Privacy Policy
Last updated: April 2026
Information We Collect
When you submit a form on our website (quote request, promo booking, or partnership inquiry), we collect the following information:
- Name
- Phone number
- Email address
- Service request or message details
- Communication consent (yes or no)
We also automatically collect:
- IP address (used for rate limiting and spam prevention on form submissions)
- Browser type and user agent string
- Pages visited and general usage data (via Vercel Analytics)
- UTM campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) stored temporarily in your browser session
How We Use Your Information
We use the information you provide to:
- Respond to your service inquiry
- Schedule appointments and send estimates
- Send you a lead confirmation via email
- Track which marketing channels bring visitors to our site
- Prevent spam and bot submissions
- Improve our website performance and content
We do not sell your personal information to third parties. We do not send marketing emails or newsletters. The only emails sent as a result of your submission are internal lead notifications to our team.
Cookies, Local Storage, and Tracking
Our website uses the following storage and tracking methods:
- Vercel Analytics: Collects anonymous page view and performance data. No personal information is stored. See Vercel Analytics Privacy Policy.
- Google reCAPTCHA v3: Runs in the background on pages with forms to detect bots. It collects behavioral data, IP address, and browser information and sends it to Google. See Google Privacy Policy and Google Terms of Service.
- Session storage (UTM tracking):When you arrive from an ad or campaign link, UTM parameters are saved in your browser's session storage. This data is cleared when you close your browser tab.
- Local storage (accessibility preferences):If you adjust font size or contrast settings using our accessibility widget, those preferences are saved in your browser's local storage so they persist between visits.
Third-Party Services
We share data with the following third-party services as part of normal website operations:
- Vercel: Hosts our website and provides anonymous analytics.
- Google reCAPTCHA v3: Processes behavioral and device data for bot detection on form submissions.
- Google Maps: Embedded on our contact page. Google may set cookies when the map loads.
- Resend: Our email delivery provider. When you submit a form, your lead information is sent through Resend to deliver an internal notification to our team. Resend does not use your data for any other purpose. See Resend Privacy Policy.
- Google Sheets (via Google Apps Script): Lead form submissions are also stored in a private Google Sheet for our internal record-keeping.
Our financing page links to third-party financing providers (GreenSky, Mosaic, Energy Loan Network, Lyon Financial). If you click through to those sites, their own privacy policies apply. We do not share your data with financing providers unless you contact them directly.
Data Retention
Lead form submissions are retained indefinitely in our internal records for business purposes (scheduling follow-ups, project history). If you request deletion, we will remove your data within 30 days. Rate-limiting IP data is stored temporarily in server memory and is cleared automatically.
Data Security
We implement reasonable security measures to protect your personal information, including HTTPS encryption for all data in transit, origin verification on form submissions, rate limiting, honeypot fields, and reCAPTCHA bot detection. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Children's Privacy
Our website and services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our site, contact us and we will delete it promptly.
Do Not Track Signals
Our website does not currently respond to "Do Not Track" browser signals. Vercel Analytics collects anonymous data regardless of DNT settings. You can disable cookies and storage through your browser settings at any time.
Your Rights (California Residents / CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:
- Right to know: You can request the categories and specific pieces of personal information we have collected about you.
- Right to delete: You can request that we delete your personal information. We will also direct our service providers (Resend, Google) to delete it where applicable.
- Right to correct: You can request that we correct inaccurate personal information.
- Right to opt out of sale or sharing: We do not sell or share your personal information for cross-context behavioral advertising. There is nothing to opt out of.
- Right to non-discrimination: We will not deny you services, charge different prices, or provide a different level of service because you exercised your CCPA rights.
To submit a request, email info@ecogrizzly.com. We will verify your identity before processing the request and respond within 45 days. You may also designate an authorized agent to submit a request on your behalf.
Categories of Personal Information Collected
For transparency under the CCPA, here is a summary of what we collect and why:
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email, phone number, IP address | Respond to inquiries, prevent spam |
| Internet activity | Pages visited, browser type, UTM parameters | Website analytics, marketing attribution |
| Inferences | reCAPTCHA bot score | Spam prevention |
Updates to This Policy
We may update this privacy policy when we add new features or change how we handle data. Changes will be posted on this page with a revised date. Continued use of the website after changes are posted means you accept the updated policy.
Contact
Questions about this policy? Email info@ecogrizzly.com or call (424) 258-9882.
