Privacy policy

Privacy Policy

Effective Date: August 22, 2026
Last Updated: September 11, 2026

The GreenHouse Group Inc (“GreenHouse,” “GHG,” “we,” “us,” or “our”) respects your privacy.

This Privacy Policy describes how information is collected, used, and disclosed when you visit and interact with https://thegreenhousegroupinc.com (the “website”). It is written to describe what this website actually does. It does not describe offline or internal business systems unless those systems receive information from this website.

1. Who We Are

2. Scope of This Policy

This Privacy Policy applies only to interactions that happen through this website. There are exactly two places on this website where you can submit information about yourself: the contact form and the resource request form. Everything else on the website is published content you can read without submitting anything.

This website uses Google Analytics 4 for website measurement, as described in Section 4 and Section 6. It does not intentionally operate advertising pixels for personalized advertising, a tag manager, session recording, a newsletter signup, an appointment scheduler, a home valuation tool, a customer relationship management (CRM) integration, or an MLS/IDX search or data feed. If we add any of these, this Policy will be updated before they go live.

Information you send us by email, phone, text message, or in person, and information collected in the course of a real estate or mortgage engagement, is handled outside this website and is not governed by this Policy.

3. Information We Collect Through This Website

3.1 Contact form

When you submit the contact form, we collect:

• your name
• your email address
• your phone number (optional)
• the topic you select
• your message
• the page on this website you submitted from
• a hidden anti-spam field (a “honeypot”) that real visitors leave empty; submissions that fill it are discarded

Contact form submissions are delivered by server-side email to connect@greenmeansgrow.com. The website does not currently retain a database record of contact form submissions; the resulting email lives in our business email account.

3.2 Resource requests

Our proprietary guides and tools are delivered by request rather than as open downloads. When you request one, we collect:

• your first and last name
• your email address
• your phone number
• your stated intent (buying, selling, financing, or similar)
• your timeframe
• any notes you choose to add
• whether you consented to receive marketing follow-up
• which resource you requested
• the page on this website you requested from, and the referring website, if any
• campaign attribution values present in the link you arrived through (utm_source, utm_medium, utm_campaign)
• the IP address the request came from
• your browser user-agent string
• workflow information we generate as we handle the request: status, review/approval/ decline/send timestamps, and internal notes written by our team

Resource request records are stored in a database hosted on Lovable Cloud and are visible only to authenticated GreenHouse team members who have been individually granted administrative access. They are not stored behind a shared password.

3.3 Server logs

Like any website, our hosting infrastructure processes standard request data (such as IP address, request path, timestamp, and user agent) in order to serve pages and protect against abuse. We do not build visitor profiles from it.

4. Cookies, Consent, and Similar Technologies

This website sets no first-party advertising cookies. It uses Google Analytics 4 for measurement, gated by the consent rules described in this section. We group everything that can run in your browser into three categories:

• Essential — required to deliver pages, protect forms against abuse, and, for GreenHouse team members, maintain an authenticated administrative session. These cannot be switched off. This category also includes the small first-party record of your own cookie choice, described below.
• Outside content (functional) — third-party media and widgets that this site can embed: YouTube video players, Yelp and Google review content, and the Hello Bar promotional bar. Each of these can set its own cookies or similar identifiers once it loads, and each receives your IP address and browser information when it does.
• Measurement and advertising — Google Analytics 4, for understanding how pages are used. Ad personalization is disabled in the website implementation. The site does not intentionally use advertising pixels for personalized advertising. In regions where consent is required, Google Analytics does not load until you accept this category. You can change or withdraw that choice at any time through Cookie Settings.

How consent works here. If you are visiting from a jurisdiction that requires a consent choice or a visible opt-out — including the EEA, the United Kingdom, Switzerland, Brazil, Canada, and the United States — a notice appears on your first visit with equally available “Accept” and “Decline” actions, plus per-category controls. Nothing in the non-essential categories loads until you decide. If we cannot determine your location, we treat you as though a choice is required.

Changing or withdrawing your choice. Select “Cookie settings” in the footer of any page. Withdrawing is as easy as granting, applies immediately across the site, and is recorded as a refusal. Withdrawing measurement consent stops Google Analytics collection immediately. Where a third-party embed was already loaded during that page view, withdrawal prevents it from loading again; you may also clear cookies through your browser.

