What we know about your house, and where it lives.
Bay House Concierge holds two entirely different kinds of information. This website collects nothing about you. The household file we build once you are a client holds your allergies, your door, and what the dog eats.
This policy is a draft. It describes what we actually do, and a Florida attorney has not yet reviewed it. That review happens before Bay House Concierge holds a first household file.
What does this website collect about you?
More than it used to, and all of it is named here. bayhouseconcierge.com is static HTML on Cloudflare, but every page loads two things that watch a visit: Google Analytics, and the live-chat widget in the corner, which also counts who is on the site. Neither knows your name unless you type it. Signing in to your own account adds one cookie of our own.
On every page
- Google Analytics (gtag.js, property G-PGY5KBMGZE). Google’s script sets two first-party cookies,
_gaand_ga_…, that last up to two years, and reports each page you open, the page that sent you here, your screen size, browser and language, and your IP address, from which Google derives a rough location. Google’s published position for this version of Analytics is that it does not log or store the IP address, and that the data is not used for advertising unless the site owner turns that on: their statement, not our audit. We read it as page counts, not people. Google’s own opt-out add-on, or blockinggoogletagmanager.com, switches it off; the site works identically either way. - The live-chat widget (ai.baygeeks.com). The chat bubble is run for this site by Bay Geeks, the local firm that built it. As soon as a page loads, before you touch the bubble, it opens a connection to that service and reports the page you are on, the page you arrived at and where from, your device type (phone, tablet or desktop), screen size, time zone, how many languages your browser is set to (the number, not which), and how long the page took to load. It gives your browser a random visitor id and a visit count, kept in that browser’s own storage rather than a cookie, so a return visit is recognised as a return, and a session id that lasts one tab. Its record of a visit holds the city and region Cloudflare attaches to your connection, not the IP address itself, and is deleted after 30 days. What it is for: Pauliane can see on her own dashboard that someone is on the pricing page right now and offer to talk, and Bay Geeks can see whether the site is working. If your browser sends the Global Privacy Control or Do Not Track signal, the widget records only that a visitor asked not to be tracked, and nothing else about the visit. If you open the chat and type, what you type is kept as a conversation for Pauliane to read: see “Sharing” below.
- One cookie of our own, opt-in only: signing in at /account/ to see your own shopping history, or to keep your running list in step across devices, sets a cookie that says who you are for up to 30 days, so you are not asked to sign in on every visit. Nobody sets this without asking for it by signing in, and signing out or letting it expire removes it.
Not on any page
- No advertising pixels, remarketing tags, social-media embeds or session recording.
- Nothing above is used to advertise to you, by us or by anyone we pay, and none of it is sold.
Cloudflare serves the files and sees the requesting IP address in the ordinary course of delivering a page. What reaches us from that is what reaches any website owner from a host: Cloudflare’s own aggregate count of requests and errors for the site. The request and contact forms, and requesting a sign-in link, each store a one-way hash of your IP address for an hour, solely to cap how many submissions or link requests one connection can send, then it ages out of that limit. It is never used to identify you. Neither Bay House Concierge nor the two services above holds a record with your name on it unless you gave it: on a form, in the chat, or by signing in.
Who else sees a page load?
Google Fonts. This site loads two typefaces from fonts.googleapis.com and fonts.gstatic.com, so your browser asks Google for those files directly, and Google sees your IP address and browser for that request. Google’s published position is that the Fonts API sets no cookies and that these requests are not used to build advertising profiles: their statement, not our audit.
So three companies see something of every page load: Google (Analytics and Fonts), Bay Geeks (the chat widget) and Cloudflare (the host). Booking a visit or paying online brings in two more, Calendly and PayPal, described under “Sharing” below. If we add anything to this list, this page changes first.
What happens to what you type into the contact form?
It reaches one person and stops there. The contact form collects your name, email and phone number, your neighborhood, the services you tick, household size, a preferred day and time, and the notes box, which is where an allergy, or a parent in a second household, would be written down.
That inquiry goes to Pauliane Stenberg and to nobody else. Bay House Concierge is one person, so there is no shared inbox it lands in, no office it circulates around and no colleague who reads it in passing. It is not added to a mailing list, not passed to any third party, and not used to advertise to you anywhere. If you decide not to go ahead, say so and it is deleted. You do not have to give a reason, and you will not be asked one.
If you would rather not use a form at all, email pauli@bayhouseconcierge.com or call 727-642-6982. Both reach the same person, and she answers her own phone.
What is the "My history" sign-in, and what does it see?
An optional way to see your own shopping lists, totals and receipt photos online, without a password. There is no account to create: type the email you already use with us, and a link arrives.
- Nothing new is collected to offer this. It works from the email you already gave us on a list or a walkthrough request; typing it in at /account/ doesn’t add anything to what we hold about you.
- The link itself is not stored anywhere and stops working after 15 minutes, used or not.
- Signing in shows only your own history: the shopping lists sent from your email, their totals, and any receipt photo attached to them. It never shows your household file, and never shows another client’s anything.
- The sign-in cookie lasts 30 days and only says which email signed in and until when. While you keep using your running list it is renewed, so a list you add to every week does not sign you out. There is a Log out button, and using a different browser or device just means signing in again there.
- Your running list is kept on your own device first. What you add at /list/ is saved in that browser’s own storage and goes nowhere until you sign in or press send. Once you are signed in, the list is also kept with your account so it follows you to every device, and Pauliane can see what is waiting on it, so she can plan ahead; nothing on it is bought until you send it and she confirms. If you are signed in and a list with items on it sits untouched for a week, we email you once to say so, and not again until the list has been used and gone quiet again; the email and the list page both have a switch to stop those. Ask and it is deleted, and a running list nobody has touched for eighteen months is deleted on its own.
Nobody has to use this. Sending a list, booking a walkthrough and paying an invoice all work exactly the same with or without ever signing in. It exists because some clients want their own record of what they’ve spent; it changes nothing about how the business runs for a client who never opens it.
What does Bay House Concierge collect about your household?
Once you are a client, a great deal (nearly all of it in one document, the household file): what your house needs someone to know to run without asking you.
What the file holds
- Food and standards. Brands you insist on and brands you refuse, ripeness, the never-substitute list.
- Allergies and dietary constraints, marked medically critical or preference.
- Home access. Which door, which lock, which rooms are not ours.
- Household composition. Who lives there, and who else may give instructions.
- Pets. Names, food, medication, and which one bolts when the gate opens.
The allergy line is the sensitive one
An allergy in a household file is not a medical record, and Bay House Concierge is not a HIPAA covered entity: a fact about which law applies, not about how the line is handled. It is the most sensitive thing in the file, used for shopping alone.
Two refusals hold here as well as anywhere: never a stored card number, never access to your bank account. The money architecture is on how it works, and fees are on the rate card.
Where does your household file live, and who can open it?
On access-controlled cloud storage administered by Bay House Concierge, readable by one person: Pauliane Stenberg. Not a shared drive, not a team folder, not a rota of people who need it on the weeks they cover you. This is the part of working with one person that is plainly better for you: the number of people who can read your allergies and your door arrangement is one, and it does not go up when someone is hired and does not have to be revoked when someone leaves.
Access credentials are stored apart from addresses. Keys carry a numbered tag, never your name or street; the sheet connecting the two lives in a second locked place, with smart-lock and alarm codes. Your file records that a code exists, not the code.
The documents are kept apart, even though one person reads all of them. A larger company separates duties between people; here the separation is between documents. The weekly ledger and the calendar hold amounts, dates, stores and times: no access details, no health lines. What is open on a phone at a checkout is never the part that would matter if the screen were read over her shoulder.
The confidentiality agreement is signed by her, to you. There are no employees to make sign one, so the undertaking runs directly from Pauliane to your household, in writing, and it does not lapse when the work ends. You can read it before you sign anything. A current background check is yours on request, before she is given a key.
Nobody else comes into your house. No subcontractor, no gig marketplace, no stand-in you have not met. The list of people who have been inside your home and the list of people who can open your file are the same list, and it has one name on it. If she is ill or away, you are told and the visit moves. A stranger is never sent in her place.
Rental properties sit under the same rules: see for hosts and property managers.
How long do we keep it, and how do you get it back?
The household file is yours. Ask at any point (your first month or your last day) and all of it goes to you as a PDF within three business days, at no charge.
- When you leave: tell us to delete it and we do, confirmed in writing. No reason required.
- If you say nothing: held twelve months, in case you are back in November, then destroyed.
- An inquiry that never becomes a client file (a form submission, a walkthrough that didn’t go ahead) is held twelve months on the same schedule, then deleted, unless you ask sooner.
- Financial records differ. Invoices and the weekly ledger are kept seven years for tax record-keeping: amounts, dates and stores, no access details, no allergies.
Leaving with the file is easy on purpose. We would rather you left with a good document than stayed because leaving was a hassle.
Households that pause for the summer keep their file: see snowbird season service.
Can an adult child, or anyone else, see your ledger?
Only at your instruction, and it is off until you ask. A second named person (a son, a daughter, an accountant) can be copied on the weekly receipt ledger, arranged at the walkthrough and in writing.
- They receive the itemized ledger and nothing else: not the file, not your access arrangement, not the health lines.
- Removing them takes one message.
- If a relative asks to be added, or what is in your file, they are told to speak to you.
- Where a parent is the person we serve, the parent is the client: whoever pays the invoice.
Does Bay House Concierge sell or share any of this?
No. We do not sell, rent, trade or share client information with anyone: no data broker, no marketing partner, no advertising network. Here is everyone who touches anything, and what they see.
- Stores. A cashier sees a card transaction at the register. We do not give a store your name.
- Your bank. The card is in your name; the charge is between you and your bank. We never hold funds or store a card number.
- PayPal, when you pay online or hold a retainer: your name, email and payment amount, to process the charge. PayPal never receives your household file, and Bay House Concierge never sees or stores your card or bank details, only what PayPal reports back (name, email, amount).
- Calendly, when you book a visit or walkthrough time: your name, email, phone number and whatever you type into the booking form. Calendly is used to hold the calendar; it does not receive the household file.
- Google, on the public website only: Analytics and Fonts, as described under “This website”. No household data touches either.
- Bay Geeks, the local firm that built this site and runs its live chat, sees the visit data described under “This website” and, if you open the chat, what you type into it. The chat is answered first by an AI assistant: your messages are sent to Anthropic, the company that makes it, to produce each reply, and the conversation is kept on Bay Geeks’ service for 30 days where Pauliane can read it. Asking for a person, or leaving a message, emails her directly. The assistant says it is an AI, is never presented as Pauliane, and cannot see your household file. Do not type an entry code or an allergy into the chat; that belongs on the file, arranged at the walkthrough.
- Cloudflare, which hosts the website and the systems behind it. No household data is readable to it in the ordinary course of hosting: the file itself is stored encrypted, as described under “The household file”.
- A court. If we were lawfully compelled, we would tell you first, unless telling you were unlawful.
What does Florida law require, and what can you ask for?
Bay House Concierge LLC operates in St. Petersburg, Florida. The Florida Information Protection Act, section 501.171 of the Florida Statutes, requires a business holding personal information about Florida residents to notify them within 30 days of determining a breach, and the Florida Department of Legal Affairs when 500 or more Floridians are affected.
The Florida Digital Bill of Rights, which grants access, correction, deletion and portability, reaches only controllers making more than one billion dollars in global gross annual revenue that also meet further tests set out in the statute, so it does not reach one woman shopping for a small number of St. Petersburg households. We grant those rights anyway.
- Ask what we hold. The full PDF export, three business days.
- Correct it. Text Pauliane.
- Delete it. Any time, confirmed in writing.
- Opt out of a sale. There is no sale.
Who do you ask about any of this?
Pauliane Stenberg, who wrote it. Email pauli@bayhouseconcierge.com with “Privacy” in the subject line, or call 727-642-6982. If a change here changes what we do, current clients hear it by email first.
Last updated 7 September 2026 · Bay House Concierge LLC · St. Petersburg, Florida · how it works · pricing · questions · service area
Book a walkthrough
We will look at your kitchen, your pantry and your week, and tell you honestly whether this is worth it for your household.
Book a walkthroughForty-five minutes. At your house. Nothing follows unless you ask for it, and you keep the household file either way.