Privacy Policy

Last updated: October 27, 2026

As the operator of this website, EKO North America and its subsidiaries and affiliates ("EKO Commercial", "EKO", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and share personal information when you visit https://ekocommercial.com (the "website"), place an order, ask for a quote, or contact us. It is a description of our practices, not a request for your consent: where the law requires your consent (for example for non-essential cookies), we ask for it separately, in the cookie banner.

The short version is on our Notice at Collection page. Our Cookie Policy lists every cookie the website sets.

Table of Contents

1. Who we are
2. Personal information we collect
3. How we use personal information
4. How we share personal information
5. Cookies, analytics and your choices
6. Your privacy rights
7. California disclosures (Personal Information Privacy Chart)
8. How we protect personal information
9. How long we keep personal information
10. Children's privacy
11. Website Terms and Conditions
12. Changes to this Privacy Policy
13. Contact us

1. Who we are

The website is operated by EKO North America, 4205 Southwest High Meadow Avenue, Palm City, Florida 34990, United States, trading on this website as EKO Commercial. The website and checkout are hosted by Shopify. We sell commercial waste bins, dispensers and related products to businesses in the 48 contiguous United States.

2. Personal information we collect

Information you give us

• Contact and quote requests (contact form): name, job title, business email, phone number, company name, company website, country/region, industry, inquiry type and your message.
• Orders (Shopify checkout): name, company, shipping and billing address, email, phone, the products you order, and payment details. Payment card numbers are processed by Shopify Payments, PayPal, Shop Pay or Google Pay; we do not see or store full card numbers.
• Customer accounts (Shopify-hosted): email address and order history.
• Newsletter sign-up: email address.
• Returns and support: order or invoice number, product, description of the issue, and any photos or videos you send us.
• Business-to-business relationships: if you deal with us on behalf of a company, your name, role, company details, purchase history and account preferences. If you are a supplier or contractor, the details needed to manage the relationship and pay your invoices.

Information collected automatically

• Device and usage information: IP address, browser and device type, operating system, the pages you view, referring page and date/time. Shopify collects this to run the store and protect it from fraud.
• Analytics (only if you choose Accept in the cookie banner): Google Analytics 4 records page views and interactions using the _ga and _ga_* cookies listed in our Cookie Policy. If you choose Reject, or your browser sends a Global Privacy Control signal, Google Analytics is not loaded.
• Advertising (only if you choose Accept in the cookie banner): through Shopify's Google & YouTube app, the Google Ads tag (AW-18504863165) and the Google Merchant Center tag record your visit, the Google ad you clicked to get here (if any), the pages and products you view, and actions such as adding to cart, completing a purchase or sending our contact form (only the fact that a form was sent and the inquiry type you chose, never your name, contact details or message), using the Google cookies listed in our Cookie Policy (such as _gcl_au). We use this to measure how our Google ads and Shopping listings perform, and we may also use it to show EKO Commercial ads on Google to people who have visited this website ("remarketing"). The contact-form event is sent to Google Ads by a Google tag we add through Shopify's Customer events, under the same consent. If you choose Reject or your browser sends a Global Privacy Control signal, these tags are not loaded. If you chose Accept and later opt out on our Your Privacy Choices page, our contact-form tag is switched off and Shopify's Google & YouTube app sends Google only limited signals under Google's restricted data processing, in which Google acts only as our service provider and does not use your data to personalize ads.
• Purchase matching (only if you chose Accept): when you complete a purchase, the Google & YouTube app sends Google the email address, phone number, name and address from your order in hashed (one-way encoded) form, so that Google can match the purchase to an ad click. Google calls this "enhanced conversions".
• Choosing by category: under Preferences in the cookie banner you can allow Statistics and Marketing separately. In this policy, "Accept" also covers switching on the matching category there: Statistics for Google Analytics, Marketing for Google's advertising tags. If you allow only one of the two, Google's tags still load, but for the category you left off they set none of its cookies and send Google only signals marked as not consented for it (for example, that a page was viewed), which Google may use for aggregate measurement.
• Security: the "Your Privacy Choices" opt-out form uses hCaptcha to block automated submissions; hCaptcha's provider Cloudflare sets the __cf_bm cookie for that purpose.

