Your Privacy Choices

We use cookies and similar technologies. Choose Accept, Reject optional cookies, or Customize. Where US state privacy laws apply (including California and other comprehensive state privacy laws), you can also use Do Not Sell or Share and Limit Use of Sensitive Personal Information. Global Privacy Control (GPC) signals are honored for sale or sharing. Cookie Policy

Privacy & Cookie Preferences

Choose optional cookie categories. Essential cookies stay on. US privacy choices such as Do Not Sell or Share are available via the link below where applicable.

Read our Cookie Policy

Skip to content
  • Residential
  • Commercial
  • Renovations & Restorations
  • Heritage Run
  • About Us
  • Contact
  • Residential
  • Commercial
  • Renovations & Restorations
  • Heritage Run
  • About Us
  • Contact

Woodland Contractors

Privacy Policy

Effective date: October 1, 2026

Important:
This page explains how this website collects and uses information. It is a technical disclosure, not legal advice. It does not guarantee compliance with GDPR, CPRA, LGPD, or any other law. Have qualified counsel review it before you rely on it.

This Privacy Policy describes how Woodland Contractors (“we”, “us”) collects, uses, protects, and shares information when you visit or use Woodland Contractors. That includes browsing the site, submitting forms, making purchases, using online services, or contacting us.

Who is responsible

The organization responsible for this website is Woodland Contractors.

Email: [email protected]

Phone: (717) 273-5400

1316 King St, Lebanon, PA 17042

Your privacy choices

You can manage optional cookies and similar technologies at any time with Cookie Settings on this website. Choose Accept All, Reject All (essential only), or Customize.

Under California law (CCPA / CPRA) and certain other US state privacy laws, you may also opt out of the “sale” or “sharing” of personal information. That can include some advertising uses. We do not sell personal information for money in the everyday sense. Some laws define sale or sharing more broadly. Use the Do Not Sell or Share link above when it is provided, the rights sections later on this page, or contact us to make that request.

Cookie Policy. How cookies work and how to change cookie choices.

Information we collect

We may collect information you provide directly. We may also collect information automatically through your browser or device. Third-party tools used to operate, secure, analyze, and improve this website may collect information as well.

Information you provide may include your name, email address, phone number, mailing address, billing or shipping address, and company name. It may also include account details, form responses, messages, appointment requests, order details, payment-related information handled by payment providers, uploaded files, survey answers, support requests, newsletter signups, and anything else you choose to submit.

Information collected automatically may include IP address, browser type, device type, operating system, and approximate location. It may also include pages visited, time on pages, links clicked, referring website, search terms, session activity, form interactions, shopping cart or checkout activity when e-commerce is enabled, performance data, security logs, and error logs.

How we use information

We may use collected information to operate this website, respond to inquiries, and provide customer service. We may also use it to process orders or requests, send confirmations or transactional messages, and manage appointments or bookings.

We may use it to improve website performance, analyze visitor behavior, prevent fraud, protect against spam or abuse, and secure the website. Where allowed, we may measure advertising performance and improve marketing. We may also use information to comply with legal obligations and enforce applicable terms or policies.

Legal bases for EEA, UK, and similar laws

Where GDPR or similar laws apply, we process personal data under one or more of these bases. Consent covers optional cookies, analytics, marketing, and similar tools. Contract covers providing requested services. Legal obligation covers required processing. Legitimate interests cover securing the site, preventing fraud, and improving essential operations, balanced against your rights and interests.

Where required, non-essential cookies, analytics, advertising, session replay, heatmaps, and similar technologies run only after you provide consent through our cookie banner or privacy controls. You may withdraw consent at any time.

Cookies and tracking technologies

This website may use cookies, pixels, scripts, tags, server logs, local storage, session storage, and similar technologies. These help the website function, remember preferences, secure sessions, prevent fraud, analyze traffic, and measure performance. Where allowed, they may also support advertising or marketing.

  • Strictly necessary. Security, login sessions, form protection, cart or checkout when applicable, consent storage, load balancing, and bot protection.
  • Analytics and statistics. Understand how visitors use the site, including pages, duration, and interactions, so we can improve content and performance.
  • Marketing and advertising. Measure ad performance, conversions, audiences, or retargeting where used and permitted.
  • Functional and preferences. Embeds, maps, videos, chat, accessibility tools, saved preferences, and similar enhancements.

