Legal

Privacy Policy

Last updated October 29, 2026

This policy explains how Costa Outdoor Living collects, uses and shares information when you visit our website, contact us or work with us on a project.

Information we collect

  • Contact details: Name, email, phone, address, city and zip code you enter on our forms or share with our team.
  • Project details: Project type, budget, timing, notes, design files, photos, contracts and change orders.
  • Inquiry source: How you found us, including advertising source, a referrer's name or other source details provided to our team.
  • Website activity: Pages viewed, visible time on site, scroll depth, presence of pointer/touch/click/key interaction (not typed text), quick exits, Meta ad-click identifiers (fbclid), whether a Google ad-click identifier was present (the Google identifier itself is not retained), UTM campaign tags and placement labels, browser type and IP address.
  • Sale information: Contract or agreement value once you sign with us.
  • Team member information: First and last name, work email, phone, role, task responsibilities, invitation and account activation status. Team records may be created before the member activates their account.

How we use it

  • Respond to inquiries, schedule meetings and send project updates.
  • Design, permit, build and close out your project.
  • Measure and improve our Facebook and Instagram advertising.
  • Keep secure records and backups of your project.

Who receives it

  • Meta (Facebook / Instagram): Ad measurement and optimization via the Meta Pixel and Conversions API: page visits, engagement events (30 s / 60 s on site, 75% scroll), and for Meta-referred visits, MetaLanding, EngagedVisit (10 visible seconds plus interaction), DeepVisit (30 visible seconds and 50% scroll), and QuickBounce (exit before 5 visible seconds without meaningful interaction). These traffic-quality events share activity, campaign labels, browser type and IP address, not customer contact details. Lead, QualifiedLead and Purchase events include hashed email, phone, name, city and zip, and contract value.
  • Google Drive (Google Workspace): Storing copies of project documents and photos for our team.
  • Email delivery provider: Sending meeting confirmations, reminders and team notifications.
  • Cloud hosting and database: Running this website and our customer management system.

Hashed information is encoded before it is sent, but it can still be matched by Meta. Visitors from the EU, EEA, UK and Switzerland are not tracked by advertising tools on this site.

Your choices

You can turn off advertising sharing at any time on our Do Not Sell or Share My Information page. To ask what we hold about you, correct it, delete it, or opt out of sharing information already in our records, email info@costa-usa.com or call (949) 320-3433. You can also manage ad preferences in your Facebook/Instagram settings.

Retention and security

We keep project records for as long as needed to complete and warranty your project and meet legal obligations. Files are stored privately and only our team can access them.

Changes

We update this page whenever our practices change; the date above shows the latest revision.