A short data path, described plainly.

Information the form collects

A project request includes your name, email address, optional phone number, project city, optional ZIP code, project category, and the details you write. The stored receipt also includes the exact consent disclosure and version you accepted, the submission time, source-page path, a request identifier, and the successful verification hostname and action.

When Cloudflare supplies a network address, the Worker stores a salted, one-way hash of it for property-specific abuse controls. It does not store the raw IP address, Turnstile token, Turnstile secret, or hashing salt in the receipt, notification, or application log. When no network address is available, the stored hash is empty and the IP-based limits are skipped.

Security verification

The form uses Cloudflare Turnstile. Its browser code and challenge frame come from Cloudflare and may process browser, device-interaction, and network information to decide whether a submission appears human. The resulting short-lived token is sent to this site's Worker and checked with Cloudflare Siteverify for this exact hostname and form action. The widget is configured without pre-clearance. Cloudflare handles this information under its own privacy and data-processing terms.

Where a successful request goes

1. The dedicated Orange City Worker validates the request and writes one combined, create-only lead-and-consent receipt to the private Orange City R2 bucket.
2. Cloudflare Email Sending sends a plain-text notification from noreply@orangecitydeckbuilders.com.
3. The fixed recipient is the Microsoft 365 shared mailbox contact@orangecitydeckbuilders.com.

If Cloudflare accepts the outbound message, the Worker attempts to add a separate delivery marker. That acceptance does not prove the message reached the inbox. If notification fails, the lead-and-consent receipt remains stored and the Worker attempts to add a failure record so the request is not silently treated as delivered.

Requests are not automatically sent to contractors, sold, rented, added to a marketing list, or routed through another property's form, mailbox, or storage system.

Rejected requests and operational logs

Honeypot, validation, origin, verification, and rate-limit rejections do not create a lead receipt or send a lead email. Operational logs use event names and, after a receipt exists, its request identifier; they do not intentionally include visitor fields, raw IP addresses, Turnstile tokens, or secrets.

Retention

• Cloudflare records: lead-and-consent receipts, delivery markers, and delivery-failure records are scheduled for automatic deletion 1,825 days after creation.
• Email copy: the shared mailbox receives the submitted request. Cloudflare does not control how long Microsoft 365 retains it. The operator can delete a locatable copy in response to a valid request, subject to legal obligations.
• Legacy records: earlier consent objects may remain protected from overwrite or deletion for their documented retention period before the same bucket lifecycle removes them.

Contact consent and use

The contact checkbox is empty by default and required for submission. It authorizes this site to email about the request and, only when you provide a phone number, to call or text that number. It does not authorize unrelated marketing or promise that contact will occur. Reply STOP to a text to withdraw text consent. Information is used to review, respond to, secure, and document the request and to meet legal obligations.

Analytics, cookies, and service providers

Cloudflare hosts the site, runs the Worker, Turnstile, rate limiting, private storage, and outbound email delivery. Microsoft hosts the recipient mailbox. Cloudflare Web Analytics browser monitoring and Bot Fight Mode are disabled for this site, and the site does not run advertising pixels. Turnstile remains the third-party browser security service described above. Information may also be disclosed when legally required or necessary to protect the site and its users.

Access, correction, deletion, and withdrawal

Email contact@orangecitydeckbuilders.com. After reasonably verifying the request, the operator can correct or delete active records and mailbox copies that can be located, stop future contact, or explain a legal or technical retention limit. Deletion from active systems does not require restoration of an earlier backup solely to remove one record.

Security, children, and changes

The site uses transport encryption, restricted property-specific bindings, server-side validation, abuse controls, and private storage. No internet service can promise absolute security. This site is for adults planning property projects and is not directed to children under 18. Material changes to collection, delivery, or retention will be reflected here before the related site change is released.