Privacy Policy — RCH Connect

Clause 1

Introduction and Scope of This Policy

This Privacy Policy governs the processing of personal data by RCH ONLINE, LLC, a company duly organized and existing under the laws of the State of Utah, United States of America, with its principal place of business at 688 S 480 W, Providence, Utah 84332-9013. Throughout this document, references to RCH Connect, we, us, or our shall mean RCH ONLINE, LLC and its authorized representatives, agents, and affiliates under common control.

The scope of this policy extends to all personal information that we collect, process, store, and manage in the course of operating our website, delivering our computer integrated systems design services, responding to inquiries, processing contact form submissions, maintaining business records, conducting marketing communications, and fulfilling legal and regulatory obligations. This policy applies regardless of the device, platform, or method you use to interact with our services.

1.1 Coverage of Digital Properties

This policy covers all digital properties owned and operated by RCH ONLINE, LLC, including but not limited to the primary domain rchconnect.autos, the www.rchconnect.autos subdomain, any subdomains we may establish, all web pages hosted under these domains, and any mobile-optimized or responsive versions of our website. It also covers our electronic communications including email messages, newsletters, service announcements, and support correspondence.

1.2 Exclusions and Limitations

This policy does not apply to third-party websites, applications, or services that may be accessible through links on our website, even if those links are provided for your convenience. We are not responsible for the privacy practices, data collection policies, or content of any third-party sites. We encourage you to review the privacy policies of every website you visit. Additionally, this policy does not apply to anonymized, aggregated, or de-identified data that cannot reasonably be linked to an identifiable individual.

1.3 Commitment to Transparency

RCH Connect is committed to being transparent about how we handle your data. We have designed this policy to be comprehensive, accessible, and written in plain English to ensure that you can understand your rights and our responsibilities. If any provision of this policy is unclear, we encourage you to contact us for clarification using the contact details provided in Clause 18 below.

Clause 2

Definitions and Interpretation

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below. Capitalized terms not defined in this clause shall be interpreted in accordance with applicable data protection laws, including the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, and any other applicable United States federal or state privacy legislation.

2.1 Personal Information

Personal Information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. This includes, but is not limited to, identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, telephone number, or other similar identifiers.

2.2 Processing

Processing means any operation or set of operations performed on personal information, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

2.3 Data Subject

Data Subject means the identified or identifiable natural person to whom personal information relates. For purposes of this policy, data subjects include website visitors, prospective clients, current clients, business contacts, job applicants, and any other individual whose personal information we process.

2.4 Sensitive Personal Information

Sensitive Personal Information means personal information that reveals a data subject's social security number, driver's license number, state identification card number, passport number, account log-in credentials in combination with any required security or access code, precise geolocation data, racial or ethnic origin, religious beliefs, genetic data, biometric data for the purpose of uniquely identifying an individual, health information, or information concerning a data subject's sex life or sexual orientation. RCH Connect does not intentionally collect sensitive personal information through this website.

2.5 Controller and Processor

For the purposes of applicable data protection laws, RCH ONLINE, LLC acts as the Data Controller for personal information collected through its website and services. When we engage third-party service providers to process data on our behalf, those providers act as Data Processors and are bound by contractual obligations that ensure the protection and lawful processing of your personal information.

Clause 3

Categories of Personal Information We Collect

RCH Connect collects personal information that you voluntarily provide to us, as well as information that is automatically collected when you interact with our website. We have organized the categories of data we collect to provide you with a clear and comprehensive understanding of our data collection practices. The specific categories are detailed in the subsections below.

3.1 Identity and Contact Information

When you submit a contact form on our website, send us an email, call our phone number, or otherwise communicate with us, we may collect your full name, email address, telephone number, company name, job title, and any other identifying information you choose to share. This category also includes your mailing address and any preference information you communicate to us. We collect this information to respond to your inquiries, provide you with requested information about our services, and maintain business correspondence records.

3.2 Communications and Correspondence Data

We collect and store the content of all communications you send to us, including messages submitted through our contact form, email exchanges, notes from telephone conversations, and any attachments or supporting documents you provide. This data includes the date, time, and nature of each communication, the communication channel used, and the identity of RCH Connect team members involved. We retain this information to maintain accurate business records, improve our services, and address any follow-up matters.

