EcoRebates Privacy Policy
Last Updated: July 13, 2026
Castanea Labs Inc. dba EcoRebates ("We", "Us," "EcoRebates") is committed to protecting your privacy. We have prepared this Privacy Policy to describe to you our practices regarding the Personal Data (as defined below) that we collect from users of our website (located at www.ecorebates.com) and 3rd party websites who have embedded our search tools on their sites (the "Services").
This Privacy Policy covers our collection, use and disclosure of information we collect through our website www.ecorebates.com and our Services. The use of information collected through our Services shall be limited to the purpose of providing the service for which the Client has engaged EcoRebates.
User Consent
By submitting or making available Personal Data through our website or Services, you agree to the terms of this Privacy Policy, and you expressly consent to the processing of your Personal Data in accordance with this Privacy Policy. Your Personal Data may be processed in the country in which it was collected and in other countries, including the United States, where laws regarding processing of Personal Data may be less stringent than the laws in your country.
Information We Collect About You
A Note About Children
We do not intentionally gather Personal Data about visitors who are under the age of 13.
Types of Data We Collect
EcoRebates collects Personal Data and Anonymous Data from you when you visit our site, when you send us information or communications, or when you subscribe to our newsletter. EcoRebates collects Anonymous or De-identified Data from you when you use our Services. “Personal Data” means data that allows someone to identify or contact you, including, for example, your name, phone number, and email address. “Anonymous Data” means data about you that is not associated with or linked to your Personal Data, and “Deidentified Data” means data that can’t by itself reasonably be associated with or linked, either directly or indirectly, to you.
The following describes the types of Personal Data that we collected and disclosed in the last 12 months:
| Broad Categories Collected | Examples | Types of third parties we share for a business purpose | Types of third parties we share for a commercial purpose |
|---|---|---|---|
| Identifiers | Name, contact information, and other Personal Data that can directly or indirectly identify a user | Group companies, service providers, and partners | Group companies, partners, and any other person with your consent |
| Internet Activity | Browsing history, search history, and information regarding a user’s interaction with our website and Services, or advertisements. | Group companies, service providers, and partners | Group companies, partners, and any other person with your consent |
| Information Typically Detected by Senses | Audio and video information (call recordings) related to sales and customer support activities | Group companies, service providers, and partners | Group companies, partners, and any other person with your consent |
| Information Related to Our Customers’ Personnel | Name, contact information, and company information | Group companies, service providers, and partners | Group companies, partners, and any other person with your consent |
Personal Data You Provide to Us
We collect Personal Data from you, such as first and last name, phone number, email, and company name, when you register to receive information on our EcoRebates website. We also retain information on your behalf, such as the Personal Data described above and any correspondence. If you provide us feedback or contact us via email (e.g., regarding a question you may have about our Services), we will collect your name and email address, as well as any other content included in the email, in order to send you a reply, and any information that you submit to us.
Personal Data Collected via Technology
To make our website and Services more useful to you, we collect Anonymous and Deidentified Data from you in the three following ways:
Log data. Our servers (which may be hosted by a third-party provider) automatically collect your Internet Protocol (IP) address, user agent (browser/Operating System), referrer (referring domain), and a timestamp. We use this to operate, secure, and improve the Services.
Analytics data. We also collect product SKU, rebate details, ZIP code, and user agent (but not IP). We use this as part of our Services, to produce aggregated usage reports for our customers — such as searches, impressions, and clicks at the SKU or county level — never individual-level data.
Browser storage. We store user preferences (such as ZIP code) in the browser only when the user chooses them, so the tool works during the visit.
On our website, we may also use certain technologies such as Cookies (as defined below), web beacons, JavaScript, and navigational data like Uniform Resource Locators (URL) to:
● gather information about the date and time of your visit and about the solutions and information for which you searched or which you may have viewed;
● analyze trends;
● administer the website;
● gather information about users’ movements around the website; and
● gather demographic information about our user base as a whole.
Like most Internet services, we automatically gather data about you or your device and store it in log files each time you visit our website or access your account on our network.
Cookies We Use
“Cookies” are small pieces of information that are stored on your hard drive or in device memory. We may link the information we store in Cookies to the personally identifiable information you submit while on our website. We may use both session Cookies (which expire once you close your web browser) and persistent Cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our website and in our Services. Your Web browser may allow you to delete, block or otherwise disable the use of Cookies or HTML5. If you choose to disable Cookies, some areas of our website may not work properly.
Most web pages contain elements from multiple web domains so when you visit www.ecorebates.com, your browser may receive cookies from several sources. This includes third parties that we have hired to provide services on our behalf, such as site analytics or content hosting. By continuing to visit our site, you are agreeing to use of the cookies and similar technologies for the purposes we describe in this policy.
Our partners, affiliates and other service providers may use Cookies and other technologies to improve the quality of your experience when you interact with our website and Services. We may receive reports based on the use of certain technologies by these companies on an individual and aggregated basis.
We may use Cookies, clear gifs and other technologies in our HTML-based emails to let us know which emails have been opened by recipients. This allows us to gauge the effectiveness of certain communications and the effectiveness of our marketing campaigns.
Managing and Deleting Cookies
Cookies can be monitored and deleted from your browser. Since browsers create and store cookies, they are also the most direct way to access, manage, and delete cookies.
Please keep in mind that if you disable all cookies, certain portions of our website may not work properly.
Tools offered by third parties can help you see and manage the types of cookies and trackers that you encounter. More information about cookies and cookie management can be found on www.allaboutcookies.organd www.aboutcookies.org. Our cookie consent tool is provided as a function of our website platform and is configured to allow site visitors to manage cookies.
Third Parties
Our provision of a link to any other website or location is for your convenience and does not signify our endorsement of such other website or location or its contents. When you click on such a link, you will leave our site and go to another site. During this process, a third party may collect Personal Data or Anonymous Data from you.
We have no control over, do not review, and cannot be responsible for, these outside websites or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites or content, or to any collection of data after you click on a link to a third party. We encourage you to carefully read the privacy statement of any Web site you visit.
Use of Your Personal Data
In general, Personal Data you submit to us is used either to respond to requests that you make, or to aid us in serving you better. EcoRebates uses your Personal Data in the following ways: to provide improved administration of our website and Services; improve the quality of experience when you interact with our website or Services; respond to your inquiries related to requests for information; send promotional communications; provide you with hardcopy or electronic newsletters, or surveys; and for other marketing purposes of EcoRebates should you request to receive such communications from us.
If you provide feedback on our Services to us, we may use such feedback for any purpose, provided we will not associate such feedback with your Personal Data. EcoRebates will collect any information contained in such communication and will treat the Personal Data in such communication in accordance with this Privacy Policy.
Disclosure of Your Personal Data
We may share your Personal Data with third parties to provide technical support or to provide specific user support regarding questions about our Services.
If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, we may transfer your personal data during due diligence and on completion of the transaction, provided that we inform the recipient it must use your personal data only for the purposes disclosed in this policy.
Except as otherwise stated in this policy, we do not sell, trade, share, or rent the Personal Data collected from our services to third parties other than as outlined in this policy. You expressly consent to the sharing of your Personal Data as described in this policy.
Additional Information Regarding Personal Data Rights
If you are in a jurisdiction that provides data subject rights, such as the EEA, the UK, Switzerland and certain US states, you may have additional rights in relation to your Personal Data. You may exercise these rights by contacting us as described at the end of this Privacy Policy.
The right to be informed – our obligation to inform you that we process your Personal Data (and that’s what we’re doing in this Privacy Policy)
The right of access – your right to request a copy of the Personal Data we hold about you (also known as a ‘data subject access request’) or request portability of your Personal Data
The right to rectification – your right to request that we correct Personal Data about you if it is incomplete or inaccurate
The right to erasure (also known as the ‘right to be forgotten’) – under certain circumstances, you may ask us to delete the Personal Data we have about you (unless it remains necessary for us to continue processing your Personal Data for a legitimate business need or to comply with a legal obligation as permitted under applicable law, in which case we will inform you)
The right to restrict processing – your right, under certain circumstances, to ask us to suspend our processing of your Personal Data
If we have collected and processed your Personal Data with your consent, the right to withdraw your consent. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent
The right to object – your right to opt out or object to us processing your Personal Data (for example, if you object to us processing your data for direct marketing).
Rights in relation to automated decision-making and profiling – our obligation to be transparent about any profiling we do, or any automated decision-making
The right to complain to a data protection authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority
Right to Non-Discrimination
If you exercise your CCPA consumer rights:
We will not deny goods or services to you
We will not charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties
We will not provide a different level or quality of goods or services to you
Social Media Features and Widgets
Our website may include social media features. These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our website. Your interactions with these features are governed by the privacy policy of the company providing it.
Security of Your Personal Data
EcoRebates is committed to protecting the security of your Personal Data. We use a variety of industry-standard security technologies and procedures to help protect your Personal Data from unauthorized access, use, or disclosure. If you have any questions about security on our Web site, you can contact us at the address provided below.
Contact Information
EcoRebates welcomes your comments or questions regarding this Privacy Policy. Please email us at info@ecorebates.com or contact us at the following address:
EcoRebates
405 El Camino Real, Suite 449
Menlo Park, CA USA 94025
Changes to This Privacy Policy
This Privacy Policy is subject to occasional revision, and if we make any substantial changes in the way we use your Personal Data, we will notify you by sending you an email to the last email address you provided to us and/or by prominently posting notice of the changes on our website. Any material changes to this Privacy Policy will be effective upon the earlier of thirty (30) calendar days following our dispatch of an email notice to you of the changes, thirty (30) calendar days following our posting of notice of the changes on our site, or the date that you accept the changes (e.g., by clicking an “I Accept” button or similar means). These changes will be effective immediately for new users of our website or Services. Please note that at all times you are responsible for updating your Personal Data to provide us with your most current email address. In the event that the last email address that you have provided us is not valid, or for any reason is not capable of delivering to you the notice described above, our dispatch of the email containing such notice will nonetheless constitute effective notice of the changes described in the notice. In any event, changes to this Privacy Policy may affect our use of Personal Data that you provided us prior to our notification to you of the changes. If you do not wish to permit changes in our use of your Personal Data, you must notify us prior to the effective date of the changes that you wish to deactivate your account with us. Continued use of our website or Services, following notice of such changes shall indicate your acknowledgement of such changes and agreement to be bound by the terms and conditions of such changes.