2. Our cookie categories
| Category | Purpose | Opt-out? |
|---|---|---|
| Strictly necessary | Authentication, tenant routing, fraud prevention, CSRF, load balancing, checkout. | No. Disabling breaks login and checkout. |
| Preferences | Last-used dashboard view, chosen service area, language preference, dark-mode flag. | Yes — clear in browser settings. |
| Analytics | Aggregate traffic, page-by-page retention, drop-off on booking flow. IP anonymized. | Yes — decline on the cookie banner, send Sec-GPC, or disable in browser. |
| Marketing | Retargeting pixels for Meta, Google Ads, TikTok (only run when explicitly enabled). | Yes — we default-decline when we detect Sec-GPC=1. |
4. Third-party cookies
Some embedded services set their own cookies under their own domains. We don't control them; their policies apply:
5. Global Privacy Control (Sec-GPC)
We honor the Global Privacy Control signal. When your browser sends the Sec-GPC: 1 header, we:
- Automatically decline marketing and analytics cookies on first visit.
- Hide the cookie banner (your signal is your answer).
- Treat the signal as a valid opt-out of "sale" and "sharing" under CPRA.
Chrome and Edge expose GPC through extensions such as Privacy Badger. Firefox and Brave support GPC natively. DuckDuckGo also sends GPC by default.
6. How to opt out
- Use the cookie banner that appears on your first visit to accept or decline.
- Clear and block cookies through your browser settings.
- Send GPC — we auto-decline marketing.
- For California / Florida / Colorado-style "Do Not Sell" requests, visit /do-not-sell or email legal@gogreenorganicclean.com.
7. Florida & state-law disclosures
Florida's Digital Bill of Rights (HB 2023-XX, see Fla. Stat. § 501 — [verify cite]) gives Florida residents the right to access, correct, delete, and opt out of certain targeted advertising. We treat Florida residents' rights the same way we treat those of California residents under CPRA. See our CCPA / CPRA notice for the full rights catalog.
We do not use cookies to engage in automated decision-making that produces legal or similarly significant effects without human review.
8. EU / UK ePrivacy Directive
For visitors from the European Economic Area or the United Kingdom, we implement the opt-in consent requirement of Article 5(3) of the ePrivacy Directive 2002/58/EC (as amended) and PECR (UK). Non-strictly-necessary cookies are not set until you accept on the banner. Your choice is recorded in our consent audit log with timestamp, path, user agent, and IP, and is retained for 24 months.
9. Changes to this policy
When we materially change this policy, we'll update the "Last updated" date at the top and, where the change expands processing, re-prompt for consent. Older versions are available on request.
