Privacy Policy

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?​

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

​

Categories of Personal Information Collected in the Past 12 Months

• Identifiers – Includes details such as your real name, alias, mailing address, phone or mobile number, unique personal identifier, online identifier, IP address, email address, and account name. (Collected: Yes)

• Personal Information (as defined by the California Customer Records statute) – Includes name, contact information, education details, employment history, and financial information. (Collected: Yes)

• Protected Classification Characteristics (under state or federal law) – Includes details such as gender, age, date of birth, race or ethnicity, national origin, marital status, and other demographic information. (Collected: No)

• Commercial Information – Includes transaction records, purchase history, financial details, and payment information. (Collected: No)

• Biometric Information – Includes biometric identifiers such as fingerprints or voiceprints. (Collected: No)

• Internet or Similar Network Activity – Includes browsing history, search history, online behavior, interest data, and interactions with our websites, applications, systems, and advertisements. (Collected: Yes)

• Geolocation Data – Includes your device’s location. (Collected: Yes)

• Audio, Electronic, Visual, or Similar Information – Includes images, and audio, video, or call recordings made during business activities. (Collected: No)

• Professional or Employment-Related Information – Includes business contact information needed to provide services at a business level, job title, work history, and professional qualifications (for example, if you apply for a job with us). (Collected: No)

• Education Information – Includes student records and directory information. (Collected: No)

• Inferences from Personal Information – Includes conclusions drawn from collected personal information to create a profile reflecting preferences, characteristics, or behavior. (Collected: No)

• Sensitive Personal Information – Includes any data categorized as “sensitive” under applicable law. (Collected: No)

​

We may also collect personal information outside of the listed categories in certain situations when you interact with us in person, online, by phone, or by mail. Examples include:

• Receiving assistance through our customer support channels

• Participating in customer surveys or contests

• Helping us deliver our Services and responding to your inquiries

​

We retain collected personal information for as long as needed to provide our Services or for the following durations:

• Category A: 1 year

• Category B: 1 year

• Category F: 1 year

• Category G: 1 year

• Category H: 1 year

​

Sources of Personal Information
You can learn more about the sources of personal information we collect by visiting the section "WHAT INFORMATION DO WE COLLECT?"

​

How We Use and Share Personal Information
You can learn more about how we use and share your personal information by visiting the section "HOW DO WE PROCESS YOUR INFORMATION?"

​

Will your information be shared with anyone else?
We may share your personal information with service providers under a written contract between us and each provider. For more details, see the section "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"

​

We may also use your information for our own business purposes, such as conducting internal research for technological development and demonstration. This is not considered "selling" your personal information.

In the past 12 months, we have not sold, disclosed, or shared personal information with third parties for a business or commercial purpose. We will not sell or share personal information in the future belonging to our website visitors, users, or other consumers.

​

Your Rights
Under certain US state data protection laws, you have specific rights. These rights are not absolute and may be declined in some cases as permitted by law. Your rights include:

• The right to know whether we are processing your personal data

• The right to access your personal data

• The right to correct inaccuracies in your personal data

• The right to request the deletion of your personal data

• The right to obtain a copy of the personal data you have previously provided

• The right to non-discrimination for exercising your rights

• The right to opt out of the processing of your personal data for targeted advertising (or “sharing” as defined under California’s privacy law), the sale of personal data, or profiling for decisions that produce legal or similarly significant effects

​

Additional Rights Depending on Your State of Residence

• Right to access the categories of personal data being processed (e.g., Minnesota privacy law)

• Right to obtain a list of categories of third parties to which we have disclosed personal data (e.g., California, Delaware, Maryland privacy laws)

• Right to obtain a list of specific third parties to which we have disclosed personal data (e.g., Minnesota, Oregon privacy laws)

• Right to review, understand, question, and correct how personal data has been profiled (e.g., Minnesota privacy law)

• Right to limit the use and disclosure of sensitive personal data (e.g., California privacy law)

• Right to opt out of the collection of sensitive data and personal data through voice or facial recognition (e.g., Florida privacy law)

​

How to Exercise Your Rights
You can exercise these rights by submitting a data subject access request, emailing colton@cornerstonerevops.com, or using the contact details provided at the bottom of this notice.

Under some US state laws, you may appoint an authorized agent to make a request on your behalf. We may deny a request from an agent if they cannot provide proof that they have been validly authorized to act for you in accordance with applicable law.

​

Request Verification
We will verify your identity before fulfilling your request. This involves confirming you are the same person whose information is in our system. We will only use the personal information provided in your request for verification. If we cannot verify your identity from the information already maintained, we may request additional information to confirm your identity and to prevent fraud.

​

If a request is submitted through an authorized agent, we may need to verify both your identity and the agent’s authorization, including requiring a signed written statement from you.

​

Appeals
If we decline to act on your request under applicable US state laws, you may appeal by emailing colton@cornerstonerevops.com. We will respond in writing with the outcome of your appeal and our reasons for the decision. If your appeal is denied, you may file a complaint with your state attorney general.

​

California "Shine The Light" Law
Under California Civil Code Section 1798.83, also known as the "Shine The Light" law, California residents have the right to request and receive, once per year and free of charge, information about any categories of personal information we may have disclosed to third parties for direct marketing purposes. This includes the names and addresses of those third parties with whom we shared personal information during the previous calendar year.

If you are a California resident and wish to make such a request, please send it in writing using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"