Privacy Policy for Three Stone

Effective Date: October 26, 2023

This Privacy Policy describes how Three Stone (“we,” “us,” or “our”) collects, uses, and shares personal information of users of our website, threestone.com (the “Site”). This policy also outlines your rights regarding your personal information under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect the following categories of personal information:

• Identity Data: This includes your name.
• Contact Data: This includes your email address, phone number, and postal address.
• Needs Data: This includes the description of your needs as provided by you.
• Usage Data: This includes information about how you use our Site, products, and services.
• Technical Data: This includes your IP address, browser type, operating system, device information, and other technical information.
• Analytics Data: We use Google Analytics, which collects data about your interactions with our website, including pages visited, time spent on pages, and referring websites. This data is anonymized and aggregated to help us understand website traffic and improve user experience.

2. How We Collect Information

We collect information in the following ways:

• Directly from you: When you provide information through forms on our Site, such as when requesting a callback or submitting inquiries.
• Automatically: Through cookies and similar technologies when you interact with our Site.
• From Third-Party Services: Through Google Analytics, as described above.

3. Purposes of Data Collection and Use

We use your personal information for the following purposes:

• To provide services: To gather the data needed for a callback from our service team and to fulfill your requests.
• To communicate with you: To respond to your inquiries, provide customer support, and send you updates about our services.
• To improve our Site: To analyze website usage and trends, and to optimize the user experience.
• To personalize your experience: To tailor content and offers to your interests.
• To comply with legal obligations: To comply with applicable laws and regulations.
• Marketing Purposes: We do not currently use the data collected for marketing purposes. If this changes, we will update this privacy policy accordingly and provide you with the option to opt-in.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal information is as follows:

• Consent: We will obtain your consent to process your personal information for specific purposes, such as sending you marketing communications. You have the right to withdraw your consent at any time.
• Contractual Necessity: We will process your personal information when it is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: We will process your personal information when it is necessary for our legitimate interests, such as improving our Site and services, provided that your interests and fundamental rights do not override those interests.
• Legal Obligation: We will process your personal information when it is necessary to comply with a legal obligation.

5. Sharing Your Information

We may share your personal information with the following categories of recipients:

• Service Providers: We share information with third-party service providers who assist us in providing our services, such as Google Analytics. These service providers are contractually obligated to protect your personal information and only use it for the purposes we specify.
• Legal Authorities: We may disclose your personal information to legal authorities if required by law or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to collect information about your use of our Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the Site, compiling reports on website activity for us, and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.

7. Your Rights (GDPR)

If you are located in the EEA, you have the following rights regarding your personal information:

• Right to Access: You have the right to request access to your personal information that we hold.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information.
• Right to Erasure: You have the right to request that we erase your personal information under certain circumstances.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information under certain circumstances.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal information under certain circumstances, including for direct marketing purposes.
• Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that we have violated your rights under the GDPR.

To exercise any of these rights, please contact us using the contact information provided below.

8. Your Rights (CCPA)

If you are a California resident, you have the following rights regarding your personal information under the CCPA:

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of the information, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. We do not currently sell your personal information. If this changes, we will update this privacy policy accordingly and provide you with the option to opt-out.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Submitting Requests:

To exercise your rights under the CCPA, please submit a verifiable consumer request to us by:

• Emailing us at the email address provided in the “Contact Us” section below.

Verification:

Only you, or a person you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

9. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information, and whether we can achieve those purposes through other means, and the applicable legal requirements.

10. Data Security

We have implemented appropriate technical and organizational measures to protect your personal information from unauthorized access, use, or disclosure. These measures include:

• Using encryption to protect sensitive data in transit and at rest.
• Implementing access controls to restrict access to personal information to authorized personnel only.
• Regularly monitoring our systems for security vulnerabilities.

However, no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we cannot guarantee the absolute security of your personal information.

11. Children’s Privacy

Our Site is not intended for children under the age of 16, and we do not knowingly collect personal information from children under the age of 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us using the contact information provided below.

12. International Data Transfers

Your personal information may be transferred to and processed in countries outside of the EEA or your country of residence, including the United States, which may have different data protection laws than your jurisdiction. We will take appropriate safeguards to ensure that your personal information is protected in accordance with this Privacy Policy and applicable law. This includes implementing Standard Contractual Clauses approved by the European Commission for data transfers from the EEA to countries outside the EEA.

13. Cookies and Similar Technologies

We use cookies and similar technologies to collect information about your use of our Site. Cookies are small text files that are stored on your device when you visit a website. We use cookies for the following purposes:

• Essential Cookies: These cookies are necessary for the operation of our Site and enable you to use its features.
• Performance Cookies: These cookies collect information about how you use our Site, such as which pages you visit and how long you spend on each page. This information helps us to improve the performance of our Site.
• Functionality Cookies: These cookies allow our Site to remember your preferences, such as your language settings.
• Targeting Cookies: These cookies are used to deliver content that is relevant to your interests. (Note: We do not currently use targeting cookies, but this may change in the future. If so, we will update this policy.)

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that blocking or deleting cookies may affect the functionality of our Site.

14. Links to Other Websites

Our Site may contain links to other websites that are not owned or controlled by us. We are not responsible for the privacy practices of these other websites. We encourage you to review the privacy policies of any websites you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on our Site and update the “Effective Date” at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our Site after any changes to this Privacy Policy constitutes your acceptance of the changes.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us