3.3 Technical and Usage Information

When you visit our website, our servers automatically collect certain technical information about your device and your interaction with our site. This includes your Internet Protocol address, browser type and version, operating system, device type, screen resolution, referring URL, pages viewed, time and date of visits, time spent on each page, click patterns, and other diagnostic data. This information is essential for maintaining the security, performance, and functionality of our website.

3.4 Service-Related Information

If you engage RCH Connect for computer integrated systems design, computer systems design, consulting, or related services, we may collect information necessary to perform those services. This may include business requirements, system specifications, infrastructure details, project timelines, technical documentation, and any other information you provide in the course of our professional engagement. All such information is handled under strict confidentiality as part of our client relationship.

3.5 Information We Do NOT Collect

To be absolutely clear, RCH Connect does not intentionally collect the following categories of information through our website: social security numbers, driver's license or state identification numbers, financial account numbers or credit card information, precise geolocation data, biometric identifiers, protected health information as defined under HIPAA, or information about children under the age of sixteen. If any such information is inadvertently submitted to us, we will take immediate steps to delete it from our systems.

Clause 4

Methods of Data Collection

We collect personal information through a variety of methods and channels. Understanding how your data reaches us is an important part of informed consent. The following subsections describe each method we employ, the circumstances under which collection occurs, and the type of data obtained through each channel.

4.1 Direct Collection from You

The primary method of data collection is direct and voluntary submission by you. This occurs when you fill out and submit our contact form, when you send an email to touch@rchconnect.autos or any other RCH Connect email address, when you call our telephone number at +1 (406) 643-2348 and provide information during the call, when you subscribe to any newsletter or mailing list we may offer, or when you provide information during in-person meetings and consultations. In each case, you control what information you choose to share.

4.2 Automated Collection Technologies

Our website employs standard automated data collection technologies including server logs, which record each request made to our web server along with the requesting IP address, timestamp, requested resource, HTTP status code, and user agent string. We may also use session cookies, which are small text files stored temporarily in your browser's memory and deleted when you close your browser. These cookies are used solely for essential website functionality such as maintaining form state and ensuring security. We do not use persistent tracking cookies, third-party advertising cookies, or any form of cross-site tracking technology.

4.3 Collection through Service Providers

In certain cases, we may receive personal information from third-party service providers who assist us in operating our website and business. For example, our website hosting provider (Firebase Hosting by Google LLC) may provide us with aggregated analytics and security reports that contain limited technical data. Any such collection by third parties is governed by their respective privacy policies, and we take reasonable steps to ensure that our service providers maintain adequate data protection standards.

4.4 Collection from Public Sources

In limited circumstances, we may collect information from publicly available sources to supplement our business records, verify contact information, or conduct due diligence. This may include information from public business registries, professional networking platforms, corporate websites, and publicly available government databases. Any information collected from public sources is handled in accordance with this Privacy Policy.

Clause 5

Purposes and Uses of Collected Information

RCH Connect processes personal information for specific, explicit, and legitimate purposes. We do not process personal information in a manner that is incompatible with the purposes for which it was collected, unless we obtain your prior consent or are required to do so by law. The following subsections detail each purpose for which we use your personal information.

5.1 Service Delivery and Fulfillment

We use your personal information to provide, maintain, and improve our computer integrated systems design and related services. This includes assessing your project requirements, developing proposals and statements of work, delivering contracted services, providing technical support, processing service requests, managing project timelines, invoicing and payment tracking, and all other activities necessary to fulfill our contractual obligations to you. This is the foundational purpose for which our data processing activities are structured.

5.2 Communication and Customer Support

We use your contact information to communicate with you about your inquiries, service requests, account matters, and any issues that may arise. This includes responding to messages submitted through our contact form, answering emails sent to touch@rchconnect.autos, returning phone calls, sending service-related notifications, providing status updates, and addressing any questions or concerns you may have. We strive to respond to all inquiries within one business day.

5.3 Website Operation and Improvement

Technical and usage data is processed to operate, maintain, monitor, and improve our website. This includes diagnosing server problems, analyzing site performance, identifying and fixing bugs, optimizing page load times, enhancing user interface design, monitoring security threats, preventing fraud and abuse, generating aggregate usage statistics, and planning future improvements. This processing is essential for the secure and reliable operation of our digital presence.

5.4 Business Administration and Record Keeping

We process personal information as part of our ordinary business operations, including maintaining accurate client and transaction records, managing financial accounts, conducting internal audits, fulfilling tax obligations, complying with legal and regulatory requirements, enforcing our Terms of Service, resolving disputes, and protecting the rights and property of RCH ONLINE, LLC and its stakeholders. These records are maintained for periods specified in our data retention schedules.

5.5 Marketing and Promotional Communications

With your explicit consent, we may use your email address to send you newsletters, service updates, promotional materials, industry insights, and information about events or offerings that may be relevant to your interests. You may opt out of receiving marketing communications at any time by following the unsubscribe instructions included in each message or by contacting us directly. We do not sell, rent, or trade your contact information for third-party marketing purposes.

5.6 Legal Compliance and Protection

We may process personal information as necessary to comply with applicable laws, regulations, court orders, governmental requests, or lawful discovery requests in civil litigation. This includes responding to subpoenas, cooperating with law enforcement investigations, complying with tax and financial reporting requirements, and fulfilling our obligations under applicable data protection and privacy laws at the federal and state levels.

Clause 6

Legal Basis for Processing Personal Information

Under applicable data protection laws, RCH Connect must have a valid legal basis for each category of personal information we process. The legal basis depends on the specific context in which we collect and use your data. We have identified the following legal bases that justify our processing activities, and we are committed to documenting and maintaining records of these bases for each processing operation.

6.1 Performance of a Contract

Much of our data processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This includes processing required to deliver our computer integrated systems design services, respond to service inquiries, prepare proposals, manage client accounts, process payments, and fulfill all contractual obligations under our terms of engagement.

6.2 Legitimate Business Interests

We process certain personal information based on our legitimate business interests, provided that such interests are not overridden by your data protection rights and freedoms. Our legitimate interests include operating and improving our website, ensuring network and information security, preventing fraud, maintaining business records, conducting internal analysis, personalizing user experience, and marketing our services to existing and prospective clients in a reasonable and proportionate manner.

6.3 Consent

In certain circumstances, we process personal information based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications, the use of non-essential cookies, and any other processing activity that is not strictly necessary for the performance of a contract or our legitimate interests. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.4 Legal Obligation

In certain cases, we are required to process personal information to comply with a legal obligation to which RCH ONLINE, LLC is subject. This includes obligations related to tax reporting, financial record keeping, compliance with court orders, cooperation with regulatory authorities, and meeting requirements under federal and state privacy and data protection laws.

Clause 7

Disclosure and Sharing of Personal Information

RCH Connect is committed to limiting the disclosure of your personal information. We do not sell, rent, trade, or lease your personal information to third parties for their own commercial purposes. The circumstances under which we may share your personal information are strictly limited to those described in the following subsections, and we require all recipients to protect your information with appropriate safeguards.

7.1 Service Providers and Business Partners

We may share personal information with trusted third-party service providers who perform services on our behalf and require access to such information to carry out their functions. These providers include our website hosting service (Firebase Hosting by Google LLC), domain name and DNS service providers, email service providers, cloud storage platforms, professional advisors including lawyers and accountants, and any other vendors we may engage to support our business operations. All service providers are bound by contractual obligations to protect your data, use it only for the purposes we specify, and comply with applicable data protection laws.

7.2 Legal and Regulatory Disclosures

We may disclose personal information if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect and defend the rights or property of RCH ONLINE, LLC, prevent or investigate possible wrongdoing in connection with our services, protect the personal safety of users of our services or the public, or protect against legal liability. In such cases, we will take reasonable steps to notify you of the disclosure, unless we are legally prohibited from doing so.

7.3 Business Transfers

In the event that RCH ONLINE, LLC is involved in a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email and a prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information in connection with such a transaction.

7.4 With Your Consent

We may share your personal information with third parties when we have your explicit consent to do so. For example, if you request that we share project information with a specific third-party vendor or partner, we will obtain your authorization before proceeding with such disclosure. You may withdraw your consent at any time.

7.5 Aggregated and De-Identified Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with third parties for research, analysis, marketing, or other purposes. Such data is not considered personal information under this policy, and we take reasonable measures to ensure that it cannot be re-identified or associated with any particular individual.

Clause 8

International Data Transfers

RCH ONLINE, LLC is based in the United States of America, and our website and services are hosted and operated primarily within the United States. If you are accessing our website from outside the United States, including from the European Economic Area, the United Kingdom, Canada, or any other jurisdiction, please be aware that your personal information will be transferred to, stored, and processed in the United States, where our servers and central database are located.

