Privacy Policy | EcoYardSupply

Last updated: September 9, 2026

This policy describes the data flows evidenced on the current EcoYardSupply website. It does not state that every tool listed below runs on every page.

1. Who is responsible for the data

The website and B2B inquiry channels operate under the EcoYardSupply brand. The current sales contact is sales@ecoyardsupply.com.

IMPLEMENTATION TODO — owner/legal confirmation requiredInsert the controller's full registered legal name and postal address. Confirm the privacy-rights contact, and add representative or data-protection-officer details only if they actually apply.

2. Information handled through this website

B2B inquiries and direct email

The inquiry form asks for business-contact and project information. Depending on the localized form, this can include contact name, company, business email, telephone or WhatsApp number, country or market, business and inquiry type, product interest, estimated quantity, delivery destination or Incoterms, and a message.

The website form does not send this information to a website server. After browser validation, it creates a pre-filled email addressed to sales@ecoyardsupply.com and asks the visitor's email application to open it. The visitor must review and send that draft. Opening the draft does not prove that it was sent, delivered, or received. Once sent, the inquiry is handled through the visitor's and EcoYardSupply's email services.

WhatsApp contact

When a visitor chooses WhatsApp, the site opens a conversation through WhatsApp. The prepared message can include the current page and URL, device type, language, timezone, a generated visitor ID, visit count, and available campaign-attribution parameters. WhatsApp then processes the communication under its own terms and privacy information.

Website measurement and advertising attribution

Many public pages load Google Analytics 4 (measurement ID G-XT49RBQ1D8), Google Ads measurement (destination ID AW-18100874952), and Ahrefs Analytics. These tools are used for site-usage measurement, advertising measurement, and attribution. The site can also pass page, device, language, visitor-ID, and UTM context with a measured WhatsApp click.

Meta Pixel is deployed on specific Facebook campaign landing pages, not on every standard product or inquiry page. On those landing pages it records page views and configured contact or lead-intent actions. A lead-intent event that fires before an email draft opens is not confirmation that an inquiry was received.

IMPLEMENTATION TODO — owner/legal confirmation requiredConfirm the exact event parameters and vendor-side settings in the live Google, Ahrefs, and Meta accounts before final legal approval. This page does not infer data fields that cannot be verified from the website code.

Local storage, cookies, and attribution

The site's visitor-routing component (ESWR) stores an ESWR_VISITOR_PROFILE record in local storage. It contains a generated visitor ID, first and last visit, visit count, landing URL, referrer, and available UTM source, medium, campaign, term, and content values. ESWR also uses the ESWR_SALES and ESWR_PHONE cookies for sales-contact routing; the code sets these for 30 days.

After a visitor selects a language, the site can store ecoyard.preferredLang in local storage and an ecoyard_lang cookie for one year so later page choices can reflect that preference.

3. Why the information is used

To prepare and respond to a requested B2B quotation, distributor, sample, OEM/private-label, product, or logistics inquiry.
To route an email or WhatsApp contact to a sales contact and retain the related attribution context.
To measure visits, page and contact interactions, and advertising performance.
To preserve the visitor's selected language.

IMPLEMENTATION TODO — owner/legal confirmation requiredDocument and approve the legal basis for each purpose. No legal basis is asserted in this implementation.

4. Operational inquiries and optional marketing

Submitting or sending an RFQ or other B2B inquiry requests an operational response about that inquiry. It does not by itself subscribe the contact to promotional email marketing.

The current website inquiry form does not provide an optional marketing subscription. If promotional email, audience use, or an ongoing nurture program is introduced, it must be presented separately from the inquiry, with its own information and any required optional choice. EcoYardSupply must not treat an RFQ submission as automatic promotional-marketing consent.

5. Services and recipients involved

Depending on the page and contact method, information or events can pass through the visitor's email provider, EcoYardSupply's sales mailbox, Google Analytics, Google Ads, Ahrefs Analytics, Meta Pixel on the campaign landing pages where it is installed, and WhatsApp when the visitor chooses that channel.

See the providers' own privacy information: Google, Ahrefs, and Meta/WhatsApp.

IMPLEMENTATION TODO — owner/legal confirmation requiredConfirm the contracting entities, their roles, the people who can access the sales mailbox, any CRM or lead-integration provider, and any logistics disclosure before naming or claiming those arrangements.

6. Processing locations and international transfers

The contact and measurement tools listed above can involve service infrastructure or business operations outside the visitor's country. The current website evidence does not establish the relevant contracting entities, storage locations, or transfer safeguards.

IMPLEMENTATION TODO — owner/legal confirmation requiredIdentify the actual processing locations and document any transfer mechanism or safeguard relied on. No SCC, adequacy, contract, or other transfer mechanism is claimed here.

7. Retention

The website code establishes only the 30-day ESWR routing-cookie duration and the one-year language-preference cookie duration described above. It does not establish how long inquiry emails, analytics records, advertising records, or visitor-profile local storage are retained.

IMPLEMENTATION TODO — owner/legal confirmation requiredApprove and publish retention periods or determination criteria for inquiries, qualified opportunities/customers, analytics and attribution, local-storage records, and any consent or objection records.

8. Browser storage and choices

The inspected pages do not currently present a consent-management interface. Visitors can use their browser controls to inspect or clear cookies and local storage, but doing so can reset language or sales-routing preferences.

IMPLEMENTATION TODO — owner/legal confirmation requiredReview the site's analytics and advertising tag behavior for each target market and implement any required consent or preference controls before describing them as available.

9. Privacy rights and requests

Rights depend on the law that applies to the person and processing. Where the GDPR applies, these can include access, correction, deletion, restriction, portability, objection, withdrawal of consent where consent is used, and a complaint to a competent supervisory authority.

Until a dedicated privacy contact is confirmed, requests can be sent to sales@ecoyardsupply.com.

IMPLEMENTATION TODO — owner/legal confirmation requiredConfirm the rights-request procedure, responsible contact, identity-verification process, and competent supervisory-authority information.

10. Meta Instant Forms

No final EcoYardSupply Meta Instant Form schema or lead-retrieval process was evidenced when this policy was implemented. This policy therefore does not claim that a particular form, CRM transfer, field set, or follow-up workflow already exists.

PRE-LAUNCH TODO — campaign owner/legal confirmation requiredBefore any Meta Instant Form goes live, add the confirmed form fields, required/optional status, EcoYardSupply handoff and access process, purposes, legal bases, recipients, retention, transfers, and a German just-in-time notice linked to the German policy.

11. Security and policy updates

The website uses HTTPS. This does not by itself describe or guarantee the controls applied after information moves into email, WhatsApp, analytics, advertising, or other systems.

This policy may be updated when the site's verified data flows or owner-confirmed legal information changes. The update date at the top identifies this version.