Account.

This privacy policy took effect on October 16, 2026. All data collected on or after October 16, 2026 from yard inquiries, support communications, and website visits is processed under the provisions established here.

The data controller for hortelisa.com is Hortelisa, an independent gardening service operated by sole proprietor Ivan Petrov. Physical business office: 225 North Columbus Drive, Chicago, Illinois 60601, Chicago, Illinois, United States. Telephone: +1 (729) 555-9386. Direct electronic mail: [email protected].

When you use our scheduling forms or live desk, we record: customer name, telephone number, email address, physical Chicago property address, work scope (lawn mowing, shrub trimming, leaf clearance, bed planting, green zone care, hourly garden labor), written property notes, and consent status. Automatically captured technical metadata includes IP address, user-agent string, referring URL, timestamp of form render, and submission timestamp. The support chat desk (zajeab1.php) persists the conversation and a session token (chat_token) in your browser. Consent choices are stored under site_consent_v2. We also process advertising click identifiers: gclid for Google Ads, msclkid for Microsoft Advertising, and fbclid for Meta Ads. No account, no password, no payment and no card data: nothing is sold on this site and no payment is taken.

Data is processed exclusively to: calculate accurate property service estimates ($55–$85 lawn visits, $32–$81 shrub trimming, $120–$225 leaf cleanups, $150 planting jobs, or $33–$88 hourly garden labor); schedule Ivan Petrov's 1–2 person crew visits; reply to inbound property inquiries; protect server infrastructure against automated abuse; and measure the performance of paid digital advertising campaigns.

Every processing activity relies on one of three recognized legal bases: (1) Contractual necessity — required to evaluate your property dimensions, formulate an estimate, and complete agreed garden work; (2) Consent — granted freely through form checkboxes and cookie controls for marketing storage and measurement; (3) Legitimate interests — securing network operations, debugging server errors, and preventing commercial fraud.

This website receives inbound visitor traffic driven by paid advertising campaigns. Active ad networks include google ads, microsoft advertising, and Meta Ads. When a visitor clicks an ad to visit our site, each network appends a unique URL parameter: gclid for google ads, msclkid for microsoft advertising, and fbclid for Meta Ads. These identifiers are read to attribute campaign origin and verify conversion actions.

We implement Google consent mode v2 as our technical baseline. By default, before any affirmative visitor choice is made, four distinct privacy signals are held strictly in a denied state: ad_storage, ad_user_data, ad_personalization, and analytics_storage. Only when a visitor clicks "Allow Storage" are these parameters updated to granted. If a visitor declines or resets consent, all four signals are returned immediately to denied.

Data collected by hortelisa.com is shared only with vetted third-party service providers acting as processors: Google LLC and Google Ireland Ltd (Google Ads analytics and measurement); Microsoft Ireland Operations Ltd (Microsoft Advertising conversion metrics, governed by the Microsoft Privacy Statement available at privacy.microsoft.com); Meta Platforms Ireland Ltd (Meta Ads attribution); our Chicago web hosting infrastructure provider that hosts our secure server database; and our transactional mail dispatch provider.

Hortelisa operates primarily in Chicago, Illinois. If you access hortelisa.com from outside the United States, your inquiry data and server traffic are transferred to, stored, and processed within the United States. Where cross-border data transfers involve European visitors, transfers are safeguarded through standard contractual clauses (SCCs) and adequacy frameworks adopted by our enterprise infrastructure and advertising partners.

We maintain clear, bounded retention windows rather than indefinite storage: customer inquiries and email transmission records are retained for exactly 24 months to reference past yard treatments; chat support transcripts are kept for 12 months; web server and access logs are purged after 30 days; cookie consent preferences stored under site_consent_v2 expire after 6 months; formal data subject requests are recorded and answered within 7 days and archived for 24 months for audit compliance.

We maintain robust technical safeguards: active TLS 1.3 encryption across all connections; strict HTTP security headers; server-side sanitization of all form inputs; isolated production database tables; restricted administrative access limited to Ivan Petrov; automated honeypot spam traps; and hardened server configurations that prevent directory traversal and unauthorized script execution.

For visitors accessing hortelisa.com from the European Economic Area or the United Kingdom, we provide the full suite of rights under the gdpr: the right of access to personal records; the right to rectification of inaccurate yard details; the right to erasure ('right to be forgotten'); the right to restriction of processing; the right to data portability in structured format; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time without detriment.

Under comprehensive state privacy statutes including the California Consumer Privacy Act as amended by the CPRA (ccpa), Colorado Privacy Act (CPA), Virginia Consumer Data Protection Act (VCDPA), and Illinois consumer privacy frameworks, residents are entitled to: know what personal data categories are collected; delete personal information; correct inaccuracies; and opt out of the sale or sharing of personal data for cross-context behavioral advertising. Hortelisa does not sell personal information for monetary value.

Hortelisa recognizes and respects global privacy control (GPC) signals transmitted via browser headers (Sec-GPC). When our server detects a valid global privacy control broadcast, we automatically treat that session as an opt-out from advertising tracking and measurement storage without requiring additional interaction from the visitor.

Hortelisa provides residential yard maintenance and commercial gardening labor directly to homeowners and property custodians. This site is not directed toward, marketed to, or designed for children under 16 years of age. We do not knowingly solicit or collect personal records from children. Any record inadvertently captured from a minor is deleted immediately upon notice.

Visitors who believe their privacy rights have been infringed have the right to lodge a formal complaint with an appropriate regulatory authority: in California, with the California Privacy Protection Agency (CPPA) or California Attorney General; in Illinois, with the Office of the Illinois Attorney General; or in the EEA, with their national Data Protection Authority (DPA).

To exercise rights of access, correction, deletion, or portability, submit a written inquiry specifying your name, property address, and contact details. You may email [email protected] or dispatch mail to: 225 North Columbus Drive, Chicago, Illinois 60601, Chicago, Illinois, United States. Hortelisa verifies identity through prior correspondence and delivers a complete formal reply within 7 days without charging administrative fees.

When operating practices, advertising mechanisms, or legal mandates change, this clause ledger is updated immediately. The amended date at the top of this policy reflects the revision point. Material changes affecting how previously collected customer records are processed will be communicated via prominent homepage disclosure or direct email before taking effect.

Inquiries regarding data rights, technical cookies, or advertising disclosures are handled directly by operator Ivan Petrov. Written correspondence: Hortelisa, 225 North Columbus Drive, Chicago, Illinois 60601, Chicago, Illinois, United States. Direct telephone: +1 (729) 555-9386. Dedicated inbox: [email protected].