8.1 United States Data Protection Standards

The data protection laws in the United States may differ from, and in some cases may provide less protection than, the laws in your country of residence. By using our website and providing your personal information to us, you acknowledge and consent to the transfer of your data to the United States and its processing in accordance with this Privacy Policy and applicable United States federal and state laws.

8.2 Safeguards for International Transfers

When we transfer personal information from jurisdictions with comprehensive data protection frameworks, we implement appropriate safeguards to ensure an adequate level of protection. These safeguards may include standard contractual clauses approved by relevant regulatory authorities, adherence to recognized certification frameworks where applicable, and the implementation of contractual obligations with any third-party recipients to maintain protections equivalent to those required in the jurisdiction of origin.

Clause 9

Data Retention and Storage Practices

We retain personal information only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our data retention periods are determined based on the nature of the data, the purposes for which it is processed, legal and regulatory requirements, and our legitimate business needs for record keeping, dispute resolution, and enforcement of our agreements.

9.1 Retention Periods by Data Category

Contact form submissions and general inquiries are retained for a period of twenty-four months from the date of last communication, unless a longer period is required in connection with an ongoing client relationship. Client engagement records, project files, and contractual documentation are retained for a period of seven years following the completion or termination of the engagement, in accordance with applicable statutes of limitation and tax record keeping requirements. Server logs and technical data are retained for a period of ninety days, after which they are automatically purged from our systems. Marketing consent records are retained indefinitely to maintain a record of your preferences, unless you request deletion.

9.2 Data Storage Location and Security

All personal information collected by RCH Connect is stored on secure servers operated by our hosting provider, Google LLC, within data centers located in the United States. We take reasonable steps to ensure that our hosting providers implement industry-standard physical, technical, and administrative safeguards to protect the data stored on their infrastructure. Our own data storage practices include encryption of data at rest, access control mechanisms, and regular security assessments.

9.3 Data Deletion Procedures

When personal information reaches the end of its retention period, we follow established procedures to securely delete or destroy such data. This may include permanent deletion from active databases, secure overwriting of storage media, shredding of physical documents, and termination of any third-party processing arrangements. We maintain logs of data deletion activities as part of our compliance record keeping. If you request deletion of your data before the expiration of our standard retention period, we will evaluate your request in accordance with applicable laws and respond within the timeframes required.

Clause 10

Data Security Measures

RCH Connect takes the security of your personal information seriously and has implemented a comprehensive set of technical, administrative, and physical safeguards designed to protect your data against unauthorized access, disclosure, alteration, and destruction. While no method of transmission over the Internet or electronic storage is one hundred percent secure, we strive to use commercially acceptable means to protect your personal information.

10.1 Technical Security Measures

Our technical security measures include Transport Layer Security encryption for all data transmitted between your browser and our servers, ensuring that your communications with our website are encrypted in transit. We employ firewalls configured to industry best practices, intrusion detection and prevention systems, regular vulnerability scanning and penetration testing, secure authentication mechanisms, role-based access controls, automated patch management, malware protection, and continuous monitoring of system logs for suspicious activity. All systems are maintained with up-to-date security patches and configurations.

10.2 Administrative Security Measures

Our administrative safeguards include comprehensive data protection policies and procedures, mandatory privacy and security training for all personnel with access to personal information, background checks for employees and contractors, confidentiality agreements binding all staff, regular internal audits of data handling practices, incident response plans with defined escalation procedures, and the designation of a responsible individual to oversee data protection compliance. Access to personal information is restricted to authorized personnel on a strict need-to-know basis.

10.3 Physical Security Measures

Physical security measures include secured office facilities with access control systems, visitor management procedures, secure storage for any physical records containing personal information, clean desk policies, and secure disposal procedures for physical documents and electronic media. Our servers are hosted in Google Cloud Platform data centers that maintain SOC 1, SOC 2, SOC 3, ISO 27001, ISO 27017, ISO 27018, and FedRAMP certifications, with multiple layers of physical security including biometric access controls, surveillance, and 24/7 security personnel.

10.4 Breach Notification Procedures

In the event of a data breach that affects your personal information, we will notify you and the appropriate regulatory authorities without undue delay, in accordance with the timelines prescribed by applicable data protection laws. Our notification will describe the nature of the breach, the categories and approximate number of data subjects affected, the likely consequences of the breach, the measures we have taken or propose to take to address the breach, and the contact point where you can obtain more information. We maintain a breach response plan that is tested and updated regularly.

