CalRamic Privacy Policy

​Categories of sensitive personal information collected or processed

The following are categories of sensitive personal information we may collect from or about consumers:

• Personal identifiers (name, e-mail address, postal address, telephone number).

• Account information, where an account log-in and associated credentials are used.

• Geolocation data (IP address and approximate location derived from it).

• Contents of personal communications where we are not the intended recipient.

Personal information does not include publicly available information from government records, information lawfully
made available to the general public, or de-identified or aggregated information.

Sources of personal information

• You, when you visit the website and voluntarily submit information through forms or social media, or when you purchase or enquire about our products.

• Our employees, contractors, vendors, suppliers, visitors and other customers, based on your interactions with them.

• Our affiliates, including parent entities, subsidiaries and affiliated entities.

• Cookies and similar technologies, which automatically collect information about website visitors.

• Social media platforms.

• Third-party customer databases.

Disclosure of information to third parties

We will not transfer your personal information to any third party without seeking your consent, except in the following limited circumstances:

• Government agencies.

• Vendors that support the management or hosting of the website.

• Marketing, tracking and retargeting vendors.

• Communication providers that facilitate, manage and send communications on our behalf.

  • Behaviour analytics vendors.

  • Social media platforms, for example LinkedIn.

  • Ad trackers, for example Google Ads.

  • Security and risk management vendors, including IT, cybersecurity and privacy vendors and consultants.

  • Insurance carriers, administrators and brokers.

  • Affiliates, including parent entities, subsidiaries and affiliated entities.

Reasons why we collect, use, retain and disclose personal information

We may collect, use and disclose your personal information to fulfil the purpose for which you provided it; to provide you or our customers with requested products or services; to process and maintain records of transactions;  to respond to enquiries and provide customer support; to provide interest-based and targeted  advertising where you have consented; to comply with our contractual obligations to our marketing partners and  vendors; to engage in corporate transactions, including mergers, acquisitions and joint ventures; to contact you  regarding information you requested; to improve the user experience on our website; to understand the  demographics of our website visitors; to detect security incidents; to debug and repair errors; to protect against  malicious or illegal activity; to verify and respond to consumer requests; for testing, research, analysis and product  development; to protect the rights, property or safety of us, our clients or others; to comply with applicable law,  regulation, court order or other legal process; to send you marketing communications; to build, maintain and  manage business-to-business relationships; and to operate and improve our business generally.

Data security, integrity and retention

We are committed to maintaining the security, integrity and confidentiality of your information, and we have implemented technical, administrative and physical security measures designed to protect it from  unauthorized access, disclosure, use and modification. Please be aware that no security measure is perfect or  impenetrable and we cannot warrant the security of any information you transmit to us.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including providing the products and services you requested, maintaining our business relationship with you,  complying with legal, regulatory, tax, accounting or reporting obligations, resolving disputes, enforcing our  agreements and protecting our legal rights. When personal information is no longer needed for these purposes, we delete or anonymize it, unless applicable law requires or permits a longer retention period.

Social media plug-ins

Our website features links to our social media pages, including LinkedIn. Visiting our website does not automatically result in sharing data with these networks. These links remain inactive until clicked. Once clicked, you will be taken to the social media site, which has its own privacy statement. We encourage you to review those  policies before interacting with any social media feature.

Third party links and use of your information

Our website contains links to other websites that we do not operate, including distributor and partner websites. This Privacy Policy does not address the privacy practices of any third party. We are not responsible for the  content, policies or practices of any third-party website, application or service, even if it is accessible through a link  on our website. The inclusion of a link does not imply our endorsement of, or affiliation with, that third party.

Do we sell your information?

We do not and will not sell your personal information in exchange for monetary consideration.

However, when you consent to advertising cookies, information about your device and browsing activity may be transmitted to advertising partners, in particular Google and LinkedIn, in a way that may constitute “sharing” for cross-context behavioral advertising under certain U.S. state privacy laws. This is the only way in which such sharing occurs.

You can prevent this at any time by refusing or withdrawing consent for advertising cookies in our cookie preference center. The link “Do Not Sell or Share My Personal Information” available on this website takes you  directly to that preference center, so that you can exercise this right in a single action.

​

Opt-out preference signals

Global Privacy Control (GPC) and Universal Opt-Out Mechanism (UOOM) signals are user-enabled preference signals that communicate a “do not sell or share” request on behalf of the person or device. Because  this website does not deploy any non-essential technology before you give affirmative consent, and because that  consent is requested from every visitor regardless of location, no sharing occurs unless and until you actively opt  in. A GPC or UOOM signal is therefore honored by design.

We do not respond to Do Not Track signals. We encourage users who have enabled Do Not Track to use GPC or UOOM instead.

U.S. consumer privacy rights

Depending on your state of residence, you may have the following rights, which can be exercised directly or, in certain cases, through an authorized agent: the right to know what personal information we have collected and  the sources, purposes and recipients involved; the right to access and receive a copy of your personal information; the right to data portability; the right to confirm whether we are processing your personal information; the right to  delete personal information we collected from you, subject to certain exceptions; the right to correct inaccurate  personal information; the right to opt out of the sale or sharing of your personal information; the right to limit the  use and disclosure of sensitive personal information; the right not to be discriminated or retaliated against for  exercising these rights; and the right to appeal a refusal to act on a request.

We do not use or disclose sensitive personal information for purposes that give rise to a right to limit its use and disclosure under applicable law.

How to exercise your data subject rights

If you would like to access, receive a copy of, port, review, update, correct, restrict or delete any personal information we hold about you, or withdraw any consent you have provided, e-mail dpo@exxelia.com, or  write to Exxelia CalRamic, 5462 Louie Lane, Reno, NV 89511, USA, Attn: Privacy Request.

In order to comply with your request, we may ask you to verify your identity or provide additional details related to your request. We will only request the minimum personal information necessary to identify you correctly. We will respond as quickly as possible and in accordance with applicable law.

You may designate an authorized agent to submit a request on your behalf. To do so, the agent must provide either a valid notarized power of attorney or other written, signed authorization that we can verify. We reserve the  right to deny any request from an authorized agent who does not submit sufficient proof of authorization.

Nevada residents

If you are a resident of the State of Nevada, Chapter 603A of the Nevada Revised Statutes permits you to opt out of future sales of certain covered information that a website operator has collected or will collect about you. To  make such a request, please send an e-mail to dpo@exxelia.com and mention that you are making a request  pursuant to Nevada law.

Third party vendors

We may use other companies and individuals to perform certain functions on our behalf, for example administering e-mail services or hosting the website. Such parties only have access to the personal information  needed to perform these functions and may not use or store the information for any other purpose.

Business transfers

In the event that we sell or transfer a portion of our business assets, information of consumers and contractors may be one of the business assets transferred as part of the transaction. If substantially all of our assets are  acquired, such information may be transferred as part of the acquisition.

Compliance with law and safety

We may disclose personal information based on a good faith belief that such disclosure is necessary to comply with the law, or that it is necessary to protect our employees or the public.

​

Children privacy

We do not intentionally collect information about anyone under the age of 13.

How we protect the information that we collect

• We use commercially reasonable tools and techniques to protect against unauthorized access to our systems.

• We restrict access to private information to those who need such access in the course of their duties.

• We keep automatically collected data and voluntarily submitted data separate.

• We use encryption on data stores that hold voluntarily submitted data.

Changes to our Privacy Policy

We keep this Privacy Policy under regular review and will post any updates on this page. The date of the last update is shown at the top. If we make material changes, we will post the revised policy and the revised  effective date on this website.

Consumers with disabilities

This policy is provided in a form that is accessible to consumers with disabilities.

How to contact us

For any questions about this Privacy Policy or our privacy practices, e-mail dpo@exxelia.com, or write to Exxelia CalRamic, 5462 Louie Lane, Reno, NV 89511, USA, Attn: Privacy Request.