Last Updated: 08/01/2026

1. Introduction

This Privacy & Cookie Policy explains how Harrow Environmental (“we,” “us,” or “our”) collects, uses, stores, and protects Personal Data when you visit or interact with our website and related services (the “Application”).

By using this Application, you acknowledge that you have read and understood this Policy. Users may be subject to different data protection standards depending on their location. Additional rights may apply as described below.

2. Owner and Data Controller

Harrow Environmental
111 East Dunlap Avenue, Suite #1-246
Phoenix, AZ 85020

Contact Email:
support@harrowenvironmental.com

3. Types of Data Collected

We may collect the following categories of Personal Data, either directly from Users or automatically through the Application:

  • First and last name
  • Email address
  • Phone number
  • Company name
  • Cookies and similar tracking technologies
  • Usage Data (e.g., IP address, browser type, device information, pages visited, interactions)

Personal Data is provided voluntarily by Users (e.g., via contact forms) or collected automatically when using the Application.

Unless otherwise stated, providing Personal Data is required to deliver requested services. Failure to provide required data may limit functionality or service availability.

4. Use of Cookies and Tracking Technologies

This Application uses Cookies and similar technologies to:

  • Ensure proper website functionality
  • Analyze traffic and user behavior
  • Improve user experience
  • Support marketing, attribution, and performance measurement

Cookies may include strictly necessary cookies, analytics cookies, and marketing or advertising cookies.

Where required by law, Cookies and tracking technologies are activated only after the User has provided explicit consent via a cookie consent mechanism.

Users may manage or disable cookies through browser settings or cookie consent tools where available. Disabling cookies may affect certain features of the Application.

5. Mode and Place of Processing

Methods of Processing

We process Personal Data using secure technical and organizational measures designed to prevent unauthorized access, alteration, disclosure, or destruction.

Data may be accessed by authorized personnel involved in operations such as administration, marketing, sales, IT, and legal compliance, as well as vetted third-party service providers acting as Data Processors.

An updated list of Data Processors is available upon request.

Place of Processing

Data is processed at our operating offices and at locations where authorized service providers are based.

For Users outside the United States, Personal Data may be transferred internationally. Appropriate safeguards are used to protect such transfers in accordance with applicable laws.

6. Legal Basis for Processing

We process Personal Data under one or more of the following legal bases:

  • User consent
  • Performance of a contract or pre-contractual obligations
  • Compliance with legal obligations
  • Legitimate business interests (e.g., improving services, marketing performance, security)

Users may request clarification of the specific legal basis applicable to their data.

7. Retention of Data

Personal Data is retained only for as long as necessary to fulfill the purposes outlined in this Policy, including:

  • Contractual or service-related obligations
  • Legitimate business interests
  • Legal or regulatory requirements

Once retention periods expire, Personal Data is securely deleted or anonymized.

8. Purposes of Processing

We collect and process Personal Data to:

  • Provide and operate our services
  • Respond to inquiries and contact requests
  • Send marketing or informational communications (where permitted)
  • Analyze website usage and performance
  • Improve user experience and service offerings

9. Detailed Processing Activities

Tag Management

Google Tag Manager

We use Google Tag Manager to manage and deploy website tags and tracking technologies. Google Tag Manager itself does not collect or store Personal Data; it facilitates the loading of other tools that may collect data as described in this Policy.

Analytics

Google Analytics 4 (GA4)

We use Google Analytics 4, provided by Google LLC, to analyze website usage and improve performance. GA4 collects event-based Usage Data such as page views, interactions, device information, and approximate location derived from IP addresses.

IP addresses are processed in accordance with Google’s data protection terms and may be anonymized before storage, where required by law.

Collected Data: Cookies; Usage Data
Processing Location: United States

Users may opt out of Google Analytics tracking via browser settings or Google’s opt-out tools.

Behavioral Analytics

Hotjar

We use Hotjar to better understand how Users interact with our website through heatmaps, session recordings, and usage trends. Hotjar may collect Usage Data such as device type, browser information, and interaction behavior.

Hotjar is configured to suppress or mask Personal Data entered into forms or sensitive fields. Users may opt out of Hotjar tracking through their browser settings or via Hotjar’s opt-out mechanisms.

Call Tracking and Communications

Call Tracking and Analytics (CallRail)

We use call tracking technology provided by CallRail to understand how Users engage with our marketing campaigns and to improve service quality. This may include the collection of phone numbers, call metadata, and call duration.

Calls may be recorded for quality assurance, training, and analytics purposes where permitted by law. Where required, Users will be notified of call recording prior to the recording taking place.

Contact Forms

When Users submit a contact form, we use the provided information solely to respond to inquiries or requests.

Collected Data:

  • First name
  • Last name
  • Email address
  • Phone number
  • Company name

Mailing Lists and Marketing Communications

Users who subscribe to our mailing list may receive emails containing updates, insights, or promotional content.

Users may unsubscribe at any time using the link provided in each email.

Collected Data:

  • Email address
  • First and last name

10. User Rights

Depending on applicable laws, Users may have the right to:

  • Access their Personal Data
  • Correct inaccurate or incomplete data
  • Request deletion of Personal Data
  • Restrict or object to processing
  • Withdraw consent at any time
  • Receive a copy of their data in a portable format
  • Lodge a complaint with a data protection authority

Requests may be submitted to support@harrowenvironmental.com and will be addressed within the legally required timeframe (typically within one month).

11. Applicability of Broader Protection Standards

Additional protections apply where required by law, including when:

  • Processing occurs within the European Union
  • We offer services to Users in the EU
  • We monitor the behavior of Users located in the EU

12. Additional Information

Legal Compliance

Personal Data may be disclosed where required by law or legal process.

System Logs and Maintenance

For security and maintenance purposes, system logs may collect technical data such as IP addresses, access times, and error logs.

Do Not Track

This Application does not currently respond to “Do Not Track” browser signals.

California Privacy Rights

We do not sell or share Personal Data as defined under the California Consumer Privacy Act (CCPA/CPRA).

13. Changes to This Policy

We may update this Privacy & Cookie Policy at any time. Changes will be posted on this page with an updated revision date.

If required by law, we will request renewed consent.

14. Definitions

Personal Data: Any information identifying or relating to an identifiable individual.

Usage Data: Data collected automatically through the Application.

User: The individual using the Application.

Data Controller: Harrow Environmental.

Cookies: Small data files stored on a User’s device.

15. Legal Information

This Policy is prepared in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (GDPR) and relevant U.S. privacy regulations.