See the Cookie Policy for the live cookie and technology inventory.

What this site uses

The following sections come from privacy scans, active plugins, and the local vendor catalog on this website. Re-scan and regenerate pages after major changes so the lists stay current.

Inventory from last privacy scan and plugin map: 2026-10-01 21:08:39

Cookies observed on this site

Names, services, categories, purposes, and durations from the latest scan and from Google tags enabled under Integrations. Entries are enriched with the local vendor catalog when a match is known.

Cookie Service or provider Category Purpose Duration Consent
ucpf_consent UCPF Consent Cookie Universal Consent & Privacy Framework Essential / Necessary Stores consent preferences and policy version. Configurable (default 180 days) Essential
ucpf_dns UCPF Consent Cookie Universal Consent & Privacy Framework Essential / Necessary Stores Do Not Sell / Share or GPC-style opt-out choice. Configurable Essential
wp_consent_* WP Consent API WordPress Preferences Stores allow/deny for a WP Consent API category. Session / short-lived Essential
_ga Google Analytics 4 Google Analytics Distinguishes users for analytics. 2 years Optional (consent)
_ga_* Google Analytics 4 Google Analytics Persists GA4 session state. 2 years Optional (consent)
_gat Google Analytics 4 Google Analytics Throttles request rate. 1 minute Optional (consent)
_gid Google Analytics 4 Google Analytics Distinguishes users for 24 hours. 24 hours Optional (consent)
_gcl_* Google Ads Google Marketing Stores ad click information for conversions. 90 days Optional (consent)
IDE Google Ads Google Marketing DoubleClick advertising and conversion tracking identifier. 2 years Optional (consent)
test_cookie Google Ads Google Marketing Set by DoubleClick to check whether the browser supports cookies. Session / ~15 minutes Optional (consent)

Browser storage keys

Type Key
localstorage uw-icon-locales
localstorage elementor
localstorage uw-uid
localstorage uw-tunings-checksum
localstorage uw-tunings
sessionstorage elementor
indexeddb ucpf_consent_db
localstorage ucpf_consent_backup
sessionstorage ucpf_consent_backup
sessionstorage ucpf_consent_bridge

Scripts, pixels, beacons, and embeds

Tracking can occur without cookies. These technologies were observed during scanning.

Name or host Category Type Consent
b4743921.assetcdn.net unclassified requests Optional (consent)
Custom Facebook Feed (Smash Balloon) woodlandcontractors.com Marketing scripts Optional (consent)
Google Site Kit woodlandcontractors.com Analytics scripts Optional (consent)
Gravity Forms Cloudflare Turnstile woodlandcontractors.com Security scripts Optional (consent)
Smush Pro woodlandcontractors.com Essential / Necessary scripts Essential or unclassified
UserWay cdn.userway.org Essential / Necessary scripts Essential or unclassified
WP Consent API woodlandcontractors.com Essential / Necessary scripts Essential or unclassified

WordPress plugins that may process data

Active plugins mapped in our local catalog, including forms, builders, analytics, security, and commerce tools. Unmapped plugins may still process data. Review your install inventory with counsel.

Plugin or service Provider Category What it may do Provider privacy info
Defender Security WPMU DEV security Security plugin cookies related to login protection and firewall when present. Privacy policy
Elementor Elementor Ltd. necessary Page builder assets used to render site layouts. Privacy policy
Facebook Feed (Smash Balloon / Custom) Smash Balloon / Smash marketing Facebook social feed embeds and related third-party requests. Privacy policy
Google Analytics 4 Google analytics Analytics service used to measure website traffic and behavior. Privacy policy
Google reCAPTCHA Google security Bot protection and spam prevention. Privacy policy
Gravity Forms Rocketgenius necessary Essential form functionality (validation, multi-page forms). Third-party add-ons like reCAPTCHA are separate services. Privacy policy
SmartCrawl Pro functional Active WordPress plugin that may process visitor data. Not linked
Transactional email (SMTP / API) Site mail delivery necessary Server-side delivery of transactional messages (order confirmations, password resets, form notifications) via an SMTP plugin or ESP API. Not a visitor-facing tracker; disclosure/inventory only. Not linked
UCPF Consent Cookie Universal Consent & Privacy Framework necessary Stores your cookie consent choices so the site can respect them. Not linked
UserWay Accessibility UserWay necessary Accessibility widget (ADA / WCAG assistive toolbar). Required for site accessibility — never gated behind consent. Privacy policy
WP Consent API WordPress preferences Category consent cookies written by the WP Consent API (or UCPF shim) so plugins can read allow/deny per category. Privacy policy

Where data may go

Depending on the tools enabled and your consent choices, information may be processed by the providers below or their subprocessors. Each provider applies its own privacy terms.

Destination Host or pattern Category Purpose More info
b4743921.assetcdn.net b4743921.assetcdn.net unclassified Observed during a privacy scan of this website. Not linked
Cloudflare cdn-cgi/challenge-platform necessary Security and performance cookies set by Cloudflare when the site uses Cloudflare (bot management / clearance). Web Analytics is a separate service. Provider policy
Cloudflare cdn-cgi/challenge-platform cdn-cgi/challenge-platform security Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Cloudflare Email Cloudflare necessary Transactional email via Cloudflare Email Service (distinct from Cloudflare CDN/proxy). Server-side only; not a visitor tracker. Provider policy
Cloudflare Turnstile Cloudflare challenges.cloudflare.com security Bot protection widget. Provider policy
Cloudflare Web Analytics Cloudflare static.cloudflareinsights.com analytics Optional Cloudflare Web Analytics beacon (static.cloudflareinsights.com). Provider policy
ConvertKit (Kit) Kit convertkit.com marketing ConvertKit / Kit forms and tracking scripts. Provider policy
Custom Facebook Feed (Smash Balloon) woodlandcontractors.com marketing Observed during a privacy scan of this website. Not linked
Defender Security WPMU DEV security Security plugin cookies related to login protection and firewall when present. Provider policy
Elementor Elementor Ltd. necessary Page builder assets used to render site layouts. Provider policy
Elementor Elementor Ltd. elementor/assets necessary Page builder assets used to render site layouts. Provider policy
Facebook Feed (Smash Balloon / Custom) Smash Balloon / Smash marketing Facebook social feed embeds and related third-party requests. Provider policy
Facebook Feed (Smash Balloon / Custom) Smash Balloon / Smash facebook.com/plugins marketing Facebook social feed embeds and related third-party requests. Provider policy
Facebook Feed (Smash Balloon / Custom) facebook.com/plugins facebook.com/plugins marketing Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Facebook Feed (Smash Balloon / Custom) sb-facebook sb-facebook marketing Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Facebook Feed (Smash Balloon / Custom) social-wall social-wall marketing Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Facebook Feed (Smash Balloon / Custom) sb-wall sb-wall marketing Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Google Ads Google googleadservices.com marketing Advertising and conversion tracking. Provider policy
Google Analytics 4 Google analytics Analytics service used to measure website traffic and behavior. Provider policy
Google Analytics 4 Google googletagmanager.com/gtag analytics Analytics service used to measure website traffic and behavior. Provider policy
Google Docs / Drive embeds Google docs.google.com functional Google Docs, Sheets, Slides, and Drive preview embeds. Provider policy
Google Fonts Google fonts.googleapis.com necessary Loads web fonts from Google Fonts CDN. Always allowed — layout fonts are not gated behind Embeds. Provider policy
Google Maps Google maps.googleapis.com functional Embedded Google Maps / Places. Provider policy
Google reCAPTCHA Google google.com/recaptcha security Bot protection and spam prevention. Provider policy
Google Site Kit woodlandcontractors.com analytics Observed during a privacy scan of this website. Not linked
Google Tag Manager Google googletagmanager.com/gtm.js analytics Tag management system for marketing and analytics tags. Provider policy
Gravity Forms Rocketgenius necessary Essential form functionality (validation, multi-page forms). Third-party add-ons like reCAPTCHA are separate services. Provider policy
Gravity Forms Cloudflare Turnstile woodlandcontractors.com security Observed during a privacy scan of this website. Not linked
Instagram Feed Smash Balloon instagram.com marketing Instagram feed embeds. Provider policy
SmartCrawl Pro functional Active WordPress plugin that may process visitor data. Not linked
Smush Pro woodlandcontractors.com necessary Observed during a privacy scan of this website. Not linked
Suspected tracker: https//woodlandcontractors.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https//woodlandcontractors.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js https//woodlandcontractors.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js security Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Suspected tracker: https//woodlandcontractors.com/wp-content/plugins/custom-facebook-feed-pro/assets/js/cff-scripts.min.js https//woodlandcontractors.com/wp-content/plugins/custom-facebook-feed-pro/assets/js/cff-scripts.min.js https//woodlandcontractors.com/wp-content/plugins/custom-facebook-feed-pro/assets/js/cff-scripts.min.js marketing Added from suspicious-script review. Gated until marketing (or chosen category) consent. Not linked
Transactional email (SMTP / API) Site mail delivery necessary Server-side delivery of transactional messages (order confirmations, password resets, form notifications) via an SMTP plugin or ESP API. Not a visitor-facing tracker; disclosure/inventory only. Not linked
UCPF Consent Cookie Universal Consent & Privacy Framework necessary Stores your cookie consent choices so the site can respect them. Not linked
UserWay cdn.userway.org necessary Observed during a privacy scan of this website. Not linked
UserWay Accessibility UserWay necessary Accessibility widget (ADA / WCAG assistive toolbar). Required for site accessibility — never gated behind consent. Provider policy
WP Consent API woodlandcontractors.com necessary Observed during a privacy scan of this website. Not linked
WP Consent API WordPress preferences Category consent cookies written by the WP Consent API (or UCPF shim) so plugins can read allow/deny per category. Provider policy
YouTube Embeds Google youtube.com/iframe_api marketing Embedded YouTube videos and related player / view-statistics cookies. Provider policy

Google Analytics

This website may use Google Analytics to understand how visitors find and use the site. That can include pages viewed, device and browser details, approximate location, referrers, and events. Google may use cookies or similar technologies. Typical Analytics cookie lifetimes in our catalog include _ga / _ga_* for about 2 years, _gid for about 24 hours, and _gat* for about 1 minute. We do not intentionally send names, email addresses, phone numbers, or payment card numbers to Google Analytics. Where required by law, Analytics loads only after appropriate consent.

Google Tag Manager

Google Tag Manager may be used to manage tags and integrations for analytics, ads, and consent signals. Data collected depends on the tags configured in each container. Tags fired through GTM may set cookies such as _ga or advertising identifiers (_gcl_*), with lifetimes that vary by the underlying service. Where required, tags that load analytics or advertising should respect consent choices before firing.

Google tags configured on this site

The following Google container and tag IDs are enabled for this website and load after the visitor consents to the relevant category. These IDs identify which tags load; they are not cookie names. Cookie families that may be set appear in the cookie table above.

  • GTM-WG74T3MC — Google Tag

Google Ads and advertising tags

Google Ads or related advertising tags may measure conversions, support remarketing, or help deliver ads. Catalog cookie families include _gcl_* (about 90 days), IDE (about 2 years), and short-lived test cookies. Where required by law, these tools load only after marketing consent.

Cloudflare

Cloudflare may process technical information such as IP addresses, request headers, URLs, security events, bot scores, and traffic logs. This helps deliver, cache, and protect the site. Some Cloudflare security cookies may be treated as strictly necessary for availability and abuse prevention.

Meta and Facebook technologies

Meta Pixel or related tools may measure conversions, build audiences, or support advertising. These tools typically require marketing consent where GDPR-style rules apply. You may also have opt-out rights under US state privacy laws for sale or sharing.

Forms and user submissions

If you submit a form, request information, book an appointment, place an order, or contact us, we may use that information to respond, fulfill the request, prevent spam, and keep records. Form data may be processed by form plugins, email or SMTP providers, CRM tools, spam protection, and hosting providers.

Payments, shipping, and email

If this site offers purchases, donations, subscriptions, or bookings, payment details are typically handled by third-party payment processors. We do not intentionally store full card numbers unless a clearly disclosed compliant system requires it. Shipping or fulfillment data may be shared with carriers and logistics tools. Marketing emails are sent only where allowed. You can unsubscribe from marketing and still receive transactional messages.

How information is shared

We may share information with service providers such as hosting, CDN, analytics, advertising, payments, email, CRM, security, and developers as needed to operate the site, or when required by law. We do not sell personal information for money in the everyday sense. Some privacy laws define “sale” or “sharing” broadly to include certain advertising or cross-context behavioral advertising. See California rights below.

