Privacy Policy
Effective Date: July 24, 2023
Last Updated: July 7, 2026
At Hello Gravel, Inc. (“Hello Gravel,” “we,” “us,” or “our”), we take your privacy seriously. This Privacy Policy describes how we collect, use, and share your personal information and the choices you have regarding that information. It applies to hellogravel.com and all related services (together, the “Services”). This Privacy Policy is part of our Terms of Service, which we encourage you to review.
Table of Contents
- Personal Information We Collect
- How We Collect Your Information
- Why We Collect Your Information
- Information Shared With Third Parties
- Information Disclosed for Business Purposes
- Cookies and Similar Technologies
- Links to Third-Party Sites
- Your Privacy Rights
- How to Exercise Your Privacy Rights
- Eligibility for Services
- Security and Retention
- Geographic Scope of Services
- Privacy Policy Updates
- Contact Us
1. Personal Information We Collect
In the twelve (12) months prior to the “Last Updated” date of this Privacy Policy, we have collected the following categories of personal information:
- Identifiers and contact information such as your name, postal address, email address, phone number, IP address, and account name
- Payment information such as credit or debit card number (processed securely through our payment processor; we do not store full card numbers)
- Commercial information such as purchase history, order details, delivery address, and product preferences
- Internet and device activity such as browsing history on our site, search queries, pages visited, click behavior, and information about your device, browser, and operating system
- Geolocation data such as your delivery address and approximate location derived from your IP address
- Communications such as customer service inquiries, emails, and messages you send us
- Sensitive personal information such as account login credentials and financial account or credit/debit card numbers in combination with required security or access codes
Personal information does not include publicly available information. With respect to sensitive personal information: Hello Gravel does not store full payment card numbers (those are processed and held by our payment processor, Stripe). To the extent we hold account login credentials, we use and retain them only as necessary to provide account-related services and do not use them for any secondary purpose.
2. How We Collect Your Information
We collect personal information in the following ways:
- Directly from you when you place an order (via our website, phone, SMS, or chat), create an account, request a quote, fill out a form, contact customer support, or otherwise interact with our Services
- Automatically through your use of our website or other digital channels, including via cookies, pixels, session recording technologies (with payment and form fields masked), and server-side tracking tools that collect device and behavioral data
- From third parties such as advertising networks, analytics and session recording providers, email marketing platforms, call tracking services, and payment processors
- From public sources where relevant to delivering or verifying your order
3. Why We Collect Your Information
We collect and use your personal information for the following purposes:
- Processing and fulfilling orders, including coordinating delivery with our supplier and hauler network
- Providing customer service and responding to inquiries
- Verifying your identity and preventing fraud
- Processing payments securely
- Sending order confirmations, delivery updates, and service-related communications
- Sending marketing communications (you may opt out at any time)
- Improving our AI-powered tools and assistants, including by using interactions with Chuck (our AI conversational assistant) to train and refine AI systems, subject to our Privacy Policy
- Analyzing how our Services are used so we can improve them
- Complying with legal and regulatory obligations
- Defending against legal claims
We do not use your personal information to build inferred profiles about your psychological characteristics, predispositions, or aptitudes, and we do not collect biometric information.
4. Information Shared With Third Parties
Hello Gravel does not sell your personal information in exchange for money.
We do share certain personal information with third-party advertising and marketing platforms for the purpose of cross-context behavioral advertising, ad attribution, and measuring ad performance. This sharing occurs through two methods: (1) browser-based tracking technologies, such as pixels and cookies placed on our website; and (2) server-side conversion APIs, through which we upload conversion data (such as a purchase or quote request) directly from our servers to advertising platforms. Server-side uploads may include a “hashed” version of your email address or phone number — meaning the value is mathematically scrambled before transmission so that the original is not directly readable — which advertising platforms use to match your activity to their ad records. This may constitute “sharing” under California law. You have the right to opt out of this sharing — see Section 8 for details.
In the preceding twelve (12) months, we have shared the following categories of personal information with advertising and marketing partners:
| Categories of Third Parties | Categories of Personal Information |
|---|---|
| Advertising networks (e.g., Meta, Google, Bing) and marketing platforms | Identifiers such as email address, phone number, IP address |
| Marketing analytics platforms | Commercial information such as purchase and order history |
| Social networks | Internet activity such as pages visited, click behavior; identifiers such as hashed email and phone number shared via server-side conversion APIs for ad attribution |
We do not knowingly sell or share the personal information of consumers ages 16 and under.
5. Information Disclosed for Business Purposes
We disclose personal information to the following categories of third parties for legitimate business purposes:
| Categories of Third Parties | Categories of Personal Information |
|---|---|
| Suppliers and haulers who fulfill your order | Name, delivery address, phone number, order details |
| Payment processors (e.g., Stripe) | Name, billing address, payment card information |
| Analytics, session recording, and behavioral analytics providers (e.g., PostHog) | Device and behavioral data, IP address, on-site interaction recordings (with payment and form fields masked) |
| Email and communications platforms | Name, email address |
| Email marketing and CRM platforms (e.g., Klaviyo) | Name, email address, browsing and cart activity tied to customer email for automated marketing communications (e.g., abandoned-cart reminders) |
| Call tracking and attribution providers (e.g., CallRail) | Phone number, call activity, ad campaign attribution data associated with per-visitor session |
| AI conversational assistant provider (Chuck) | Name, contact information, order and inquiry details shared during chat, SMS, or voice interactions |
| Legal, audit, and regulatory bodies | Information required by law or legal process |
| Potential buyers in a business transaction | Personal information as part of due diligence (subject to confidentiality obligations) |
We only allow service providers to handle your personal information if they take appropriate measures to protect it and are contractually prohibited from using it for any purpose other than providing services to us.
6. Cookies and Similar Technologies
A “cookie” is a small piece of text stored by your browser when you visit a website. We also use similar technologies such as pixels and server-side tracking to understand how users interact with our Services.
We and our service providers use these technologies to:
- Remember your session and shopping cart
- Understand how you navigate and use our site
- Measure and improve ad performance
- Deliver interest-based advertising on third-party platforms
- Detect fraud and protect our Services
We work with third-party analytics, advertising, and communications providers that may place their own cookies and tracking technologies on our Services. These currently include:
- PostHog — product analytics and session recording (with payment and form fields masked). Persistent cookie; up to 2 years.
- Google Analytics 4 — website traffic analytics. Persistent cookie; up to 2 years.
- Microsoft Advertising (Bing) and Meta (Facebook) — advertising pixels that fire on page views and conversions. Session and persistent.
- First-party ad attribution cookie — stores ad click IDs and campaign parameters. Persistent; 90 days.
- Klaviyo — email marketing and automation platform that tracks browsing and shopping cart activity via cookie and associates it with a customer’s email address (once known) to enable features such as abandoned-cart reminders.
- CallRail — call tracking and attribution service that dynamically assigns a unique phone number to each visitor session to attribute phone calls to advertising campaigns. Associated session data is linked to your visit and ad click records.
- Stripe — payment fraud-prevention cookies active during the checkout process.
- AI Chat Widget — our third-party AI-powered chat service (“Chuck”) may set cookies or similar identifiers to maintain session continuity across chat, SMS, and voice interactions.
Managing cookies: You can adjust your browser settings to block or delete cookies. Note that blocking certain cookies may affect the functionality of our Services. You can also opt out of interest-based advertising through:
Global Privacy Control (GPC): We honor opt-out preference signals sent through the Global Privacy Control. You can enable GPC through your browser or a supported browser extension at globalprivacycontrol.org.
Do Not Track: We do not currently respond to browser-level Do Not Track signals, which are not standardized. We recommend using GPC instead.
7. Links to Third-Party Sites
Our Services may contain links to third-party websites that we do not own or control. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.
8. Your Privacy Rights
Depending on where you live, you may have the following rights regarding your personal information.
