Privacy Policy
Effective Date: 2026-04-29 (pending counsel sign-off) | Last Updated: 2026-04-29
1. Scope
This Privacy Policy describes how Elkhorn Heating, Air Conditioning, Plumbing & Electrical (“we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit myelkhorn.com or interact with us by phone, email, or web form. This Privacy Policy applies to myelkhorn.com and the related touchpoints described above (phone calls, emails, and web-form submissions); if you visit a website operated by a different company, that company’s privacy policy applies.
By using myelkhorn.com, you acknowledge this Policy. Your use of optional analytics, advertising, and call/form-tracking technologies is governed by your consent banner choices, your browser-level privacy signals (such as Global Privacy Control), the pre-call audio disclosure on recorded phone calls, and applicable law.
2. Personal Information We Collect
Information you give us directly:
- Name, postal address, email, phone number
- Service-inquiry details (e.g., heating, ventilation, air conditioning, plumbing, electrical, generator description, preferred appointment window)
- Communications content (emails, web-form submissions, chat messages, recorded phone calls)
Information collected automatically when you visit myelkhorn.com:
- Device and browser information (IP address, browser type, operating system, device type, screen size, referring URL)
- Interaction data (pages viewed, time on page, click paths, scroll depth, button clicks)
- Approximate geolocation derived from your IP address (city/metro level only — no precise GPS)
Information collected from other sources:
- Lead-attribution data from advertising platforms when you click an ad
- Public-record information for service verification where applicable
3. How We Use Your Information
- To respond to your inquiries and schedule and deliver the services you request
- To communicate with you about appointments, follow-ups, warranty, and customer satisfaction
- To measure website performance and improve the user experience
- To build audiences for, and measure the performance of, advertising we run on third-party platforms (such as Google Ads). myelkhorn.com itself does not display third-party advertising; we use tracking technologies to attribute and optimize the ads we run elsewhere
- To prevent fraud, secure our systems, and enforce our Terms
- To comply with legal obligations and respond to lawful requests
4. How We Share Your Information
We do not exchange your personal information for money, and we do not knowingly engage in conduct that constitutes a “sale” of your personal information as that term is defined under applicable state privacy law. Some of the disclosures described below — particularly to analytics and advertising vendors — may, depending on how a particular state defines “sale,” “sharing,” or “targeted advertising,” fall within those statutory categories; if so, your opt-out under § 8 applies. We share personal information for the purposes described above, including with:
- Service providers that operate on our behalf under written contracts (CRM, scheduling platform, hosting, customer service)
- Analytics and advertising vendors (listed in § 5 below) for measurement, attribution, and where you have not opted out, advertising optimization
- Professional advisors (attorneys, accountants) under confidentiality
- Legal authorities in response to lawful requests, to protect our rights, or to prevent fraud
- In a business transfer (merger, acquisition, asset sale), subject to ongoing confidentiality
Some of the disclosures above may constitute “sharing for cross-context behavioral advertising” under California law and analogous “targeted advertising” categories under Colorado, Connecticut, Oregon, and other state privacy laws; you have the right to opt out (see § 8).
5. Cookies, Targeting & Analytics
myelkhorn.com does not display third-party advertising on the website itself. The site only contains information about Elkhorn Heating, Air Conditioning, Plumbing & Electrical and our services. We use the cookies and tracking technologies described below to measure site performance, attribute leads to the marketing channels that brought you here, and build audiences for advertising we run on third-party platforms (such as Google Ads). The advertising itself is delivered on those third-party platforms, not on myelkhorn.com.
When you visit myelkhorn.com, we and our service providers may use cookies and similar technologies (pixels, tags, local storage, scripts) to recognize your browser, remember your choices, measure how visitors use the site, and inform the audiences and creative for advertising we run on third-party platforms.
Vendors currently in use on myelkhorn.com (this list is updated when we add or remove a vendor):
| Vendor | Purpose | How loaded | Status under CCPA / state privacy laws |
|---|---|---|---|
| Google Tag Manager | Tag orchestration | Direct | Service Provider |
| IconNode | Tag delivery infrastructure (Hearst) used in our advertising stack | Direct (process.iconnode.com) | Service Provider |
| Google Ads (AW-1070154327) — conversion tracking | Ad measurement and conversion attribution for our Google Ads campaigns | Via Google Tag Manager | Third Party (advertising) |
| Google Analytics 4 (G-H8S1ZJLW3Z) | First-party site analytics — page views, click-to-call events, form-submission events, and custom URL-snippet events | Via Google Tag Manager | Service Provider |
| Microsoft Clarity (orxhrsg9kr) | User-experience analytics — click and scroll heatmaps. Session-recording playback is disabled at the project level; strict masking is enabled; IP-address collection is disabled; pages collecting form input and pages with personal-data inputs are excluded from collection | Via Google Tag Manager | Service Provider |
| Meta Pixel (910775013999489) | Audience-building and conversion measurement for our Facebook and Instagram advertising | Via Google Tag Manager | Third Party (advertising) |
| The Trade Desk (k7lg9q1) | Programmatic-advertising audience-building, conversion-event tracking (Heating Scheduler button click), and reach measurement for our display and connected-TV campaigns | Via Google Tag Manager | Third Party (advertising) |
| Viant / Adelphic DSP — Mackdata (Universal pixel 117247 + Form/Phone/Web pixel 117262) | Programmatic-advertising audience-building, lead-event tracking (form submissions and phone-call clicks), and reach measurement | Via Google Tag Manager | Third Party (advertising) |
| Resonate Analytics (101194848) | Audience research and consumer-segment intelligence to inform advertising we run on third-party platforms | Via Google Tag Manager | Third Party (advertising) |
| TikTok Pixel (CSBFPB3C77U0JBJOEQE0) | Audience-building and conversion measurement for our TikTok advertising | Via Google Tag Manager | Third Party (advertising) |
| TVSquared (TV-7236908127-1) | Cross-screen attribution measurement for our connected-TV advertising | Via Google Tag Manager | Third Party (advertising) |
| Jelly MDHV (Hearst Marketing) | Lead-attribution and audience-building for advertising we run on Hearst-platform inventory | Via Google Tag Manager | Third Party (advertising) |
| WhatConverts | Phone-call dynamic-number-insertion (DNI) and form-submission tracking (see § 6) | Direct (not via Google Tag Manager) | Service Provider |
| Ahrefs Web Analytics | Privacy-friendly visitor analytics for search-engine-optimization research | Direct (not via Google Tag Manager) | Service Provider |
| Cookiebot | Consent management platform (cookie banner, consent log, daily cookie scanner) | Direct | Service Provider |
About the “Status” column. Vendors marked Service Provider operate on Elkhorn Heating, Air Conditioning, Plumbing & Electrical’s behalf under written contracts (data-processing agreements, service-provider addenda, or equivalent terms) that restrict the vendor from using your personal information for the vendor’s own purposes. Vendors marked Third Party (advertising) receive personal information for purposes that may include their own cross-context behavioral advertising graphs; disclosures to those vendors may constitute “sharing for cross-context behavioral advertising” under California law, “sale” or “targeted advertising” under Colorado law, and analogous categories under other state laws, and your opt-out under § 8 applies.
A small number of technologies above are loaded directly into myelkhorn.com rather than through Google Tag Manager. Our consent platform evaluates your category preferences and any Global Privacy Control (GPC) signal you send before non-Necessary scripts execute. Scripts in categories you have not authorized — and scripts in sale, sharing, or targeted-advertising categories when a GPC signal is detected — do not load. Your control over those technologies comes through (a) the Cookie Preferences widget; (b) Global Privacy Control browser signals; and (c) the opt-out methods described in § 8.
A live, automatically updated list of every cookie our scanner detects — with purpose, provider, and expiry — is published at our Cookie Policy page.
Managing your cookie preferences. A “Cookie Preferences” widget appears in the corner of every page on myelkhorn.com. Click it at any time to view or change which cookie categories are active. We honor browser-level Global Privacy Control (GPC) signals as opt-out requests for sale, sharing, and targeted advertising. We do not respond to legacy “Do Not Track” signals.
6. Phone-Call and Form-Tracking; User-Experience Analytics
Call tracking (WhatConverts) and call recording. Some phone numbers displayed on myelkhorn.com are dynamic-number-insertion (“DNI”) tracking numbers operated on our behalf by WhatConverts LLC. WhatConverts swaps the displayed phone number on a per-visitor basis so we can attribute the call to the marketing source, search keyword, and landing page that brought you to us. WhatConverts then routes the call to our customer-service workflow.
When the call is routed, you may hear a brief audible signal (a short beep) as the call-handling workflow engages, followed by a pre-call audio disclosure: “Thank you for calling Elkhorn Heating, Air Conditioning, Plumbing & Electrical. This call may be monitored or recorded for quality assurance, training, attribution, and lead-management purposes.” Call recording does not begin until after this pre-call disclosure has completed playing. If you remain on the call after the disclosure has completed, you consent to recording for purposes of California Penal Code § 632.7 (if you are a California resident) and analogous all-party-consent statutes in other states. To decline, end the call before the disclosure completes — no audio of the call is retained if you disconnect during or before the disclosure. WhatConverts receives only call-attribution metadata (caller’s number, call duration, marketing source, and similar lead-tracking fields), not the audio content.
Form tracking (WhatConverts — post-submission only). When you submit a form on myelkhorn.com — i.e., when you click the submit button — WhatConverts records the data you entered in the form together with attribution data such as the source URL or campaign that brought you to us and the submission timestamp. WhatConverts does not capture what you type while you are still filling out the form, and does not record keystrokes, partial entries, or fields you abandon before submitting. Form-content capture begins only after you affirmatively submit.
Bot prevention. To prevent automated and AI-driven spam submissions, our forms use a bot-prevention service that assesses device and browser signals during your submission; it does not receive the content of your form.
7. Children and Minors
myelkhorn.com is directed to adult consumers seeking our services. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share personal information of consumers under 16. If you believe we have inadvertently collected information about a child under 13, contact privacy@myelkhorn.com and we will delete it.
8. Your Privacy Choices
Four ways to opt out of sale, sharing, or targeted advertising:
- Submit our Privacy Request Form — visible from every footer on myelkhorn.com under “Do Not Sell or Share My Personal Information.”
- Send a Global Privacy Control (GPC) signal from your browser. We automatically detect and honor GPC for the browser/device sending the signal — the consent banner is suppressed and your opt-out is auto-applied. No further action is required from you.
- Email privacy@myelkhorn.com with “Opt Out” in the subject line.
- Call our privacy line at +1 720-615-0098.
Cookie preferences: Click the floating “Cookie Preferences” widget on any page of myelkhorn.com to change your category-level cookie consents at any time.
Response timing: We will process opt-out, sensitive-PI limit, and GPC requests as soon as feasibly possible and no later than 15 business days. Right to know, delete, correct, or portability requests are processed within 45 calendar days, with one 45-day extension permitted by law if needed for complex requests.
9. Security
We use commercially reasonable physical, electronic, and managerial safeguards to protect personal information from unauthorized access, use, or disclosure. No system is perfectly secure. If we become aware of a security incident affecting your personal information, we will notify you as required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The Last Updated date at the top reflects the most recent revision. Material changes will be communicated through a notice on myelkhorn.com.
11. Contact Us
For privacy questions or to exercise your rights:
- Email: privacy@myelkhorn.com
- Phone: +1 720-615-0098
- Online form: https://myelkhorn.com/optout-form/
- Mail: Elkhorn Technical Resources, Inc., dba Elkhorn Heating, Air Conditioning, Plumbing & Electrical, 3869 Norwood Dr #9, Littleton, CO 80125
12. Additional Information for Colorado Residents (Colorado Privacy Act / CPA)
If you are a Colorado resident and Elkhorn Heating, Air Conditioning, Plumbing & Electrical is a “controller” subject to the Colorado Privacy Act (“CPA”), this section applies.
12.1 Categories of Personal Data We Process
| Category | Examples | Sources | Disclosed to (categories) | Sold or Targeted Ads? |
|---|---|---|---|---|
| Identifiers | Name, address, email, phone, IP address, cookie IDs | You, your device, advertising/analytics vendors | Service providers, analytics/advertising vendors, professional advisors | Online identifiers may be shared for targeted advertising; not sold for money |
| Customer records / commercial information | Service requests, scheduled-appointment details | You, scheduling systems | CRM vendors, customer-service systems | Not sold or shared |
| Internet/electronic network activity | Pages viewed, click events, scroll depth, device metadata | Your device, cookies and similar technologies | Vendors listed in § 5 | May be shared for targeted advertising; not sold for money |
| Approximate geolocation | City/metro location inferred from IP | Your device, analytics vendors | Hosting/security vendors, analytics vendors | Not sold for money; may be shared for targeted advertising |
| Audio, electronic, visual information | Call audio recorded after the pre-call disclosure described in § 6 (with consent); email content; form-submission content | You | CRM systems, customer-service vendors, professional advisors | Not sold or shared |
| Inferences | Lead attribution, audience or campaign segments | Site interactions, advertising vendors | Advertising and analytics vendors | May be shared for targeted advertising; not sold for money |
We do not intentionally process sensitive personal data through myelkhorn.com, including precise geolocation, government ID numbers, biometric identifiers, health information, racial or ethnic origin, religious or philosophical beliefs, union membership, sex life, sexual orientation, financial-account or payment-card data, citizenship/immigration status, or genetic data. Payment for our services is processed off the myelkhorn.com website — in person at the time of service, by phone with our service team, or through invoicing systems we use to bill for services delivered.
12.1.1 Retention Periods
We retain personal data for the period necessary to fulfill the purposes for which it was collected, plus any additional period required by law. Default retention: thirty-six (36) months from the date of the last interaction. The retention periods below are working defaults pending counsel review:
Information collected through myelkhorn.com:
| Category | Default retention period | Reason |
|---|---|---|
| Identifiers | 36 months from last interaction | Customer-relationship continuity, dispute resolution |
| Customer records / commercial information | 36 months from completion of last service, or longer where required for tax/recordkeeping/warranty | Service delivery, warranty, recordkeeping |
| Internet/electronic network activity | 14 months (analytics default) up to 36 months for first-party records | Measurement, attribution, fraud-prevention |
| Approximate geolocation | 14 months | Same purposes as Internet/electronic network activity |
| Audio, electronic, visual information | 36 months from collection unless dispute or litigation hold extends the period | Service quality, training, dispute-resolution |
| Inferences | 36 months or duration of advertising-audience membership, whichever is shorter | Advertising-platform retention controls |
Operational records (website-related):
| Category | Default retention period | Reason |
|---|---|---|
| Consent records (Cookiebot consent log entries) | 12 months | Audit trail of consent choices |
| Privacy-rights request records | 24 months from final response | Compliance with state privacy law (CCPA Regulations 11 CCR § 7101 specifies a 24-month minimum) |
| Inbound call recordings | 36 months from the date of the call | Service quality, training, dispute-resolution |
| Advertising-audience memberships | 90 to 180 days | Platform-determined |
| Email communications | 36 months from last message in the thread | Customer-relationship continuity |
When information is no longer required for the purposes for which it was collected and no legal-retention requirement applies, we delete or de-identify it.
12.2 Your Colorado Rights
- Right to confirm processing and access the personal data we process about you.
- Right to delete personal data, subject to statutory exceptions.
- Right to correct inaccurate personal data.
- Right to a portable copy of your personal data.
- Right to opt out of (a) sale of your personal data, (b) targeted advertising, and (c) profiling that produces legal or similarly significant effects.
- Right to appeal a denial of a privacy-rights request. We will respond to an appeal within 45 days, with a 60-day extension where reasonably necessary.
- Right to non-discrimination. We will not deny services or charge different prices because you exercised your rights.
12.3 How to Exercise Colorado Rights
Submit requests by:
- Privacy Request Form: https://myelkhorn.com/optout-form/
- Email: privacy@myelkhorn.com
- Phone: +1 720-615-0098
We will respond to verifiable consumer requests within 45 days, with one 45-day extension permitted by law.
12.4 Universal Opt-Out Mechanism (UOOM)
Colorado recognizes Universal Opt-Out Mechanisms such as Global Privacy Control (GPC). When we detect a recognized UOOM signal from your browser, we treat it as an opt-out from sale and targeted advertising and apply the opt-out automatically.