International transfers

Information may be processed or stored outside your state, province, or country, including by US-based providers. Where required, transfers may rely on adequacy decisions, standard contractual clauses, or other lawful mechanisms. Review each provider’s documentation for details.

Data retention

We retain information only as long as reasonably necessary for the purposes described here, unless a longer period is required or allowed by law. Configured operational retention for certain privacy records on this site is approximately 365 days. Third-party cookie and identifier lifetimes (for example Analytics, Ads, or partner tags disclosed for Google Tag Manager) follow each provider’s or partner’s periods and are listed in the Cookie Policy where available — those durations are separate from this operational retention setting.

Security

We use reasonable technical and organizational measures such as TLS, access controls, firewalls, malware scanning, and monitoring. No method of transmission or storage is completely secure.

Account login activity

For security, login attempts and related account-security events (such as password policy checks) may be logged. This helps protect accounts against unauthorized access.

Password-policy and login-security tools (for example plugins that enforce password rotation or record sign-in history) may retain those events separately from cookie consent logs. Staff and customers with accounts should expect this monitoring as part of protecting the site.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. You may also withdraw consent, request portability, opt out of certain advertising or sale or sharing, limit use of sensitive personal information, and lodge a complaint with a supervisory authority.

California privacy rights (CCPA / CPRA). Do Not Sell or Share

California residents may have the right to know what personal information is collected, used, disclosed, sold, or shared. They may also request deletion or correction, opt out of sale or sharing, limit use of sensitive personal information, and be free from discrimination for exercising these rights.

Categories commonly involved on websites like this include identifiers such as name and email, commercial information such as orders, internet activity such as browsing and interactions, and approximate geolocation. Purposes include providing services, security, analytics, and marketing where allowed.

Do Not Sell or Share. To opt out of sale or sharing of personal information as defined under California law and similar US state laws, use the link below when available, or email us. Cookie Settings alone may not cover every advertising or sharing activity covered by those laws.

Email your Do Not Sell or Share request to: [email protected]

Other US state privacy laws

Residents of states such as Colorado, Connecticut, Virginia, Utah, and others may have similar rights to access, delete, correct, or opt out of targeted advertising, sale, or profiling. Use the contact methods or rights forms on this site to submit a request. We may need to verify your identity.

European, UK, Swiss, and similar rights

Where GDPR or UK GDPR applies, you may have the rights listed above, including withdrawing consent for optional tracking. You may also contact your local data protection authority.

Brazil, Canada, and other regions

Other regions grant access, correction, deletion, and consent-related rights. This website’s jurisdiction packs and consent banner help support those workflows technically. Local counsel should confirm legal requirements for your organization.

Sensitive information and children

Do not submit sensitive personal information through this website unless specifically requested and necessary. This website is not directed to children under the age required by applicable law. We do not knowingly collect personal information from children without appropriate parental consent.

Automated processing and breaches

We may use automated tools for analytics, spam and fraud detection, security, and performance. We do not intentionally use automated decision-making that produces legal or similarly significant effects without appropriate safeguards. If a personal data breach occurs, we will investigate and notify individuals or authorities where required by law.

Embedded content and links

Embedded videos, maps, social posts, or other third-party content may collect data as if you visited those sites directly. Review third-party privacy policies before interacting with embeds or external links.

Changes

We may update this Privacy Policy when tools, laws, or business practices change. The updated version will be posted on this page with a revised date.

Contact

Woodland Contractors

Email: [email protected]

Phone: (717) 273-5400

1316 King St, Lebanon, PA 17042

Cookie Policy

Generated by Universal Consent and Privacy Framework as a technical aid. Not a compliance certification.

Facebook Feed

Address: 1316 King St, Lebanon, PA 17042
Phone: (717) 273-5400

Serving Lebanon, Lancaster, Berks, Schuylkill, & Dauphin Counties in Central PA

Services

Residential

Commercial

Renovations &
Restorations

Heritage Run

Overview

Floorplans

About Us

Our Company

Contact Us

Copyright © 2026 Woodland Contractors, Inc.

Privacy Policy    Terms & Conditions    Legal

imunify-bot-check
  • Residential
  • Commercial
  • Renovations & Restorations
  • Heritage Run
  • About Us
  • Contact
  • Residential
  • Commercial
  • Renovations & Restorations
  • Heritage Run
  • About Us
  • Contact
CONTACT US TO GET STARTED