Privacy Policy

Last Updated: August 2026

Crystal Flow H2O, LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.crystalflowh2o.com or make a purchase from us. It also serves as our Notice at Collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA").

Notice at Collection (California)

At or before the point we collect your information, this is what we collect and why:

• Identifiers — name, email address, phone number, billing and shipping address, IP address. Collected to process orders, provide support, and secure the site.
• Commercial information — products viewed, cart contents, order history. Collected to run the shop and to send filter replacement reminders.
• Internet activity — pages visited, referring site, approximate location, device and browser details. Collected only if you consent to analytics or advertising cookies.
• Geographic information — the ZIP code you type into our Check Your Water tool. Used to produce your water-quality report. You can use the tool without giving us any contact details at all. If you also ask us to email you the report, we store that ZIP code alongside your email address so we can send it and, if you opted in, tell you when your utility's EPA record changes. We keep aggregate counts of how often each ZIP code is looked up; those counts are not linked to you, your device, or your IP address.
• Payment information — card details are entered directly into our payment processor's hosted fields. We never receive or store your full card number.

We do not sell your personal information for money. If, and only if, you switch on advertising cookies, information about your visit is shared with advertising partners in a way that California law treats as "sharing" for cross-context behavioural advertising. Advertising cookies are off by default. You can turn them off at any time using the Cookie settings link, or the “Do Not Sell or Share My Personal Information” link at the bottom of every page.

We do not knowingly collect or process sensitive personal information for the purpose of inferring characteristics, and we do not sell or share the personal information of anyone we know to be under 16.

Retention. Order and warranty records are kept for as long as needed to support the product and to meet tax and accounting obligations (generally seven years). Contact enquiries are kept up to three years. Consent records are kept for two years as proof of your choice. Analytics data is retained according to the vendor's default, currently 14 months for Google Analytics. Water-report and water-alert subscriptions are kept until you unsubscribe. After you unsubscribe we retain a minimal suppression record — your email address and the date you opted out — for one purpose only: so that we do not email you again by mistake. Federal law (CAN-SPAM) requires us to honour an opt-out, and keeping this record is how we do it, which is why it survives a deletion request. Everything else about the subscription is removed.

Information We Collect

We may collect personal information that you voluntarily provide when you:

• Place an order for our products
• Create an account on our website
• Subscribe to our newsletter
• Contact us via phone, email, or contact form
• Request a quote or consultation
• Ask us to email you a water-quality report, or sign up for water-quality alerts

This information may include:

• Name, email address, phone number
• Billing and shipping address
• The ZIP code you enter into the Check Your Water tool
• Payment information — entered directly into hosted fields provided by Stripe or PayPal. Full card numbers never reach our servers and are never stored by us.
• Order history and preferences

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Communicate with you about your order, delivery, and installation
• Send warranty information and filter replacement reminders
• Respond to your inquiries and provide customer support
• Improve our website and services
• Send promotional communications (only with your consent)

Information Sharing

We do not sell your personal information for money, and we never trade or rent it. We disclose it to:

• Service Providers: Payment processors (Stripe, PayPal), shipping carriers, and email service providers who assist in our operations. These are service providers under the CCPA and are contractually restricted to using the information only to perform services for us.
• Independent licensed installers: If you ask us to refer you to a contractor, we pass on the contact and address details needed to schedule and quote the work. That contractor is an independent business and uses the information under its own privacy practices.
• TipaTech: For warranty registration and product support.
• Advertising partners — only with your consent: If you switch on advertising cookies, Meta and Google receive information about your visit for conversion measurement and audience building. California law treats this as "sharing". It is off unless you opt in.
• Legal Requirements: When required by law or to protect our rights.

Data Security

We implement industry-standard security measures to protect your personal information:

• SSL encryption for all data transmission
• Secure payment processing through PCI-compliant providers
• Limited access to personal information by authorized personnel only
• Regular security assessments and updates

Cookies and Tracking

Nothing optional runs until you choose. When you first visit, analytics and advertising technologies are blocked from loading at all. They are only downloaded and executed after you actively opt in. We use three categories:

• Strictly necessary (always active). First-party cookies and local storage that make the site work: your shopping cart, checkout and payment session, login session, security and anti-abuse protection, and a record of your cookie choice. These cannot be switched off because the site cannot function without them.
• Analytics (off until you opt in). Google Analytics 4. Sets Google cookies (_ga, _gid) and sends your page views, approximate location and device details to Google LLC so we can see which pages are useful and where the site is confusing.
• Advertising (off until you opt in). Advertising and conversion measurement, which may include the Meta (Facebook and Instagram) pixel and Google Ads conversion tracking. This is the category that constitutes "sharing" for cross-context behavioural advertising under California law.

Changing your mind. Use the Cookie settings link, available in the footer of every page and from the button in the lower-left corner. Withdrawing consent stops any further collection; tags already loaded in the current page cannot be unloaded, so a withdrawal takes full effect on your next page view. We also delete the analytics and advertising cookies we can reach when you withdraw.

Global Privacy Control. We honour the Global Privacy Control signal. If your browser or extension sends GPC, we treat it as a valid opt-out of sale and sharing: analytics and advertising stay off automatically, you will not be shown a consent banner, and you do not need to do anything else. We also honour legacy "Do Not Track" browser signals the same way.

Browser settings can also be used to block or delete cookies, but note that blocking strictly necessary cookies will break the cart and checkout.

Your California Privacy Rights

If you are a California resident, the CCPA gives you the following rights. We will not discriminate against you for exercising any of them — you will receive the same prices, products, and service quality either way.

• Right to know. Request the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of third parties we disclosed it to.
• Right to delete. Request deletion of the personal information we hold, subject to exceptions such as completing a transaction, honouring a warranty, security, and legal or tax record-keeping. One exception is worth spelling out: if you have unsubscribed from our water-report emails, we keep your email address on a suppression list so that we can honour that opt-out and avoid emailing you again. That record stays even if you ask us to delete everything else.
• Right to correct. Request correction of inaccurate personal information.
• Right to opt out of sale or sharing. Use the “Do Not Sell or Share My Personal Information” link in the footer of every page, switch off advertising in Cookie settings, or send a GPC signal.
• Right to limit use of sensitive personal information. We do not use or disclose sensitive personal information beyond what is necessary to provide the products and services you asked for, so there is nothing to limit.
• Right to opt out of marketing email. Use the unsubscribe link in any marketing message, or contact us.

How to submit a request. Email info@crystalflowh2o.com with the subject line “California Privacy Request”, or call (916) 400-0725. We will confirm receipt within 10 business days and respond within 45 calendar days, extendable by a further 45 days if we tell you why. To protect your information we will need to verify your identity, normally by matching the email address or order details we already hold; we use that information only to verify the request.

Authorized agents. An agent may submit a request on your behalf with your written permission, which we may ask to verify directly with you.

Residents of other U.S. states with comprehensive privacy laws have comparable rights, and we handle those requests through the same channel.

Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy or your personal information, please contact us:

• Entity: Crystal Flow H2O, LLC (a California limited liability company)
• Phone: (916) 400-0725
• Email: info@crystalflowh2o.com