StoneOne Corp Privacy Policy

1. Information We Collect

StoneOne limits the personal information we request and collects information reasonably necessary to communicate with you, provide our products and services, and manage customer projects.

Depending upon how you interact with StoneOne, we may collect:

• Your name;
• Mailing, residential, business, project, delivery, or installation address;
• Mobile or other telephone number;
• Email address;
• Information you voluntarily provide regarding your StoneOne project, estimate, appointment, template, installation, service call, delivery, product, or customer-service request; and
• Records reasonably necessary to document your communication preferences and consent to receive text messages.

Financial and Sensitive Information

StoneOne does not collect or store bank account numbers, credit card numbers, debit card numbers, financial account login information, Social Security numbers, or similar sensitive financial credentials through our general website inquiry forms, customer inquiry forms, Text Alert Service enrollment forms, QR-code text enrollment process, or SMS/MMS messaging program.

Please do not submit Social Security numbers, banking credentials, payment-card information, passwords, or other unnecessary sensitive information through StoneOne website forms, ordinary email, or text message.

2. How We Collect Information

StoneOne may collect information directly from you when you:

• Visit or communicate with StoneOne in our showroom;
• Complete a customer inquiry sheet or other StoneOne form;
• Contact StoneOne by telephone, email, website form, text message, or in person;
• Request an estimate or information about our products or services;
• Schedule a template, installation, service call, delivery, or other appointment;
• Scan a StoneOne QR code and complete an associated form;
• Enroll in StoneOne's Text Alert Service;
• Communicate with a StoneOne employee regarding an existing or prospective project;
• Enter into a business relationship with StoneOne; or
• Otherwise voluntarily provide information to us.

We use Cloudflare Turnstile to protect website forms from spam. See Cloudflare's Turnstile Privacy Addendum for details.

3. How We Use Your Information

StoneOne may use personal information for legitimate business purposes, including to:

• Respond to questions and inquiries;
• Provide estimates, proposals, products, and services;
• Communicate regarding existing or prospective projects;
• Schedule template appointments, installations, service calls, deliveries, or other project-related appointments;
• Provide appointment reminders and confirmations, schedule changes, and project-status updates;
• Request information reasonably necessary to complete a project and provide customer service;
• Maintain appropriate customer, project, and business records;
• Operate and improve our business;
• Protect StoneOne, our customers, employees, property, and business operations;
• Prevent fraud, misuse, or unlawful activity; and
• Comply with applicable federal, state, or local laws, regulations, legal process, court orders, subpoenas, or other legal obligations.

StoneOne will not use personal information for purposes materially inconsistent with the purposes described in this Privacy Policy without providing any notice or obtaining any consent required by applicable law.

4. StoneOne Text Alert Service

StoneOne offers an optional Text Alert Service to provide customers and authorized project contacts with communications concerning their StoneOne projects.

Text messages may include:

• Template, installation, and service-call scheduling and confirmations;
• Appointment reminders and schedule changes;
• Delivery or installation coordination;
• Project-status information;
• Requests for information necessary to complete a project; and
• Other important updates related to an existing or prospective StoneOne project or service.

Message frequency varies based on your project and scheduling needs. Message and data rates may apply. For assistance, reply HELP to a StoneOne text message. To stop receiving StoneOne text messages, reply STOP at any time.

Participation in StoneOne's Text Alert Service is voluntary. Consent to receive text messages is not required as a condition of purchasing any goods or services from StoneOne Corp.

Additional information is available in StoneOne's SMS/Text Messaging Terms & Conditions.

5. SMS Consent and Mobile Information

When you enroll in StoneOne's Text Alert Service, StoneOne may maintain information reasonably necessary to administer the service, including:

• Your name, mobile telephone number, and project or service information;
• The date, time, and method through which consent was provided;
• A record of the consent language presented to you;
• Communications between you and StoneOne and message-delivery information;
• HELP requests and opt-out requests; and
• Records reasonably necessary to document and administer your messaging preferences.

StoneOne may obtain text-message consent through a StoneOne customer inquiry sheet or other paper form, a showroom QR-code enrollment form, StoneOne's website, or another affirmative opt-in method permitted by applicable law. Electronic consent boxes are not intended to be pre-selected. Customers must affirmatively choose to enroll in the Text Alert Service.

Mobile Information and SMS Consent Will Not Be Used for Third-Party Marketing

StoneOne does not sell, rent, trade, or share your mobile telephone number or SMS opt-in information with third parties or affiliates for their own marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes.

StoneOne may use service providers that assist us with the technical operation of our communications systems, including telecommunications, text-messaging, website, customer-management, or technology providers. Such providers may process information only as reasonably necessary to provide services to StoneOne and are not authorized by StoneOne to use StoneOne customer mobile numbers or SMS consent information for their own marketing or promotional purposes.

6. Marketing and Promotional Text Messages

StoneOne's Text Alert Service is intended for customer service, project scheduling, appointment information, and project-related updates. Enrollment does not constitute consent to receive unrelated advertising or promotional text messages. StoneOne will not treat consent to receive project-related messages as consent to participate in a separate marketing text-message campaign. If StoneOne establishes a separate promotional or marketing text-message program in the future, StoneOne will obtain any separate consent required by applicable law before sending such messages.