12.5 California Visitors
If you are a California resident visiting myelkhorn.com, the following rights and disclosures apply to you under the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and other California-specific privacy law. The Colorado-specific rights described in §§ 12.2–12.3 above apply only to Colorado residents under the Colorado Privacy Act.
Your California rights:
- Right to know / access the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting or sharing it, and the categories of third parties to whom we disclosed it.
- Right to delete personal information we have collected from you, subject to statutory exceptions including completion of the transaction, fraud prevention, security, legal compliance, and internal uses reasonably aligned with your expectations.
- Right to correct inaccurate personal information.
- Right to a portable copy of personal information you have provided to us, in a readily usable format that allows transmission to another entity without hindrance.
- Right to opt out of the sale or sharing of personal information, including for cross-context behavioral advertising. Use the methods in § 8 above. We honor Global Privacy Control as a sale-and-sharing opt-out signal.
- Right to limit the use and disclosure of sensitive personal information to certain authorized business purposes specified by California law. We do not intentionally collect sensitive personal information through this website (see § 12.1 closing paragraph).
- Right to non-discrimination for exercising any of the rights above. We will not deny services or charge different prices because you exercised your California privacy rights.
California “Shine the Light” request (Civil Code § 1798.83): If you are a California resident, you may request, once per calendar year, certain information about our disclosures during the prior calendar year of personal information to third parties for those third parties’ own direct-marketing purposes. Submit a Shine the Light request by emailing privacy@myelkhorn.com with “Shine the Light Request” in the subject line.
Authorized agent: California residents may designate an authorized agent to submit a privacy-rights request on their behalf. Use the methods in § 8 / § 12.3 above and provide reasonable verification of the agent’s authority and the consumer’s identity.
California response timing: Same as § 8 — opt-out and limit-use requests within 15 business days; right-to-know / delete / correct / portability requests within 45 calendar days, with one 45-day extension permitted by law if reasonably necessary for complex requests.
For the California Invasion of Privacy Act (CIPA) Notice that applies to California visitors, see § 12.6 below.
12.6 California Invasion of Privacy Act (CIPA) Notice
Nature and scope of this notice. This section is a transparency disclosure and a conditional consent-capture provision. It is not, and is not intended to be, an admission, concession, stipulation, or waiver of any kind that any technology described in this Privacy Policy constitutes a wiretap, an interception of communications, eavesdropping, a pen register, a trap-and-trace device, or any other instrumentality regulated by the California Invasion of Privacy Act (“CIPA”), California Penal Code §§ 630–638.55, or any analogous federal or state statute. Elkhorn Heating, Air Conditioning, Plumbing & Electrical does not concede that the analytics, advertising, attribution, user-experience, security, bot-prevention, and call-routing technologies described in §§ 5–6 of this Policy fall within the scope of CIPA when used in the manner described in this Policy.
Ordinary business and commercial purposes. The technologies described in §§ 5–6 are deployed only for the ordinary business and commercial operations of Elkhorn Heating, Air Conditioning, Plumbing & Electrical, including: measuring how visitors use myelkhorn.com so we can improve it; attributing leads to the marketing source, search keyword, and landing page that brought a visitor to us; building audiences for advertising we run on third-party platforms; preventing automated and AI-driven spam and fraud directed at our forms; routing inbound phone calls so we can answer them and serve you; and recording calls received in our customer-service workflow for service quality, training, attribution, and lead-management. Each of these is a routine commercial purpose of an HVAC, plumbing, and electrical services business communicating with its own prospective and existing customers.
Consent in the alternative. Solely to the extent that any court or regulator were to determine, contrary to Elkhorn Heating, Air Conditioning, Plumbing & Electrical’s position, that any of the technologies described in §§ 5–6 falls within California Penal Code §§ 631(a), 632, 632.7, or 638.51, then, by continuing to use myelkhorn.com after having had the opportunity to read this Policy, you consent — for the disclosed ordinary business and commercial purposes only, and not for any other purpose — to the use of those technologies for the duration of your visit and for the retention period reflected in our records. This conditional consent is in addition to, not in lieu of, any other consent you provide. You may withdraw consent at any time by ending your visit, sending a Global Privacy Control signal, using the methods described in § 8, or, for telephone calls, declining to remain on the call after the pre-call disclosure.
12.7 Notice at Collection
This section is the CCPA / Colorado Privacy Act Notice at Collection for personal information collected through myelkhorn.com.
What we collect at the point of collection:
- Identifiers — your name, postal address, email address, phone number, IP address, and cookie or device identifiers
- Customer records / commercial information — the contents of your service inquiry
- Internet / electronic network activity — the URL of the form page, the marketing source / campaign, the timestamp of submission, and basic device / browser metadata
- Audio, electronic, visual content — the contents of your form submission; for inbound calls, the audio of the call after the pre-call disclosure has completed
- Inferences — lead attribution data and the marketing audience or campaign segment associated with your visit
- We do not collect sensitive personal information through myelkhorn.com. Please do not include health or medical information, payment-card or financial-account numbers, government identifiers, or other sensitive categories in your submissions.
Why we collect it. To respond to your inquiry, schedule and deliver the Services you request, communicate about appointments and service, measure how visitors use myelkhorn.com, attribute leads, build audiences for advertising we run on third-party platforms, prevent fraud, and meet legal obligations.
Who we share it with. Service Providers and Third Parties as described in §§ 4 and 5 of this Policy.
How long we keep it. Per the retention schedule in § 12.1.1.
Short version embedded adjacent to each form. Adjacent to the submit button on every form on myelkhorn.com:
We collect the personal information you enter on this form (your name, contact details, service-inquiry content, and basic device data) for the purpose of responding to your inquiry and delivering the service you request, and for the related purposes described in our Privacy Policy. Some disclosures may constitute “sale,” “sharing,” or “targeted advertising” under your state’s privacy law. To opt out, click Do Not Sell or Share My Personal Information. Please do not include health, medical, payment-card, or government-ID information in your submission.
13. Other U.S. State Privacy Rights
Residents of other U.S. states with comprehensive privacy laws — including Connecticut (CTDPA), Delaware (DPDPA), Indiana (ICDPA), Iowa (Iowa CDPA), Kentucky (KCDPA), Maryland (MODPA), Minnesota (MCDPA), Montana (MTCDPA), Nebraska (NDPA), New Hampshire (NHDPA), New Jersey (NJDPA), Oregon (OCPA), Rhode Island (RIDTPPA), Tennessee (TIPA), Texas (TDPSA), Utah (UCPA), and Virginia (VCDPA) — may have rights to confirm processing, access, correct, delete, obtain a portable copy, opt out of sale, opt out of targeted advertising, opt out of profiling, appeal a denial, and avoid discrimination. Rights vary by state and apply only when Elkhorn Heating, Air Conditioning, Plumbing & Electrical meets the applicable law’s coverage thresholds.
California is addressed substantively in § 12.5 above.
To exercise rights, use the methods in §§ 8 and 11. Where your state recognizes a Universal Opt-Out Mechanism (such as GPC), we honor it for sale, sharing, and targeted advertising opt-outs.
14. EEA, UK, and Switzerland Visitors (GDPR / UK GDPR / Swiss FADP)
Elkhorn Heating, Air Conditioning, Plumbing & Electrical is based in Colorado and primarily targets Colorado customers. We do not intentionally market to or monitor visitors in the EEA, UK, or Switzerland. If you are visiting from one of those jurisdictions, you may have rights under the EU GDPR, UK GDPR, or Swiss FADP including the rights of access, rectification, erasure, restriction, portability, and objection.
Geo-targeted opt-in for EEA, UK, and Swiss visitors. When our consent platform detects an IP address located in the EEA, UK, or Switzerland, the consent banner is presented in opt-in mode: optional analytics, advertising, and similar non-essential tracking technologies do not load until you have made an affirmative selection.
If GDPR/UK GDPR/Swiss FADP applies to our processing of your personal information, our lawful bases are: (a) your affirmative consent captured through the EU/UK/Swiss opt-in consent banner described above; (b) contractual necessity; (c) legitimate interests; and (d) legal obligations.
To exercise GDPR/UK GDPR/Swiss FADP rights, contact privacy@myelkhorn.com. We respond within one month, subject to lawful extensions.