Privacy Policy

Introduction

Engineering Specialists, Inc. ("ESI Nationwide," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit www.esinationwide.com (the "Site"). It is written for visitors in the United States.

Please review it alongside our Cookie Policy, which describes the specific cookies and similar technologies we use and how to control them. We do not require you to agree to non-essential cookies to use the Site — you choose through our cookie banner.

Information we collect

Information you provide directly

We collect personal information that you voluntarily provide when you:

• Submit a contact or consultation form: name, email address, phone number, company name, and the contents of your message.
• Subscribe to our newsletter: email address and, optionally, your name.
• Submit a case or request services: project details and any files you choose to upload.

Information collected automatically

When you visit our Site, certain information is collected automatically, including:

• Device and browser information: IP address, browser type and version, operating system, device type, and approximate location derived from your IP address.
• Usage data: pages visited, time spent on pages, referring URL, click patterns, and the date and time of your visit.
• Marketing attribution: if you arrive from a marketing campaign, we store the campaign parameters (for example utm_source, utm_medium, and ad-click identifiers such as gclid), the referring URL, and your landing page in your browser, so we can attribute an inquiry to the marketing source that produced it.
• On-site testing: a randomly generated identifier stored in your browser to keep you in a consistent group during A/B tests of our pages.
• Call tracking: unless you opt out of advertising cookies, our call-tracking provider displays a tracking phone number and stores cookies to attribute phone calls to their marketing source.
• Cookies and similar technologies: see our Cookie Policy for the full list and your choices.

The marketing-attribution, on-site-testing, and call-tracking items above are not collected if you decline in our cookie banner or if your browser sends a Global Privacy Control (GPC) signal; anything already stored in that session is deleted when you opt out.

Information from third parties

We may receive information about you from third-party platforms if you interact with our content on social media or if you are referred to us by a partner or client.

Categories of personal information

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), the following table summarizes the categories of personal information we collect, why, and with whom we share it. We have not sold personal information for money in the preceding 12 months. We do "share" certain identifiers and internet-activity information for cross-context behavioral advertising as described below and in the next section.

Category	Examples	Business purpose	Shared for advertising?
Identifiers	Name, email, phone, company, IP address, cookie/online identifiers, A/B visitor ID	Respond to inquiries, provide services, security, analytics, attribution	Online identifiers only, unless you opt out
Customer records & commercial information	Company name, project or case details, files you upload	Provide and manage our forensic engineering and investigation services	No
Internet or network activity	Pages visited, referrer, clicks, campaign parameters, ad-click identifiers	Analytics, marketing attribution, ad-conversion measurement	Yes, unless you opt out
Geolocation	Approximate location derived from IP address	Analytics and understanding where inquiries originate	No
Inferences	Marketing source/segment inferred from the above	Allocate marketing resources effectively	No

How we use your information

We use the information we collect for the following purposes:

• Respond to inquiries: to reply to your contact form submissions, consultation requests, and case inquiries.
• Provide services: to manage your case, coordinate with our engineering and investigation teams, and communicate project updates.
• Send communications: to deliver our newsletter and updates you have opted into. You may unsubscribe at any time using the link in any email.
• Secure the Site: to protect our forms and infrastructure from spam and abuse.
• Improve our Site: to analyze usage patterns, run A/B tests, diagnose technical issues, and enhance the user experience.
• Attribute marketing sources and measure advertising: to understand which marketing channels drive inquiries and phone calls and to measure ad conversions.
• Comply with legal obligations: to meet applicable laws, regulations, and legal processes.

How we share your information

We do not sell your personal information for money. However, unless you opt out of advertising and call-tracking cookies, we allow Google and our call-tracking provider to receive certain online identifiers and activity data to serve and measure advertising. Under the CPRA this is considered "sharing" for cross-context behavioral advertising, and you can opt out at any time (see "Your privacy rights"). We share information with the following categories of recipients:

• Analytics providers: Google (Google Analytics via Google Tag Manager) receives website usage data to help us understand how visitors interact with our Site. This data may be processed on servers in the United States.
• Advertising and call-tracking providers: Google (Google Ads) and CallRail receive online identifiers and activity data to attribute inquiries and phone calls to marketing sources and to measure ad conversions — unless you opt out.
• Security providers: Cloudflare provides bot and abuse protection (Turnstile) for our forms.
• Email marketing and CRM providers: we use third-party platforms to deliver newsletters, manage client communications, and store contact information and engagement data.
• Authentication providers: Clerk authenticates our staff in the private administrative area; this does not apply to ordinary visitors.
• Project management and service delivery providers: we use third-party platforms to coordinate and deliver our forensic engineering and investigation services.
• Social media platforms: if you interact with our content on social media, those platforms may collect information according to their own privacy policies.

We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Cookies and tracking technologies

Our Site uses cookies and similar technologies to operate, secure, and analyze the Site and to support our advertising. Analytics and advertising technologies run by default under a U.S. opt-out model and stop (with stored identifiers cleared) when you opt out or your browser sends a Global Privacy Control signal. For the full list, durations, and your controls — including "Cookie Settings," "Do Not Sell or Share My Personal Information," and Global Privacy Control — please see our Cookie Policy.

Your privacy rights

California residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA and CPRA:

• Right to know: you may request that we disclose what personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we have shared it.
• Right to delete: you may request that we delete the personal information we have collected from you, subject to certain legal exceptions.
• Right to correct: you may request that we correct inaccurate personal information we hold about you.
• Right to opt out of sharing: you may opt out of the sharing of your personal information for cross-context behavioral advertising. Use the "Do Not Sell or Share My Personal Information" link in our footer, select Opt out in the cookie banner, or send a Global Privacy Control signal (all achieve the same result). We do not sell personal information for money.
• Right to non-discrimination: we will not discriminate against you for exercising any of your privacy rights.

To exercise the right to know, delete, or correct, contact us using either method in the "Contact us" section below (email or phone). We will verify your identity before processing your request and respond within 45 days as required by law.

Global Privacy Control (GPC)

We honor the Global Privacy Control (GPC) signal. If your browser or extension sends a GPC signal, we automatically treat it as a request to opt out of the sale or sharing of personal information: advertising and analytics cookies stay off, our call-tracking script does not load, and first-party attribution and testing storage is not set. You can learn more about GPC at globalprivacycontrol.org.

Other states

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and other states with consumer privacy laws may have similar rights, including the right to access, correct, and delete personal data, and the right to opt out of targeted advertising. Please contact us to submit a request, and we will respond in accordance with applicable law.

Data retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Contact form submissions and case-related data are retained for the duration of the client relationship and for up to 7 years thereafter to meet legal and professional obligations, unless you request earlier deletion.
• Newsletter subscriber data is retained until you unsubscribe.
• Marketing-attribution and A/B-testing identifiers attached to an inquiry are retained with that lead record; the copies stored in your browser persist until you clear them or opt out.
• Analytics and call-tracking data is retained by Google and CallRail in accordance with their retention settings and our account configuration (typically up to 14 months for analytics and up to 12 months for call records).

Data security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or destruction. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Children's privacy

Our Site is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

Links to third-party sites

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Contact us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, you may contact us by email or phone: