Effective date: Oct 8, 2026

Who we are and what this covers

HCO Innovations (“HCO,” “we,” “us,” or “our”) provides forklift fleet and warehouse consulting services. This policy explains how we handle information collected through www.hcoinnovations.com and related website inquiries.

This notice covers the public website. Client fleet tracking, telematics, and other service platforms may have separate privacy notices and contract terms. Review the notice that applies to any service you use.

Information we collect

Website inquiries. Contact Us collects your name, email address, and message. The Pedestrian Detection inquiry form collects your name, company, phone number, and email address. The Fleet Management Portal inquiry form also asks for fleet size. These forms send your request by email to the appropriate HCO contacts; Armatus receives copies from the forms it supports. If you contact us by email or phone, we receive the information you choose to provide.

Readiness assessment. You can complete the assessment without providing contact details. Your answers, progress, and result are saved in session storage in the current browser tab so you can resume the check. Contact details are not included in that saved browser state. Restarting the assessment or successfully submitting a request clears it; simply closing the assessment window does not. The code sets no separate timed expiry; the browser controls the tab session’s lifetime.

Fleet review requests. When you submit a request, your name, email address, optional phone number, assessment answers, score, result, submission time, IP address, and browser user-agent information are stored in the website database. Contact details, answers, score, result, and time are included in a notification to the team. Website analytics and security processing may also occur while you take the assessment.

Technical and security information. Wordfence and Armatus website monitoring process information such as IP address, requested path, request method, browser user agent, event time, and security-rule or action details to help protect and operate the site. Google reCAPTCHA is enabled on Contact Us to help distinguish genuine requests from automated abuse.

Please avoid sending passwords, payment card details, or sensitive personal information through these forms.

How we use information

We use website inquiries and the information you provide to:

Respond to your questions and requests and communicate about relevant HCO services.
Understand your fleet needs, prepare for a requested review, and manage the resulting conversation.
Operate and support the website and assess whether visitors can successfully contact us.

We use website analytics to understand which pages and contact paths are useful and to improve the website.

Google Analytics and website activity

We use Google Analytics 4 to understand website use and measure interactions, including page visits, successful inquiry submissions, and clicks on telephone links. A telephone-link click measures contact intent; it does not tell us whether a call connected or record its contents.

Our custom inquiry and telephone-link measurement events send event labels, form type or status, and page information. They do not include the form fields containing your name, email address, phone number, assessment responses, or message. This statement describes those custom events; Google Analytics also processes website usage and technical information.

Google Analytics uses first-party cookies, including _ga and _ga_7B83C5H9PW, to distinguish visitors and sessions. The current tag uses Google’s default cookie settings, with a nominal two-year duration that can refresh with activity; browser restrictions can shorten storage. Cookie lifetime is separate from the Analytics data-retention settings below. Analytics processes usage, browser and device information, and location derived from technical information. City-level location and granular device collection are enabled. Your browser also connects to Google services, which may receive network information such as your IP address.

How Google uses information from sites or apps that use its services

Google Signals is currently disabled and this Analytics property has no linked Google Ads account. The property’s ads-personalization permission remains enabled. These configuration facts do not establish that all Google processing is anonymous or that Google’s own uses are limited to this website; see Google’s explanation above.

Cookie choices

You can use your browser settings to manage cookies. Blocking some cookies may affect website functionality. Google also provides an Analytics opt-out browser add-on for supported browsers; see its instructions and limitations below.

Google Analytics opt-out browser add-on

Google Analytics currently loads when you visit the website without a consent banner or consent gate. Google reCAPTCHA can set its _GRECAPTCHA security cookie when it runs. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.

Who receives information

Website inquiries are routed to HCO staff and, for the supported forms, Armatus. Armatus provides website administration, technical support, monitoring, and backup handling. Receiving email systems retain notification copies for follow-up. Readiness requests are also stored in the WordPress database.

The verified services supporting this website include Hostinger for hosting, Microsoft 365 for sending website email, Google Analytics for measurement, Google reCAPTCHA for contact-form abuse protection, Wordfence for security, and Google Drive for Armatus-managed backup storage. These services process information in their respective roles. Links to third-party resources are addressed below.

How long we keep information

Readiness requests. The current website setup has no automatic expiry or scheduled purge for these database records. They remain until separately deleted by an administrator.

Analytics. The property is configured for two months of event-data retention and fourteen months of user-data retention. Google’s user-data retention setting also applies to key-event data. User-level retention resets on new activity. These settings do not set a deletion deadline for standard aggregated reports; Google applies its documented deletion processes.

Managed backups. Armatus creates daily database and site-code backups in Google Drive, configured for six-month retention. Removing an active record does not immediately remove copies from backups. This period describes Armatus-managed backups. Retention for other provider or historical backup copies may differ.

Security and mail handling. Wordfence traffic records are configured for a maximum of thirty days and 2,000 rows. The website mail plugin does not keep a full message archive. It keeps the latest error separately from rate-limit state; the rate-limit state has a one-hour transient expiry, which does not establish a one-hour expiry for the latest error. No single retention period applies across receiving email systems, hosting logs, and central monitoring; periods vary by system and provider.

Protecting information

The website uses security monitoring and abuse controls, including Wordfence and reCAPTCHA. The website mail transport is configured to use Microsoft 365 with STARTTLS. These measures do not guarantee the security of every service or copy of information.

No method of transmitting or storing information is completely secure. Please contact us if you have a privacy or security concern.

Your choices and privacy requests

You can choose not to submit a contact or fleet review form. You may contact us to ask about information you have provided or to request a correction or deletion. The rights available to you and any exceptions depend on applicable law.

For questions or requests concerning your information, contact the privacy address below. We may need information to identify the relevant records and verify a request. Available rights, exceptions, and the handling of retained copies depend on the applicable law and systems involved.

Other websites and updates

Our website links to third-party resources and platforms. Their privacy practices are described in their own notices. We may update this policy to reflect changes to our practices or legal requirements. The effective date above identifies the current version.