7. Disclosure of Personal Information

StoneOne does not disclose personal information except as reasonably necessary to conduct our business, provide requested products or services, administer customer projects, comply with the law, or protect our legal rights.

Information may be provided to service providers or contractors that perform legitimate business functions on StoneOne's behalf, including website hosting or technology providers, email or communications providers, text-messaging or telecommunications providers, customer-management or business-software providers, delivery or installation service providers, professional advisors, and other providers reasonably necessary to complete or support a customer project. These parties may receive only information reasonably necessary to perform the applicable service.

StoneOne may also disclose information when required or permitted by law, including in response to legal process, governmental requests, investigations, court orders, subpoenas, or where reasonably necessary to protect the rights, safety, and property of StoneOne or others.

8. Sale of Personal Information

StoneOne does not sell customer names, addresses, telephone numbers, mobile telephone numbers, email addresses, or SMS consent information for monetary compensation. StoneOne does not rent customer contact information to third parties for their independent marketing purposes.

If an applicable privacy law provides additional rights regarding the sale, sharing, targeted advertising, or other processing of personal information, StoneOne will honor those rights as required by applicable law.

9. Data Security

StoneOne uses reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we maintain. StoneOne takes reasonable measures intended to protect information against unauthorized access, use, disclosure, alteration, or destruction.

However, no electronic transmission, telecommunications network, computer network, or information-storage system can be guaranteed to be completely secure. Accordingly, StoneOne cannot guarantee the absolute security of information transmitted electronically.

10. Data Retention

StoneOne retains personal information only for as long as reasonably necessary for the business purposes for which it was collected or as otherwise required or permitted by applicable law.

This may include retaining records for purposes such as:

• Providing products or services;
• Completing customer projects;
• Maintaining project and customer records;
• Maintaining records of SMS consent and opt-out requests;
• Resolving disputes;
• Enforcing agreements;
• Responding to warranty or service matters; and
• Satisfying legal, tax, insurance, regulatory, or recordkeeping requirements.

When information is no longer reasonably necessary, StoneOne may securely delete, destroy, anonymize, or otherwise dispose of the information in accordance with applicable law and StoneOne's record-retention practices.

11. Privacy Rights

Depending upon the state in which you reside and whether a particular state privacy law applies to StoneOne, you may have certain rights concerning your personal information. These rights may include the right to request information regarding personal information maintained about you, request access to certain personal information, request correction of inaccurate personal information, request deletion or a copy of certain personal information, opt out of certain sales, sharing, or targeted advertising where applicable, and exercise applicable privacy rights without unlawful discrimination.

These rights are subject to applicable legal limitations and exceptions. To submit a privacy request, please contact StoneOne using the contact information below and state that your request concerns Privacy Rights. StoneOne may need to verify your identity before fulfilling certain requests. Information obtained for verification will be used only as permitted by applicable law.

12. Massachusetts Residents

StoneOne is based in Massachusetts and handles information concerning Massachusetts residents in accordance with applicable Massachusetts privacy, data-security, data-breach, consumer-protection, and record-disposal requirements.

StoneOne does not request Social Security numbers, driver's-license numbers, state identification numbers, bank account numbers, credit or debit card numbers, financial account passwords, or similar financial-account credentials through its general website inquiry forms, customer inquiry forms, Text Alert Service enrollment forms, or SMS/MMS communications. If StoneOne receives or maintains information subject to heightened protection under Massachusetts law in another legitimate business context, that information will be handled in accordance with applicable Massachusetts requirements.

13. Children's Privacy

StoneOne's website is intended for a general audience and is not directed to children under the age of 13. StoneOne does not knowingly collect personal information online from children under the age of 13. If StoneOne becomes aware that personal information has been collected online from a child under the age of 13 without appropriate parental consent in circumstances where such consent is legally required, StoneOne will take reasonable steps to delete the information as required by applicable law.

14. Third-Party Websites and Services

StoneOne's website may contain links to websites or services operated by third parties. StoneOne does not control the privacy or security practices of independently operated third-party websites or services. Information you provide directly to an independent third party is governed by that third party's own privacy policy and practices. We encourage you to review the applicable privacy policy before providing personal information to a third-party website or service.

15. Changes to This Privacy Policy

StoneOne may update this Privacy Policy periodically to reflect changes in our business practices, technology, Text Alert Service, legal or regulatory requirements, or products and services. When this Privacy Policy is updated, the revised version will be posted with a new effective or updated date. Material changes will be communicated as required by applicable law.

16. Contact StoneOne

Questions regarding this Privacy Policy, StoneOne's privacy practices, or requests concerning personal information may be submitted by phone at (978) 681-7664, email at info@stoneonecorp.com, mail at 75 Mystic Street, Methuen, MA 01844, or through the contact information provided on the StoneOne website.

Please identify privacy-related communications as: Privacy Request - StoneOne Corp.

For questions regarding text messaging, you may also reply HELP to a StoneOne text message. To stop receiving StoneOne text messages, reply STOP.