.

This website does not operate a newsletter signup, an appointment scheduler, a home valuation tool, a customer relationship management (CRM) integration, an MLS/IDX search or data feed, an advertising pixel, a tag manager, session recording, or a web analytics package. If we add any of these, this Policy will be updated before they go live.

Information you send us by email, phone, text message, or in person, and information collected in the course of a real estate or mortgage engagement, is handled outside this website and is not governed by this Policy.

3. Information We Collect Through This Website

3.1 Contact form

When you submit the contact form, we collect:

• your name
• your email address
• your phone number (optional)
• the topic you select
• your message
• the page on this website you submitted from
• a hidden anti-spam field (a “honeypot”) that real visitors leave empty; submissions that fill it are discarded

Contact form submissions are delivered by server-side email to connect@greenmeansgrow.com. The website does not currently retain a database record of contact form submissions; the resulting email lives in our business email account.

3.2 Resource requests

Our proprietary guides and tools are delivered by request rather than as open downloads. When you request one, we collect:

• your first and last name
• your email address
• your phone number
• your stated intent (buying, selling, financing, or similar)
• your timeframe
• any notes you choose to add
• whether you consented to receive marketing follow-up
• which resource you requested
• the page on this website you requested from, and the referring website, if any
• campaign attribution values present in the link you arrived through (utm_source, utm_medium, utm_campaign)
• the IP address the request came from
• your browser user-agent string
• workflow information we generate as we handle the request: status, review/approval/ decline/send timestamps, and internal notes written by our team

Resource request records are stored in a database hosted on Lovable Cloud and are visible only to authenticated GreenHouse team members who have been individually granted administrative access. They are not stored behind a shared password.

3.3 Server logs

Like any website, our hosting infrastructure processes standard request data (such as IP address, request path, timestamp, and user agent) in order to serve pages and protect against abuse. We do not build visitor profiles from it.

4. Cookies and Similar Technologies

This website sets no first-party advertising, analytics, or measurement cookies. It uses browser session storage for one purpose only: to remember, for the duration of your visit, that you chose to load an optional third-party embed (see Section 6).

If you sign in to an administrative area of this website as a GreenHouse team member, authentication cookies and local storage are used to keep you signed in. That applies to staff accounts, not to public visitors.

Third-party embeds can set their own cookies once you choose to load them. That is why they do not load until you ask for them.

5. How We Use Information

• to respond to your inquiry
• to review and fulfill a resource request, including sending you the resource
• to follow up about real estate, mortgage planning, or the resource you requested, where you asked us to or where permitted by law
• to detect and prevent spam, abuse, and fraudulent submissions
• to maintain, secure, and improve the website
• to comply with legal, licensing, and recordkeeping obligations

We do not sell personal information for money, and we do not use information collected through this website for cross-context behavioral advertising.

6. Third-Party Services Present on This Website

The following third parties can receive information (including your IP address and browser information) in connection with this website:

• Lovable Cloud — website hosting, file storage, database, and staff authentication.
• Lovable-managed email delivery — sends contact-form notifications to us, resource-delivery emails to you, and administrative account emails to our team.
• Yelp — an embedded review widget on the Proof page. It does not load, and Yelp receives nothing, unless you click to load it.
• YouTube (privacy-enhanced mode, youtube-nocookie.com) — embedded video players. Players load only when you click play. Video thumbnails are served by YouTube’s image host; where an opt-out preference signal is detected, we suppress those thumbnails too until you click.

Fonts and imagery used by this website are served from our own infrastructure. This website makes no requests to third-party font services, map services, schedulers, advertising platforms, tag managers, or session-recording tools.

When you follow an outbound link from this website — to a review platform, a social profile, a press article, or our own historical article archive — that destination’s own privacy practices apply.

7. Disclosure of Information

We may disclose information collected through this website:

• to service providers who process it on our behalf and under contract, for the purposes listed in Section 6
• to GreenHouse team members who need it to respond to you or fulfill your request
• when required by law, subpoena, regulator, or to protect our rights, safety, or property
• in connection with a merger, acquisition, or sale of assets, subject to this Policy

We do not disclose information collected through this website to data brokers, lead resellers, or advertising networks.

8. Retention and Automatic Deletion

The following retention rules are implemented in the website’s own systems as an automated daily process — not just described here:

• Resource request records that are not associated with an actual client or transaction are deleted 24 months after the request.
• Request IP address and user-agent data on resource request records are automatically erased 90 days after the request, regardless of the record’s status.
• Signed download links issued for a requested resource expire 72 hours after they are created.

