Privacy Policy
Last updated: 12 June 2026 · Applies to eco-hearth.com (United States)
This Privacy Policy explains how Denoma, Inc. (“Eco Hearth,” “we,” “us”) collects, uses, discloses, and protects personal information when you visit eco-hearth.com, contact us, subscribe to our communications, or place an order from the United States. It also describes the privacy rights of California residents and residents of other U.S. states.
1. Who we are
| Company | Denoma, Inc., trading as Eco Hearth (incorporated in Florida, USA) |
| Business address | 2295 S Whittmore St, Furlong, Pennsylvania 18925, USA |
| Privacy contact | [email protected] |
2. Scope
This policy applies to visitors and customers of eco-hearth.com in the United States. If you are in the European Union / EEA or Ireland, our EU/Ireland Privacy Policy applies to you instead. This policy does not cover third-party websites we link to.
3. Information we collect
Depending on how you interact with us, we may collect the following categories of personal information:
| Category | Examples |
|---|---|
| Identifiers | Name, email address, phone number, billing/shipping address, IP address |
| Commercial information | Products viewed or purchased, order history |
| Internet / device activity | Pages viewed, referring source, interactions, cookies, and anonymised session recordings (Microsoft Clarity — the content of input fields is masked and not recorded) |
| Approximate location | Derived from your IP address |
| Inferences | Preferences derived from the above, used to improve our site and marketing |
4. How we use your information
- To respond to your enquiries and provide quotes;
- To process, fulfil and support your orders;
- To send marketing emails and our newsletter — only if you have opted in;
- For analytics, session recording and improving our website;
- For advertising and measurement (Google Ads, Reddit, Meta/Facebook);
- For security, fraud prevention, and to protect our rights;
- To comply with our legal and tax obligations.
Marketing communications are sent only to people who have opted in (for example, by subscribing to our newsletter). You can unsubscribe at any time.
5. Cookies, analytics & advertising
We use cookies and similar technologies. Strictly-necessary cookies are always active; analytics, advertising and functional cookies are set based on your choices in our cookie banner, which you can change at any time using the cookie preferences control on the site.
| Provider / cookie | Category | Purpose | Duration |
|---|---|---|---|
| WordPress / WooCommerce | Strictly necessary | Session, cart, checkout, security | Session – 2 days |
| Concord (consent) | Strictly necessary | Stores your cookie choices | up to 12 months |
| Google Analytics 4 | Analytics | Usage measurement | up to 13 months |
| Microsoft Clarity | Analytics | Session recording / heatmaps | up to 1 year |
| Google Ads | Advertising | Ad measurement & remarketing | up to 90 days |
| Advertising | Ad measurement | up to 90 days | |
| Meta / Facebook | Advertising | Ad measurement & remarketing | up to 90 days |
| HubSpot | Marketing / CRM | Visitor identification for CRM | up to 13 months |
| Crisp live chat | Functional | Maintains your chat session | up to 6 months |
This list reflects the marketing and analytics tools in our current stack. Some tools may not be active at all times — we may pause or resume individual tools depending on our campaigns.
6. How we disclose your information
We do not sell your personal information for money. We share it with the service providers that run our website and business, and — for advertising — with advertising partners as described in Section 7:
| Recipient | What they do |
|---|---|
| Hosting provider | Website & database hosting (servers located in the EU) |
| Google LLC | Analytics & advertising |
| Microsoft Corporation | Session recording / usability analytics |
| HubSpot, Inc. | CRM — managing enquiries & leads |
| Intuit / Mailchimp | Newsletter / email delivery |
| Reddit, Inc. · Meta Platforms, Inc. | Advertising measurement & remarketing |
| Crisp IM SAS | Live chat |
| Stripe / WooPayments | Payment processing |
| Concord | Cookie-consent management |
We are migrating our CRM from HubSpot to Pipedrive; this notice will be updated when that change takes effect. We may also disclose information where required by law or to protect our legal rights.
7. “Do Not Sell or Share My Personal Information”
We do not sell your personal information for money. However, when we use advertising cookies (Google Ads, Meta/Facebook, Reddit) to show you relevant ads across other sites, this may be considered “sharing” for cross-context behavioral advertising — and, under some U.S. state laws, a “sale.”
You can opt out of this at any time using the “Do Not Sell or Share My Personal Information” and “Limit the Use of My Sensitive Personal Information” controls in our cookie banner, or by declining the Advertising category there. We honor recognized opt-out preference signals (such as Global Privacy Control) where required.
8. Your U.S. privacy rights
California residents (CCPA/CPRA). You have the right to: know what personal information we collect and how we use and disclose it; request a copy of it; request that we delete it; request that we correct inaccurate information; opt out of the “sale” or “sharing” of your information; limit the use of sensitive personal information; and not be discriminated against for exercising these rights.
Residents of other U.S. states (including Virginia, Colorado, Connecticut, and others with comprehensive privacy laws) have similar rights to access, correct, delete, and opt out of targeted advertising.
To exercise any of these rights, email [email protected]. We will verify your request and respond within the timeframe required by law (generally 45 days). You may use an authorized agent to submit a request on your behalf.
9. How long we keep your information
We keep personal information for as long as necessary for the purposes described in this policy, or as required by law (for example, order and tax records are retained for the period required by applicable tax rules). Lead and enquiry information is kept while we have an active relationship with you or a legitimate business need, and is deleted when it is no longer required or upon a valid request.
10. Children’s privacy
Our website and products are not directed at children, and we do not knowingly collect personal information from children under 13 years of age. If you believe a child has provided us information, contact us and we will delete it.
11. Security & hosting
We apply appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS) and access controls. Our website and database are hosted in the European Union. No method of transmission is completely secure, but we work to protect your information.
12. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top reflects the latest version, and material changes will be highlighted on this page.