Information from other sources

• Shopify, our payment providers and shipping carriers send us the order, payment-confirmation and delivery information needed to fulfil your order.
• We do not buy personal information from data brokers. Apart from the ad-click identifier that Google adds to the link when you click one of our Google ads, we do not receive personal information from advertising networks.

We do not collect sensitive personal information as defined by the California Privacy Rights Act (for example Social Security numbers, government ID numbers, precise geolocation, health, biometric or genetic data, or data about race, religion, union membership or sexual orientation). Please do not send it to us.

We do not operate a mobile app, live chat or session-recording tools on this website. The only advertising technology on this website is Google's, described above.

3. How we use personal information

• To provide the website and fulfil orders: process payments, arrange shipping, handle returns and refunds, respond to quote requests and support tickets, and manage customer and trade accounts.
• To communicate with you: order confirmations, delivery updates, replies to your inquiries, and — if you signed up — our newsletter. You can unsubscribe from marketing email at any time using the link in each email (section 5).
• To understand how the website is used (with your consent): aggregated Google Analytics reports on which pages are visited and how visitors move through the site, so we can improve it.
• To measure our advertising (with your consent): we use Google Ads and Google Merchant Center reports to see which of our ads and Shopping listings led to visits and orders. We may also use this information to show EKO Commercial ads on Google to people who have visited this website ("remarketing").
• To keep the website secure and prevent fraud: Shopify's fraud analysis on orders, bot protection on forms.
• To operate our business: maintaining records for accounting or after-sales support purposes; debugging to identify and repair errors; collecting amounts owed to EKO; conducting internal audits; and providing and maintaining the functionality of the website.
• To meet legal obligations: tax and accounting records, responding to lawful requests from courts or government agencies, and enforcing our terms.

Apart from the Google advertising described above, which runs only if you choose Accept, we do not use personal information for targeted advertising. We do not use it for profiling or automated decisions that have legal effects on you.

4. How we share personal information

We may share information about you to third parties as indicated below:

• Within EKO Group. We share your personal data with other EKO Group entities and with our different locations, affiliates, and subsidiaries as follows: providing customer services; analyzing customer data and website user behavior; carrying out marketing activities; supporting shared services, such as analytics, customer relationship tools, and data management across EKO Group entities.
• Shopify (platform, checkout, customer accounts, fraud analysis and email delivery). Shopify processes information on our behalf and, for some of its own services, as an independent business — see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
• Third-party payment processors: EKO uses PCI-DSS compliant payment processors — Shopify Payments, PayPal, Shop Pay and Google Pay — to provide you with options to make secure payments. By using one of our payment options, your personal data will be collected and processed by the payment processor subject to its privacy policy.
• Shipping carriers: EKO uses third-party shipping carriers, such as the USPS, UPS, and FedEx, for shipping, handling, and delivering products you order. Personal data collected and processed by a shipping carrier is subject to their privacy policies.
• Google (Google Analytics), only if you accepted analytics cookies, and only for aggregated website statistics. Google acts as our service provider for this purpose.
• Google (Google Ads and Google Merchant Center, through Shopify's Google & YouTube app), only if you choose Accept in the cookie banner: the information described under "Advertising" in section 2, including the hashed order details used for purchase matching. Google uses it to measure our ads and, if we use remarketing, to show our ads to past visitors, and may also use it for its own purposes as described in Google's policies: see How Google uses information from sites or apps that use its services.
• Consentmo (our cookie-consent tool) stores your cookie choice.
• hCaptcha / Cloudflare (bot protection on the privacy-choices form).
• Legal obligations; defending and protecting rights: professional advisers, authorities and courts, to comply with the law, law enforcement or other legal process, or to protect the rights, property, security and safety of EKO, the website or its users, or any third party.
• Corporate transactions: a buyer or successor in connection with any proposed or actual merger, purchase, sale, joint venture or other acquisition or business combination of all or any portion of EKO's assets or business; we will tell you if that changes how your information is used.

Sale and sharing. We do not sell personal information for money. When you choose Accept in the cookie banner, Google's advertising tags (Google Ads and Google Merchant Center) receive identifiers such as cookie IDs and your IP address, the pages and products you view, cart, purchase and contact-form events, and hashed order details when you complete a purchase. California and some other US state privacy laws may call this a "sale" or "sharing" of personal information for cross-context behavioral advertising (or "targeted advertising"). We have done this since October 2026, and only for visitors who chose Accept. If you allow only Statistics under Preferences, Google's advertising tags set no advertising cookies and send Google only signals marked as not consented for advertising, and Shopify records you as opted out of sale/sharing. You can opt out at any time (section 5): choosing Reject or sending a Global Privacy Control signal switches these tags off for your browser, and using our Your Privacy Choices page limits them as described under "Advertising" in section 2. We do not sell or share the personal information of anyone we know to be under 16.

5. Cookies, analytics and your choices

Cookie banner. When you first visit, a banner from Consentmo lets you choose Accept, Reject or Preferences. Only essential cookies are set until you choose. You can change your choice at any time with the Cookie preferences link in the website footer.

Do-Not-Track Features. Many web browsers and some mobile operating systems and mobile applications include a "do-not-track" feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing do-not-track signals has been finalized and, as such, we do not currently respond to the browser "do not track" setting. We do, however, honor the Global Privacy Control (GPC) opt-out preference signal, as described below. We will update this Policy if that changes in the future. These features are not an alternative to the settings you choose in our cookie banner.

Opt-Out Preference Signal. You may use an Opt-Out Preference Signal, such as the Global Privacy Control (GPC), to opt-out of the sale/sharing of your personal information. If you do not have an EKO account or if you are not logged into your EKO account, your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. If you would like your request to opt-out of sale/sharing to be applied any time you are logged into your account, please use the Cookie Preferences widget. On this website the GPC signal is applied automatically by our consent tool (Consentmo) and by Shopify: Google Analytics and Google's advertising tags are not loaded and Shopify records the visit as opted out of sale/sharing, without you having to submit a form. Learn more at https://globalprivacycontrol.org/.

Your Privacy Choices form. You can also opt out on our Your Privacy Choices page. Opting out switches off our contact-form tag and limits Google's other advertising tags to Google's restricted data processing, in which Google acts only as our service provider and does not use your data to personalize ads; it applies to your browser, and to your customer account if you enter the email associated with it.

Google Analytics. Besides the cookie banner, you may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout or downloading the Google Analytics Opt-out Browser Add-on.

Google ads. You can also control the ads Google shows you, including whether they are personalized, in Google's My Ad Center at https://myadcenter.google.com.

Email Communications. You can opt out of receiving certain marketing or promotional communications from EKO at any time by following the instructions provided in e-mails to click on the unsubscribe link, or if available by changing your communication preferences by logging onto your account. Please note that your opt-out is limited to the e-mail address used and will not affect subsequent subscriptions. If you opt-out of only certain communications, other subscription communications may continue. Even if you opt out of receiving promotional communications, EKO may, subject to applicable law, continue to send you non-promotional communications, such as those about your account, transactions, servicing, or EKO's ongoing business relations.

SMS / Text Messaging. You can opt-out of receiving text messages from us at any time by replying to a text with the words "STOP," "UNSUBSCRIBE," or "END."

Full cookie details, including names, purposes and lifetimes, are in our Cookie Policy.

6. Your privacy rights

Some privacy laws require that we disclose to you the privacy rights that you have regarding personal information. Depending on where you live, you may have the right to:

• Know / access the personal information we hold about you, including the categories, sources and business purposes for collecting it;
• Delete personal information, subject to legal exceptions (for example, we must keep invoice records);
• Correct inaccurate personal information;
• Portability — receive a copy in a portable and readily usable format;
• Opt out of sale, sharing or targeted advertising (this covers the Google advertising described in section 4; section 5 explains how), and of profiling (we do not profile);
• Limit the use of sensitive personal information (we do not collect it);
• Not be discriminated against for exercising these rights; and
• Appeal if we decline a request.

These rights may be subject to certain limitations or exceptions depending on your state of residency and the purpose for which we process personal information about you.

How to make a request: You can submit a request online at our privacy request form. You can also call us at (866) 987-2980, email us at support@ekonorthamerica.com, use our contact form, or write to us at the address in section 13. Tell us which right you want to exercise. We will confirm receipt and respond within the time the applicable law allows (45 days in California, extendable once). You may also use the Cookie preferences link in the footer to manage your cookie preferences, and the "Your Privacy Choices" page to opt out of the sale or sharing of personal information.

Verification. In order for us to look into your request, we may first need to verify your identity. We will match the details in your request (for example name, email address and a recent order number) against our records before acting on it. For deletion or access requests we may ask for one more piece of information.

Authorized agents. You may designate someone else to make privacy requests for you. Authorized agents must provide us with valid written authorization (including the agent's name, email address and phone number); you must verify your own identity as described above; and the agent must follow the instructions in this section to make the request. Absent a power of attorney, we will also require you to verify your own identity.

Appeals. If we deny all or part of your privacy request, you may have a right to appeal that decision. To appeal, contact us using the methods in section 13 and include your name, email address, physical address, the type of request you made, and the reason for requesting an appeal.

Complaints. If you are not satisfied with our response you may contact your state Attorney General or, in California, the California Privacy Protection Agency.

7. California disclosures — Personal Information Privacy Chart

Certain laws require us to tell you about the personal information we collect about you by reference to the "legal categories" of personal information listed in the law. The chart below groups what is described above into those categories and shows the source, the purpose, the categories of third parties to whom we disclose it for a business purpose, and whether it is sold or shared. It covers the past 12 months.

We may also collect information to comply with applicable law or regulatory requirements or legal requests.

In the preceding twelve (12) months, we have disclosed the following categories of personal data for a business purpose: Category A (Identifiers); Category B (California Customer Records); Category D (Commercial Information); Category F (Internet and Network Activity); Category G (Geolocation Data); Category H (Sensory Data); Category I (Professional or Employment-Related Information). Since October 2026, we have also shared the following categories with Google for advertising, only for visitors who chose Accept in the cookie banner: Category A (Identifiers); Category B (California Customer Records), in hashed form; Category D (Commercial Information); Category F (Internet and Network Activity). We have not sold personal information for money.

8. How we protect personal information

We strive to take appropriate security measures to help safeguard your personal information from unauthorized access and disclosure. The website and checkout run on Shopify, which encrypts data in transit (TLS) and is certified to PCI DSS Level 1 for payment processing. Only authorized employees are allowed to access personal information, and they may only access it for permitted business functions. While we cannot guarantee that loss, misuse, or alteration will never occur, we use reasonable efforts to prevent it; no method of storage or transmission over the Internet is completely secure. If you believe your account has been compromised or you suspect any type of data breach, please contact us at support@ekonorthamerica.com.

9. How long we keep personal information

We will only keep your personal data for as long as it is necessary for the purposes set out in this Policy, unless a longer retention period is required or permitted by law (such as business records, tax, accounting or other legal requirements). In determining data retention periods, we take into consideration the applicable law, contractual obligations, the purposes, the necessity and your expectations.

When we have no ongoing legitimate business need to process your personal data, i.e., when we no longer have a legal basis in accordance with applicable law, we will either delete or anonymize it and we will make such determination based on applicable laws.

The lifetime of each cookie set by the website is listed in our Cookie Policy.

10. Children's privacy

Our website is not aimed at or intended for children. EKO does not knowingly collect, receive, disclose, sell or share information from children under the age of 16. If we learn that we have inadvertently collected personal information relating to a child under the age of 16, we will delete that information from our records. If you believe we might have any information from or about a child under age 16, please let us know using support@ekonorthamerica.com.

11. Website Terms and Conditions

Our Terms and Conditions govern your use of the website, including the governing law and where disputes are heard. If there is a conflict between the Terms and this Privacy Policy about personal information, this Privacy Policy applies.

12. Changes to this Privacy Policy

We may update this policy when our practices, our vendors or the law change. The date at the top shows the latest version. If a change materially affects how we use information we already hold about you, we will tell you (for example by email or a notice on the website) before it takes effect.

13. Contact us

For questions regarding this Privacy Policy or to submit any of the requests mentioned above relating to your personal information, contact us using any of the following options:

Email: support@ekonorthamerica.com Telephone: (866) 987-2980 (8:00 AM–5:00 PM Pacific Time, 7 days a week) Contact form: ekocommercial.com/pages/contact Mail: EKO North America, Customer Support (Attn: Privacy), 4205 Southwest High Meadow Avenue, Palm City, Florida 34990, United States