Privacy Policy

1. Overview

Green Drain, Inc. ("Green Drain," "we," "us") respects your privacy. This policy explains what personal information we collect through greendrains.com, why we collect it, and how we protect it.

This policy applies to all visitors, form submitters, newsletter subscribers, and customers who interact with our website. By using greendrains.com, you agree to the practices described here.

2. Information we collect

Information you provide directly

When you fill out a form or use the chat assistant on our website, you choose to share information with us. This includes:

• Chat assistant: the questions you type and the answers you receive, the page you asked from, and the time (see Chat assistant below)
• Contact form: name, email, phone (optional), company (optional), inquiry type, and your message
• Quote request form: name, email, phone, company, role, facility type, facility name, location, drain sizes needed, estimated quantity, timeline, and project details
• Newsletter signup: email address
• Product orders: name, shipping address, billing address, email, phone, and payment information (processed by Shopify, not stored on our servers)

Information collected automatically

When you visit our website, we may automatically collect:

• Usage data: pages visited, time spent on pages, referring URLs, and click patterns
• Device data: browser type, operating system, screen resolution, and device type
• Network data: IP address and approximate geographic location (country/region level)

This data is collected through analytics tools and is used in aggregate to improve our website. We do not use this data to personally identify you.

Chat assistant

The "Ask" button opens Ask Green Drain, an AI assistant that answers questions from the content of this website. When you use it:

• What we save: each question you type, the answer, the page you were on, the time, your browser type, and a scrambled code made from your IP address. We do not store the IP address itself, and the chat does not ask for your name or email.
• Why: to answer you, to keep the conversation going as you move between pages, to stop misuse (repeated or abusive messages can pause the chat for a visitor for a while), and to learn which questions our website does not answer well so we can improve it.
• Who sees it: Green Drain team members review conversations to improve our answers and our website. We do not use chats for advertising and never sell them.
• Who processes it: your question and the website content needed to answer it are sent to Anthropic, which provides the AI model. Under Anthropic's commercial terms, it does not use these conversations to train its models and deletes them from its systems within 30 days, except where longer retention is required by law or to enforce its usage policies. Cloudflare Turnstile checks that a real browser, not an automated script, is opening the chat.
• In your browser: the chat keeps a conversation code in your browser's session storage (gd-assistant-session), which is cleared when you close the tab. The chat itself sets no cookies.
• How long we keep it: conversations are deleted 24 months after the last message, or sooner if you ask.

Please do not type sensitive personal information, such as health, payment or account details, into the chat. To have a conversation deleted, email [email protected] with the approximate date and time and what you asked.

3. How we use your information

We use the information we collect to:

• Respond to your inquiries: answer questions, provide quotes, and connect you with the right team member or distributor
• Process orders: fulfill product purchases, manage shipping, and handle returns
• Send communications: order confirmations, quote follow-ups, and (if you opted in) newsletter updates about products and industry research
• Answer chat questions: reply to questions in the chat assistant, and review them to improve our answers and our website
• Improve our website: analyze usage patterns to make the site faster, more useful, and easier to navigate
• Comply with legal obligations: respond to lawful requests from authorities and enforce our terms

We do not use your information for purposes unrelated to those listed above.

4. What we do not do

To be clear:

• We never sell your personal information. Not to advertisers, data brokers, or anyone else.
• We never rent your email list. Your email is used only for the purposes you gave it to us for.
• We do not run targeted advertising based on your personal browsing behavior across other websites.
• We do not sell or share behavioral data collected through analytics or session recording tools with third parties for their own marketing purposes.

5. Cookies and tracking technologies

Our website uses cookies and similar technologies. We organize them into three categories:

Strictly necessary

These cookies are required for the website to function and cannot be switched off. They include security tokens, shopping cart state, and regional preferences.

Performance and analytics

We use Google Analytics 4 (GA4) and Microsoft Clarity to understand how visitors use our site. These tools collect usage data such as pages visited, time on page, scroll depth, click patterns, and referring URLs. GA4 sets cookies (such as _ga and _ga_*) to distinguish unique visitors. Clarity sets cookies (such as _clck and _clsk) and records anonymized session replays, including mouse movement, clicks, and scrolling behavior.

Session replay data does not capture text you type into form fields. It is used solely to identify usability issues and improve page layout.

HubSpot's tracking code sets cookies (such as hubspotutk and __hstc) that recognize a returning browser. If you later contact us, the pages you viewed are linked to your enquiry in our customer relationship system (see Section 6).

If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, or you are browsing our European or GD-MD pages, these tools do not load until you accept them. Everywhere else they load by default and you can switch them off at any time (see Your cookie choices below).

Cookie-free statistics

We also use Cloudflare Web Analytics to count visits. It sets no cookies, stores nothing on your device and does not identify you or follow you across sites: it records the page viewed, the referring site, the country and the type of browser and device. Because it involves no tracking, it runs for every visitor.

Targeting and advertising

We do not currently run any advertising cookies or retargeting pixels. If we add advertising tools in the future, they will require your explicit consent before loading, and this policy will be updated to reflect that change.

Your cookie choices

In the European Union, the European Economic Area, the United Kingdom and Switzerland, and on our European and GD-MD pages, a banner asks for your choice on your first visit, with Accept all, Reject all and Settings. Nothing non-essential runs until you choose, and analytics stay off if you close the banner without choosing. Elsewhere, a "Privacy" button in the bottom-left corner lets you switch analytics off. You can change your choice at any time with the "Cookie Settings" link at the bottom of every page. You can also disable cookies in your browser settings, though some website features may not function properly without essential cookies.

Some pages show videos hosted on YouTube (Google), using YouTube's privacy-enhanced mode. In the European Union, the European Economic Area, the United Kingdom and Switzerland, a video loads only when you click Play. Fonts on this site are served from our own servers.

Our site honors the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we automatically treat it as an opt-out of non-essential cookies and do not load analytics or tracking tools.

Cookie reference

First-party localStorage keys (gd-region, gd-country, gd-consent, and the cart keys gd-cart-id and gd-cart-id-au) are used for regional preferences, your cart and storing your cookie consent choice. Session storage keeps gd-geo, which records only whether the European consent rules apply to your visit, and is cleared when you close the browser. These are strictly necessary and do not transmit data to third parties. The chat assistant keeps its conversation code in session storage (gd-assistant-session), cleared when you close the tab.

gd-attribution (localStorage) records how you first arrived (the referring site, the landing page and any campaign tags in the link) so that an order placed later can show which channel it came from. In the European Union, the European Economic Area, the United Kingdom and Switzerland it is stored only after you accept analytics, and it is deleted if you reject them. For US visitors, gd-subscribed, gd-flyout-dismissed and gd-offer-cart-shown remember whether the subscriber offer has been shown or dismissed.

6. Third-party services

We use a limited number of third-party services to operate our website and business. Each has access only to the information necessary for their function:

• Anthropic: the AI model behind the chat assistant. Anthropic receives the questions you type in the chat and the website content needed to answer them, and processes them on our behalf. Under its commercial terms it does not use them to train its models and deletes them within 30 days. See Anthropic's privacy policy.
• Cloudflare: website hosting, CDN, security (including Turnstile bot checks for the chat assistant), the chat assistant's servers and conversation log, and analytics orchestration (Zaraz). Cloudflare processes server-level data (IP addresses, request data) under their privacy policy.
• Google Analytics 4 (GA4): website traffic measurement. Collects pages visited, session duration, referral source, device type, and approximate location (country/region). Data is processed by Google under their privacy policy. IP addresses are anonymized. GA4 loads only after you consent to performance cookies (or, in the US, unless you opt out).
• Microsoft Clarity: session recording and heatmap analytics. Records anonymized replays of how visitors interact with pages (mouse movement, clicks, scrolling) to help us identify usability issues. Text entered in form fields is not captured. Data is processed by Microsoft under their privacy statement. Clarity loads only after you consent to performance cookies.
• Shopify: order processing and payment handling. Payment information is processed directly by Shopify and is not stored on our servers. See Shopify's privacy policy.
• Resend: transactional email delivery for form submissions (contact, quote requests, distributor applications). Resend processes your name and email address solely to deliver the message. See Resend's privacy policy.
• Microsoft 365: our business email. Form submissions and emails you send us are received and stored in our Microsoft 365 mailboxes. See Microsoft's privacy statement.
• HubSpot: our customer relationship system. It holds contact and company details of business customers and of businesses that send us an enquiry through our website forms or leave their details at trade shows, so our team can follow up. With your consent to performance cookies, HubSpot's tracking code also records the pages you view on our site; if you later contact us or click a link in one of our emails, that page history is linked to your contact record so we can answer you better. See HubSpot's privacy policy.
• Judge.me: product review requests. After an online order, Judge.me may email you to ask for a review of the product you bought. See Judge.me's privacy policy.
• YouTube (Google): hosts some of the videos shown on our pages, in privacy-enhanced mode. See Google's privacy policy.

We do not share your personal information with any third parties beyond those listed above.

7. Data retention

We retain your personal information only as long as necessary for the purposes described in this policy:

• Contact and quote inquiries: retained for up to 3 years to support ongoing customer relationships and follow-up
• Order records: retained as required by tax and accounting regulations (typically 7 years)
• Newsletter subscriptions: retained until you unsubscribe
• Analytics data: aggregated data is retained indefinitely. Individual-level data is deleted or anonymized within 26 months.
• Chat assistant conversations: deleted 24 months after the last message, or sooner on request. Records used to stop misuse of the chat are deleted within 30 days.

8. Data security

We take reasonable measures to protect your information:

• All data transmitted to and from our website is encrypted via HTTPS/TLS
• Our website is hosted on Cloudflare's infrastructure with enterprise-grade DDoS protection and Web Application Firewall
• Payment information is processed by Shopify's PCI DSS Level 1 compliant systems and is never stored on our servers
• Access to customer data is limited to authorized team members who need it to respond to your inquiry or fulfill your order

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request that we update or correct inaccurate information
• Deletion: request that we delete your personal information, subject to legal retention requirements
• Opt-out: unsubscribe from marketing emails at any time using the link in any email we send
• Data portability: request your data in a commonly used, machine-readable format

To exercise any of these rights, email [email protected]. We will respond within 30 days.

10. California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), provides you with specific rights regarding your personal information.

Categories of personal information we collect

Your rights

• Right to know: request what personal information we collect, use, and disclose
• Right to delete: request deletion of your personal information, subject to legal exceptions
• Right to correct: request correction of inaccurate personal information
• Right to opt out of sale/sharing: we do not sell personal information and do not share it for cross-context behavioral advertising
• Right to limit use of sensitive PI: we do not collect sensitive personal information as defined by CPRA
• Right to non-discrimination: we will not treat you differently for exercising your privacy rights

Do Not Sell or Share

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. Our analytics tools (GA4, Clarity) process data on our behalf as service providers under written contracts, not as third parties receiving data for their own purposes.

Global Privacy Control

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request under CCPA/CPRA. If your browser sends a GPC signal, we automatically treat it as a request to opt out of the sale or sharing of personal information and do not load non-essential analytics tools.

How to submit a request

To exercise any of these rights, email [email protected] with the subject line "CCPA Request." We will verify your identity and respond within 45 days. You may also designate an authorized agent to submit a request on your behalf.

Retention

We retain personal information only as long as necessary for the business purposes described in this policy. See Section 7 (Data retention) for specific timeframes.

11. European Economic Area and United Kingdom (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), the General Data Protection Regulation (GDPR) and UK GDPR provide you with additional protections.

Legal basis for processing

• Consent: analytics and session recording tools (GA4, Clarity), HubSpot's website tracking, and the record of how you arrived on our site (gd-attribution), are used only after you accept them in our cookie banner. YouTube videos load only when you click Play. You may withdraw consent at any time with the "Cookie Settings" link at the bottom of every page.
• Legitimate interest: website security (Cloudflare), bot management, cookie-free visit counts (Cloudflare Web Analytics), following up on enquiries and trade-show contacts, and answering, reviewing and preventing misuse of questions asked in the chat assistant.
• Contract performance: processing your order, delivering products, and responding to your quote or contact requests.
• Legal obligation: retaining order records for tax and accounting purposes.

International data transfers

Green Drain, Inc. is based in the United States. When you submit information to us, your data may be transferred to and processed in the US. We rely on the following transfer mechanisms:

• Cloudflare: EU-US Data Privacy Framework participant
• Google (GA4): EU-US Data Privacy Framework participant, Standard Contractual Clauses
• Microsoft (Clarity): EU-US Data Privacy Framework participant, Standard Contractual Clauses
• Shopify: Standard Contractual Clauses
• Anthropic: Standard Contractual Clauses (in its Data Processing Addendum)

For the other providers listed in Section 6, transfers rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on Standard Contractual Clauses.

Your rights under GDPR

• Access: obtain a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Restriction: request that we limit processing of your data
• Data portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interest
• Withdraw consent: withdraw consent for analytics at any time with the "Cookie Settings" link at the bottom of every page

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

12. Australia (Privacy Act)

If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to our handling of your personal information.

• We collect personal information only for purposes directly related to our business functions (providing products, responding to inquiries, improving our website).
• We do not disclose personal information to overseas recipients except as described in this policy (data is processed in the United States by the third parties listed in Section 6).
• You may request access to or correction of your personal information at any time.
• If you believe we have breached the APPs, you may lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC).

To request access, correction, or to make a complaint, email [email protected].

13. Children's privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it promptly.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Changes take effect immediately upon posting. The "last updated" date at the bottom of this page reflects the most recent revision.

For significant changes that affect how we handle your personal information, we will make reasonable efforts to notify you (such as a banner on the website or email to known contacts).

15. Contact us

If you have questions about this Privacy Policy or how we handle your data:

• Privacy inquiries: [email protected]
• General inquiries: greendrains.com/contact
• Mailing address: Green Drain, Inc., North Carolina, United States

For CCPA requests, we will respond within 45 days. For GDPR requests, we will respond within 30 days. For all other requests, we aim to respond within 30 days.

This policy was last updated on November 6, 2026.