--- title: "Privacy Policy: GDPR, CCPA/CPRA, CTDPA & MA 201 CMR 17 | GreenTree Hosting, LLC" url: https://www.greentreehosting.com/privacy-policy/ description: "GreenTree Hosting, LLC privacy policy: what we collect, first-party Matomo analytics with IP truncation, no sale or sharing of personal data, and your rights under GDPR, CCPA/CPRA, CTDPA, NHDPA and MA 201 CMR 17.00." format: text/markdown generated_from: prerendered HTML (build time) --- LEGAL, PRIVACY & TRUST CENTER # Privacy Policy How GreenTree Hosting, LLC collects, uses, protects, and never sells personal information, with rights under GDPR/UK GDPR, CCPA/CPRA, the Connecticut Data Privacy Act, the New Hampshire Privacy Act, and Massachusetts 201 CMR 17.00. EFFECTIVE OCTOBER 26, 2026 · GREENTREE HOSTING, LLC · SOUTHBURY, CONNECTICUT ON THIS PAGE 1. Who We Are and What This Policy Covers 2. Information We Collect 3. How We Use Information 4. Legal Bases (EEA and UK Visitors) 5. Analytics, Cookies, and Global Privacy Control 6. Disclosure and Sharing 7. Retention 8. Security 9. Where Data Is Processed 10. Your Privacy Rights 11. How to Make a Request 12. Children 13. Changes and Contact RELATED - [Terms of Service](https://www.greentreehosting.com/terms-of-service) - [Cookie Policy](https://www.greentreehosting.com/cookie-policy) - [Do Not Sell or Share My Personal Information](https://www.greentreehosting.com/do-not-sell-my-personal-information) - [AI Usage, Automated Tools and Human Verification](https://www.greentreehosting.com/ai-usage-and-human-verification) - [Accessibility Statement](https://www.greentreehosting.com/accessibility-statement) - [Platform and Content Ownership Notice](https://www.greentreehosting.com/platform-notice) SUMMARY - We never sell or share personal information, and we run no third-party advertising trackers. - Website analytics run on our own self-hosted Matomo (stats.greentreehosting.net) with IP addresses truncated before storage. - We honor the Global Privacy Control (GPC) and Do Not Track signals, and your Cookie Preferences choice. - You can request access, correction, deletion, or a portable copy of your data at privacy@greentreehosting.com. - Inquiries and uploads are used only to answer your request and are never used to train public AI models. ## 1. Who We Are and What This Policy Covers GreenTree Hosting, LLC ("GreenTree," "we," "us") is a web application engineering, managed cloud, and enterprise email company headquartered in Southbury, Connecticut 06488. Our founders have been in web technology since 1997 and GreenTree has operated since March 2007. This policy covers greentreehosting.com and its subdomains, our public software and library sites, our inquiry and order forms, and our customer portal at customers.greentreehosting.com. When we host a client's website, mailbox, or application, that client is the controller of the data its own visitors and users provide, and GreenTree acts only as its processor or service provider under the client's agreement. ## 2. Information We Collect We collect the minimum information needed to answer you, run the service, and keep it secure. | Category | Examples | Why we collect it | | --- | --- | --- | | Inquiry and order details | Name, email, company, phone, project description, and anything you type or upload into our contact, order, or scoping forms. | To respond to you, prepare a quote or proposal, and provision services you order. | | Customer account data | Account contact details, service records, support tickets, and billing history in the customer portal. | To deliver, support, and bill the services you buy. | | Technical and security data | IP address, browser and device type, request timestamps, and anti-abuse signals such as honeypot fields and form-fill timing. | To keep the site and your data secure and to block spam and automated abuse. | | Website analytics | Pages viewed, referrer, device and browser, approximate location derived from IP, and time on page, collected by our self-hosted Matomo. | To understand which pages help visitors and to improve them. | | Assistant conversations | Messages and contact details you enter into the AI Concierge widget, where it appears on a page. | To answer questions and, if you ask, route your request to a person. | | Preferences | Your cookie and telemetry choice, stored in your browser. | To remember your privacy choices. | ## 3. How We Use Information - Respond to inquiries, scope projects, deliver and support services, and process orders. - Secure our systems, detect abuse, and keep the 60-second external health checks accurate. - Measure and improve page performance and content using aggregate first-party analytics. - Meet legal, accounting, and regulatory obligations. - We do not use your information for third-party advertising, do not sell it, and do not use customer inquiries or uploads to train public third-party AI models. ## 4. Legal Bases (EEA and UK Visitors) Where the EU/UK GDPR applies, we rely on: consent for optional analytics (Article 6(1)(a)); performance of a contract or steps you request before a contract (Article 6(1)(b)); legal obligation (Article 6(1)(c)); and our legitimate interests in network security and spam prevention (Article 6(1)(f)). You can withdraw consent at any time from Cookie Preferences in the site footer. ## 5. Analytics, Cookies, and Global Privacy Control Analytics run on our own Matomo instance at stats.greentreehosting.net. We do not use Google Analytics, advertising pixels, or social media trackers. Visitor IP addresses are truncated (the final IPv4 octet is masked) before they are stored. We honor browser opt-out signals. If your browser sends the Global Privacy Control signal (Sec-GPC: 1) or Do Not Track, or you choose "Essential Only" in Cookie Preferences, our analytics script does not run. See the Cookie Policy for the exact cookies and browser storage we use. ## 6. Disclosure and Sharing We do not sell personal information and we do not share it for cross-context behavioral advertising. We disclose information only to: service providers that operate parts of our infrastructure and email delivery on our behalf under confidentiality and security obligations; professional advisers; authorities when legally required; and a successor in a merger or sale of the business, with notice to you. ## 7. Retention We keep inquiry and account records for as long as needed to serve you and meet legal and accounting requirements, then delete or de-identify them. Analytics are used in aggregate for trend analysis, and a verified request lets you have records tied to your email address or domain deleted. Encrypted backups age out on their normal rotation. ## 8. Security We apply administrative, technical, and physical safeguards designed to be consistent with Massachusetts 201 CMR 17.00 and similar state standards: TLS encryption in transit, isolated per-site databases, access controls, automated off-site backups, 60-second external monitoring, and a multi-layer form shield against automated abuse. No system is perfectly secure, and we will notify affected individuals and regulators as required by law if a breach occurs. ## 9. Where Data Is Processed Our infrastructure runs in the United States and Canada. If you access our services from outside those countries, your information will be transferred to and processed there, with the safeguards described in this policy. ## 10. Your Privacy Rights Depending on where you live, you have some or all of the following rights. We extend them to every visitor regardless of location. | Right | What it means | Applies under | | --- | --- | --- | | Access and portability | Confirm whether we hold your data and receive a portable copy. | GDPR/UK GDPR, CCPA/CPRA, CTDPA, NHDPA | | Correction | Fix inaccurate personal information. | GDPR/UK GDPR, CCPA/CPRA, CTDPA, NHDPA | | Deletion | Ask us to delete personal information, subject to legal retention duties. | GDPR/UK GDPR, CCPA/CPRA, CTDPA, NHDPA | | Opt out of sale, sharing, targeted advertising, and profiling | We do none of these, and every visitor is opted out by default. | CCPA/CPRA, CTDPA, NHDPA | | Withdraw consent / object | Withdraw analytics consent or object to processing based on legitimate interests. | GDPR/UK GDPR | | Appeal | If we deny a request, you may appeal and we will respond in writing with the outcome. | CTDPA, NHDPA and other state laws | | Non-discrimination | We will not penalize you for exercising your rights. | CCPA/CPRA and other state laws | ## 11. How to Make a Request Email privacy@greentreehosting.com or use our Contact page and tell us which right you want to exercise and the email address or domain associated with your records. We verify your identity before acting, respond within 45 days (extendable once by 45 more days where permitted, with notice), and never charge for a reasonable request. An authorized agent may submit a request on your behalf with proof of authorization. ## 12. Children Our services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children, and we will delete it if we learn we have. ## 13. Changes and Contact We will post changes here with a new effective date. Questions or concerns: privacy@greentreehosting.com or GreenTree Hosting, LLC, Southbury, Connecticut 06488, USA. **Questions or requests?** Privacy and data requests: [privacy@greentreehosting.com](mailto:privacy@greentreehosting.com) · General and accessibility: [support@greentreehosting.com](mailto:support@greentreehosting.com) · or use our [Contact page](https://www.greentreehosting.com/contact). [Privacy Policy](https://www.greentreehosting.com/privacy-policy)[Terms of Service](https://www.greentreehosting.com/terms-of-service)[Cookie Policy](https://www.greentreehosting.com/cookie-policy)[Do Not Sell/Share](https://www.greentreehosting.com/do-not-sell-my-personal-information)[AI Usage](https://www.greentreehosting.com/ai-usage-and-human-verification)[Accessibility](https://www.greentreehosting.com/accessibility-statement)[Platform Notice](https://www.greentreehosting.com/platform-notice)