Privacy Policy

Last updated: October 2026

Who We Are

This website is operated by Eco Grizzly, 7811 Alabama Ave, Unit 10, Canoga Park, CA 91304, California Contractors State License Board license #1077111. "We", "us" and "our" mean Eco Grizzly.

This policy covers personal information we collect through this website, and when you call, text, message or email us about a request made here. The form on each page links here, so this policy is also our notice at collection.

Information We Collect

When you submit a form on our website (quote request, promo booking, or partnership inquiry), we collect the following information:

• Name
• Phone number
• Email address
• Service request or message details
• Company name, on the partnership form only
• Communication consent (yes or no)
• The page you submitted the form from

When you call, text, message us on WhatsApp or email us, we also keep those communications and your contact preferences, so we can keep in touch about your project and honor an opt-out.

We also automatically collect:

• IP address (used for rate limiting and spam prevention on form submissions, and passed to Google by reCAPTCHA)
• Browser type and user agent string
• Pages visited, how you arrived, device and browser details, and approximate location derived from your IP address, through Google Analytics 4
• A recording of how you use the page (mouse movement, clicks, taps, scrolling, and the content displayed on screen) through Contentsquare session replay
• Specific actions you take on the site, including clicking a phone number, opening WhatsApp from the mobile bar, opening a quote form, submitting a form, and whether the "before you go" offer was shown or dismissed
• UTM campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) stored temporarily in your browser session

The measurement described in the last four bullets runs unless you opt out. See Your Choices About Measurement below.

How We Use Your Information

We use the information you provide to:

• Respond to your service inquiry
• Schedule appointments and send estimates
• Send an internal lead notification to our team
• Send you one confirmation email that we received your request
• Track which marketing channels bring visitors to our site
• Prevent spam and bot submissions
• Understand how pages are actually used (where people get stuck, what they click, where they leave) so we can improve the site

We do not sell your personal information to third parties. We do not send marketing emails or newsletters. When you submit a form, two emails go out: an internal lead notification to our team, and one confirmation email to the address you entered, sent from website@ecogrizzly.com through Resend. The confirmation repeats the details you sent and our phone number. It is not sent when our spam checks flag a submission for review.

Where It Comes From

From you, when you fill in a form, call, text, message or email us. From your device, automatically, when you use this website. From Google and Contentsquare, as reports about how our website is used.

Cookies, Local Storage, and Tracking

Our website uses the following storage and tracking methods:

• Google Analytics 4 (measurement ID G-YE07E1JMXT): Loads on every page unless you opt out. It records page views, the site or ad that referred you, device and browser details, approximate location derived from your IP address, and the specific actions listed above. It sets cookies beginning _ga (including _ga_*, _gid, and _gat) to recognise a returning browser. Data is processed by Google. See Google Privacy Policy.
• Contentsquare session replay: This is a recording tool, and we want to be plain about that. Unless you opt out, Contentsquare's script loads from your first visit, as soon as you first tap, click, scroll or press a key on a page, or about 12 seconds after the page opens if you do none of those. That can be before you have answered the cookie notice. It records your mouse movement, clicks, taps, scrolling, and the content shown on screen, so we can replay the visit as a reconstruction and see where the site is confusing. It sets cookies beginning _cs_. Opting out writes a _cs_optout cookie that switches the recorder off in your browser. See Contentsquare Privacy Policy.
• Consent choice (localStorage): Your answer to the cookie notice is stored in your browser under the key ecogrizzly:cookie-consent, as either accepted or declined. It is stored on your device only and is never sent to us or to anyone else. It exists so we do not ask you again, and so an opt-out survives between visits.
• Google reCAPTCHA v3: Runs in the background on pages with forms to detect bots. It collects behavioral data, IP address, and browser information and sends it to Google. See Google Privacy Policy and Google Terms of Service.
• Session storage (UTM tracking): When you arrive from an ad or campaign link, UTM parameters are saved in your browser's session storage. This data is cleared when you close your browser tab.
• Session storage (offer popup): If the "before you go" offer appears and you dismiss it, we note that in session storage so it does not reappear during the same visit.
• Session storage (accessibility widget): If you adjust font size, contrast, or other settings using our accessibility widget, those preferences are saved in your browser's session storage under the key accessibilik. They are cleared when you close the browser tab, so they do not carry over to a later visit. The widget also records its interface language in local storage under i18nextLng. Both stay on your device and are never sent to us or to anyone else.

Your Choices About Measurement

This site measures by default, which California's opt-out rules permit, and gives you a way to refuse at any time. On your first visit a notice appears at the bottom of the page with an Opt out button. It does not block the page.

Choosing Opt out does all of the following:

• Switches off Google Analytics in your browser
• Stops Contentsquare session replay recording
• Deletes the _ga, _gid, _gat, and _cs_ cookies already set
• Stops the site from sending any further interaction events, such as button clicks and form submissions

Opting out does not stop the GENESIS 98 page-view count described under Third-Party Services. It still counts the page you view, but no longer derives a daily visitor count for you.

It takes effect immediately, applies to every page, and is remembered on that browser until you change it or clear your browser data.

You can change your answer at any time through the Cookie settings link in the footer. It reopens the notice, tells you whether you are currently opted out or measured, and offers a button to switch to the other. Simply opening it does not change anything, and closing it leaves an opt-out in place.

Opting out is separate from the forms. If you submit a quote request after opting out, we still receive the information you typed into that form (that is how we reply to you), and reCAPTCHA still runs to keep bots out. Opting out stops the measurement of your browsing, not your ability to contact us.

Third-Party Services

We share personal information only with service providers that help us run our business and this website, under terms that limit how they can use it:

• Vercel: Hosts our website. Standard server request data, including your IP address, passes through their infrastructure to deliver pages to you.
• Google Analytics 4: Receives the browsing and interaction data described above, unless you opt out.
• Contentsquare: Receives the session recordings described above, unless you opt out.
• Google reCAPTCHA v3: Processes behavioral and device data for bot detection on form submissions.
• Google Maps: Embedded on our contact and location pages. Google may set cookies when the map loads.
• Google-hosted images: The reviewer profile photos shown beside customer reviews are hosted by Google and loaded directly from lh3.googleusercontent.com whenever a page showing reviews renders. Your browser fetches them from Google, so Google receives your IP address and browser details for those requests. We attach a no-referrer policy to those images, so the page you are viewing is not passed along with the request.
• Resend: Our email delivery provider. When you submit a form, your name, phone number, email address, message, the page you submitted from, your communication consent answer, and any campaign parameters are sent through Resend to deliver an internal notification to our team. Resend also delivers the one confirmation email to the address you entered, with your name, phone number, message and the page you submitted from. Resend processes this data to deliver our email. See Resend Privacy Policy.
• Google Sheets (via Google Apps Script): The same form submission is also sent to a Google Apps Script endpoint that writes it into a private Google Sheet, so we have an internal record of the enquiry. The sheet is not public.
• GENESIS 98 page-view count: GENESIS 98, the agency that builds and maintains this website, counts page views on its own measurement service. On every page view your browser sends it the page you view, the page that sent you (without any query string), the utm_source and utm_medium campaign tags, the names (never the values) of any ad click IDs in the link, and whether you have opted out. Your IP address and browser details reach it with the request. Unless you have opted out or your browser sends Global Privacy Control, it derives a daily visitor count from a code that changes every day, so a visitor cannot be followed from one day to the next. It sets no cookie, stores nothing in your browser, and does not use the data for advertising.
• Professional advisers and authorities: Our accountants, lawyers and insurers where they need it, and authorities where the law requires it.

Our financing page links to third-party financing providers (GreenSky, Mosaic, Energy Loan Network, Lyon Financial). If you click through to those sites, their own privacy policies apply. We do not share your data with financing providers unless you contact them directly.

Text Messages

We do not sell, rent or share your mobile phone number or your text messaging opt-in with third parties or affiliates for their marketing. Service providers that deliver our messages receive your number only to deliver them. See our SMS Terms for how our text messages work and how to stop them. To stop text messages, reply STOP to any message from us.

Where This Site Is Available

We serve Southern California, and the website is available to visitors in the United States. Requests from outside the United States are blocked at the edge and never reach the site, apart from search-engine crawlers and our own team.

Data Retention

We keep request and project records for as long as we need them to respond to you, perform and document the work, honor any warranty, and meet our legal, tax and licensing record-keeping obligations. Then we delete or de-identify them. Rate-limiting IP data is held briefly in server memory and is cleared automatically. Analytics and session-replay data is kept no longer than the retention set in Google Analytics and Contentsquare. The cookies they set on your device last up to 2 years and up to 13 months respectively, and opting out deletes them immediately. Our Cookie Policy lists every cookie's lifetime.

Data Security

We implement reasonable security measures to protect your personal information, including HTTPS encryption for all data in transit, origin verification on form submissions, rate limiting, honeypot fields, and reCAPTCHA bot detection. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Children's Privacy

Our website and services are not directed at children. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of anyone under 16. If you believe a child has submitted information through our site, contact us and we will delete it promptly.

Browser Privacy Signals

Global Privacy Control. If your browser or a browser extension sends the Global Privacy Control signal, this site reads it and treats it as an opt-out, with the same effect as pressing Opt out: Google Analytics and Contentsquare session replay never load, no interaction events are sent, and the _ga, _gid, _gat and _cs_ cookies are cleared. You are not shown the cookie notice either, because the question it asks has already been answered.

A choice you make on this site takes priority over the signal, in both directions. If you have already opted out here, you stay opted out whether the signal is on or not. If you send the signal and then decide you do want to be measured, the Cookie settings link in the footer offers Allow analytics, and that later choice is the one we honour on this browser. We fall back to the signal only when you have made no choice here.

Do Not Track. This is a separate, older browser setting, and it is not the same thing as Global Privacy Control. Nothing on this site reads it, so the measurement described above runs regardless of it until you opt out through the cookie notice, the Cookie settings link, or Global Privacy Control. You can also disable cookies and storage through your browser settings at any time.

Your Privacy Rights

California residents have rights under the California Consumer Privacy Act (CCPA). We honor the same requests from every customer. You have the following rights:

• Right to know: You can request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request that we delete your personal information. We will also direct our service providers (Resend, Google, Contentsquare) to delete it where applicable.
• Right to a copy: You can ask for a copy of the personal information we hold about you.
• Right to correct: You can request that we correct inaccurate personal information.
• Right to opt out of sale or sharing: We do not sell your personal information, and we do not share it for cross-context behavioral advertising. This site runs no advertising or retargeting pixels. You can still opt out of the analytics and session-replay measurement at any time, as described above.
• Sensitive personal information: We do not use or disclose sensitive personal information for any purpose that would give you a right to limit it under California law.
• Right to non-discrimination: We will not deny you services, charge different prices, or provide a different level of service because you exercised your CCPA rights. Opting out of measurement does not change anything about the site you see or the service you receive.

How to Make a Request

To use these rights, email info@ecogrizzly.com or call (424) 258-9882. We will confirm receipt within 10 business days and respond within 45 days, and tell you if we need more time. We will not treat you differently for making a request.

To protect you, we verify a request by matching details you give us against the details we hold, such as your name, phone number and email address. You can ask someone to act for you as your authorized agent; we will ask for your signed permission and may ask you to verify your identity directly.

Categories of Personal Information Collected

For transparency under the CCPA, here is a summary of what we collect and why:

Updates to This Policy

When we change this policy we update the "Last updated" date above. If a change materially affects how we use information we already hold, we will tell you before it applies.

Contact

Questions about this policy? Email info@ecogrizzly.com or call (424) 258-9882, or write to us at Eco Grizzly, 7811 Alabama Ave, Unit 10, Canoga Park, CA 91304.