PRIVACY POLICY

RSA Construction Group’S PRIVACY POLICY AND
CCPA/CPRA PRIVACY NOTICE FOR CALIFORNIA CONSUMERS

Introduction

RSA Construction Group (“RSA,” “we,” “us,” “our”, and/or “company”) respects your privacy and is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we at RSA may collect, use, and share personal information about you that we obtain from you or through www.amesconstruction.com and other websites and applications that link to this Privacy Policy (collectively, the “Websites”).

“Personal information” in this Privacy Policy includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a California resident or a household. Personal information does not include publicly available information that is lawfully available to the general public.

We collect data about users of the Websites; about individuals who contact us online, by telephone or electronic means, or in person; about individuals who visit our facilities or operations; about individuals who attend events organized or hosted by us; about our customers or prospective customers (where these are natural persons) or their employees, agents, and representatives; and about others who express an interest in us or with whom we carry on business (collectively, these individuals about whom we collect data are referred to as “you” and “your” in this Privacy Policy).

This policy describes the types of information we may collect from you or that you may provide when you visit the Websites or otherwise contact us, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our website or submit information to us. By accessing or using our website and/or submitting information to us, you agree with this Privacy Policy. This Privacy Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Websites and/or provision of information to us after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

We are based in the United States and the information we collect is governed by U.S. law. If you are accessing the Sites from outside of the U.S., please be aware that information collected through the Websites may be transferred to, processed, stored, and used in the U.S. and other jurisdictions. Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the Websites or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of information about you in the U.S. and other jurisdictions as set out in this Privacy Policy.

1.      SCOPE

This Privacy Policy describes the treatment of information provided or collected on the Websites. RSA follows this Privacy Policy in accordance with applicable law in the places where we operate. In some cases, we may provide additional data privacy notices specific to certain regions. Those terms are to be read in conjunction with this policy.

Please keep in mind that when you provide information to us on a third-party site or platform, the information you provide may be separately collected by the third-party site or platform. Only the information we directly collect is covered by this Privacy Policy, and the information the third-party site or platform collects is subject to the third-party site or platform’s privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly. Please also keep in mind that the Websites and applications may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave the Websites or applications and to read the privacy policies of other sites that may collect your personal information.

2.      TYPES OF INFORMATION WE COLLECT

We collect two basic types of information: personal information and anonymous information. We collect certain personal information that you provide to us while signing up for our company newsletter. Personal information means information that identifies (whether directly or indirectly) a particular individual, including:

We also receive anonymous information which means information that does not identify a specific individual.

3.      HOW WE COLLECT DATA

We collect personal information you provide directly to us when you sign up for our company newsletter and through our website. We also collect information passively from you provided by your website browser when you visit our website and applications through the use of cookies, including through the Craft platform and Vimeo, such as, but not limited to, your IP address, page(s) visited, and frequency of visits.

4.      USE OF PERSONAL INFORMATION AND DATA

RSA collects and processes personal information from you primarily to communicate, and uses anonymous data to maintain, operate, and improve our website, including to analyze website traffic and run analytics, remember your preferences, and optimize your experience by personalizing content.

5.      SHARING YOUR PERSONAL INFORMATION WITH OTHERS

RSA does not sell, share or otherwise disclose for monetary consideration your personal information to other parties. RSA may share anonymous data to analyze our website traffic and improve its performance.

6.      DATA SECURITY

The security, integrity, and confidentiality of your personal information are extremely important to us. RSA has implemented technical and administrative security measures that are designed to protect personal information from unauthorized access, disclosure, use, and modification. Please be aware that, despite our best efforts, no security measures are perfect or impenetrable.

7.      COOKIES AND ANALYTICAL TOOLS

When accessing and visiting our website, data may be collected from you through the use of cookies, which are sent to your computer and saved automatically. We use cookies primarily to maintain, operate, and improve your experience on our website, including to analyze website traffic and run analytics, remember your preferences, and optimize your experience by personalizing content.

While, many websites and applications, including our Websites, at this time do not recognize automated browser signals regarding tracking mechanisms, such as “do not track” instructions, you can generally express your privacy preferences regarding the use of most cookies and similar technologies through your web browser. Look under the heading “tools” (or similar heading) in your particular browser for information about controlling cookies. In most instances, you can choose to have your browser warn you each time a cookie is being sent, giving you the option to decide whether to accept it or not. You can also generally set your browser to turn off cookies. Like most websites, if you turn your cookies off, some of the features on the website may not function properly. You can also delete cookies already on your device via the settings of your web browser. To learn more about cookies please visit https://www.allaboutcookies.org/.

8.      RETENTION OF PERSONAL INFORMATION

RSA processes and stores your personal information based on its business needs, to the extent needed to maintain our relationship with you, to the extent requested by you by signing up for communications from us, and to comply with legal obligations.

9.      NOTICE REGARDING MINORS

We do not knowingly collect, maintain, or use personal information from children under 18 years of age, and no part of our website is directed to children. By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

If you learn that a child has provided us with personal information in violation of this Policy, or you are under 18 and would like information provided to us removed, please alert us at Optout@rsaconstructions.com.

10.     NOTICE TO CALIFORNIA RESIDENTS

California consumers have additional rights under the California Consumer Privacy Act (“CCPA”). The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

Your Rights and Choices Under the CCPA

Right to Request Disclosure About the Data Collected About You

If you are a California resident, you have the right to request that RSA disclose certain information to you about our collection and use of your personal information. Once we have received and verified your request, we will disclose to you:

However, RSA will not at any time in response to a request disclose a consumer’s financial account number, an account password, or security questions and answers.

RSA is not required to retain any personal information collected for a single, one-time transaction, if the information is not regularly retained by RSA, or re-identify any anonymous or de-identified information, in order to disclose that information to you.

Correction and Deletion Request Rights

If you are a California resident, you have the right to request that RSA correct or delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we have received and verified your request, we will correct or delete your personal information from our records, unless an exception applies.

We may deny your request if retaining the information is necessary for us or our service provider(s) to:

  1. Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
  2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
  3. Debug products to identify and repair errors that impair existing intended functionality.
  4. Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
  5. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.).
  6. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
  7. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
  8. Comply with a legal obligation.
  9. Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Exercising Access and Deletion Rights

If you are a California resident and you wish to exercise your rights to access the information RSA has collected about you and/or request that RSA correct or delete the information about you, you will need to submit a verifiable consumer request so that RSA is able to corroborate your identity and provide your information to you.

To exercise your rights, please submit a verifiable request by:

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information for data and to delete data. You may only make a verifiable consumer request for data access twice within a 12-month period.

The verifiable consumer request must:

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

Making a verifiable consumer request does not require you to create an account with us. However, we do consider requests made through your password protected account sufficiently verified when the request relates to personal information associated with that specific account. If you have an account with us, we will deliver our written response to that account.

We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. Any request to delete submitted through an online request you will first be required to submit the request, and the second, separately confirm that you will want the information deleted.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights after you have exercised those rights. Unless permitted by the CCPA, in response to exercising your rights, we will not:

11.      CHANGES TO THIS PRIVACY POLICY

Please note that we may update or change this Privacy Policy from time to time at our discretion. When we make changes to this Notice, we will post the updated notice on the Website and update the Privacy Policy’s effective date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes. The most current version of this Privacy Policy will govern the use of your information.

This Privacy Policy was last updated on November 1, 2022.

12.      CONTACT US

If you have any questions or comments about this Privacy Policy, the ways in which RSA collects and uses your information, or about this Notice, please contact us at Optout@rsaconstructions.com.