Privacy Policy

This policy applies to information Eco Hills collects through the website and related customer communications. It does not govern information collected independently by a third-party website or service under that third party's own policy.

The information we collect depends on how you use the website.

Information you provide

We may collect:

• Contact information, including your name, email address, telephone number, billing address, and shipping address.
• Order and transaction information, including products viewed, requested, or purchased; quantities; order number; order status; payment confirmation; refunds; exchanges; warranty communications; and delivery details.
• Vehicle and fitment information, including year, make, model, trim, tire size, wheel size, drivetrain, modifications, and other details you submit to search for or verify products.
• Communications, including messages sent through forms, email, telephone, support requests, product requests, return requests, and warranty inquiries.
• AI assistant content, including the questions and messages you submit and the responses generated for you.
• Other information you choose to provide, including photographs, documents, or comments related to an order, damaged shipment, fitment question, return, or warranty claim.

Payment information

Payments are processed by Stripe or another payment provider identified at checkout. Sensitive card information is entered into payment fields operated by the payment provider.

Eco Hills does not receive or store your full card number or card security code. We may receive transaction information such as payment status, amount, billing contact information, payment method type, card brand, last four digits, fraud or risk signals, and refund status.

Information collected automatically

When you use the website, Eco Hills and its service providers may automatically process limited technical information, such as:

• browser and device type;
• operating system;
• pages viewed and actions taken;
• referring page;
• approximate region derived from network information;
• date and time of access;
• security, bot-detection, error, and diagnostic data; and
• IP address or related network identifiers where needed to deliver and secure the website.

For AI assistant rate limiting and abuse prevention, Eco Hills stores a one-way hash of the IP address, rather than the readable IP address, alongside the conversation record. Infrastructure and security providers may separately process IP addresses as necessary to deliver and protect the website.

We use information to:

• provide, operate, maintain, and secure the website;
• process payments, orders, returns, refunds, and exchanges;
• source products from suppliers and distributors;
• arrange shipment and provide tracking or delivery updates;
• respond to questions and customer-service requests;
• verify vehicle and product information;
• communicate about delays, availability, order changes, or recalls;
• prevent fraud, abuse, unauthorized transactions, and security incidents;
• operate and improve the AI assistant;
• measure basic website use and improve product discovery;
• comply with tax, accounting, legal, warranty, and regulatory obligations;
• establish, exercise, or defend legal claims; and
• carry out another purpose you request or authorize.

The AI assistant is provided to help answer general questions about tires, wheels, products, fitment concepts, and Eco Hills.

Assistant conversations are stored in Eco Hills' systems for 90 days and are then scheduled for automatic deletion through a recurring deletion process. A conversation may be retained longer when reasonably necessary for a security investigation, legal obligation, dispute, or documented customer-service matter.

Assistant messages are sent to Anthropic, our AI service provider, so that a response can be generated. Eco Hills does not use or authorize the use of assistant conversations to train general-purpose AI models. Anthropic may process and retain information under its commercial service terms, including limited security, abuse-prevention, and legal-hold circumstances.

Do not enter payment card numbers, government identification numbers, passwords, medical information, or other highly sensitive information into the assistant.

Assistant conversations are not publicly posted. They are disclosed only as described in this policy, including to service providers needed to operate and secure the assistant.

We use Umami to measure basic website activity, such as page views and selected events, including whether a fitment search was performed. Umami is configured for privacy-focused analytics and is not used by Eco Hills to build an advertising profile of you across unrelated websites.

Cloudflare or another security and delivery provider may use essential cookies, tokens, or similar technologies to protect forms, detect bots, balance traffic, and secure the website. Stripe and other third-party services may use their own technologies when you interact with their services.

We do not use third-party advertising cookies or sell browsing profiles for targeted advertising.

We may disclose information to the following categories of recipients when reasonably necessary:

• Payment processors, including Stripe, to authorize payments, prevent fraud, issue refunds, and handle disputes.
• Suppliers, manufacturers, and distributors, to confirm availability, source products, verify specifications, fulfill orders, and support warranty claims.
• Shipping carriers and logistics providers, to deliver orders, provide tracking, investigate loss or damage, and manage returns.
• Hosting, database, and infrastructure providers, including Supabase and Cloudflare, to store records, host services, secure the website, and prevent abuse.
• Communication providers, including Resend, to send transactional and customer-service emails.
• AI providers, including Anthropic, to process assistant messages and generate responses.
• Analytics providers, including Umami, to measure website use.
• Professional advisers and authorities, including accountants, attorneys, insurers, banks, regulators, law enforcement, and courts, where reasonably necessary or legally required.
• A successor or transaction participant in connection with a proposed or completed financing, merger, acquisition, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality and legal requirements.

We may also disclose information at your direction or with your consent.

Eco Hills does not sell personal information for money.

Eco Hills does not share personal information for cross-context behavioral advertising and does not use personal information to target advertising to you across unrelated businesses or websites.

Some browsers offer a "Do Not Track" setting. Because there is no uniform industry standard for interpreting that setting, the website does not change its basic operation solely in response to a Do Not Track signal.

Eco Hills does not engage in cross-site behavioral advertising. If applicable law requires recognition of an opt-out preference signal, such as Global Privacy Control, we will process the signal as required for activity covered by that law.

Third-party services may collect information when you interact with their separate pages or features and may respond to browser signals according to their own policies.

We keep information only for as long as reasonably necessary for the purpose for which it was collected, including:

• Order, payment, refund, warranty, tax, and accounting records: for the period required by law and reasonably needed for business, audit, dispute, and warranty purposes.
• AI assistant conversations: generally 90 days in Eco Hills' systems, subject to the limited exceptions described above.
• Product requests and customer-service messages: until the request is resolved and for a reasonable follow-up, fraud-prevention, dispute, or recordkeeping period.
• Security and diagnostic records: for a limited period reasonably necessary to protect the website and investigate incidents.
• Aggregated or de-identified analytics: for as long as reasonably useful, where the information no longer reasonably identifies you.

Retention by a service provider may also be governed by its contract, legal obligations, security requirements, and published policy.

Depending on where you live and which law applies, you may have the right to request that we:

• confirm whether we hold personal information about you;
• provide access to or a copy of certain information;
• correct inaccurate information;
• delete certain information;
• explain the categories of information we collect, use, or disclose; or
• honor another applicable privacy right.

You may submit a request by calling (530) 608-3589 or using our contact form. Describe the request and provide enough information for us to identify the relevant records.

We may need to verify your identity before completing a request. An authorized agent may make a request where permitted, but we may require proof of authority and identity verification. We may deny or limit a request where an exception applies, including when records must be retained for transactions, taxes, fraud prevention, security, warranties, legal obligations, or legal claims.

We will not discriminate against you for exercising an applicable privacy right.

We use contact information to send service messages such as order confirmations, payment receipts, availability updates, tracking information, delay notices, return instructions, and support responses. These messages are necessary to manage a transaction and cannot be opted out of while the transaction remains active.

If we send optional promotional email, you may unsubscribe using the link in the message. Opting out of promotional email does not stop transaction or customer-service communications.

The website is intended for adults purchasing automotive products. We do not knowingly collect personal information from children under 13, and persons under 18 should not place an order. A parent or legal guardian may place an order on their behalf.

Contact us if you believe a child submitted personal information, and we will review and delete it when appropriate.

We use reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, loss, misuse, or alteration. No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

You should not send sensitive payment information through the contact form, ordinary email, or the AI assistant.

The website may link to manufacturer, carrier, payment, or other third-party websites. Eco Hills does not control their privacy practices. Review the policy of any third-party service you use.

We may update this Privacy Policy when our practices, technology, providers, or legal obligations change. We will post the revised policy with a new effective date. If a change is material, we may also provide an additional notice on the website or through an appropriate communication.

Questions or privacy requests may be directed to: