Privacy Policy
Effective date: June 26, 2026 Last updated: October 7, 2026
This Privacy Policy explains how ElkStone Inc. (“ElkStone,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit elkstonebasements.com (the “Site”), contact us, or use our services. It also describes the privacy rights available to residents of California, Colorado, Utah, and other states with applicable privacy laws.
We provide basement-finishing and remodeling services in Colorado and Utah. We are based in Englewood, Colorado.
1. Information we collect
Information you provide directly. When you request a consultation, fill out a form, call us, chat with us, or otherwise contact us, we may collect your name, email address, phone number, street/property address, project details, and any other information you choose to provide.
Information collected automatically. When you visit the Site, we, our service providers, and our advertising and analytics partners automatically collect certain information through cookies and similar technologies, including: IP address, device and browser type, operating system, pages viewed, links clicked, referring/exit pages, approximate location (derived from IP), date/time stamps, and how you interact with pages (including mouse movements, scrolls, and clicks captured by analytics and session-replay tools described in Section 3).
Information from third parties. We may receive information about you from advertising and analytics partners, lead-generation sources, and referral sources, which we may combine with information we collect directly.
2. How we use information
We use information to: respond to inquiries and provide consultations and services; schedule and manage projects; communicate with you (including marketing emails you can opt out of); operate, maintain, and improve the Site; measure and analyze Site traffic and marketing performance; serve and measure advertising; detect and prevent fraud, spam, and abuse; and comply with legal obligations.
3. Cookies, tracking technologies, and session replay
We, our service providers, and our advertising and analytics partners use cookies, pixels, tags, SDKs, and similar technologies on the Site. The specific technologies currently in use include:
| Technology | Provider | Purpose | Data involved |
|---|---|---|---|
| Microsoft Clarity (session replay & heatmaps) | Microsoft | Records and reconstructs visitor sessions (clicks, scrolls, mouse movement, page interactions) to help us understand site usage | Interaction data, device/browser data; field inputs are masked where configured |
| Meta Pixel | Meta Platforms (Facebook/Instagram) | Measures advertising, builds audiences, and supports retargeting | Page views, events, identifiers shared with Meta |
| Google Analytics / Google Tag Manager | Website analytics and tag management, and measuring our Google advertising | Usage and device data. When you enter contact details (such as your email, phone number or address) in a form on the Site, Google’s tag may send them to Google in hashed form. Hashing scrambles the details, but Google can still match them to a Google account. Google uses them to measure our advertising, for our analytics reports, and to support our ad audiences. This happens only when our analytics and advertising technologies are running for you (see “Your choices” below). | |
| Google Ads tags (conversion tracking, remarketing and call tracking) | Measures our Google advertising, builds audiences, and supports retargeting | Page views, events, identifiers shared with Google | |
| Microsoft Advertising (Universal Event Tracking) | Microsoft | Measures our Microsoft (Bing) advertising and builds audiences | Page views, events, identifiers shared with Microsoft |
| HubSpot | HubSpot, Inc. | Visitor analytics, contact/lead management, and an advertising pixel that measures our ads and builds audiences (no live chat is used on the Site) | Contact details and interaction data |
| CallRail | CallRail | Phone-call and online-form attribution, and call recording | Phone number, call metadata and call recordings (see Section 8). When you submit a form on the Site, CallRail receives a copy of the information you enter (such as name, email, phone number, address and project details), together with marketing-source data, linked to our Google Analytics and HubSpot visitor identifiers. |
| Attributer | Attributer | Captures marketing source/referral data and attaches it to form submissions | Referral/UTM data |
| CleanTalk | CleanTalk | Spam and bot detection on forms | Behavioral signals used to distinguish humans from bots |
| Google reCAPTCHA | Spam and bot protection on our consultation and contact forms | IP address, device and browser data, how you interact with the page, and a Google security cookie. Google uses this information only to run and improve reCAPTCHA and for general security, and states that it does not use it for personalized advertising. Loads for all visitors on pages with our forms, including if you opt out or use Global Privacy Control, because it keeps our forms secure. | |
| Elfsight | Elfsight | Displays our Google reviews on the Site | IP address, browser type and the address of the page being viewed, which Elfsight keeps for 7 days for troubleshooting and security; a 15-second cookie that prevents double-counting a widget view. Loads for all visitors because it shows content you came to see. |
| Google Maps | Shows maps of our service area and our design studio on some pages | IP address, device and browser data and the address of the page being viewed; Google may set its own cookies. Loads for all visitors because it shows content you came to see. | |
| Vimeo | Vimeo | Video playback. Most of our Vimeo players use Vimeo’s privacy mode, which tells Vimeo not to track viewing sessions. This is a player setting, separate from your browser’s Do Not Track setting. | Limited playback data |
When our advertising and analytics technologies run, third-party advertising vendors, including Meta, Google and Microsoft, use cookies, pixels and device identifiers to collect information about your visits to our Site and to other websites over time. They use it to measure ads and to show ads, including ours, to you on other sites based on your past visits to our Site. They may also use this information for their own purposes, as described in their own privacy policies: Meta, Google and Microsoft. Section 6 explains how to opt out.
Your choices. How we handle these technologies depends on where you are browsing from, which we estimate from your IP address (this estimate is not always precise):
- California, Florida, Illinois, Massachusetts, Pennsylvania and Washington, and outside the United States: non-essential cookies and tracking technologies load only after you agree to them in our cookie banner, either by clicking “Accept All” or by switching on individual categories under “Customise”. You can also reject them with “Reject All”.
- The other U.S. states, including Colorado, Utah and Ohio: these technologies load when you visit, and our cookie notice tells you so. You can opt out at any time as described in Section 6.
Technologies needed for the Site to work, to keep it secure, to prevent spam, or to display content you came to see (such as our Google reviews) load for all visitors. You can review or change your choices at any time with the “Your Privacy Choices” button (a small cookie icon) at the bottom-left of our pages, and you can also control cookies through your browser settings. If you don’t see the button, contact us using the details in Section 11 to opt out. You can also limit cookies in your browser settings or use the industry opt-out tools listed in Section 6.
Global Privacy Control. In the U.S. states where our technologies load when you visit and our cookie notice is shown, if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale or sharing of your personal information and of targeted advertising for that browser. Our cookie tool detects the signal automatically and does not run our advertising and analytics technologies for that browser; you do not need to do anything else. In the places where we ask for consent first, these technologies do not run unless you agree to them, either by clicking “Accept All” or by switching on categories under “Customise” and saving your choices. Our cookie tool does not read the GPC signal there, so if you want them off, choose “Reject All” or simply don’t accept.
Do Not Track. Some browsers offer a “Do Not Track” setting. Because there is no common standard for how websites should respond to it, the Site does not respond to Do Not Track signals. We do honor Global Privacy Control as described above.
4. How we disclose information
We disclose information to:
- Service providers / processors who perform services for us (such as hosting, payment, scheduling, communication, customer-relationship-management, call-tracking, form-attribution, spam-prevention, review-display and video-hosting vendors), under contracts limiting their use of the information to providing services to us.
- Advertising and analytics partners (Meta, Google, Microsoft, including Microsoft Clarity, and HubSpot’s advertising pixel), which may also use the information for their own purposes and which may involve a “sale” or “sharing” of personal information under some state laws, including for cross-context behavioral advertising (see Section 6).
- Legal and safety recipients when required by law, to enforce our terms, or to protect rights, safety, and property.
- Business transfers in connection with a merger, acquisition, financing, or sale of assets.
We do not sell personal information for money. Certain advertising and analytics technologies (such as the Meta Pixel, Google advertising tags, Microsoft Advertising and Microsoft Clarity) may constitute a “sale” or “sharing” of personal information under some state laws, as described below.
5. How we protect information; retention
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure. We retain personal information for as long as needed to fulfill the purposes described in this Policy, to provide services, and to comply with legal obligations, then delete or de-identify it.
6. “Sale” and “Sharing” of personal information; your opt-out choices
Some state privacy laws define “sale” and “sharing” (for cross-context behavioral advertising) broadly enough to include the use of advertising cookies and pixels. To the extent our use of advertising/analytics technologies (such as the Meta Pixel, Google advertising tags, Microsoft Advertising and Microsoft Clarity) is considered a “sale” or “sharing,” you have the right to opt out.
To opt out of the sale or sharing of your personal information, or of targeted advertising:
- Use the “Your Privacy Choices” link in our cookie notice, or the “Your Privacy Choices” button (a small cookie icon) at the bottom-left of our pages;
- Turn on the Global Privacy Control (GPC) signal in a supported browser or extension (this works in the U.S. states described in Section 3 where you see our cookie notice; see Section 3);
- If you are shown our consent banner, click “Reject All” or turn off non-essential categories; or
- Contact us using the details in Section 11.
When you opt out online (with the button, the link or our banner, or with a GPC signal where we read it, as described in Section 3), our advertising and analytics technologies are blocked from running for that browser, starting with the next page you view. If you opt out by contacting us, we can’t change the settings in your browser, so please also use your browser settings. Because these choices are stored in a cookie in your browser, you will need to repeat them on each browser or device you use, if you clear your cookies, or after your saved choice expires. We set it to last 12 months, but some browsers delete it much sooner. Safari, for example, can delete it 7 days after you make your choice, even if you visit our Site again in that time, or sooner in some cases, such as when you arrived from an ad or social media link. If our cookie notice appears again, your earlier choice has expired and you will need to opt out again. Global Privacy Control keeps an opt-out in place without repeating it, in a browser or extension that supports it (see Section 3).
You can also limit interest-based advertising across websites through the Digital Advertising Alliance (optout.aboutads.info), the Network Advertising Initiative (thenai.org/how-to-opt-out), Google’s My Ad Center, Microsoft’s ad settings, and the ad preferences in your Facebook or Instagram account. These tools are run by third parties and may rely on cookies that some browsers block.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
7. Your privacy rights
Depending on your state of residence, you may have some or all of the following rights:
- Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
- Right to delete personal information we collected from you, subject to exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information and of targeted/cross-context behavioral advertising (see Section 6).
- Right to limit the use of sensitive personal information (where applicable).
- Right to non-discrimination for exercising your rights.
- Right to appeal a denial of a request (Colorado and certain other states).
California (CCPA/CPRA): California residents have the rights above. In the preceding 12 months, we have collected the categories of personal information described in Section 1 (identifiers, internet/network activity, geolocation, and commercial information) and disclosed them to the categories of recipients in Section 4.
Colorado (Colorado Privacy Act): Colorado residents have the rights above, including the right to opt out of targeted advertising, sale, and certain profiling, and the right to appeal.
Utah (Utah Consumer Privacy Act): Utah residents have the rights to access, delete, obtain a copy, and opt out of targeted advertising and the sale of personal data.
How to exercise your rights. Submit a request using the contact details in Section 11. We will verify your request (and may ask for information to confirm your identity). You may use an authorized agent to submit a request on your behalf. We will respond within the timeframe required by applicable law.
8. Telephone calls — monitoring and recording
When you call the phone numbers on the Site, we use call-tracking technology (CallRail) to attribute calls to marketing sources, and we record calls for quality, training, and record-keeping purposes. Calls are recorded by our service provider (CallRail) on our behalf. By continuing a call after the recording notification, you consent to the recording. If you do not wish to be recorded, please tell us at the beginning of the call or contact us by another method (email or the contact form on the Site).
9. Email and text communications
If you opt in to marketing communications, you can unsubscribe at any time using the link in our emails or by contacting us. Transactional messages (e.g., about a project or request) may still be sent.
10. Children’s privacy; third-party links
The Site is not directed to children under 13, and we do not knowingly collect their personal information. The Site may link to third-party sites we do not control; their privacy practices are governed by their own policies.
11. Contact us
To ask questions about this Policy or exercise your privacy rights:
- Email: in**@******ne.com
- Phone: (303) 656-9006
- Mail: ElkStone Inc., 11 Inverness Way South, Englewood, Colorado 80112
- Online (to opt out or change your cookie choices): the “Your Privacy Choices” button (a small cookie icon) at the bottom-left of our pages, or the “Your Privacy Choices” link in our cookie notice. To access, delete or correct your information, please use email, phone or mail.
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date reflects the most recent changes. Material changes will be posted on this page.