Privacy Policy

Last updated: August 2026

Information We Collect

When you submit a form on our website (quote request, promo booking, or partnership inquiry), we collect the following information:

• Name
• Phone number
• Email address
• Service request or message details
• Communication consent (yes or no)
• The page you submitted the form from

We also automatically collect:

• IP address (used for rate limiting and spam prevention on form submissions, and passed to Google by reCAPTCHA)
• Browser type and user agent string
• Pages visited, how you arrived, device and browser details, and approximate location derived from your IP address — through Google Analytics 4
• A recording of how you use the page — mouse movement, clicks, taps, scrolling, and the content displayed on screen — through Contentsquare session replay
• Specific actions you take on the site, including clicking a phone number, opening WhatsApp from the mobile bar, opening a quote form, submitting a form, and whether the "before you go" offer was shown or dismissed
• UTM campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) stored temporarily in your browser session

The measurement described in the last four bullets runs unless you opt out. See Your Choices About Measurement below.

How We Use Your Information

We use the information you provide to:

• Respond to your service inquiry
• Schedule appointments and send estimates
• Send an internal lead notification to our team
• Track which marketing channels bring visitors to our site
• Prevent spam and bot submissions
• Understand how pages are actually used — where people get stuck, what they click, where they leave — so we can improve the site

We do not sell your personal information to third parties. We do not send marketing emails or newsletters. The only emails sent as a result of your submission are internal lead notifications to our team.

Cookies, Local Storage, and Tracking

Our website uses the following storage and tracking methods:

• Google Analytics 4 (measurement ID G-YE07E1JMXT): Loads on every page unless you opt out. It records page views, the site or ad that referred you, device and browser details, approximate location derived from your IP address, and the specific actions listed above. It sets cookies beginning _ga (including _ga_*, _gid, and _gat) to recognise a returning browser. Data is processed by Google. See Google Privacy Policy.
• Contentsquare session replay:This is a recording tool, and we want to be plain about that. Unless you opt out, Contentsquare's script loads shortly after you begin interacting with a page and records your mouse movement, clicks, taps, scrolling, and the content shown on screen, so we can replay the visit as a reconstruction and see where the site is confusing. It sets cookies beginning _cs_. Opting out writes a _cs_optout cookie that switches the recorder off in your browser. See Contentsquare Privacy Policy.
• Consent choice (localStorage): Your answer to the cookie notice is stored in your browser under the key ecogrizzly:cookie-consent, as either accepted or declined. It is stored on your device only and is never sent to us or to anyone else. It exists so we do not ask you again, and so an opt-out survives between visits.
• Google reCAPTCHA v3: Runs in the background on pages with forms to detect bots. It collects behavioral data, IP address, and browser information and sends it to Google. See Google Privacy Policy and Google Terms of Service.
• Session storage (UTM tracking):When you arrive from an ad or campaign link, UTM parameters are saved in your browser's session storage. This data is cleared when you close your browser tab.
• Session storage (offer popup):If the "before you go" offer appears and you dismiss it, we note that in session storage so it does not reappear during the same visit.
• Session storage (accessibility widget):If you adjust font size, contrast, or other settings using our accessibility widget, those preferences are saved in your browser's session storage under the key accessibilik. They are cleared when you close the browser tab, so they do not carry over to a later visit. The widget also records its interface language in local storage under i18nextLng. Both stay on your device and are never sent to us or to anyone else.

Your Choices About Measurement

This site measures by default, which California's opt-out rules permit, and gives you a way to refuse at any time. On your first visit a notice appears at the bottom of the page with an Opt out button. It does not block the page.

Choosing Opt out does all of the following:

• Switches off Google Analytics in your browser
• Stops Contentsquare session replay recording
• Deletes the _ga, _gid, _gat, and _cs_ cookies already set
• Stops the site from sending any further interaction events, such as button clicks and form submissions

It takes effect immediately, applies to every page, and is remembered on that browser until you change it or clear your browser data.

You can change your answer at any time through the Cookie settings link in the footer. It reopens the notice, tells you whether you are currently opted out or measured, and offers a button to switch to the other. Simply opening it does not change anything, and closing it leaves an opt-out in place.

Opting out is separate from the forms. If you submit a quote request after opting out, we still receive the information you typed into that form — that is how we reply to you — and reCAPTCHA still runs to keep bots out. Opting out stops the measurement of your browsing, not your ability to contact us.

Third-Party Services

We share data with the following third-party services as part of normal website operations:

• Vercel: Hosts our website. Standard server request data, including your IP address, passes through their infrastructure to deliver pages to you.
• Google Analytics 4: Receives the browsing and interaction data described above, unless you opt out.
• Contentsquare: Receives the session recordings described above, unless you opt out.
• Google reCAPTCHA v3: Processes behavioral and device data for bot detection on form submissions.
• Google Maps: Embedded on our contact and location pages. Google may set cookies when the map loads.
• Google-hosted images: The reviewer profile photos shown beside customer reviews are hosted by Google and loaded directly from lh3.googleusercontent.com whenever a page showing reviews renders. Your browser fetches them from Google, so Google receives your IP address and browser details for those requests. We attach a no-referrer policy to those images, so the page you are viewing is not passed along with the request.
• Resend: Our email delivery provider. When you submit a form, your name, phone number, email address, message, the page you submitted from, your communication consent answer, and any campaign parameters are sent through Resend to deliver an internal notification to our team. Resend does not use your data for any other purpose. See Resend Privacy Policy.
• Google Sheets (via Google Apps Script): The same form submission is also sent to a Google Apps Script endpoint that writes it into a private Google Sheet, so we have an internal record of the enquiry. The sheet is not public.

Our financing page links to third-party financing providers (GreenSky, Mosaic, Energy Loan Network, Lyon Financial). If you click through to those sites, their own privacy policies apply. We do not share your data with financing providers unless you contact them directly.

Where This Site Is Available

We serve Southern California, and the website is available to visitors in the United States. Requests from outside the United States are blocked at the edge and never reach the site, apart from search-engine crawlers and our own team.

Data Retention

Lead form submissions are retained indefinitely in our internal records for business purposes (scheduling follow-ups, project history). If you request deletion, we will remove your data within 30 days. Rate-limiting IP data is stored temporarily in server memory and is cleared automatically. Analytics and session-replay data is retained by Google and Contentsquare on their own schedules; the cookies they set on your device last up to 2 years and up to 13 months respectively, and opting out deletes them immediately.

Data Security

We implement reasonable security measures to protect your personal information, including HTTPS encryption for all data in transit, origin verification on form submissions, rate limiting, honeypot fields, and reCAPTCHA bot detection. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our website and services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our site, contact us and we will delete it promptly.

Do Not Track Signals

Our website does not currently respond to "Do Not Track" or Global Privacy Control browser signals. The measurement described above runs regardless of those settings until you opt out using the cookie notice or the Cookie settings link in the footer, which is the control that actually stops it. You can also disable cookies and storage through your browser settings at any time.

Your Rights (California Residents / CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:

• Right to know: You can request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request that we delete your personal information. We will also direct our service providers (Resend, Google, Contentsquare) to delete it where applicable.
• Right to correct: You can request that we correct inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell your personal information, and we do not share it for cross-context behavioral advertising — this site runs no advertising or retargeting pixels. You can still opt out of the analytics and session-replay measurement at any time, as described above.
• Right to non-discrimination: We will not deny you services, charge different prices, or provide a different level of service because you exercised your CCPA rights. Opting out of measurement does not change anything about the site you see or the service you receive.

To submit a request, email info@ecogrizzly.com. We will verify your identity before processing the request and respond within 45 days. You may also designate an authorized agent to submit a request on your behalf.

Categories of Personal Information Collected

For transparency under the CCPA, here is a summary of what we collect and why:

Updates to This Policy

We may update this privacy policy when we add new features or change how we handle data. Changes will be posted on this page with a revised date. Continued use of the website after changes are posted means you accept the updated policy.

Contact

Questions about this policy? Email info@ecogrizzly.com or call (424) 258-9882.