California Privacy Notice (CCPA/CPRA)
RACO Manufacturing & Engineering Co., Inc.
Last Updated: June 2026
This California Privacy Notice describes the privacy practices of RACO Manufacturing & Engineering Co., Inc. ("RACO," "we," "us," or "our") regarding personal information collected from California residents. This notice is required by the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA") (collectively, "California Privacy Laws").
Important: This notice applies specifically to California residents. Other jurisdiction-specific rights (if you reside in Colorado, Virginia, Connecticut, Utah, or another jurisdiction with privacy laws) are addressed in our primary Privacy Policy.
1. Personal Information We Collect
Over the past 12 months, we have collected and disclosed the following categories of personal information from California residents:
Categories of Personal Information Collected
| Category | Description | Source | Retention Period |
|---|---|---|---|
| Identifiers | Name, postal address, email address, phone number, IP address, device identifiers, account credentials | Forms, website interactions, product registration, customer communications | 3 years after last interaction, or longer if required by law |
| Commercial Information | Purchase history, products/services inquired about, transaction amounts, payment information (processed by third parties) | Sales transactions, demo requests, product inquiries | Duration of relationship + 7 years (for tax/regulatory compliance) |
| Internet Activity | Pages visited, links clicked, time spent on pages, browsing patterns, referrer information, search queries on our site | Cookies, pixels, web analytics, server logs | 13 months (Google Analytics default) |
| Geolocation Data | Approximate location derived from IP address | IP address analysis via analytics tools | 13 months |
| Sensory Information | Audio recordings (if you participate in support calls or webinars with consent) | Call recordings, webinar recordings | 1 year (deleted upon request) |
| Professional Information | Job title, company, industry, department, professional role, experience | Website forms, sales interactions, LinkedIn | Duration of business relationship + 3 years |
| Device Information | Device type, operating system, browser type, version, browser language, device manufacturer, mobile carrier | Cookies, analytics, device fingerprinting | 13 months |
| Inferences | Predicted preferences, predicted purchase likelihood, interest categories, audience segments | Aggregated analytics and marketing automation tools | 13 months |
How We Collect Personal Information
- Directly from you: Through contact forms, demo requests, product registration, surveys, customer support interactions, and email communications.
- Automatically: Through cookies, web beacons, pixels, analytics tools, and server logs when you visit our website or use our products.
- From third parties: From business partners, data brokers, customer data platforms, marketing partners, and publicly available sources to enhance our records and verify information.
- Inferred: We create inferences about your interests, preferences, and purchasing patterns based on your interactions with our website and products.
2. Use and Disclosure of Personal Information
Purposes for Collection and Use
We collect and use your personal information for the following purposes:
- Service Delivery: Providing, maintaining, and improving our products and services; responding to your inquiries; processing orders and transactions.
- Account Management: Creating and maintaining your account; managing authentication and credentials; tracking subscriptions and renewals.
- Marketing and Advertising: Sending promotional materials, newsletters, and product updates (with your consent); targeted advertising; conducting market research; analyzing campaign effectiveness.
- Analytics and Performance: Understanding how you use our website and products; improving user experience; identifying trends; measuring site performance; conducting A/B testing.
- Customer Support: Responding to support requests; troubleshooting issues; providing technical assistance; maintaining call and chat logs.
- Legal Compliance: Complying with laws, regulations, and legal processes; responding to government requests; detecting and preventing fraud; protecting our legal rights.
- Aggregated Research: Creating anonymized, aggregated statistical data for business intelligence and benchmarking (cannot identify individuals).
- Third-Party Service Delivery: Enabling third-party service providers to perform services on our behalf (e.g., email delivery, hosting, analytics, payment processing).
Third Parties with Whom We Share Personal Information
We share personal information with the following categories of third parties:
| Category | Examples | Purpose | Your Right to Opt-Out |
|---|---|---|---|
| Service Providers | HubSpot (CRM), Google Analytics, AWS (hosting), Mailchimp (email), payment processors | Service delivery, analytics, marketing automation | No—service providers are contractually bound to use data only for stated purposes |
| Marketing Partners | Meta (Facebook), Google Ads, LinkedIn Campaign Manager | Targeted advertising, audience matching, retargeting | Yes—See Section 3 below |
| Data Analytics Providers | Google Analytics, Amplitude, Mixpanel | Website analytics, user behavior analysis, trend identification | Yes—Limit tracking via cookie preferences |
| Telecommunications Carriers | Aeris Communications, U.S. Mobile, Red Pocket Mobile, AT&T | Cellular service delivery for Cellularm devices | No—Necessary for product functionality |
| Business Partners | Resellers, system integrators, technology partners | Co-marketing, product development, integration | No—unless they use data for marketing to you directly |
| Legal Entities | Law enforcement, regulatory agencies, courts | Compliance with legal process, fraud prevention, safety | No—required by law |
| Acquired Companies | Future buyers if RACO is acquired or merged | Continuity of service | Yes—you will be notified and given opt-out rights |
"Sale" and "Sharing" Under CCPA/CPRA
Sales: We do not sell your personal information for monetary consideration to third parties for their direct marketing purposes.
Sharing for Cross-Context Behavioral Advertising ("Sharing"): We may share certain personal information (email address, browsing behavior, device identifiers) with advertising partners (Meta, Google, LinkedIn) for the purpose of serving targeted advertisements across different websites and platforms. Under CCPA/CPRA, this constitutes "sharing" for which you have a right to opt-out.
3. Your California Privacy Rights
Right to Know
You have the right to request that we disclose what personal information we have collected, used, and shared about you over the past 12 months, including:
- The categories and specific pieces of personal information collected
- The sources of that personal information
- The purposes for collection and use
- The categories of third parties with whom we share the information
Right to Delete
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information we need to complete a transaction, comply with legal obligations, or prevent fraud).
Right to Correct
You have the right to request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing
You have the right to direct us not to share your personal information for cross-context behavioral advertising ("sharing").
Note: We do not currently conduct "sales" in the strict CCPA sense, but we do engage in "sharing" with advertising platforms. By clicking the "Do Not Sell or Share My Personal Information" link at the bottom of our website, you can submit a request to opt out.
Right to Limit Use and Disclosure
You have the right to direct RACO to limit our use and disclosure of your sensitive personal information (including precise geolocation, racial or ethnic origin, religious beliefs, union membership, genetic data, health data, and sex life or sexual orientation data) to uses that are necessary to provide the services or goods you requested or as otherwise permitted by law.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your California privacy rights. This means we will not:
- Deny you goods or services
- Charge you different prices or rates
- Provide you with a lower level of service
- Suggest that we will treat you differently
Exception: We may offer financial incentives for the collection, retention, or sharing of personal information, provided the incentive is reasonably related to the value of the data and clearly disclosed.
Right to Opt-Out of Automated Decision-Making (CPRA Only)
If we use automated decision-making technology that has a material impact on your rights, you have the right to request human review of that decision. We will disclose when automated decision-making applies to you.
4. How to Exercise Your Rights
Submitting a Request
To exercise any of the rights above, submit a verifiable consumer request by:
Email: privacy@racoman.com
Mail: RACO Manufacturing & Engineering Co., Inc. Legal Department 727 Allston Way, Suite B Berkeley, CA 94710
Online Form: [Link to form on website — to be added]
Verification Requirements
To protect your privacy and security, we will verify your identity before processing your request. At minimum, we require:
- Your full name
- Current email address
- Current mailing address
- A description of the personal information at issue
For particularly sensitive requests, we may require:
- Signing a declaration under penalty of perjury, or
- Providing government-issued ID
Response Timeline
- We will acknowledge receipt of your request within 10 business days
- We will provide our substantive response within 45 calendar days
- If we cannot fully comply, we will explain why and describe any limitations
- We may extend our response by 45 additional days for complex requests, with notice
Authorized Agents
You may designate an authorized agent to submit requests on your behalf. The agent must:
- Provide proof of authorization (power of attorney, signed letter)
- Provide their own identity verification
5. Tracking Technologies and Your Choices
Cookies and Similar Technologies
We use the following tracking technologies on our website and products:
Analytics
- Google Analytics: Collects pages visited, traffic sources, user engagement, device information, and general geographic location.
- HubSpot Analytics: Tracks website behavior, form submissions, and customer interactions with marketing content.
Advertising and Retargeting
- Meta (Facebook) Pixel: Enables targeted advertising on Facebook and Instagram; tracks conversions and user interactions.
- Google Ads Conversion Tracking: Measures conversions from Google search and display advertising.
- LinkedIn Insight Tag: Measures engagement with our LinkedIn content and enables B2B audience targeting.
Session Recording
- We do not currently use session recording tools. If we implement them in the future, this policy will be updated.
Heat Mapping
- We do not currently use heat-mapping tools. If we implement them in the future, this policy will be updated.
Email Tracking
- Email Marketing Pixels: Our email marketing platform (Mailchimp/HubSpot) uses pixels to track email opens and clicks. You can opt out of email marketing via the unsubscribe link in each email.
Your Choices
Browser Controls:
- Most browsers allow you to block cookies and similar technologies. Consult your browser's help menu for instructions.
- Many browsers support "Do Not Track" (DNT) signals. We honor DNT signals where technically feasible, though not all third-party service providers do.
Third-Party Opt-Outs:
- Google Analytics: Google Analytics Opt-Out Extension
- Meta Pixel: Meta Privacy Center
- LinkedIn: LinkedIn Privacy Center
CCPA/CPRA Opt-Out:
Email Opt-Out:
- Click the "Unsubscribe" link in any marketing email
- Contact us at privacy@racoman.com
Impact of Opting Out
Opting out of cookies and tracking will not prevent you from using our website or products. However, some features may be less personalized, and our ability to measure campaign effectiveness will be limited.
