Privacy Notice

Core Asset Solutions (“we”, “our”, or “us”) respects the privacy of our clients, partners, and website visitors. This page summarizes how we collect, use, and protect information in connection with our IT asset disposition, data destruction, and environmental reporting services.

Information We Collect

We may collect:

  • Contact details entered such as name, email address, phone number, and organization.
  • Pickup and service information (locations, schedules, and attached files).
  • Portal or login information necessary to administer client portal accounts.
  • Technical data such as browser type, requested page, referring page, approximate country, region, city, postal area, timezone, and Cloudflare data-center location.
  • Anonymous website identifiers, referral-attribution records, browsing-session records, pageviews, selected website interactions, and form-conversion events.

How We Use Information

We use collected information to:

  • Provide, schedule, and document pickups and related services.
  • Estimate pickup load size from files attached.
  • Respond to inquiries and support requests.
  • Maintain and improve our website and customer experience.
  • Measure referral-link performance, understand anonymous website journeys, connect significant form submissions to a referring representative, and notify our team when an attributed visitor initiates a phone call through a website phone link.

Referral Attribution and Anonymous Journey Analytics

Our website uses a first-party referral-attribution and anonymous journey-analytics system. When a visitor enters through an approved representative link, such as a URL containing ref=101, the website records the referring representative, removes the referral parameter from the visible URL, and uses first-party cookies containing random identifiers to associate later website activity with that referral.

The system may record the initial landing page, later pages viewed, browsing sessions, selected button and accordion interactions, phone-link and email-link clicks, file-download clicks, form starts, validation events, submission attempts, and successful form conversions. A phone-link event means that the visitor clicked a tel: link and initiated the device's calling flow; it does not confirm that a call connected, was answered, or how long it lasted.

The analytics records use randomly generated visitor, journey, session, event, and conversion identifiers. These identifiers do not contain a visitor's name, email address, telephone number, street address, or raw IP address. Sensitive form answers and uploaded-file contents are not copied into the analytics event tables. Form details continue to be handled through our secured form-submission process.

First-Party Cookies

The referral and journey system may use the following first-party cookies:

  • cas_visitor_id, generally retained for up to 365 days, groups sessions from the same browser profile.
  • cas_ref_first, cas_ref_first_at, and cas_ref_first_click, generally retained for up to 90 days, preserve the original referral attribution.
  • cas_ref_last, cas_ref_last_at, and cas_ref_last_click, generally retained for up to 90 days, record the most recent approved referral link used.
  • cas_ref_session, refreshed during activity and generally expiring after 30 minutes of inactivity, groups activity into a browsing session.
  • Short-lived referral-alert suppression cookies, generally expiring after 30 minutes, prevent repetitive referral-entry emails from the same browser and referral code.

These server-controlled cookies use security settings including Secure, HttpOnly, SameSite=Lax, and Path=/. They are not used to store a visitor's full browsing path; chronological events are retained in the protected analytics database. You can block or delete cookies using your browser settings, although doing so may prevent referral attribution and session continuity.

Analytics Storage and Retention

Anonymous referral, session, event, and conversion records are stored using Cloudflare services, including Cloudflare D1. Form attachments and secured submission records may be stored in Cloudflare R2. We retain these records only for legitimate operational, security, reporting, and recordkeeping purposes and may aggregate or delete detailed event records as they are no longer needed.

Data Protection

We take reasonable administrative, technical, and physical safeguards to protect the information we handle against unauthorized access, disclosure, alteration, or destruction.

Third-Party Sharing

We do not sell personal information. We may share limited information with trusted service providers who support our operations (for example, secure hosting, email, or analytics) subject to appropriate agreements.

Your Choices

If you would like to update your information, request a copy, or ask that we delete certain records where legally permissible, please contact us at [email protected].

Updates

We may update this Privacy Notice from time to time. When we make material changes, we will adjust the date at the bottom of this page.

Last updated: July 27, 2026. This page is provided as general information and is not legal advice.