Clause 11

Your Privacy Rights and Choices

Depending on your jurisdiction of residence, you may have certain rights regarding your personal information. RCH Connect respects these rights and has established procedures to facilitate their exercise. We will not discriminate against you for exercising any of your privacy rights. The rights described below may be subject to certain exceptions and limitations under applicable law.

11.1 Right to Access and Know

You have the right to request access to the personal information we hold about you and to obtain information about how we process it. Upon verification of your identity, we will provide you with a copy of your personal information in a portable and readily usable format, along with details about the categories of personal information we have collected, the sources from which it was collected, the purposes for which it is processed, the categories of third parties with whom we share it, and the specific pieces of personal information we maintain.

11.2 Right to Correction and Rectification

You have the right to request that we correct any inaccurate personal information we hold about you, or to complete any incomplete personal information, taking into account the purposes of the processing. We will respond to correction requests within the timeframes required by applicable law and will take reasonable steps to ensure the accuracy of your personal information going forward.

11.3 Right to Deletion

You have the right to request that we delete your personal information, subject to certain exceptions. We will comply with your deletion request unless retention of the data is necessary for us to complete a transaction, provide a service you requested, detect security incidents, protect against fraudulent or illegal activity, exercise free speech rights, comply with a legal obligation, or otherwise use the data internally in a lawful manner compatible with the context in which you provided it.

11.4 Right to Opt-Out of Sale or Sharing

RCH Connect does not sell your personal information for monetary consideration, nor do we share your personal information for cross-context behavioral advertising purposes. However, if you are a resident of a jurisdiction that provides a right to opt out of the sale or sharing of personal information, we want you to know that we honor that right. As a matter of policy, we do not engage in practices that would require an opt-out mechanism.

11.5 Right to Limit Use of Sensitive Information

As noted in Clause 3.5, RCH Connect does not intentionally collect sensitive personal information through our website. To the extent any sensitive personal information is inadvertently collected, you have the right to direct us to limit its use to what is necessary for performing our services or as otherwise permitted by law. We will comply with such directives promptly.

11.6 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising any of your privacy rights. RCH Connect will not deny you goods or services, charge you different prices or rates, provide a different level or quality of goods or services, or suggest that you may receive a different price or rate for goods or services as a consequence of exercising your privacy rights.

11.7 How to Exercise Your Rights

To exercise any of the rights described in this clause, please contact us using the information provided in Clause 18 below. We will respond to your request within the timeframes prescribed by applicable law, generally within forty-five calendar days. We may need to verify your identity before processing your request, and we may ask you to provide additional information to help us confirm your identity. If you make a request through an authorized agent, we may require written proof of the agent's authority to act on your behalf.

Clause 12

Children's Privacy Protection

RCH Connect is committed to protecting the privacy of children online. Our website and services are not directed to, nor do we knowingly collect personal information from, children under the age of sixteen. We do not target our marketing to children, and we do not design our website or services with the intention of attracting a children's audience.

12.1 No Knowing Collection from Minors

If we become aware that we have inadvertently collected personal information from a child under the age of sixteen without verifiable parental consent, we will take immediate steps to delete such information from our records. We encourage parents and legal guardians to monitor their children's online activities and to instruct their children never to provide personal information through any website without parental permission.

12.2 Parental Inquiries

If you are a parent or legal guardian and believe that your child has provided personal information to us without your consent, please contact us immediately using the contact information in Clause 18. We will work with you to address the situation, remove the information from our systems, and take any other appropriate measures to protect your child's privacy. We take these matters seriously and will respond to parental inquiries as a matter of priority.

Clause 13

Third-Party Services and External Links

Our website may contain links to third-party websites, plugins, services, or applications that are not owned, operated, or controlled by RCH Connect. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party services and are not responsible for their privacy practices, content, or data handling policies.

13.1 Third-Party Website Links

Links to external websites are provided solely for your convenience and information. When you navigate to a third-party website from our site, you are no longer governed by this Privacy Policy. We strongly encourage you to review the privacy policy of every website you visit, particularly before submitting any personal information. The inclusion of any link does not imply our endorsement of the linked site or its privacy practices.