All U.S. Residents
Regardless of where you live in the United States, you may:
- Opt out of receiving marketing emails from us at any time by clicking “unsubscribe” in any marketing email or by contacting us at privacy@hellogravel.com.
- Opt out of the sharing of your personal information for cross-context behavioral advertising (including through pixels, cookies, and server-side APIs) by submitting a request to privacy@hellogravel.com.
- Enable a Global Privacy Control (GPC) signal in your browser to automatically communicate an opt-out preference (see Section 6).
Depending on the state in which you reside, you may have additional rights. See “California Residents” and “Residents of States with Applicable Privacy Laws” below.
California Residents (CCPA/CPRA)
- Right to know what personal information we collect, use, and share
- Right to delete personal information we have collected from you
- Right to correct inaccurate personal information
- Right to opt out of sharing your personal information for cross-context behavioral advertising
- Right to limit use of sensitive personal information
- Right not to receive discriminatory treatment for exercising these rights
Residents of States with Applicable Privacy Laws
If you reside in a state that has enacted a consumer privacy law, you may have rights that include:
- Right to confirm whether we are processing your personal information and to access that information
- Right to correct inaccuracies in your personal information
- Right to delete personal information we have collected from you
- Right to data portability — to obtain a copy of your personal information in a portable format
- Right to opt out of the sale of personal information, processing for targeted advertising, and profiling that produces legal or significant effects
- Right not to receive discriminatory treatment for exercising these rights
Hello Gravel does not sell personal information in exchange for money. We do not use personal information for profiling that produces legal or significant effects on you, such as decisions affecting your credit, employment, or legal status.
9. How to Exercise Your Privacy Rights
To exercise any of your privacy rights, contact us at:
- Email: privacy@hellogravel.com
- Legal inquiries: legal@hellogravel.com
- Mail: Hello Gravel, Inc., 1033 Jackson Ave Suite 202, New Orleans, LA 70130
We will respond within forty-five (45) days of receiving your request. We may extend this period by an additional forty-five (45) days if we notify you within the original period.
To process your request, we may need to verify your identity. We will ask for information sufficient to confirm you are the person whose information we hold. Any information collected for verification will only be used for that purpose.
Authorized agents: If you are submitting a request on behalf of another person, you must provide documentation of your authorization.
Appeals: If we decline your request, we will explain why. Where applicable law provides a right to appeal, we will include instructions in our response.
10. Eligibility for Services
Our Services are intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at privacy@hellogravel.com and we will delete it promptly.
11. Security and Retention
Security: We use reasonable physical, technical, and administrative safeguards to protect your personal information. However, no system is completely secure, and we cannot guarantee that unauthorized access, data loss, or breaches will never occur. We will notify you and any required regulatory authorities of a suspected breach within the time periods required by applicable law.
You are responsible for maintaining the security of your account credentials. Please notify us immediately at privacy@hellogravel.com if you suspect unauthorized access to your account.
Retention: We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. When information is no longer needed, we delete or anonymize it. We may retain certain information longer where necessary to investigate or defend against potential legal claims.
12. Geographic Scope of Services
Hello Gravel’s Services are operated from the United States and are intended solely for users located in the United States. We do not knowingly offer our Services to, or solicit personal information from, individuals located outside the United States. If you are accessing our Services from outside the United States, please be aware that your use is outside the intended scope of these Services and that U.S. privacy law will govern any information you provide.
13. Privacy Policy Updates
We update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. For material changes — meaning changes that meaningfully affect how we collect, use, or share your personal information — we will provide notice by posting a prominent notice on our website and, where we have your email address, by sending you an email notification. Your continued use of our Services after the effective date of a material change constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.
14. Contact Us
For questions or concerns about this Privacy Policy or our data practices:
Email: privacy@hellogravel.com
Legal inquiries: legal@hellogravel.com
Mail: Hello Gravel, Inc., 1033 Jackson Ave Suite 202, New Orleans, LA 70130