Privacy Policy

1. Who we are

Anchor & Grain is a kitchen and bathroom remodeling company based in North Atlanta, Georgia. We operate the website at anchorgrain.com. If you have questions about this policy, contact us at contact@anchorgrain.com.

2. Information we collect

When you submit the consultation form on our website, we collect:

• Your name
• Phone number
• Email address
• City or ZIP code
• Project type

We may also collect standard website usage data through analytics tools (see Section 5), including pages visited, time on site, and general geographic location (city-level).

3. How we use your information

We use the information you provide solely to:

• Follow up on your kitchen remodeling inquiry
• Schedule an in-home consultation if your project is a fit
• Communicate with you about your project throughout the process

We do not use your contact information for marketing to unrelated third parties, and we do not sell your personal information.

4. Information sharing and third-party processors

We do not sell, trade, or rent your personal information.

We use the following third-party service providers to operate our website and process your inquiries:

• Web3Forms — When you submit our consultation form, your form data is transmitted through Web3Forms (web3forms.com), an email forwarding service that delivers the form contents to our team. Web3Forms processes this data on our behalf and is contractually required to handle it confidentially. Web3Forms' privacy practices are available at web3forms.com/privacy.
• Google Tag Manager and Google Analytics — We use Google Tag Manager and/or Google Analytics (loaded directly or through Tag Manager) to manage measurement tags and understand how visitors use the site. These tools may collect anonymous usage data (see Section 5).
• Google Ads conversion measurement — When you submit the consultation form after arriving from one of our ads, we may report that conversion to Google Ads. Where Enhanced Conversions are active, your email address and phone number are hashed (one-way encoded) before being shared with Google for ad measurement — Google does not receive them in readable form from this process.
• Meta (Facebook) conversion measurement — We may report form submissions to Meta's Conversions API from our own server to measure our advertising. Before anything is sent, your email, phone number, and first name are hashed (SHA-256) on our infrastructure; Meta receives the hashed values, your IP address and browser user agent, and Meta cookie identifiers where present.
• Microsoft Clarity — When active, Microsoft Clarity provides anonymized heatmaps and session replays that help us understand how the site is used. Clarity's privacy practices are available at clarity.microsoft.com.
• Email delivery and CRM tools — We may use third-party email and customer relationship management tools to organize and respond to inquiries. These providers process your contact information on our behalf only.

We may disclose your information if required by law or to protect the rights, property, or safety of Anchor & Grain, our customers, or others.

5. Cookies and analytics

Our website uses Google Tag Manager to manage measurement and marketing tags. Google Tag Manager itself does not collect personal information; it acts as a container for other tools we may activate.

We may activate analytics tools (such as Google Analytics) through Google Tag Manager to understand how visitors use the site. When active, these tools may set cookies on your browser to collect anonymous usage data, including pages visited, session duration, and general location. This data is aggregated and does not identify you personally.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We also set two first-party cookies of our own: ag_attr (stores the campaign parameters and ad click identifiers — such as gclid or fbclid — that brought you to the site, for up to 90 days) and ag_uid (a random visitor identifier, for up to 1 year). They contain no name, email, or phone number, and we use them only to attribute consultation requests to our own advertising.

We do not currently use tracking cookies for advertising retargeting beyond the conversion measurement described in Section 4. If we add retargeting in the future, we will update this policy.

6. Data retention

We retain your contact information for as long as necessary to fulfill your request and maintain our business relationship, or until you ask us to remove it. Analytics data, when collected, is retained according to the default retention settings of the relevant analytics tool.

7. Your rights

You have the right to:

• Request access to the personal information we hold about you
• Request that we correct or delete your personal information
• Opt out of any future communications from us
• Request that we not sell or share your personal information (we already do not sell or share, but you may confirm this in writing)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to request information about how we collect and use your personal information.

If you are a resident of the European Union or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, or erase your data, the right to restrict processing, and the right to data portability.

To exercise any of these rights, contact us at contact@anchorgrain.com or call (470) 560-4467. We will respond within a reasonable timeframe (typically within 30 days).

8. Lawful basis for processing (EU/UK residents)

If you are in the European Union or the United Kingdom, our lawful basis for processing your personal information is:

• Legitimate interest — for following up on your inquiry and conducting our business
• Consent — for any analytics or marketing activity that requires it under local law

9. Security

We take reasonable precautions to protect the information you provide. Our website uses HTTPS encryption. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children's privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. Material changes will be communicated more prominently when applicable. We encourage you to review this policy periodically.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: