Privacy Policy

Revised: August 1, 2024

Your information privacy is important to us. We provide this Privacy Policy to explain how we collect, use, protect, and disclose information and data when you use the Graniterock website (“Site”) and any other services offered by Graniterock, and any other time you interact with our Company (“Services”). This Privacy Policy also explains your choices for managing your information preferences, including opting out of certain uses of your Personal Information (defined below). This Privacy Policy applies to all users of the Site and Services. The Site and Services are provided by Graniterock (“Company” “we” “our” “us”).

BY USING THE SITE OR SERVICES, YOU ARE CONSENTING TO THIS PRIVACY POLICY. PLEASE READ IT CAREFULLY.

1. Personal Information We Collect

We collect the following categories and types of “Personal Information”:

Contact Information: your first and last name, shipping address, billing address, email address, and phone number;
Other identifying information: IP address, user ID, passwords and any security information for authentication and access;
Financial Information: credit card, debit card, bank account information and any other financial data required for credit applications;
Demographic information: gender, age, employment information and salary information;
Audio and visual information: security video footage, voice recordings and photos;
Internet or other electronic activity: your browsing and click history, including information about how you navigate within our Site and Services and which elements of our Site and Services you use the most;
Commercial information: products or services viewed on our Site or purchased; and
Inferences drawn from the categories described above in order to create a profile about you to reflect your preferences, characteristics, behavior and attitude.

2. How We Use Personal Information

We use your Personal Information for the following categories of use:

Transactional Purposes: We use your contact information, financial information, and commercial information to:
- Receive, process, confirm, send and track your order or project;
- Provide you with credit to finance your project; and
- Communicate with you about your order or project.
Analytical Purposes: We use your other identifying information, internet activity and browsing history, commercial information, and demographic information to analyze preferences, trends and statistics.
Marketing and Promotional Purposes: We use your contact information, commercial information, demographic information, internet or other electronic activity, and inferences to:
- Inform you of our new products, services and offers;
- Administer surveys about our projects; and
- Provide you with other information from and about our Company, including personalized marketing communications.
Maintenance and Improvement of the Site and Services: We use your contact information, commercial information, and internet activity and browsing history to:
- Provide you with the Site and Services;
- Handle your customer services requests; and
- Help us diagnose technical and service problems and administer the Site and the Services.
Security and Fraud Prevention: We use your contact information, other identifying information, commercial information, audio and visual information, financial information, internet activity and browsing history, and inferences to protect the Site and Services, our Company, and others and to prevent fraud, theft and misconduct.

3. Sources of Personal Information

We collect Personal Information from the following sources:

We collect information directly from you. We collect contact and demographic information directly from you. We also collect financial information from you.
We collect information about you from third parties. We collect your Personal Information from third parties, such as when we conduct credit checks after you submit a credit application and from our Partners.
We collect information from you passively. We collect internet or other electronic activity passively using tools like browser cookies. This activity is further described in the Cookies and Online Tracking sections below.

4. Categories of Third Parties We Share Personal Information With

Service Providers

From time to time, we may establish a business relationship with other businesses whom we believe trustworthy and who have confirmed that their privacy practices are consistent with ours (“Service Providers”). For example, we may contract with Service Providers to provide certain services, such as hosting and maintenance, data storage and management, and marketing and promotions. We only provide our Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider must agree to use reasonable security procedures and practices, appropriate to the nature of the information involved, in order to protect your Personal Information from unauthorized access, use, or disclosure. Service Providers are prohibited from using Personal Information other than as specified by us.

Our Affiliates

We may share Personal Information with businesses controlling, controlled by, or under common control with our Company.

Our Partners

We may share your Personal Information with third parties with which we have a business relationship with, such as third parties with whom we enter into joint ventures with (our “Partners”). We may share Personal Information with Partners so that they may provide you with services that you may wish to receive.

Corporate Transactions

If our Company is merged, acquired, or sold, or in the event of a transfer of some or all of our assets, we may disclose or transfer Personal Information in connection with such transaction. You will have the opportunity to opt out of any such transfer if, in our discretion, it will result in the handling of your Personal Information in a way that differs materially from this Privacy Policy.

Corporate Transactions

Compliance with Laws and Law Enforcement

We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose Personal Information and any other information about you to government or law enforcement officials or private parties if, in our discretion, we believe it is necessary or appropriate in order to respond to legal requests (including court orders and subpoenas), to protect the safety, property, or rights of our company or of any third party, to prevent or stop any illegal, unethical, or legally actionable activity, or to comply with the law.Please note that at Graniterock, no mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. Cookies

We use cookies (a small text file placed on your computer to identify your computer and web browser) and may use anonymous identifiers (a random string of characters that is used for the same purposes as a cookie). We use cookies and other similar technologies to analyze use of and improve the Site and Services. Most web browsers are initially set up to accept cookies. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent, however, certain features of the Site or Services may not work if you delete or disable cookies.

Some of our Service Providers (defined below) may use their own cookies, anonymous identifiers, or other tracking technology in connection with the services they perform on our behalf.

We use Google Analytics on the Site and Services to analyze how users use the Site and Services, and to provide advertisements to you on other websites. For more information about how to opt out of having your information used by Google Analytics, visit https://tools.google.com/dlpage/gaoptout/.

6. Managing Your Information Preferences

You can review, correct, update, or change your Personal Information or opt out of receiving certain e-mails by changing the relevant settings in your account or by e-mailing us at [email protected]. You can also opt out of receiving marketing e-mails from us by following the link provided at the bottom of all marketing e-mails you receive from us. You are able to opt out of receiving marketing e-mails from us, however, you cannot opt out of receiving all e-mails from us, such as e-mails about the status of your account. If you have questions or concerns regarding this Privacy Policy, please e-mail us at that same address.

7. Be Careful When You Share Information with Others

Please be aware that whenever you share information on any public area of the Site or Services, that information may be accessed by others. In addition, please remember that when you share information in any other communications with third parties, that information may be passed along or made public by others. This means that anyone with access to such information can potentially use it for any purpose, including sending unsolicited communications.

8. Security

We maintain physical, electronic, and procedural safeguards to protect the confidentiality and security of information transmitted to us. However, no data transmission over the Internet or other network can be guaranteed to be 100% secure. As a result, while we strive to protect information transmitted on or through the Site or Services, we cannot and do not guarantee the security of any information you transmit on or through the Site or Services, and you do so at your own risk.

9. Links

Our Site and Services may contain links to other websites or allow others to send you such links. A link to a third party's website does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party websites. You access such third-party websites or content at your own risk. You should always read the privacy policy of a third-party website before providing any information to the website.

10. Children's Privacy

The Site and Services are intended for users who are 13 years old or older. We do not knowingly collect Personal Information from children under the age of 13. If we become aware that we have inadvertently received Personal Information from a child under the age of 13, we will delete such information from our records.

11. Processing in the United States

Please be aware that your Personal Information and communications may be transferred to and maintained on servers or databases located outside your state, province, or country. If you are located outside of the United States, please be advised that we process and store all information in the United States. The laws in the United States may not be as protective of your privacy as those in your location. By using the Site or Services, you are agreeing to the collection, use, transfer, and disclosure of your Personal Information and communications will be governed by the applicable laws in the United States.

12. California Consumer Privacy Rights

If you are a California resident, you have certain privacy rights under the California Consumer Privacy Act (“CCPA Rights”). This Section describes those rights and how you can exercise them with our Company.

CCPA Rights Requests

Right to Know

You can request to know the following categories of Personal Information that we have collected about you:

Personal Information that we have collected about you;
Sources from which the Personal Information was collected about you;
Business or commercial purposes for which such Personal Information was collected and shared;
Personal Information which was sold or disclosed for business purposes or used for targeted advertising;
Third parties to whom Personal Information was sold (including category or categories or Personal Information for each third party to whom Personal Information was sold); and
Third parties with whom we shared your Personal Information.

You can also request to know the specific pieces of Personal Information that we have collected about you.

Right to Deletion and Correction

You can also request that we delete your Personal Information. We may not delete all of your Personal Information if one of the following exceptions applies:

Transactional: to complete a transaction for which the Personal Information was collected, provide a good or service requested by you, or perform a contract we have with you;
Security: to detect and prevent data security incidents;
Error Correction: to debug or repair any errors;
Legal: to protect against fraud or illegal activity or to comply with applicable law or a legal obligation, or exercise rights under the law, such as the right to free speech; or
Internal Use: to use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information (i.e. to improve our services).

We will also maintain a record of your CCPA Rights requests.

Please note that if we delete your Personal Information, some of our services will not work the same. For example, your previous opt out requests will not be saved and saved preferences and information will no longer be available.

You may also request that we correct certain inaccurate information that we have about you.

To submit a request to know, a request to correct or a request to delete, please visit us at http://www.graniterock.com/about-us/privacy-policy-form or call us toll-free at 1-877-897-2839 In order to verify your identity, you will need to provide at least three of the following pieces of your information: name, company name, telephone number, e-mail address, mailing address, and last transaction amount. We will match this information to the information on our systems. In order to designate an authorized agent to act on your behalf you must provide the authorized agent with written permission to do so, and your authorized agent must submit that written proof at the time they make the request on your behalf. If you wish to make multiple requests under this section, we recommend sending the deletion request last, as we will not be able to fulfill your other requests once we have deleted your information. We will maintain a record of your request to know or request to delete.

Do Not Sell or Share My Personal Information

Please note that, Graniterock does not presently “sell” or “share” Personal Information. Under CCPA, “sell” means to exchange personal information for money or any other valuable consideration and “share” means disclosing Personal Information to a third party for cross context behavioral advertising, in exchange for money or anything else of value.

However, if you would like to opt out of the “sale” or “sharing” of your Personal Information as permitted under CCPA in the event we do “sell” personal information in the future, you can do so and we will keep a record of this request. To submit a request to opt out of the sale or sharing of your Personal Information in the future, please email us at [email protected] or call us toll-free at 1-877-897-2839.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA Rights and we will not deny you goods or services, charge you a different price, or provide you with a lesser quality of goods or services if you exercise any of your CCPA Rights.

Segmentation and Automated Decision Making

We do not use segmentation, automated decision-making without human intervention, including profiling.

Right to Appeal

If you are a California resident and we denied your request, you may appeal the denial by clicking on the link to appeal found in the email communication we sent when your original request was completed.

Sensitive Personal Information

We do not collect or process Sensitive Personal Information, as defined by CCPA, for inferring characteristics or use or disclose Sensitive Personal Information for purposes other than those permitted by law.

Retention

We will store your Personal Information for as long as is reasonably necessary to fulfill the purposes described in this Privacy Policy or as required by law.

13. Privacy Policy Changes

We may change this Privacy Policy from time to time. If we decide to change this Privacy Policy, we will inform you by posting the revised Privacy Policy on the Site. Those changes will go into effect on the “Revised” date shown in the revised Privacy Policy. By continuing to use the Site or Services, you are consenting to the revised Privacy Policy.

14. Contact Us

If you have any questions or concerns, you may contact us at [email protected].

Please print a copy of this privacy policy for your records and PLEASE check the Site frequently for any changes.

About Us