Privacy Policy
Effective date: June 26, 2026
Last updated: June 26, 2026
This Privacy Policy explains how ElkStone Inc. (“ElkStone,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit elkstonebasements.com (the “Site”), contact us, or use our services. It also describes the privacy rights available to residents of California, Colorado, Utah, and other states with applicable privacy laws.
We provide basement-finishing and remodeling services in Colorado and Utah. We are based in Englewood, Colorado.
1. Information we collect
Information you provide directly. When you request a consultation, fill out a form, call us, chat with us, or otherwise contact us, we may collect your name, email address, phone number, street/property address, project details, and any other information you choose to provide.
Information collected automatically. When you visit the Site, we and our service providers automatically collect certain information through cookies and similar technologies, including: IP address, device and browser type, operating system, pages viewed, links clicked, referring/exit pages, approximate location (derived from IP), date/time stamps, and how you interact with pages (including mouse movements, scrolls, and clicks captured by analytics and session-replay tools described in Section 3).
Information from third parties. We may receive information about you from advertising and analytics partners, lead-generation sources, and referral sources, which we may combine with information we collect directly.
2. How we use information
We use information to: respond to inquiries and provide consultations and services; schedule and manage projects; communicate with you (including marketing emails you can opt out of); operate, maintain, and improve the Site; measure and analyze Site traffic and marketing performance; serve and measure advertising; detect and prevent fraud, spam, and abuse; and comply with legal obligations.
3. Cookies, tracking technologies, and session replay
We and our service providers use cookies, pixels, tags, SDKs, and similar technologies on the Site. The specific technologies currently in use include:
| Technology | Provider | Purpose | Data involved |
|---|---|---|---|
| Microsoft Clarity (session replay & heatmaps) | Microsoft | Records and reconstructs visitor sessions (clicks, scrolls, mouse movement, page interactions) to help us understand site usage | Interaction data, device/browser data; field inputs are masked where configured |
| Meta Pixel | Meta Platforms (Facebook/Instagram) | Measures advertising, builds audiences, and supports retargeting | Page views, events, identifiers shared with Meta |
| Google Analytics / Google Tag Manager | Website analytics and tag management | Usage and device data | |
| HubSpot | HubSpot, Inc. | Visitor analytics and contact/lead management (no live chat is used on the Site) | Contact details and interaction data |
| CallRail | CallRail | Phone-call attribution and call recording | Phone number, call metadata, and call recordings (see Section 8) |
| Attributer | Attributer | Captures marketing source/referral data and attaches it to form submissions | Referral/UTM data |
| CleanTalk | CleanTalk | Spam and bot detection on forms | Behavioral signals used to distinguish humans from bots |
| Elfsight | Elfsight | Third-party website widget (recently-viewed / reviews/social feed) | Widget interaction data |
| Vimeo | Vimeo | Video hosting/playback (configured with Do-Not-Track) | Limited playback data |
Your choices. When you first visit the Site, our cookie-consent banner lets you accept or decline non-essential cookies and tracking technologies, and we honor your choice. You can change your preferences at any time using the cookie-preferences link in the Site footer, and you can control cookies through your browser settings. We honor recognized opt-out preference signals, including the Global Privacy Control (GPC), where required by law.
4. How we disclose information
We disclose information to:
– Service providers / processors who perform services for us (the providers listed in Section 3, plus hosting, payment, scheduling, and communication vendors), under contracts limiting their use of the information to providing services to us.
– Advertising and analytics partners, which may involve “sharing” personal information for cross-context behavioral advertising (see Section 6).
– Legal and safety recipients when required by law, to enforce our terms, or to protect rights, safety, and property.
– Business transfers in connection with a merger, acquisition, financing, or sale of assets.
We do not sell personal information for money. Certain advertising technologies (such as the Meta Pixel and Google advertising tags) may constitute a “sale” or “sharing” of personal information under some state laws, as described below.
5. How we protect information; retention
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure. We retain personal information for as long as needed to fulfill the purposes described in this Policy, to provide services, and to comply with legal obligations, then delete or de-identify it.
6. “Sale” and “Sharing” of personal information; Do Not Sell or Share
Some state privacy laws define “sale” and “sharing” (for cross-context behavioral advertising) broadly enough to include the use of advertising cookies and pixels. To the extent our use of advertising/analytics technologies (such as the Meta Pixel and Google advertising tags) is considered a “sale” or “sharing,” you have the right to opt out.
To opt out of the sale or sharing of your personal information:
– Use the “Do Not Sell or Share My Personal Information” link in the Site footer, OR
– Set the Global Privacy Control (GPC) signal in a supported browser/extension — we treat a valid GPC signal as a request to opt out of sale/sharing for that browser, OR
– Decline non-essential cookies in our cookie-consent banner / preferences center, OR
– Contact us using the details in Section 11.
We do not knowingly sell or share the personal information of consumers under 16 years of age.
7. Your privacy rights
Depending on your state of residence, you may have some or all of the following rights:
- Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients.
- Right to delete personal information we collected from you, subject to exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of the sale or sharing of personal information and of targeted/cross-context behavioral advertising (see Section 6).
- Right to limit the use of sensitive personal information (where applicable).
- Right to non-discrimination for exercising your rights.
- Right to appeal a denial of a request (Colorado and certain other states).
California (CCPA/CPRA): California residents have the rights above. In the preceding 12 months, we have collected the categories of personal information described in Section 1 (identifiers, internet/network activity, geolocation, and commercial information) and disclosed them to the categories of recipients in Section 4.
Colorado (Colorado Privacy Act): Colorado residents have the rights above, including the right to opt out of targeted advertising, sale, and certain profiling, and the right to appeal.
Utah (Utah Consumer Privacy Act): Utah residents have the rights to access, delete, obtain a copy, and opt out of targeted advertising and the sale of personal data.
How to exercise your rights. Submit a request using the contact details in Section 11 or the request link in the Site footer. We will verify your request (and may ask for information to confirm your identity). You may use an authorized agent to submit a request on your behalf. We will respond within the timeframe required by applicable law.
8. Telephone calls — monitoring and recording
When you call the phone numbers on the Site, we use call-tracking technology (CallRail) to attribute calls to marketing sources, and we record calls for quality, training, and record-keeping purposes. Calls are recorded by our service provider (CallRail) on our behalf. By continuing a call after the recording notification, you consent to the recording. If you do not wish to be recorded, please tell us at the beginning of the call or contact us by another method (email or the contact form on the Site).
OPERATIONAL REQUIREMENT (not policy text): California is an all-party-consent state — recording a call without notifying the caller before recording begins is the violation. Enable CallRail’s automated recording notification / whisper message so every recorded call plays a disclosure (“This call may be monitored or recorded for quality and training purposes”) before recording starts. The policy language above is not sufficient on its own — the spoken/audible notice at call-start is what satisfies §632. See the operational note in
02_remediation_plan.md.
9. Email and text communications
If you opt in to marketing communications, you can unsubscribe at any time using the link in our emails or by contacting us. Transactional messages (e.g., about a project or request) may still be sent.
10. Children’s privacy; third-party links
The Site is not directed to children under 13, and we do not knowingly collect their personal information. The Site may link to third-party sites we do not control; their privacy practices are governed by their own policies.
11. Contact us
To ask questions about this Policy or exercise your privacy rights:
- Email: in**@******ne.com
- Phone: (303) 656-9006
- Mail: ElkStone Inc., 11 Inverness Way South, Englewood, Colorado 80112
- Online: “Do Not Sell or Share My Personal Information” and cookie-preferences links in the Site footer
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date reflects the most recent changes. Material changes will be posted on this page.