Privacy Policy
Last updated: 6 September 2026
This website is operated by LENOY AND CO PTY LTD (ABN holder and legal operator), trading as Ebo's Lawn Care. We are an Australian business providing lawn and grounds maintenance in Townsville and Palm Island, Queensland. This policy explains what information we collect through this website, how we use it, and the choices available to you.
Information you give us
When you request a quote or contact us, we collect the details you choose to provide — for example your name, phone number, email address, suburb, street address (optional), property type, services required, preferred frequency and start date, any message you write, and any photos you upload. We collect this to respond to your enquiry, prepare a quote and, where you engage us, to deliver and schedule the services.
Our quote form also offers optional property details — such as approximate yard size, current condition, whether there are pets, gate and access notes, what you would like done with the clippings, who approves or pays for the work, and whether you would like a site inspection first. These are used only to quote accurately and to work safely on site. Every one of them can be left blank without affecting your enquiry.
Technical and usage information
Like most websites, ours records limited technical information such as the pages you view, the approximate time of the visit, referring website, device and browser type, and general location derived from your IP address. Where you consent, this information is processed using measurement cookies and similar identifiers.
Analytics and advertising measurement
With your consent we use Google Analytics 4 (measurement ID G-S2Q963466N) to understand how the site is used — for example which pages are visited and which calls-to-action are used — and Google Ads measurement (AW-17764450946) to understand which advertising campaigns lead to quote enquiries. Google processes this information as our service provider and may transfer it overseas.
With the same analytics consent we also load HubSpot analytics (portal 443548819), which records page views and general visit information so we can see how enquiries relate to site activity. It is not loaded at all unless you allow analytics cookies, and it is removed from future visits if you withdraw that consent.
With Analytics consent we also use Microsoft Clarity (project yds069aeee) to produce heatmaps and session recordings that help us identify where visitors encounter difficulty. Clarity may record interactions such as clicks, scrolling, mouse movement, page visibility, browser and device information, performance and script errors, and identifiers associated with a visit. Form inputs and sensitive content are masked by Clarity. We do not deliberately send names, phone numbers, email addresses, street addresses, quote messages or uploaded photos to Clarity. Microsoft may process this information outside Australia under its Microsoft Privacy Statement. Clarity does not load until you allow Analytics, and withdrawing that consent clears its cookies and stops future Clarity tracking in your browser.
We deliberately limit what is sent to these tags. The only event parameters we send are the page path, the on-page location of a button, and — after a successful quote submission — the property type, service frequency and the number of services selected. We do not deliberately send names, phone numbers, email addresses, street addresses, free-text messages, uploaded photo names or URLs, or quote reference IDs to any analytics or advertising tag.
Google Signals and advertising features
Where you allow advertising cookies we also use the Meta Pixel and Meta Conversions API (dataset 2297147094158447) so we can measure which Facebook and Instagram advertising leads to enquiries. Nothing from Meta loads or is sent unless you have granted advertising consent. Only two measurements are used: a page view, and a "Lead" event when a quote request has been successfully received. The browser event and the matching server event share one random event identifier so Meta counts them as a single event rather than two, and the server event carries only the event name, the time, the page address (without any query string), and the browser user-agent string that Meta requires. We do not send your name, phone number, email address, street address, suburb or postcode, your quote message, your service selections, your uploaded photos, or your quote reference to Meta, and identity matching is switched off.
Where you consent to advertising cookies, we may use Google Analytics Advertising Features, including Google Signals. This may allow Google to associate website activity with information from signed-in Google users who have enabled Ads Personalisation, and may provide us with aggregated demographic and interest insights. Google Analytics and Google Ads may also use first-party and Google advertising cookies or identifiers for advertising measurement, audience creation and, where enabled, personalised advertising. You can withdraw consent through our cookie settings at any time and can also manage Google advertising personalisation through your Google Ads Settings.
