Privacy Policy

Effective: May 1, 2026

This page explains, in plain English, what information we collect when you visit this site or send us a project inquiry, what we do with it, and the choices you have. We tried to keep the legalese to a minimum.

1. Who we are

This site markets the services of Mason’s Stamping & Concrete, a concrete contractor based in Albertville, Minnesota and serving the Twin Cities northwest metro. The site is built, hosted, and maintained on Mason’s behalf by LuxAero Tech LLC, a Florida limited-liability company. For the purposes of this policy, Mason’s Stamping & Concrete and LuxAero Tech LLC act jointly: Mason is the business you’re contacting; LuxAero operates the website and the systems that handle your data.

Questions about anything on this page can be sent to msconcrete2025@gmail.com.

2. What information we collect

We try to collect as little as possible. There’s no account to create, no checkout, and no products to ship. The data we do handle falls into three buckets:

• What you submit through the contact form.When you fill out a project inquiry, we collect the fields you give us. Typically that’s your name, email address, phone number, the service you’re interested in, and a description of the project.
• Standard server logs. Like almost every site on the internet, our hosting provider records basic technical details about each request: IP address, user-agent string, the page you visited, and a timestamp. Before we store an IP address in our own analytics table, we hash it. We keep an irreversible fingerprint, not the raw address, so we can count unique visits without holding onto a piece of information that identifies you.
• Admin login info. Mason, his employees, and the site developer sign in to the admin dashboard with Google. When they do, Google shares their account email and basic profile (name, profile photo) with us. Visitors are never asked to log in.

3. How we use the information

• To respond to your inquiry, schedule a site visit, and prepare a quote.
• To understand which pages and traffic sources are working. This is aggregated, not individual.
• To prevent abuse: rate limiting, basic spam filtering on the contact form, and similar housekeeping.
• That’s it. We do not sell your personal information. We don’t share it for third-party advertising, and we don’t use it to retarget you across the web.

4. How we share the information

Your inquiry goes to Mason so he can follow up with you. Beyond that, the only entities that touch your data are the service providers we use to actually run the website:

• Supabase: database and authentication backend (stores leads and admin user records).
• Vercel: web hosting (serves the site, keeps basic request logs).
• Resend: sends Mason an email when a new lead comes in.
• Twilio: sends Mason an optional SMS when a new lead comes in.
• Google OAuth: authenticates admin users (Mason and authorized staff only).

Each provider receives only the minimum information it needs to do its job. We may also disclose information if we’re legally required to. For example, in response to a valid subpoena or court order. Outside of those situations, we don’t share your data with anyone.

5. Cookies and tracking

The site uses essential cookies for admin authentication on the /adminsection. Public pages do not currently set tracking cookies, and we do not run third-party advertising or behavioral-tracking scripts. If we ever add analytics or cookies that change the picture here, we’ll update this page and bump the effective date at the top.

6. Data retention

Lead form submissions are kept as long as Mason needs them to manage his customer relationships, or up to seven years to align with normal business and tax record-keeping, whichever is longer. Admin account records are kept while the admin is active and for a reasonable period after access is revoked. Aggregated analytics records that contain only hashed IPs may be retained indefinitely because they no longer identify any individual.

7. Your rights

Minnesota law and several federal frameworks give you certain rights over your personal information. You can email us at msconcrete2025@gmail.com to:

• request a copy of the information we hold about you,
• ask us to correct something that’s inaccurate, or
• ask us to delete your information.

We’ll respond within a reasonable timeframe. Typically within 30 days. California residents have additional rights under the CCPA/CPRA; the same email address is the place to send those requests.

8. Children’s privacy

This site isn’t directed at children under 13, and we don’t knowingly collect information from them. If you’re a parent or guardian and you believe your child submitted information through the site, email us and we’ll delete it.

9. Security

We take reasonable steps to protect your information: TLS encryption for data in transit, access controls, row-level security on the database, and no plaintext storage of sensitive credentials. That said, no system on the internet is 100% secure, and we can’t guarantee absolute security. If you have specific concerns, get in touch and we’ll talk through what we do.

10. Changes to this policy

We may update this policy as the site evolves or as the law changes. Any material change will be reflected in the “Effective” date at the top of this page. Continued use of the site after an update means you’ve accepted the new version.

11. Contact

For privacy questions, requests, or anything else covered above, email msconcrete2025@gmail.com.

This document is provided in good faith for informational purposes and is not legal advice. For specific legal questions, please consult an attorney licensed in Minnesota.