Privacy Policy

1. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

A. Information You Provide Directly

• Identifiers: First and last name, email address, telephone number, mailing or property address.
• Property Information: Address, lot description, tree or landscape conditions, photographs you submit, and service history relevant to your property.
• Service Request Details: Information provided in estimate request forms, work order forms, or written communications describing the nature of tree care, arborist, landscaping, or pest control services you are requesting.
• Communications: Records of emails, text messages, voicemails, or other correspondence you send to us.
• Payment Information: Billing name, billing address, and payment method details. Note: full payment card numbers are processed exclusively by our third-party payment processor and are not stored on our systems.
• Account Credentials: Username and password if you create a customer account with us.
• Property Photographs: Before-and-after photographs of trees, shrubs, lawn, or landscape features on your property taken by our crew during on-site consultations or while performing services. These are used for service documentation, quality assurance, and — only with your express permission — marketing purposes such as showcasing completed projects.

B. Information Collected Automatically

• Device and Technical Information: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, links clicked, time spent on pages, referring URL, and navigation paths on the Site.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location without your explicit consent.
• Cookies and Similar Technologies: As further described in Section 6 below.

C. Information From Third Parties

• Review Platforms: Publicly available reviews and ratings you post on Google, Yelp, Facebook, or similar platforms.
• Referrals: Contact information shared with us by existing customers who refer you to our services.
• Social Media: Information from social media platforms when you interact with our official pages (subject to those platforms' own privacy policies).

2. How We Collect Information

We collect personal information through the following means:

• Online estimate and contact forms on our Site.
• Phone calls and voicemails made to (720) 251-2313.
• Email correspondence sent to [email protected] or other company addresses.
• Text message communications initiated by you or with your consent.
• In-person consultations and property walkthroughs conducted by our ISA Certified Arborists.
• Service agreements and work orders signed by you.
• Cookies, pixels, and analytics tools automatically during Site visits (see Section 6).
• Third-party review and social media platforms where you choose to interact with us publicly.
• Telephone call recordings: Calls to or from our office at (720) 251-2313 may be recorded for quality assurance, training, and service verification purposes. Colorado is a one-party consent state under C.R.S. § 18-9-303. By calling us, you acknowledge that calls may be recorded. If you do not wish to have your call recorded, please notify us at the start of the call.
• Property photographs and documentation taken by our ISA Certified Arborists and crew during on-site consultations, service visits, or quality inspections.

3. How We Use Your Information

We use the information we collect for the following purposes, all of which are necessary to provide our services, operate our business lawfully, and communicate with you:

A. Service Delivery

• Respond to estimate requests and schedule on-site consultations.
• Provide tree removal, tree trimming, stump grinding, fertilization, pest and disease control, lawn care, plant health care, holiday lighting, snow removal, and related arborist services.
• Prepare and deliver service agreements, invoices, and work orders.
• Process payments for services rendered.
• Maintain service records, including pesticide application records required under Colorado law (see Section 10).
• Coordinate follow-up visits and warranty or guarantee fulfillment.

B. Customer Communication

• Confirm appointments and send service reminders.
• Respond to your questions, concerns, and service requests.
• Send receipts, invoices, and post-service follow-up communications.
• Request reviews or testimonials after service completion.
• Send seasonal care tips, newsletters, or promotional offers where you have opted in to receive such communications.

C. Business Operations

• Improve the quality and safety of our arborist and landscaping services.
• Train staff and improve customer service procedures.
• Analyze Site usage to improve user experience and website performance.
• Detect, prevent, or investigate fraudulent, unauthorized, or illegal activity.
• Comply with applicable federal, Colorado state, and local laws and regulations.

D. Legal and Safety Purposes

• Comply with court orders, subpoenas, or legal process.
• Protect the rights, property, or safety of Ironwood Earthcare, our employees, our customers, or the public.
• Maintain records required by the Colorado Department of Agriculture, including pesticide use records and applicator license documentation.

4. We Do Not Sell Your Information Colorado Law

Under the Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.), "sale of personal data" means the exchange of personal data for monetary or other valuable consideration. We engage in no such exchange. You therefore have the right to confirm that no sale of your personal data has occurred or will occur, and we confirm that here.