6. Data Retention and Deletion
Retention Periods by Category
| Category | Retention Period | Reason |
|---|---|---|
| Account and Transaction Data | Duration of business relationship + 7 years | Tax compliance, fraud detection, legal holds |
| Marketing and Communications Data | 3 years after opt-in or last interaction | Marketing effectiveness, compliance with CAN-SPAM |
| Analytics and Browsing Data | 13 months | Standard aggregation and reporting cycles |
| Support and Service Data | 2 years after ticket closure | Customer service quality, dispute resolution |
| Device and Technical Data | 13 months | Performance optimization, security analysis |
| Inferred/Segmentation Data | 13 months | Audience re-evaluation and campaign optimization |
Backup and Archive Data
We maintain backup copies of personal information for disaster recovery, business continuity, and legal compliance purposes. Backup data is not accessible for normal business use but may take up to 30 days to delete after a deletion request is processed. After 30 days, we will not restore data from backups unless legally required.
Deletion on Account Termination
Upon account closure or service termination, we will delete or anonymize your personal information within 90 days, except where:
- We are required by law to retain the data
- The data is necessary to resolve disputes or comply with legal obligations
- You have not completed an outstanding transaction or owe fees
7. Children's Privacy
Our products and website are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete that information within 30 days.
If you believe we have collected information from a child under 13, please contact us at privacy@racoman.com.
8. Sensitive Personal Information Under CPRA
We collect the following sensitive personal information and use it only for the purposes stated:
| Sensitive Category | Information | Purpose | Your Right |
|---|---|---|---|
| Precise Geolocation | GPS data from devices in remote monitoring systems | Service delivery; device location tracking for critical infrastructure monitoring | Limit Use to stated purposes |
| Biometric Data for Identification | None currently collected | N/A | N/A |
| Health Data | None collected (product monitors infrastructure, not health) | N/A | N/A |
You have the right to request that we limit use of sensitive personal information to the purposes for which it was disclosed or as otherwise permitted by law. Submit a "Limit Use" request via privacy@racoman.com.
9. Contact Information and Dispute Resolution
Privacy Questions
Email: privacy@racoman.com
Mailing Address: RACO Manufacturing & Engineering Co., Inc. Legal Department 727 Allston Way, Suite B Berkeley, CA 94710
Phone: 1-510-658-6713
California Privacy Protection Agency
If you believe your privacy rights have been violated and we have not resolved the issue, you may file a complaint with the California Privacy Protection Agency:
California Privacy Protection Agency 2600 Capitol Avenue, Suite 360 Sacramento, CA 95816 Website: cppa.ca.gov
Dispute Resolution
Any dispute regarding this California Privacy Notice is subject to the dispute resolution procedures in our Terms of Service, including pre-dispute notice requirements, informal resolution, and binding arbitration.
10. Updates to This Notice
We may update this California Privacy Notice from time to time to reflect changes in our practices or in response to new laws. We will notify you of material changes by:
- Posting the updated notice on this page
- Updating the "Last Updated" date at the top
- For material changes, sending you an email notification or providing prominent notice on our website
Your continued use of our website and products after such notification constitutes your acceptance of the updated notice.
11. Relationship to Our Primary Privacy Policy
This California Privacy Notice is supplemental to our Primary Privacy Policy. To the extent of any conflict between this notice and the primary policy, this California Privacy Notice controls for California residents. The primary policy provides additional context regarding our broader privacy practices, including practices related to non-California residents.
Effective Date: June 2026
Last Updated: June 2026
Appendix A: Tracking Technologies Details
Google Analytics
Vendor: Google LLC
Data Collected: Pages visited, time on page, bounce rate, device type, browser, OS, geographic location, traffic source, user ID (if authenticated)
Data Processor Location: United States (may be transferred internationally)
Retention: 13 months (default)
Opt-Out: Google Analytics Opt-Out Extension
Meta (Facebook) Pixel
Vendor: Meta Platforms, Inc.
Data Collected: Pages visited, events triggered (e.g., form submission, product view), device ID, browser type, IP address, conversion events, email address (hashed for custom audiences)
Data Processor Location: United States (may be transferred internationally)
Use Cases: Conversion tracking, audience creation, retargeting campaigns on Facebook and Instagram
Opt-Out: Meta Privacy Settings
LinkedIn Insight Tag
Vendor: LinkedIn Corporation
Data Collected: Pages visited, member ID (if logged into LinkedIn), conversion events, email address (hashed)
Data Processor Location: United States (may be transferred internationally)
Use Cases: B2B lead generation, account-based marketing, conversion measurement
Opt-Out: LinkedIn Privacy Center
HubSpot Tracking
Vendor: HubSpot, Inc.
Data Collected: Form submissions, email opens and clicks, pages visited, time on page, device information, IP address
Data Processor Location: United States
Use Cases: CRM data enrichment, email marketing personalization, marketing automation
Opt-Out: Unsubscribe from marketing emails; update email preferences in account settings
End of California Privacy Notice