We are invited into people's homes. That privilege only works if we are careful with information as well as with property — so this page explains, in plain language, exactly what we collect, why, who else can see it, and how to make us delete it.
1. Who we are
Sacred Spaces Cleaning & Home Watch ("Sacred Spaces", "we", "us") is a home care business owned and operated by Tommie and Natalie Bennett, based in Summit County, Colorado, serving the Vail Valley and Summit County. We are the controller of the personal information described here.
Written enquiries: team@sacredspaceshomecare.com · Telephone: (303) 709-5177
2. What we collect
When you use this website
| Information | Where it comes from |
|---|---|
| Name, email address, telephone number, property location, service interest, and anything you write in the message box | The consultation form — you provide it |
| A record of the consent wording you agreed to, with the date and time | Created automatically when you submit the form |
| A one-way hash of your IP address, your browser's user-agent string, your language setting, and the country your request came from | Created automatically, to stop automated abuse of the form |
We deliberately do not store your raw IP address. It is converted into an irreversible hash that lets us count repeat submissions without being able to recover the address itself.
When you become a client
To care for a home we need to know things about it. Depending on the services you engage, we hold:
- Contact and billing details for you and anyone you authorise to speak for you
- Property details — address, size, layout, systems, hot tub, water shut-off, quirks and known hazards
- Access information — how we get in, and any alarm or gate codes you choose to give us
- Visit records — date and time of arrival and departure, which of us attended, the checklist completed, notes, and the approximate location of the device used to check in, which confirms the visit happened at your property
- Photographs taken inside and outside your home as part of the visit report
- Emergency contacts, and details of vendors or trades we are asked to admit
Payment card details are never stored by us. Any payment is handled directly by the payment provider.
3. How we use it
- To answer you. Replying to your enquiry, arranging a walkthrough, and preparing a proposal.
- To perform the service. Scheduling and completing visits, producing your visit reports, flagging issues and coordinating repairs you approve.
- To keep records. Invoicing, accounting, insurance and tax obligations.
- To protect the business. Preventing automated abuse of our contact form, and keeping an audit trail of who did what.
We do not use your information to build advertising profiles, and we do not use automated decision-making or profiling that produces legal or similarly significant effects about you.
4. We do not sell your information
Sacred Spaces does not sell personal information, does not share it for cross-context behavioural advertising, and does not rent, trade or licence client lists. We never have, and this is not something we intend to change.
5. Who else can see it
Only Tommie and Natalie Bennett access client records. We use a small number of service providers to run the business, and they may process information on our behalf under contract:
| Provider | What it does |
|---|---|
| Cloudflare, Inc. | Hosts this website and our client system, stores the data, and provides the Turnstile anti-bot check on our form |
| Resend | Delivers our transactional email — inquiry notifications and your visit reports |
| Microsoft 365 | Our business email accounts |
| Google Fonts | Serves the typefaces used on these pages; your browser requests them from Google, which receives your IP address as part of that request |
Beyond those, we disclose information only: to a vendor or tradesperson where you have asked us to arrange work; to emergency services or a utility where there is an urgent risk to your property or someone's safety; to our accountant or insurer where necessary; or where the law requires it. If the business were ever sold or transferred, client records could pass to the new owner, who would remain bound by this policy.
6. Cookies and tracking
This website does not use advertising cookies, analytics cookies, tracking pixels or third-party marketing tags. We do not run Google Analytics, the Meta pixel, or any similar tool. Nothing on this site follows you to other websites.
The only client-side storage that may occur is set by Cloudflare Turnstile, the check that confirms our contact form is being used by a person rather than a script. It is used solely for that purpose.
Because we set no tracking cookies, there is no consent banner to click through.
7. Email and text messages
If you contact us, we will reply — that is the point of the form. Separately:
- Service messages. If you give us a mobile number, we may text you about your property: that a visit is complete, that something needs your attention, or to confirm scheduling. These relate to work you have engaged us to do.
- Consent. Agreeing to texts is never a condition of buying anything from us. You can decline and we will use email or the telephone instead.
- Stopping them. Reply STOP to any text and we will stop texting you. Reply HELP for help. Message and data rates may apply, depending on your carrier plan.
- Marketing. We do not run bulk marketing campaigns. If we ever send a promotional email it will identify us, include our postal address, and carry a working unsubscribe link that we honour promptly.
8. How long we keep it
| Record | Kept for |
|---|---|
| Website enquiries that do not become clients | 24 months, then deleted |
| Anti-abuse logs (hashed IP, score, verdict) | 12 months |
| Consent records | 4 years after the last contact, as evidence of what was agreed |
| Client records, visit reports and photographs | The life of the engagement plus 4 years |
| Access and alarm codes | Deleted promptly when an engagement ends |
| Invoices and financial records | 7 years, as tax rules require |
You can ask us to delete your information sooner — see your rights below.
9. How we protect it
We describe here only what we actually do:
- The website and client system are served only over encrypted HTTPS connections.
- Access to the client system requires an individual account; passwords are stored as salted PBKDF2 hashes, never in readable form.
- Any alarm, gate or access code stored in our client system is encrypted at rest with AES-256-GCM under a key held separately from the database, and is decrypted only when one of us opens that specific record. Every decryption is logged with who did it and when.
- Only the two owners have accounts. There are no employees or subcontractors with access.
- Client report links sent by email are unguessable tokens and are excluded from search engines.
- Your IP address is stored only as an irreversible hash.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affected your personal information, we would notify you and the relevant authorities as the law requires.
10. Your rights and choices
Wherever you live, we will honour the following requests:
- Access — a copy of the personal information we hold about you
- Correction — fix anything inaccurate
- Deletion — erase your information, subject to records we must keep for tax or legal reasons
- Portability — receive your information in a portable format
- Opt out — of any marketing contact, at any time
Use the privacy request form, or simply email team@sacredspaceshomecare.com. We respond within 45 days and will not charge you or treat you differently for asking. We may need to confirm your identity before releasing information about a home.
11. Colorado residents
The Colorado Privacy Act gives Colorado consumers rights over their personal data. Its obligations apply to businesses above a size threshold that a business of our scale does not meet — but we extend those rights to you regardless, because they are reasonable. That means the rights listed above, an appeal if we refuse a request, and the following:
- Universal opt-out. We honour recognised browser opt-out signals such as Global Privacy Control (GPC). In practice there is nothing for the signal to switch off, since we run no targeted advertising and sell no data.
- Appeals. If we decline a privacy request, you may appeal by replying to our decision. If the appeal is refused you may contact the Colorado Attorney General at coag.gov.
- Sensitive data. We do not knowingly collect sensitive data such as health, biometric or precise geolocation data about you. Location recorded during a visit relates to our own device confirming attendance at the property, not to tracking you.
12. Children
Our services are sold to property owners and this site is not directed to children. We do not knowingly collect personal information from anyone under 16. If a child's information reaches us — for instance in a photograph taken during a visit — tell us and we will remove it.
13. Changes to this policy
If we change how we handle information we will update this page and move the "last updated" date. Material changes affecting existing clients will be sent to you by email rather than left here to be discovered.
14. How to reach us
Sacred Spaces Cleaning & Home Watch
Summit County, Colorado
team@sacredspaceshomecare.com
(303) 709-5177
A postal address for formal notices is available on request.