Contact form emails are retained in our business email account under our normal business correspondence practices.

These website retention rules do not apply to client, transaction, mortgage, accounting, tax, or regulatory records that we are separately required to maintain outside this website.

9. Opt-Out Preference Signals and Global Privacy Control

This website recognizes the Global Privacy Control (GPC) signal and comparable browser-level opt-out preference signals.

We do not sell personal information for money and we do not operate cross-context behavioral advertising, so there is no advertising sale to switch off. What we do when a signal is detected is concrete: optional third-party, tracking-capable content — the Yelp review widget, YouTube players, and YouTube-hosted video thumbnails — is not loaded at all unless you explicitly click to load it. If you do click, that choice is remembered only for the current browser session and is never treated as consent to advertising or tracking.

Because this website loads no advertising or analytics technology in the first place, a visitor who sends no signal at all is treated substantially the same way.

10. Do Not Track

There is no common industry standard for responding to browser “Do Not Track” headers. This website does not perform the tracking that a Do Not Track header is meant to stop. We respond to Global Privacy Control as described in Section 9.

11. California Privacy Disclosures (CalOPPA)

For California visitors, and consistent with the California Online Privacy Protection Act:

• Categories of personally identifiable information collected:identifiers and contact information (name, email address, phone number, IP address); commercial or interest information you volunteer (intent, timeframe, requested resource, message content, notes); internet activity information limited to the source page, referring website, campaign parameters, and browser user agent associated with a submission.
• Categories of third parties that may receive information: our hosting, storage, database, and email delivery providers; and — only if you choose to load them — the embedded review and video services named in Section 6.
• Reviewing and correcting your information: email connect@greenmeansgrow.com and we will review, correct, or delete information collected through this website, subject to records we are legally required to keep.
• Changes to this Policy: the effective date above is updated whenever this Policy changes.
• Third-party collection: described in Section 6, along with the conditions under which those third parties are contacted at all.

12. California Consumer Privacy Rights

California law grants residents certain rights regarding personal information — including the right to know what personal information is collected, used, disclosed, or sold or shared; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information and of certain uses of sensitive personal information; and the right not to receive discriminatory treatment for exercising these rights.

Whether and to what extent these statutory rights apply to a given business depends on legal criteria we do not attempt to resolve in this document. Our practice is straightforward regardless: if you are a California resident and you ask us to tell you what information collected through this website we hold about you, to correct it, or to delete it, we will honor that request to the extent we are able and permitted, without penalizing you for asking. Email connect@greenmeansgrow.com with the subject line “Privacy Request.”

We may need to verify your identity — typically by confirming control of the email address or phone number tied to your submission — before acting on a request. An authorized agent may submit a request on your behalf with proof of authorization.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. Nothing in this Policy should be read as a statement that we do.

13. Your Choices

• You can decline to submit either form. All published content on this website is readable without submitting anything.
• You can withdraw marketing consent at any time by replying to any message from us or emailing connect@greenmeansgrow.com. Emails we send include an unsubscribe mechanism.
• You can leave optional third-party embeds unloaded simply by not clicking them.
• You can request deletion of a resource request record as described in Section 12.

14. Data Security

The website is served over HTTPS. Resource request records are stored in a database protected by row-level access rules, and requested files are kept in private storage that is never publicly listable — files are released only through short-lived signed links (Section 8). Administrative areas of the website require an individual authenticated staff account with an explicitly granted admin role; there is no shared administrative password, and multi-factor authentication is supported for staff accounts. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Please do not send Social Security numbers, account numbers, income documentation, or other sensitive financial information through the forms on this website. See Section 16.

15. Children

This website is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has submitted information, email connect@greenmeansgrow.com and we will delete it.

16. Mortgage and Financial Privacy (GLBA / Regulation P)

This Privacy Policy governs interactions with this website. It does not replace any privacy notice provided in connection with a mortgage application or other financial-services relationship under the Gramm-Leach-Bliley Act, Regulation P, or other applicable financial-privacy law.

This website does not collect mortgage application data. Applications, credit information, income and asset documentation, and similar nonpublic personal financial information are handled through separate secure channels used by the mortgage business, not through this website, and this website does not itself deliver any required financial privacy notice.

Consumers may contact connect@greenmeansgrow.com to request information regarding the applicable mortgage privacy notice.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in the website or in applicable law. When we do, we will revise the “Last Updated” date above. Material changes to what we collect or who receives it will be reflected here before the change takes effect.

18. Contact Us

Questions, requests, or concerns about this Privacy Policy may be directed to: