Privacy Policy

1. Who is responsible for your information

DeckRanger is operated by Martin Samsel, trading as BSMG (“we,” “us,” or “our”). He is the controller responsible for the personal information processed for this service.

This policy applies to the DeckRanger website, homeowner project requests, optional follow-up questionnaires, and communications with us. An independent contractor’s own services and handling of information are subject to that contractor’s privacy practices.

2. Information we collect

We collect information you give us directly, together with limited technical information needed to operate the website.

• Contact information: your name, phone number, and email address.
• Project and location information: your ZIP code, city and state, project type, estimated budget, start timeframe, preferred material, approximate size, and property ownership status.
• Optional information: your street address, HOA information, project notes, and photos. Photos may include personal information or metadata supplied by your device.
• Request and permission records: a request reference, submission time, the wording and version of your sharing permission, and records needed to process or update your request.
• Communications: messages you send us and information needed to answer them.
• Advertising information: Google Ads pixels and tags may collect page URLs, IP addresses, device or browser information, advertising identifiers, ad interactions, and conversion events.
• Technical information: our hosting and security providers may process IP addresses, browser or device information, access times, and security or error logs when delivering and protecting the website.

Please provide only information relevant to the project. Do not upload identity documents, payment details, health information, or other sensitive personal information. Avoid including people or information about others in photos unless you have permission.

Providing information is voluntary. The fields marked as required are needed to handle a matching request. You can browse the website without submitting a request, and you can skip the entire optional questionnaire.

3. Why we use your information

We use information to receive and manage your request, look for a suitable local contractor, arrange the introduction you authorize, answer your questions, maintain records of your permission, prevent misuse, measure advertising performance and conversions, and meet applicable legal obligations.

For processing governed by the EU General Data Protection Regulation (GDPR), our legal bases are:

We do not use your project submission as permission to enroll you in unrelated marketing. The current service does not use solely automated decision-making that produces legal or similarly significant effects on you.

4. Who may receive your information

One selected independent contractor. If we arrange an introduction, we may share your contact details and relevant project information, including optional details or photos you choose to provide, with one contractor selected for your request. We do not circulate the same request to multiple contractors. Sharing with a different contractor requires your additional permission.

The contractor receives the information to contact you about your project and becomes responsible for its own subsequent handling of that information. You may ask us who received your request. You remain free to decline the contractor’s offer.

Service providers. Providers of hosting, storage, security, and communications may process information needed to provide those services. The current website is hosted on Netlify. Google receives information through the Google Ads pixels and tags described below. Your browser sends your ZIP code to Zippopotam.us to look up the city and state; it does not send your name, phone number, email, notes, or photos in that lookup. Like other web requests, the lookup also exposes your IP address and browser headers to the lookup provider.

Legal recipients. We may disclose information when legally required, to protect people or the service, or to establish, exercise, or defend legal claims, subject to applicable law.

Business changes. A transfer of the service may involve relevant records. Any recipient must handle them consistently with applicable law; we will provide notice and obtain any permission required before a materially different use.

5. Contractor fees and US privacy choices

The matching service is free for homeowners. Contractors may pay us for introductions or related services. Depending on the arrangement and applicable law, a paid disclosure of personal information may be treated as a “sale,” even when the introduction is requested. We therefore do not make a blanket claim that all contractor introductions fall outside legal definitions of a sale.

You can ask us not to share a request, withdraw permission, or exercise an applicable opt-out right by emailing info@deckranger.com. If you stop the disclosure before an introduction, we cannot complete that introduction. If information has already been sent, we can help identify the contractor, but we cannot undo a disclosure that has already occurred.

Depending on your residence and the law’s applicability, you may also have rights to know or access, correct, delete, obtain a copy of your information, opt out of certain disclosures or processing, and appeal a denied request. We will not unlawfully discriminate against you for exercising a privacy right. This policy does not waive any right available under applicable law.

6. Cookies, tracking, and privacy signals

The website includes Google Ads pixels and tags for advertising measurement and conversion tracking. These technologies help us understand which ads lead to visits and project requests. They may use cookies or similar identifiers and send information about your visit and ad interactions to Google. Hosting and security providers may also use necessary cookies or similar technologies.

Google’s handling of this information is described in How Google uses information from sites or apps that use its services and its Privacy Policy. You can manage Google’s ad personalization choices through Google’s Ad Settings.

Where required by applicable law, nonessential advertising cookies and tracking require your consent. You can manage or block cookies through your browser, although blocking necessary cookies may affect website features. To withdraw consent or exercise an applicable privacy choice, contact info@deckranger.com. Withdrawing consent does not affect processing that was lawful before withdrawal.

Global Privacy Control and other legally recognized opt-out signals will be honored where applicable law requires. Permission to share your project with one contractor is separate from permission for advertising tracking.

7. International processing

We operate in Poland and help with projects in the United States. Information may be processed in Poland, the United States, and other countries where our hosting or service providers operate. Privacy protections may differ between countries.

Where the GDPR requires a mechanism for a transfer outside the European Economic Area, the transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses and any necessary additional measures. An introduction to a US contractor is not automatically covered by a hosting provider’s safeguards. We will not treat ordinary permission to share a project as, by itself, a blanket exception to international transfer requirements.

Contact us to ask about the recipients, processing locations, and safeguards relevant to your information, or to request a copy of applicable safeguards with confidential business information removed.

8. How long we keep information

We retain information for as long as reasonably necessary for the purposes described in this policy. We consider whether your request is active, whether follow-up is needed, the sensitivity of optional uploads, applicable legal retention duties, and the time reasonably needed to resolve complaints or legal claims.

Project details and photos should not be kept simply because they might be useful for a future, unrelated purpose. Records of permission or disclosures may need to be retained after a project closes to demonstrate what was authorized or address a dispute. When information is no longer needed, it will be deleted or anonymized, subject to legal requirements and the applicable backup lifecycle.

You can ask us to delete a request at any time. A contractor that already received information may have separate retention duties; we can help identify that recipient.

9. Security

We use reasonable measures appropriate to the service, including encrypted website connections and access restrictions for request records and uploads. No online service can guarantee absolute security. If you believe information has been exposed or misused, please contact us promptly.

10. Access, withdrawal, and other privacy rights

Subject to applicable conditions and exceptions, the GDPR gives you rights to access and obtain a copy, correct inaccurate information, request erasure, restrict processing, object to processing based on legitimate interests, and receive or transfer eligible information. If we process information on the basis of consent, you may withdraw that consent without affecting processing that was lawful before withdrawal.

To exercise a right, email info@deckranger.com. Give enough information to locate your request, such as the email used and your request reference. We may ask for proportionate verification where necessary to protect your information; please do not send an identity document unless we specifically request an appropriate verification method.

We respond within the deadline set by applicable law. For GDPR requests, this is normally one month, with an extension of up to two additional months where legally permitted; we will explain an extension within the initial month. If we cannot grant a request, we will explain the reason and any applicable complaint or appeal route.

You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), through uodo.gov.pl, or to another supervisory authority where the law permits. You do not have to contact us first to exercise a legal complaint right.

11. Children

The service is intended for adults aged 18 or over. We do not knowingly collect project requests from children. If you believe a child has provided information, contact us so we can take appropriate steps.

12. Changes and contact

We will post changes on this page and update the date above. Where a change materially affects an existing request, we will provide an appropriate notice, such as by email or a website notice, and obtain any new permission required before using information in a materially different way.

For privacy questions, requests, or concerns, contact: