Privacy Policy | Holliday Rock

Privacy Notice

Last reviewed and updated January 10, 2025

This Privacy Notice (“Notice”) applies to visitors, users, and others (“consumers” or “you”) who access Holliday Rock Co., Inc., a California corporation, and affiliate websites (collectively, “HRC,” “Company,” “we,” “us,” or “our.”) HRC has adopted this Notice to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act and implementing regulations, as may be amended or superseded from time-to-time (collectively referred to as the “CCPA.”) Any terms used in this Notice have the same meaning as defined in the CCPA.

Your privacy is important to us. This Notice explains how we collect, use, and disclose personal information of California residents covered by the CCPA and constitutes our notice at collection and our privacy policy pursuant to the CCPA.

1. Information We Collect

The CCPA defines “Personal Information” as the information that identifies, relates to or could reasonably be linked directly or indirectly with a particular California resident or household and includes categories that are considered “Sensitive Personal Information.” We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the CCPA.

Personal Information does not include information that is:

Lawfully made available from government records.
Deidentified or aggregated.
Otherwise excluded from the scope of the CCPA.

In the past twelve (12) months, we may have collected and disclosed for our business purposes each of the following categories of Personal Information related to California residents covered by this Notice. The examples of Personal Information and Sensitive Personal Information provided for each category reflect each category’s statutory definition and may not reflect all of the specific types of Personal Information and Sensitive Personal Information associated with each category.

Identifiers such as A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
Any information that identifies, relates to, describes, or is capable of being associated with a particular individual, including but not limited to, their name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Characteristics of Protected Classifications under California or Federal Law.
Commercial Information such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other electronic network activity information such as browsing history, search history, and information regarding a California resident’s interaction with an internet website application or advertisement.
Geolocation data, such as device location and Internet Protocol (IP) location.
Audio, electronic, visual, thermal or similar information such as call and video recordings.
Professional or employment-related information such as work history and prior employers.
Education information provided by applicants for employment.
Inferences drawn from any of the Personal Information listed above to create a profile about a California resident reflecting their preferences, characteristics, purchasing history, products, or services purchased, obtained or considered, psychological trends, predispositions, behavior, and attitudes, intelligence, abilities, and aptitudes.
The following categories of Sensitive Personal Information:
- Personal Information that reveals:
  - A California resident’s Social Security, driver’s license, state identification card or passport number.
  - A California resident’s financial account, debit card or credit card number in combination with any required security or access code or credentials allowing access to an account.
  - A California resident’s racial or ethnic origin, religious or philosophical beliefs, health information or union membership.
- The processing of any biometric information for the purpose of uniquely identifying a California resident.
- Any Personal Information collected and analyzed concerning a California resident’s health.

We obtain the categories of Personal Information listed above from the following categories of sources:

Directly from you from the information you provide to us. For example, from your communications and dealings with us.
Directly and indirectly from activity on our website (www.hollidayrock.com). For example, from submissions through our website portal or website usage details collected automatically, or from employment applications submitted through our website.
Directly from you via sales. For example, processing and fulfilling orders or requests for customer support.

2. How We Use Your Personal Information

We collect your Personal Information for the following specific business and commercial purposes:

Providing Services: To provide you with information and service on the products we offer. To maintain records of your business and manage your account so that we may provide services to you in the future.
Communicating: To communicate with you for customer assistance, support, updates on services or products, to respond to comments and questions, provide customer support or to inform you about products and services.
Marketing: To respond to inquiries, to provide you with promotional and advertising materials that may be useful, relevant, valuable or otherwise of interest to you.
Deidentification and Aggregation: Deidentifying and aggregating information collected may be used to analyze how you and others interact with and respond to HRC’s website and our products and services by analyzing deidentified user data for lawful purposes.
Job Applications: Processing applications for employment.
Safety Issues and Fraud Prevention: To respond to safety issues that may arise, detect and prevent fraud or potential illegal activities.
Compliance: For compliance purposes, including to enforce our legal rights, to enforce legal requirements that may be required or requested by any judicial process (such as court orders, warrants or subpoenas) or other governmental agency or to fulfill contractual obligations.
Debugging: Debugging to identify and repair errors, conduct audits or assessments, and testing or troubleshooting issues that may impair intended functionality.
Contracting Vendors: Contracting with vendors and service providers to perform services on our behalf or on their behalf, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing advertising or marketing services, providing analytics services, or providing similar services on behalf of the business or service provider.
Research: Undertaking internal research for development and demonstration.
Improving Our Services: Undertaking activities to verify or maintain the quality or safety of our services, and to improve, upgrade or enhance our services.
Enabling Transactions: Otherwise enabling or effecting, directly or indirectly, a commercial transaction.
Notified Purpose: For other purposes disclosed to you at the time the information is collected.

3. Disclosure of Personal Information

In the preceding twelve (12) months, we disclosed Personal Information to the following categories of third parties for the purposes of providing services, communicating, marketing, facilitating payments, deidentification and aggregation, job applications, safety issues, compliance, fraud and incident prevention, debugging, transient use, contracting vendors, research, improving our services, enabling transactions, and for any notified purpose.

I. Analytics Providers.

Personal Information we disclosed: Identifiers, Categories of Personal Information in Cal. Civ. Code § 1798.80(e), Characteristics of Protected Classifications under California or Federal Law, Commercial Information, Internet or Other Electronic Network Activity Information, and Professional or Employment-Related Information.

II. Affiliates.

III. Vendors: Vendors and service providers.

IV. Third Parties with Consent: Other third parties for whom we have obtained your permission to disclose your Personal Information.

4. Your California Privacy Rights

If you are a California resident, you may exercise the following rights.

Right to Know and Access. You may submit a verifiable request for information regarding the: (1) categories of Personal Information collected, sold, or disclosed by us; (2) purposes for which categories of Personal Information are collected or sold by us; (3) categories of sources from which we collect Personal Information; (4) categories of third parties to whom we disclosed or sold Personal Information; and (5) specific pieces of Personal Information we have collected about you during the past twelve months.

Right to Delete. Subject to certain exceptions, you may submit a verifiable request that we delete Personal Information about you that we have collected from you.

Right to Correct. You may submit a verifiable request that we correct inaccurate Personal Information that we maintain about you.

Verification. Requests for access to, deletion, or correction of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. To verify your access, deletion, or correction request, please contact legal@hollidayrock.com.

Right to Opt-Out. In some circumstances, you may opt out of the sale or sharing (for cross-context behavioral advertising purposes) of your Personal Information. We do not sell or share (for cross-context behavioral advertising purposes) your Personal Information.

Right to Limit Use and Disclosure of Sensitive Personal Information. In some circumstances, you may limit our use and disclosure of your Sensitive Personal Information. We do not use or disclose your Sensitive Personal Information for purposes other than the limited purposes permitted by the CCPA.

Right of No Retaliation. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations, including if you are an employee, applicant, or independent contractor of our business.

Shine the Light. We do not rent, sell, or share your Personal Information with nonaffiliated companies for their direct marketing purposes unless we have your permission.

Submit Requests. To exercise your rights under the CCPA, please contact legal@hollidayrock.com.

Authorizing an Agent. If you are acting as an authorized agent to make a request to know, delete, correct, or opt out on behalf of a California resident, please contact legal@hollidayrock.com and attach a written authorization signed by the resident.

5. Minors

We do not knowingly sell or share (for cross-context behavioral advertising purposes) Personal Information of consumers under 16 years of age.

6. Contact Information

If you have any questions or comments about this Notice, the ways in which we collect and use your Personal Information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us via the links above or at:

Holliday Rock Co., Inc.
Attn: Privacy – Legal Department
1401 N Benson Avenue
Upland, CA 91786
legal@hollidayrock.com