Privacy Policy
Effective July 31, 2026
Winter Garden Spotlight is operated by The Brian Morrison Company, LLC. This policy explains what we collect, why, and what happens to it. The short version: we collect very little from visitors, we collect what we need to verify and review a listing claim, and we do not sell personal information.
What we collect from visitors
Browsing the directory does not require an account, and we do not run advertising trackers or third-party analytics. Like nearly every website, our servers keep standard logs of requests, which include things like IP addresses, pages requested, and browser information, used for security and to keep the site running.
We use cookies in exactly two places: a session cookie for our own admin sign-in, and a short-lived cookie that keeps you signed in to the claim editing form after you open your emailed link. Neither is used to track you around the web.
What we collect when you claim a listing
When you request a claim link and submit changes, we collect:
- Your contact email, verified by the single-use link we send to it, plus your name, your role at the business, and a phone number if you choose to give one.
- The listing changes you propose, any photos you upload, and your note to our reviewers.
- Consent evidence: the time you accepted our terms, the version of the disclosure you saw, your IP address, and your browser user agent. We keep this as the legal record of what you agreed to and when.
What we publish
If we approve your submission, the listing content and photos you provided become part of the public listing. Your contact details (email, phone) and your note to reviewers are never published. They exist so we can review your submission and reach you about it.
Phone and text consent
The claim form includes an optional checkbox authorizing Winter Garden Spotlight and The Brian Morrison Company, LLC to send informational and marketing text messages and phone calls to the number you provide, including communications generated using automated technology, prerecorded messages, or artificial intelligence (AI) voice agents. Consent is not a condition of being listed. Message and data rates apply and message frequency may vary. You can opt out at any time by texting STOP or by contacting us.
If you leave the box unchecked, we will not call or text you for marketing. We only use your number the way you agreed to.
Service providers
We use a small number of service providers to run the site, and we share data with them only so they can provide their service to us:
- Supabase hosts our database and file storage, including listing data, claim submissions, and uploaded photos.
- Resend delivers our transactional email, such as the claim link we send to your inbox.
We do not sell personal information, and we do not share it with advertisers.
How long we keep things
Consent records are retained as legal evidence of what was agreed to, even after a submission is resolved. Photos attached to rejected submissions are deleted. Published listing content stays up until it is changed or the listing is removed.
Your choices
You can ask us to correct or remove your information at any time, and a business can ask to be delisted from the directory entirely. Contact us using the channel below and we will take care of it.
Children
The directory is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
If we change this policy, we will post the updated version on this page with a new effective date. Our Terms of Use work the same way.
Questions
The easiest way to reach us is to reply to any email we send you; replies land in a real inbox, not a no-reply void. You can also tell us here about a correction or a request.