What the consent record contains. Your decision is stored only in your own browser, in first-party local storage under the key ghg:consent. It holds the categories you allowed or refused, the date and time of the decision, and the version of the notice you were shown. We keep this so that what was disclosed, and when, can be established later. It is not transmitted to us as an identifier and it is not used for tracking.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we honor it as an opt-out preference signal. A GPC signal keeps optional third-party content switched off even if a consent record would otherwise allow it. You may still choose to load one specific video or review widget by clicking it; that click applies only to that item, for that visit, and is stored in session storage only.

Automated policy maintenance. This policy is maintained by GreenHouse and is versioned by the dates above. We may adopt a third-party policy management service in the future; if we do, that will be reflected here.

5. How We Use Information

• to respond to your inquiry
• to review and fulfill a resource request, including sending you the resource
• to follow up about real estate, mortgage planning, or the resource you requested, where you asked us to or where permitted by law
• to detect and prevent spam, abuse, and fraudulent submissions
• to maintain, secure, and improve the website
• to comply with legal, licensing, and recordkeeping obligations

We do not sell personal information for money, and we do not use information collected through this website for cross-context behavioral advertising.

6. Third-Party Services Present on This Website

The following third parties can receive information (including your IP address and browser information) in connection with this website:

• Lovable Cloud — website hosting, file storage, database, and staff authentication.
• Lovable-managed email delivery — sends contact-form notifications to us, resource-delivery emails to you, and administrative account emails to our team.
• Google Analytics 4 — website usage measurement. It receives standard technical and usage information such as page views, navigation activity, browser or device information, and approximate location derived from IP. Event tracking includes actions such as consultation requests, pathway selections, successful form submissions, resource requests, listing interactions, phone clicks, and email clicks, using only non-identifying parameters like the selected pathway, resource name, or public listing identifier. We do not send names, email addresses, phone numbers, free-form messages, or other personally identifying form content to Google. Google Analytics loads only in accordance with the consent rules in Section 4.
• Yelp — an embedded review widget on the Proof page. It does not load, and Yelp receives nothing, unless you click to load it.
• YouTube (privacy-enhanced mode, youtube-nocookie.com) — embedded video players. Players load only when you click play. Video thumbnails are served by YouTube’s image host; where an opt-out preference signal is detected, we suppress those thumbnails too until you click.

Fonts and imagery used by this website are served from our own infrastructure. This website does not intentionally use advertising pixels or platforms for personalized advertising, and it does not use third-party font services, map services, schedulers, tag managers, or session-recording tools. Google Analytics 4 and the optional third-party media named above are the only third-party services that may receive information.

When you follow an outbound link from this website — to a review platform, a social profile, a press article, or our own historical article archive — that destination’s own privacy practices apply.

7. Disclosure of Information

We may disclose information collected through this website:

• to service providers who process it on our behalf and under contract, for the purposes listed in Section 6
• to GreenHouse team members who need it to respond to you or fulfill your request
• when required by law, subpoena, regulator, or to protect our rights, safety, or property
• in connection with a merger, acquisition, or sale of assets, subject to this Policy

We do not disclose information collected through this website to data brokers, lead resellers, or advertising networks.

8. Retention and Automatic Deletion

The following retention rules are implemented in the website’s own systems as an automated daily process — not just described here:

• Resource request records that are not associated with an actual client or transaction are deleted 24 months after the request.
• Request IP address and user-agent data on resource request records are automatically erased 90 days after the request, regardless of the record’s status.
• Signed download links issued for a requested resource expire 72 hours after they are created.

Contact form emails are retained in our business email account under our normal business correspondence practices.

These website retention rules do not apply to client, transaction, mortgage, accounting, tax, or regulatory records that we are separately required to maintain outside this website.

9. Opt-Out Preference Signals and Global Privacy Control

This website recognizes the Global Privacy Control (GPC) signal and comparable browser-level opt-out preference signals.

We do not sell personal information for money and we do not operate cross-context behavioral advertising, so there is no advertising sale to switch off. What we do when a signal is detected is concrete: optional third-party, tracking-capable content — the Google Analytics measurement tag, the Yelp review widget, YouTube players, and YouTube-hosted video thumbnails — is not loaded at all unless you explicitly click to load it. If you do click, that choice is remembered only for the current browser session and is never treated as consent to advertising or tracking.

Because this website does not intentionally deploy advertising pixels or tags for personalized advertising and analytics is gated behind the same consent controls, a visitor who sends no signal at all is treated substantially the same way in regions where consent is required. In regions where consent is not required, analytics runs by default but can be switched off through Cookie Settings.

10. Do Not Track

There is no common industry standard for responding to browser “Do Not Track” headers. This website does not perform the tracking that a Do Not Track header is meant to stop. We respond to Global Privacy Control as described in Section 9.

11. California Privacy Disclosures (CalOPPA)

For California visitors, and consistent with the California Online Privacy Protection Act:

• Categories of personally identifiable information collected:identifiers and contact information (name, email address, phone number, IP address); commercial or interest information you volunteer (intent, timeframe, requested resource, message content, notes); internet activity information limited to the source page, referring website, campaign parameters, and browser user agent associated with a submission.
• Categories of third parties that may receive information: our hosting, storage, database, and email delivery providers; and — only if you choose to load them — the embedded review and video services named in Section 6.
• Reviewing and correcting your information: email connect@greenmeansgrow.com and we will review, correct, or delete information collected through this website, subject to records we are legally required to keep.
• Changes to this Policy: the effective date above is updated whenever this Policy changes.
• Third-party collection: described in Section 6, along with the conditions under which those third parties are contacted at all.

12. California Consumer Privacy Rights

California law grants residents certain rights regarding personal information — including the right to know what personal information is collected, used, disclosed, or sold or shared; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information and of certain uses of sensitive personal information; and the right not to receive discriminatory treatment for exercising these rights.

Whether and to what extent these statutory rights apply to a given business depends on legal criteria we do not attempt to resolve in this document. Our practice is straightforward regardless: if you are a California resident and you ask us to tell you what information collected through this website we hold about you, to correct it, or to delete it, we will honor that request to the extent we are able and permitted, without penalizing you for asking. Email connect@greenmeansgrow.com with the subject line “Privacy Request.”

We may need to verify your identity — typically by confirming control of the email address or phone number tied to your submission — before acting on a request. An authorized agent may submit a request on your behalf with proof of authorization.

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. Nothing in this Policy should be read as a statement that we do.

13. Your Choices

• You can decline to submit either form. All published content on this website is readable without submitting anything.
• You can withdraw marketing consent at any time by replying to any message from us or emailing connect@greenmeansgrow.com. Emails we send include an unsubscribe mechanism.
• You can leave optional third-party embeds unloaded simply by not clicking them.
• You can change or withdraw analytics consent at any time using Cookie Settings in the footer.
• You can request deletion of a resource request record as described in Section 12.

14. Data Security

The website is served over HTTPS. Resource request records are stored in a database protected by row-level access rules, and requested files are kept in private storage that is never publicly listable — files are released only through short-lived signed links (Section 8). Administrative areas of the website require an individual authenticated staff account with an explicitly granted admin role; there is no shared administrative password, and multi-factor authentication is supported for staff accounts. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Please do not send Social Security numbers, account numbers, income documentation, or other sensitive financial information through the forms on this website. See Section 16.

15. Children

This website is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has submitted information, email connect@greenmeansgrow.com and we will delete it.

16. Mortgage and Financial Privacy (GLBA / Regulation P)

This Privacy Policy governs interactions with this website. It does not replace any privacy notice provided in connection with a mortgage application or other financial-services relationship under the Gramm-Leach-Bliley Act, Regulation P, or other applicable financial-privacy law.

This website does not collect mortgage application data. Applications, credit information, income and asset documentation, and similar nonpublic personal financial information are handled through separate secure channels used by the mortgage business, not through this website, and this website does not itself deliver any required financial privacy notice.

Consumers may contact connect@greenmeansgrow.com to request information regarding the applicable mortgage privacy notice.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in the website or in applicable law. When we do, we will revise the “Last Updated” date above. Material changes to what we collect or who receives it will be reflected here before the change takes effect.

18. Contact Us

Questions, requests, or concerns about this Privacy Policy may be directed to: