This Privacy Policy explains what personal information Eco Bright Beam LLC (“EcoBrightBeam”, “we”, “us”) collects when you use ecobrightbeam.com, request estimates or buy from us, how we use it, who we share it with, and the choices you have.
Information we collect
Information you give us:
- Account details: your name, email address, phone numbers (work, direct and cell, whichever you give us), company name and customer type, a website address and a profile picture if you add them, and your password (stored only in scrambled, hashed form — we can’t read it).
- Addresses: billing, shipping and job-site addresses you save or enter.
- Estimates, orders and invoices: the products and quantities you ask about or buy, notes you add, and the quotes, orders and invoices that follow.
- Tax-exemption documents: certificates you upload so we can sell to you tax-exempt. Please use your company or state tax ID, never a personal Social Security number. Only staff who need to see them can open them.
- Return evidence and store credit: the photos, videos and notes you send when you report damage or ask for a return (they may show your job site), and the refund and store-credit details of the return.
- Communication preferences: whether you want order updates and marketing by email or text, and newsletter sign-ups.
- Messages: anything you send us by email, phone or through the site.
- Contact form: the name, email address and message you type into our Contact form, and the page you were on if you used a “Contact us about this page” link.
Information from other sources: for people we invite to try our website, we use contact details from our own sales records, details that people gave us directly, and public business information. We do not buy or scrape contact lists, and we do not text people we have not asked.
Payment information: card payments are entered on Authorize.Net’s secure payment page, not on our site. We never see or store your full card number or security code. We receive only the result of the payment, such as whether it was approved, the amount and a transaction reference.
Information collected automatically:
- Technical details your browser sends with every request — IP address, browser and device type, the pages you open and when — which our servers and our hosting and security provider (Cloudflare) record to run and protect the site.
- Products you view while signed in, so we can show you your “recently viewed” list.
- A small number of essential cookies — see our Cookie Policy. We do not use advertising or tracking cookies.
- Visitor statistics: we use Cloudflare Web Analytics to count visits and see which pages are popular and how fast they load. It uses no cookies, doesn’t track you across other websites, and doesn’t build a profile of you.
- Bot check: the Contact form uses Cloudflare Turnstile to check that you are a person. It loads a small script from Cloudflare and may set Cloudflare’s own bot-check cookie; if it can’t run, we show a retype code instead.
- Apart from Cloudflare, which delivers and protects the site and provides the visitor statistics above, our pages load everything they need, including images and fonts, from our own website. The one exception is the Authorize.Net Verified Merchant Seal in the page footer, on payment pages and in payment emails: its image is loaded from Authorize.Net (it sets no cookies), and clicking it opens Authorize.Net’s verification page, where their own privacy policy applies. We don’t embed content from social networks, ad networks or other third parties.
How we use your information
- To create and manage your account and keep it secure.
- When our own staff set a password for the admin area, we check it against a public list of breached passwords by sending only a short, anonymous fragment of its fingerprint (never the password or an email address).
- To prepare estimates and quotes, process and deliver orders, take payment, issue invoices and handle returns and warranty claims.
- To apply sales tax correctly, including tax exemptions.
- To send you service messages about your account, estimates and orders.
- To send you offers and news, if you chose to receive them. You can stop these at any time.
- To answer your questions and provide customer support. A Contact form message is sent by email to our team and is not stored on the website. We use it only to answer you, not for marketing unless you are already subscribed separately, and we never sell it.
- To prevent fraud and misuse, and to meet our legal, tax and accounting obligations.
- To maintain and improve the site.
Who we share it with
We do not sell your personal information, and we do not share it for targeted advertising. We share it only as needed to run our business:
- Service providers who work for us and may use it only for that purpose: Authorize.Net (card payments); Resend (sending our emails) and Microsoft 365 (our business mailbox); Smarty and the US Postal Service (checking the street addresses you enter); Cloudflare (hosting network and tunnel, security, the Turnstile bot check and cookie-free visitor statistics); Google Drive (encrypted copies of our backups; we encrypt the files before they leave our server); and our IT and hosting providers.
- Suppliers, manufacturers and carriers: the name, delivery address and contact details needed to fulfil, ship or process a warranty claim for your order.
- Professional advisers such as accountants and lawyers, under a duty of confidentiality.
- Authorities when the law requires it, or to protect our rights, our customers or the public.
- A buyer or successor if our business is sold or merged, under this policy.
Marketing emails and text messages
You choose whether to receive marketing when you register and can change it any time under Account → Preferences. You can also use the unsubscribe link in any marketing email, or reply STOP to any text message. Message and data rates may apply to texts. Agreeing to marketing is never a condition of buying from us. See our text message terms; we keep a record of when and where you agreed, and we send no marketing texts yet. Service messages about your account and orders are sent even if you opt out of marketing. We may also email past customers and business contacts a one-time invitation to our website (with at most one reminder); each of these emails has an unsubscribe link. We email invitations only to addresses people gave us directly or that come from our own sales records, and we use social-media messages, not email, for people we only know from there.
How long we keep it
- Account details: while your account is open, and for a short time after you close it so we can deal with questions or disputes.
- Estimates, orders, invoices and payment records: as long as tax and accounting laws require — generally up to seven years.
- Tax-exemption certificates: for as long as they support an exempt sale, and then for the audit period that applies — generally up to seven years.
- Return photos and videos: as long as we need them to handle the return and any claim — generally up to three years — and then we delete them.
- Contact form emails: they stay in our business mailbox for as long as we need them to handle your request and for our business records.
- Server and security logs: only a short period.
When information is no longer needed, we delete it or make it anonymous.
How we protect it
The site is served only over encrypted HTTPS connections, passwords are hashed, card details never reach our servers, and access to customer information is limited to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your information and will notify you if a breach affects you, as the law requires.
Your choices and rights
You can view and update most of your information in your account at any time. You can also ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information, except what we must keep by law (for example, invoices and tax records);
- stop sending you marketing.
Depending on where you live, privacy laws such as those of California, New Jersey, New York and Texas may give you these and other rights. We honor reasonable requests from any customer, whether or not a particular law applies to us. To make a request, email [email protected]. We will confirm your identity before acting, and we won’t treat you differently for exercising your rights. You may use an authorized agent. We will answer within 45 days; if we need more time we will tell you why and take up to 45 more. If we decline a request, you can appeal by replying to our answer within 60 days and we will review it again; if you are still not satisfied, you can contact your state attorney general.
Because we don’t sell or share personal information for advertising, there is nothing to opt out of; we treat browser “Global Privacy Control” and “Do Not Track” signals the same way. We do not track you across other websites.
Children
Our site and products are intended for adults and businesses. You must be at least 18 to create an account. We do not knowingly collect information from children under 13; if you believe a child has given us information, contact us and we will delete it.
Where your information is kept
We are based in the United States, and your information is stored and processed in the United States. Our site is for customers in the United States; we do not market to or ship to other countries.
Changes to this policy
If we change this policy, we will post the new version here with a new effective date. If the changes are significant, we will also tell account holders by email or on the site before they take effect. Earlier versions are available on request.
Recent changes (October 15, 2026): we named the services that check addresses, run the bot check, send and host email and hold encrypted backups; added return photos and store credit; added how to make and appeal a request; and listed how long we keep each kind of information.
Contact us
Eco Bright Beam LLC
Mailing address: Rockwall, TX 75087
Email: [email protected]