Cookies and your consent choices
Cookies that are strictly necessary for the website to work — page delivery, security and the quote form — are always enabled. Analytics and advertising cookies are set to denied by default until you choose otherwise, using Google Consent Mode. On your first visit you can select Accept all, Reject all, or Manage preferences to allow Analytics and Advertising separately.
Your choice is stored locally in your browser and applied on later visits. You can change or withdraw it at any time — select here or in the website footer. Withdrawing consent takes effect immediately for future measurement; you can also clear cookies through your browser settings.
Data minimisation
We ask only for the information we need to quote and deliver the work. Optional fields are labelled as optional, and you do not need to upload photos to receive a quote.
Spam protection and technical anti-abuse records
To stop automated spam and repeated abusive submissions of our quote form, we use Cloudflare Turnstile and a rate limit. For the rate limit we do not keep your IP address: we combine the network address and browser identifier seen by our server, convert them into a one-way hashed value that cannot be read back, and store only that hashed value together with the time of the attempt. These technical anti-abuse records are kept for no more than 24 hours and are then deleted automatically. Submissions made from our own preview or test environments are flagged as tests, kept separately from customer enquiries, and are not used for advertising measurement.
Storage, security and third parties
Enquiries and uploaded photos are stored in our secured backend, with access restricted to authorised team members. We take reasonable steps to protect information from misuse, loss and unauthorised access. The providers this website itself relies on are:
- Lovable — website hosting, and the managed email service that sends your acknowledgement and our internal notification.
- Supabase — the database behind our quote form and the private storage for any photos you upload.
- Cloudflare — Turnstile spam protection on the quote form.
- Google (Analytics and Ads) — the consent-based measurement described above.
- HubSpot — consent-based website analytics only; lead handoff writes remain separately disabled.
- Microsoft Clarity — consent-based heatmaps and session recordings used to understand website usability.
- Meta (Facebook and Instagram) — consent-based advertising measurement only — a page view and a de-duplicated 'Lead' event, with no enquiry details.
These providers process information on our behalf, and some may store or process it outside Australia. We do not sell your information, and we do not send marketing emails from this website. When you send an enquiry, our website code sends two emails through the managed email service above: an acknowledgement to the address you gave us, and an internal notification to our team. Nothing else is sent automatically.
Photo storage is private. Photos are never published on the website and are never given a public address. When an authorised team member needs to view them, the system creates a temporary link that expires after a few minutes.
The website contains optional, server-side lead handoff adapters for HubSpot and Monday.com, but those external writes are disabled by default and are not activated merely by adding a token. While disabled, no enquiry details are transferred to either system. If we enable one, its separate release flag must be deliberately switched on and this policy will continue to describe the fields it receives. Photos, free-text messages and test enquiries are never eligible for those adapters.
Our internal notification simply arrives as an ordinary email in our Outlook mailbox; the website has no Microsoft Graph connection and does not read, write or sync anything in that mailbox. Separately from this website we run the business using ordinary scheduling, invoicing and accounting software, and we advertise on social media. None of ShiftCare, Xero or Hubdoc is connected to this website today: no enquiry, photo or customer detail is transferred to any of them automatically. Meta measurement is connected, but only as described under advertising measurement above — it receives the fact that a quote was submitted, never your enquiry details. If we later connect another system so that your details flow into it, we will name it here before the connection goes live.
Retention
We keep enquiry information for as long as it is reasonably needed for the enquiry, the related work, and our business, legal, tax and accounting obligations, then delete or de-identify it. Analytics data is retained according to the retention periods configured in Google Analytics, HubSpot and Microsoft Clarity.
Within our admin system, enquiries that are finished with are archived rather than erased, so that we keep an accurate record of quoting and work history. Archiving does not affect your right to ask us to delete your personal information, described below.
Access, correction and complaints
You may ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing eboslawncare@outlook.com. We will respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Changes to this policy
We may update this policy as our website or services change. The date at the top shows when it was last updated.
Contact
Privacy questions: eboslawncare@outlook.com · 0447 531 168.