We also do not use your personal information for:

• Cross-context behavioral advertising — we do not build or purchase advertising audiences from data collected about you on other companies' unaffiliated websites or apps. Any remarketing advertising we run (such as Google Ads) is limited to audiences derived solely from visits to our own Site, ironwoodearthcare.com. We do not purchase third-party audience segments based on your off-site browsing behavior.
• Creating consumer profiles for sale to data brokers.
• Any form of automated profiling that produces legal or similarly significant effects concerning you.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the limited circumstances described below, solely as necessary to operate our business and provide our services:

A. Service Providers (Processors)

We engage trusted third-party companies to assist in operating our business. These service providers are contractually prohibited from using your personal information for any purpose other than to provide services to us. Examples include:

• Website hosting and infrastructure providers.
• Customer relationship management (CRM) software providers used to manage estimate requests and service records.
• Payment processors (e.g., Stripe, Square) that handle transaction processing in compliance with PCI-DSS standards.
• Email marketing platforms used to send newsletters or promotional emails to customers who have opted in.
• SMS and appointment reminder platforms used to send service confirmations and reminders.
• Analytics providers (e.g., Google Analytics) that help us understand website traffic and usage patterns.
• Scheduling and field service management software used to dispatch crews and manage work orders.

B. Legal and Regulatory Disclosures

We may disclose your personal information if required to do so by law or in good-faith belief that such disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable government request.
• Respond to a valid subpoena, court order, or law enforcement request.
• Protect the rights, safety, or property of Ironwood Earthcare, our employees, customers, or the general public.
• Submit pesticide application records to the Colorado Department of Agriculture as required under C.R.S. § 35-10-101 et seq. and applicable regulations.

C. Business Transfers

In the event of a merger, acquisition, sale of substantially all assets, or similar business transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site before your personal information becomes subject to a materially different privacy policy.

D. With Your Consent

We may share your information with additional third parties when you have provided explicit, informed consent to such sharing.

6. Cookies & Tracking Technologies

A. What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, remember your preferences, and provide analytical information to site operators.

B. Cookies We Use

• Strictly Necessary Cookies: Essential for the Site to function (e.g., form submission tokens, session management). These cannot be disabled.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our Site. Google Analytics collects anonymized data including pages viewed, time on site, referral source, and device type. Google Analytics data is subject to Google's Privacy Policy at policies.google.com/privacy.
• Functionality Cookies: Remember your preferences and settings to improve your experience.
• Marketing / Remarketing Cookies: If we run Google Ads or similar advertising campaigns, we may use cookies to show relevant ads to prior Site visitors. You may opt out through the Digital Advertising Alliance opt-out portal or Google's Ad Settings.

C. Controlling Cookies

You may control cookies through your browser settings. Most browsers allow you to refuse new cookies, accept only certain cookies, or delete existing cookies. Disabling cookies may affect the functionality of certain features on our Site.

• Google Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-on.

D. Universal Opt-Out Mechanism (Global Privacy Control) Colorado Law

The Colorado Attorney General's rules implementing the Colorado Privacy Act require that covered businesses honor recognized Universal Opt-Out Mechanisms (UOOMs). One widely-used UOOM is the Global Privacy Control (GPC) browser signal.

If our Site meets the thresholds for CPA applicability and you broadcast a GPC or other recognized UOOM signal, we will treat that signal as a valid opt-out request for the sale of personal data and targeted advertising as required by Colorado law. Because we do not sell personal data (Section 4), the primary effect of this signal is to opt you out of any first-party remarketing advertising we may run.

To enable Global Privacy Control, visit globalprivacycontrol.org for compatible browsers and extensions.

E. Do Not Track

Some browsers transmit legacy "Do Not Track" (DNT) signals. DNT is distinct from the Global Privacy Control described above. Our Site does not currently respond to DNT signals separately from GPC. We will update this policy if we adopt a uniform DNT standard.

7. Colorado Privacy Act Rights Colorado Law

The Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., effective July 1, 2023, grants Colorado residents certain rights with respect to their personal data. To the extent these rights apply to the personal data we hold about you, you have the following rights:

A. Your Rights Under the Colorado Privacy Act

• Right to Know / Access: You have the right to confirm whether we are processing your personal data and to access a copy of the personal data we hold about you.
• Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and the purposes for which we process it.
• Right to Delete: You have the right to request deletion of personal data we have collected about you. Note that certain data may be retained to fulfill legal obligations (such as Colorado pesticide application records) or for legitimate business purposes permitted by law.
• Right to Data Portability: You have the right to obtain a copy of your personal data in a portable, readily usable format, where technically feasible.
• Right to Opt Out of Sale: You have the right to opt out of the sale of your personal data. As stated in Section 4, we do not sell personal data.
• Right to Opt Out of Targeted Advertising: You have the right to opt out of the processing of your personal data for targeted advertising purposes.
• Right to Opt Out of Profiling: You have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Appeal: If we deny your privacy request, you have the right to appeal our decision. We will respond to appeals within 45 days. If your appeal is denied, you may contact the Colorado Attorney General at coag.gov.

B. How to Submit a Privacy Request

To exercise any of the rights listed above, please contact us using one of the methods in Section 16. We will verify your identity before processing your request. We will respond to verified requests within 45 days, with the possibility of a single 45-day extension where reasonably necessary.

C. No Discrimination for Exercising Rights

We will not discriminate against you for exercising any of your privacy rights. We will not deny you services, charge you different prices, or provide a different level of quality because you exercised a right under this Policy or applicable law.

D. Authorized Agents

You may designate an authorized agent to submit a privacy rights request on your behalf. We may require written authorization confirming the agent's authority before processing a request from an agent.

7B. Sensitive Personal Data Colorado Law

The Colorado Privacy Act (C.R.S. § 6-1-1303(22)) defines specific categories of data as "sensitive personal data," the processing of which requires express opt-in consent from the consumer. These categories include:

• Personal data revealing racial or ethnic origin, religious beliefs, mental or physical health conditions, sex life or sexual orientation.
• Genetic or biometric data processed to uniquely identify an individual.
• Personal data collected from a known child (under 13).
• Precise geolocation data (within a radius of 1,750 feet).

If you believe we have inadvertently received any sensitive personal data, please notify us immediately at [email protected] so we can promptly delete it.

Precise Geolocation

We collect the address of your service property for the purpose of scheduling and delivering our arborist and landscaping services. This is a manually-entered property address — it is not derived from GPS tracking of your mobile device, and we do not collect "precise geolocation" as defined by the CPA (i.e., location within a 1,750-foot radius derived from device sensors) without your express consent.

8. Communications & Marketing

A. Transactional Communications

We may contact you via email, phone, or text message for transactional purposes related to services you have requested or received, including appointment confirmations, invoices, service summaries, and warranty information. These communications are necessary for the performance of our services and do not require an opt-in.

B. Marketing Communications

With your consent, we may send you promotional emails including seasonal tree care tips, special offers, newsletters, or information about new services. Each marketing email we send will include a clear and easy way to unsubscribe.

C. Email Opt-Out (CAN-SPAM Act Compliance)

In compliance with the CAN-SPAM Act, 15 U.S.C. § 7701 et seq., every marketing email we send will:

• Clearly identify Ironwood Earthcare as the sender.
• Include our physical mailing address: 312 Norfolk St, Unit A, Aurora, CO 80011.
• Contain an unsubscribe link that will be honored within 10 business days of your request.
• Never use deceptive subject lines or misleading sender information.

To unsubscribe from marketing emails at any time, click the "Unsubscribe" link in any of our emails or contact us at [email protected] with "Unsubscribe" in the subject line.

9. Telephone & Text Message Communications TCPA

In compliance with the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, and applicable Federal Communications Commission (FCC) regulations:

A. Calls and Texts With Your Consent

By providing your telephone number and submitting a contact or estimate request form on our Site, or by calling us, you expressly consent to Ironwood Earthcare contacting you by telephone (including cell phone), text message (SMS), or automated dialing system for the following purposes:

• Responding to your estimate or service request.
• Confirming, rescheduling, or reminding you of scheduled appointments.
• Following up on completed services.
• With additional consent, sending promotional messages about seasonal services or offers.

B. Message and Data Rates

Standard message and data rates may apply to text messages sent by or to us. Message frequency will vary based on your service schedule and communications preferences. Reply STOP to any text message from us to opt out of future text messages. Reply HELP for assistance.

C. Consent Not Required for Purchase

In compliance with FCC regulations under the TCPA, you acknowledge that providing your telephone number and consenting to receive calls or text messages from Ironwood Earthcare is not a condition of purchasing any services from us. You may receive tree care, landscaping, arborist, or any other service from Ironwood Earthcare regardless of whether you consent to receive autodialed calls or marketing text messages. To request a free estimate without consenting to automated communications, please call us directly at (720) 251-2313 or email [email protected].

D. Do Not Call

We respect the National Do Not Call Registry. If you are registered on the National DNC Registry and wish to be added to our internal do-not-call list, please contact us in writing at the address or email in Section 16. We will honor your request within 30 days.

10. Pesticide Application & Service Records Colorado Law

Ironwood Earthcare holds a Colorado Department of Agriculture (CDA) Certified Spray Supervisor license and provides pesticide, herbicide, and fertilizer application services in compliance with:

• Colorado Pesticide Applicators Act, C.R.S. § 35-10-101 et seq.
• Colorado Department of Agriculture Pesticide Use Regulations, 8 CCR 1203-2
• Federal Insecticide, Fungicide, and Rodenticide Act (FIFRA), 7 U.S.C. § 136 et seq.

A. Mandatory Record-Keeping

Colorado law requires licensed pesticide applicators to maintain records of all commercial pesticide applications for a minimum of two (2) years. These records include, but are not limited to:

• Date and time of application.
• Property address where the application was made.
• Name and EPA registration number of pesticide(s) used.
• Target pest or purpose of application.
• Rate of application and quantity applied.
• Name and license number of the certified applicator.
• Weather conditions at time of application.

B. Customer Records Upon Request

Customers who receive pesticide application services from Ironwood Earthcare may request a copy of the pesticide application record for their property. We will provide this information upon written request within a reasonable timeframe, as required by law.

C. Regulatory Access

Application records may be subject to inspection by the Colorado Department of Agriculture, Colorado Department of Public Health and Environment, or other regulatory agencies with lawful authority. Disclosure of such records to regulatory agencies does not constitute a "sale" of personal data under the Colorado Privacy Act.

11. Children's Privacy COPPA

Our Site and services are directed to adults. We do not knowingly collect, solicit, or process personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

If we become aware that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information from our records. If you believe we may have inadvertently collected information from a child under 13, please contact us immediately at [email protected].

12. Data Security

We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for data transmitted between your browser and our Site.
• Access controls limiting access to personal information to authorized personnel on a need-to-know basis.
• PCI-DSS compliant payment processing through third-party payment processors — we do not store full payment card numbers.
• Regular review of our data collection, storage, and processing practices.
• Employee training on data privacy and security best practices.

No method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is reasonably likely to cause harm to Colorado residents, we will notify affected individuals as required under the Colorado Consumer Protection Act, C.R.S. § 6-1-716, within the timeframes required by law.

13. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including:

• Active customer records: Retained for the duration of the customer relationship and for a reasonable period thereafter.
• Estimate and inquiry records: Retained for up to 3 years for prospective customers who did not convert to active clients.
• Pesticide application records: Retained for a minimum of 2 years as required by C.R.S. § 35-10-101 et seq. and CDA regulations.
• Financial and payment records: Retained for a minimum of 7 years for tax, accounting, and auditing purposes.
• Communications: Email, text, and call records retained for up to 3 years for service quality and dispute resolution purposes.
• Website analytics data: Retained per our analytics provider's settings (typically 26 months for Google Analytics).

When personal information is no longer needed for its stated purpose and no longer required by law, we securely delete or anonymize it.

14. Third-Party Websites & Services

Our Site may contain links to third-party websites, platforms, or services, including but not limited to:

• Google Maps for service area and location information.
• Google My Business / Google Reviews for customer review functionality.
• Facebook (facebook.com/IronwoodEarthcare)
• Instagram (instagram.com/ironwood.earthcare)
• Yelp for customer reviews and business information.

This Privacy Policy applies only to ironwoodearthcare.com and our own data practices. We are not responsible for the privacy practices of third-party websites. When you navigate to a third-party site, you are subject to that site's privacy policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website home page for a reasonable period.
• Where required by law, provide direct notification to affected individuals by email.

Your continued use of our Site or services after the effective date of any revised policy constitutes your acceptance of the updated policy.

16. Contact Us & Privacy Requests

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a privacy concern, please contact us using any of the methods below. For Colorado Privacy Act requests, please clearly state the nature of your request so we can verify your identity and respond appropriately.

17. Governing Law & Jurisdiction

This Privacy Policy and any disputes arising out of or relating to it shall be governed by and construed in accordance with the laws of the State of Colorado, without regard to its conflict of law provisions.

Any legal action or proceeding relating to your access to, or use of, this Site or this Privacy Policy shall be brought exclusively in the state or federal courts located in Arapahoe County, Colorado. By using our Site, you consent to the personal jurisdiction of those courts.

Nothing in this Policy shall be construed to limit any rights you may have under applicable federal or Colorado state law.

Colorado-Specific Legal References

• Colorado Privacy Act (CPA): C.R.S. § 6-1-1301 et seq.
• Colorado Consumer Protection / Deceptive Trade Practices Act: C.R.S. § 6-1-101 et seq.
• Colorado Data Breach Notification Law: C.R.S. § 6-1-716
• Colorado Pesticide Applicators Act: C.R.S. § 35-10-101 et seq.
• Colorado Attorney General Enforcement & Complaints: coag.gov/file-complaint