13.2 Embedded Content and Social Features

Our website may include embedded content from third-party platforms or social media features such as share buttons or interactive mini-programs. These features may collect your IP address, the page you are visiting on our site, and may set a cookie to enable the feature to function properly. Your interactions with these features are governed by the privacy policy of the third party providing them, not by this Privacy Policy.

13.3 Google Services

Our website is hosted on Google Firebase Hosting, which is a service provided by Google LLC. Google may collect certain technical data about visitors to our site as part of its content delivery and security infrastructure. Google's collection and use of this data is governed by the Google Privacy Policy, available on Google's website. We also use Google Fonts to serve typography on our website, which may involve Google processing your IP address when your browser requests font files.

Clause 14

Cookies and Tracking Technologies

RCH Connect maintains a minimal approach to the use of cookies and similar tracking technologies. We are committed to transparency regarding any technologies that may be present on our website and how they function. This clause explains our current practices with respect to cookies, pixels, local storage, and other tracking mechanisms that may be encountered on our website.

14.1 What Cookies Are

A cookie is a small text file that a website stores on your computer or mobile device when you visit the site. Cookies are widely used to make websites work, or work more efficiently, as well as to provide information to the site owners. Cookies may be session cookies, which are automatically deleted when you close your browser, or persistent cookies, which remain on your device until they expire or are manually deleted.

14.2 Cookies Used on Our Website

As of the effective date of this policy, our website uses only strictly necessary cookies that are essential for the proper functioning and security of the site. Specifically, our hosting infrastructure may set session cookies for load balancing, security validation, and basic operational purposes. These cookies do not collect any personal information, are not used for tracking or advertising purposes, and are automatically deleted when your browsing session ends. We do not use analytics cookies, advertising cookies, social media cookies, or any form of persistent tracking cookies.

14.3 Managing Cookies

Most web browsers allow you to control cookies through their settings preferences. You can typically configure your browser to accept all cookies, reject all cookies, notify you when a cookie is set, or delete cookies that have already been set. Please refer to your browser's help documentation for specific instructions. Please note that if you choose to disable all cookies, some features of our website may not function as intended, though the core content and functionality should remain accessible.

14.4 Do Not Track Signals

Some web browsers offer a Do Not Track feature that sends a signal to websites indicating that you do not wish to have your online activity tracked. At present, there is no universally accepted standard for how websites should respond to Do Not Track signals. Our website does not respond to Do Not Track signals, as we do not engage in tracking activities that such signals are intended to prevent. We do not track our visitors across third-party websites or over time.

Clause 15

Communications and Marketing Preferences

RCH Connect may send you communications related to our services, your inquiries, or information that we believe may be relevant to your interests. We respect your communication preferences and provide you with control over the types and frequency of messages you receive from us. This clause describes our communication practices and how you can manage your preferences.

15.1 Service-Related Communications

We may send you emails, text messages, or other communications that are necessary to provide our services, respond to your inquiries, notify you about changes to our terms or policies, provide security alerts, or communicate other transactional or administrative information. These service-related communications are an essential part of our service delivery and are not marketing communications. You generally cannot opt out of receiving service-related communications while you maintain an active relationship with us.

15.2 Marketing and Promotional Communications

With your consent, we may send you marketing communications including newsletters, industry insights, information about new services, case studies, event invitations, and other promotional content. Every marketing email we send includes an unsubscribe link at the bottom that allows you to opt out of future marketing communications. You may also opt out by contacting us directly at touch@rchconnect.autos. We process opt-out requests promptly, typically within ten business days.

15.3 Telephone Communications

If you provide us with your telephone number, we may contact you by phone for service-related purposes, to respond to your inquiries, or for other legitimate business purposes. We comply with applicable telemarketing and telephone consumer protection laws. You may request that we stop calling you at any time, and we will honor your request in accordance with applicable law. Our primary business telephone number is +1 (406) 643-2348.

Clause 16

California Privacy Rights

If you are a resident of the State of California, you are entitled to certain additional rights and protections under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020. This clause supplements the general rights described in Clause 11 with California-specific provisions. In the event of any conflict between this clause and other provisions of this policy, this clause shall govern with respect to California residents.

16.1 CCPA Categories of Information Collected

Under the CCPA, we are required to disclose the categories of personal information we have collected about California residents in the preceding twelve months. These categories correspond to those described in Clause 3 of this policy and include identifiers, customer records information as defined in California Civil Code Section 1798.80, commercial information, Internet or other electronic network activity information, professional or employment-related information to the extent a client provides it in a business context, and inferences drawn from any of the foregoing categories.

16.2 Notice of Financial Incentive

RCH Connect does not offer financial incentives, including price discounts or service differences, in exchange for the collection, retention, or sale of personal information. We treat all visitors and clients equally with respect to our privacy practices. Should this change in the future, we will update this policy and provide appropriate notice to California residents as required by law.

16.3 Authorized Agent Requests

California residents may designate an authorized agent to make requests under the CCPA on their behalf. To designate an authorized agent, you must provide the agent with written permission signed by you, and we may require you to verify your own identity directly with us. We may deny a request from an agent who does not submit proof of authorization. This verification process is designed to protect your personal information from unauthorized access or disclosure.

16.4 Shine the Light Law

Under California Civil Code Section 1798.83, also known as the Shine the Light law, California residents who have an established business relationship with us may request information about our disclosure of personal information to third parties for their direct marketing purposes during the preceding calendar year. As stated elsewhere in this policy, RCH Connect does not disclose personal information to third parties for their direct marketing purposes. To make such a request, please contact us using the details in Clause 18.

Clause 17

Policy Updates and Modification Procedures

RCH Connect reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our practices, technologies, legal obligations, or for other operational reasons. We are committed to providing you with notice of material changes and maintaining a transparent record of policy evolution.

17.1 Notification of Changes

When we make material changes to this Privacy Policy, we will provide notice by posting a prominent announcement on our website, updating the Last Updated date at the top of this page, and, where appropriate and feasible, sending an email notification to individuals who have provided us with their email address and with whom we have an ongoing relationship. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. The date of the most recent revision will always be displayed at the top of this page.

17.2 Effect of Continued Use

Your continued use of our website and services after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should discontinue use of our website and services. If a material change requires your specific consent under applicable law, we will obtain such consent before applying the change to your personal information.

17.3 Version History

RCH Connect maintains an internal record of all versions of this Privacy Policy, including the effective date and scope of each revision. Upon request, we can provide information about the history of changes to this policy. This version record is maintained as part of our compliance documentation and is available for review by regulatory authorities upon lawful request.

Clause 18

Contact Information and Dispute Resolution

If you have any questions, concerns, or complaints regarding this Privacy Policy, our data handling practices, or your privacy rights, we encourage you to contact us. We are committed to addressing your concerns promptly and fairly. You may reach us through any of the following channels.

18.1 Primary Contact Details

The primary point of contact for all privacy-related matters is our main business office. You can reach us by email at touch@rchconnect.autos, by telephone at +1 (406) 643-2348, or by postal mail at RCH ONLINE, LLC, 688 S 480 W, Providence, Utah 84332-9013, United States of America. Our website is available at https://www.rchconnect.autos. We aim to acknowledge all privacy-related inquiries within two business days and provide a substantive response within ten business days.

18.2 Dispute Resolution

In the event of any dispute, claim, or disagreement arising from or relating to this Privacy Policy or our data handling practices, we encourage you to first contact us directly to seek an amicable resolution. We are committed to resolving privacy concerns through good faith discussion and negotiation. If we are unable to resolve the matter to your satisfaction, you may have the right to file a complaint with the appropriate data protection authority in your jurisdiction. For residents of the United States, this may include the Federal Trade Commission or the Attorney General of your state. We will cooperate fully with any lawful inquiry or investigation by a competent regulatory authority regarding our data protection practices.

18.3 Data Protection Officer

RCH Connect has designated a responsible individual to oversee compliance with this Privacy Policy and applicable data protection laws. Inquiries directed to our Data Protection Officer may be sent via email to touch@rchconnect.autos with the subject line Attention: Data Protection Officer, or by postal mail to our physical address with the same attention line. Our Data Protection Officer is empowered to address your concerns, coordinate our response to data subject requests, and liaise with regulatory authorities as necessary.

18.4 Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Utah, without regard to its conflict of law provisions. Any legal action or proceeding arising from or relating to this Privacy Policy shall be brought exclusively in the state or federal courts located in the State of Utah, and you hereby consent to the personal jurisdiction and venue of such courts. This choice of law and venue provision does not limit any rights you may have under the data protection laws of your jurisdiction of residence.