Last Updated: January 1, 2022
This Policy generally applies to the information that ROC-P processes. However, this Policy is subordinate to any specific terms and conditions set forth in any contract for services or other agreement you may have with ROC-P relating to a service or data.
Further, this Policy applies only to information ROC-P processes. This Policy does not apply to information collected by ROC-P’s clients, who may have their own privacy policies that apply to you. It is ROC-P’s policy, however, to treat all Personal Information received from our clients with the same or greater care that they use, and to only process the Personal Information they provide for identified, specific purposes. If you receive ROC-P’s services through one of our clients, which may include your employer, trade association, or other entity of which you are a member (all of which we will refer to in this Policy as our “Clients”), please contact them for more information on how they treat your Personal Information.
1. What information does ROC-P collect?
ROC-P generally collects what can be described as Personal Information and Non-Personal Information. We collect this information when you provide it to us, when you purchase or inquire of our goods or services, and when you have provided it to our Clients who then share it with us.
“Personal Information” is information that can be used to identify, locate, or contact you, a natural person, as well as any other information about you that we may connect with Personal Information. For example, Personal Information that we collect includes:
- Contact information such as your name, email address, phone number, physical address, username, and password;
- Relationship information such as your preferences or potential interest in ROC-P goods and services;
- Transactional information such as purchases, services requested, customer service inquiries, session data or log data (for example, your computer’s Internet Protocol address, browser type, browser version, the pages of our services that you visit, the time and date of your visit, and the time spent on those pages, to the extent any of the foregoing are kept in a form that may be used to identify you), customer account activity, and other customer account information; and
- Financial information such as credit card or banking information.
“Non-Personal Information,” on the other hand, is information that does not identify you as a natural person and is not identifiable to you as a natural person. For example, Non-Personal Information that we collect includes:
- Cookies and other similar tracking technologies processed in a non-identifiable way;
- Information we anonymize by rendering it unidentifiable to a natural person;
- Information we aggregate by combining it with other data in such a way that no natural person can be identified or linked to any specific information (for example, ROC-P collects aggregated statistics on the performance of its services and the occurrences of errors within the services); and
- The name, form, contact details, relationship information, transaction history, or financial information of legal persons. By “legal persons,” we refer to legal, business entities other than natural persons, such as corporations, limited liability companies, non-profit organizations, and other business entities.
2. Why does ROC-P collect this information?
ROC-P collects and processes Personal Information for a variety of purposes depending on the information being processed. ROC-P processes Personal Information to perform under its contractual obligations to you, providing its goods and services and processing information as may be necessary to support you in their use. ROC-P also processes Personal Information given its legitimate interest in improving its goods and services, enhancing customer experience, and identifying and marketing goods or services that may be of interest to you. Finally, ROC-P may process Personal Information as may be necessary to comply with a legal obligation.
To summarize, ROC-P processes Personal Information for the following purposes:
- To oversee and complete transactions with ROC-P customers;
- To prepare, deliver, maintain, or otherwise provide ROC-P’s services;
- To support ROC-P’s services;
- To set up and maintain your user account and allow you to interact with ROC-P and customers of ROC-P’s services;
- To provide you with customer service by resolving disputes, addressing complaints, and troubleshooting any technical problems encountered;
- To measure and understand the effectiveness of ROC-P’s services;
- To comply with applicable laws and regulations; and
- To communicate offers for goods and services, including offers based on your interests and purchase of ROC-P’s goods and services, to administer promotional events, and to engage in other marketing activities that may be of interest to you. Please note that we will provide you the opportunity to opt out of direct marketing communications or market research inquiries, but we will still need to gather certain Personal Information as necessary to provide our goods and services to you.
If we would like to process your Personal Information for any other purpose, we will disclose this to you at the time it is collected and may request your express consent.
With respect to Non-Personal Information, because this information does not identify a natural person, ROC-P may use and process it for any purpose. ROC-P expressly reserves the right to use anonymized or aggregated information to improve or develop its goods and services, create and publish reports, conduct statistical analyses about customer interest, monitor industry trends, and otherwise engage in activities that do not result in the disclosure of identifiable information.
To be clear, ROC-P is committed to respecting your privacy and will only process your Personal Information for the reasons disclosed herein or as requested at the time of collection, and then only in the context of your customer relationship with ROC-P. ROC-P will not sell, rent, or lease your Personal Information to others.
3. Will ROC-P share this information with third parties?
To provide certain services, ROC-P may have to share information with third parties who use our services or provide services to us, such as our Clients, service providers, vendors, or operators of software used in our services. For example, as noted above we may share information with your employer, trade association, or other entity of which you are a member, which has engaged us to provide our services to you and with which we will share information as necessary to provide our services. In addition, we may use third party services such as Google Analytics for the collection, monitoring, and analysis of information to improve our services, and we may use other technology providers such as Amazon Web Services, or certain products provided by Google, such as Workspace, which may have access to the information we process as necessary to deliver our services to you.
We will maintain controls and oversight appropriate to ensure that any third party who we engage to assist us in processing your Personal Information will only have access to the Personal Information necessary for it to perform specific, designated tasks on our behalf, will only use the information for this purpose, and will protect your Personal Information to at least the same extent that we do. Please note, however, that this Policy applies only to information that we process and share with others—it does not apply to Personal Information that you share with third parties.
ROC-P may also share information to comply with our legal obligations, such as responding to lawful requests from government or judicial entities. In the event we are asked to disclose your Personal Information, we will attempt to validate the request and inform you of it prior to disclosure.
Finally, ROC-P may disclose Personal Information where needed as part of a sale or transfer of our assets, enforce our rights, protect our property, or protect the rights, property, or safety of others, or as is needed to support external auditing, compliance, and governance functions.
If ROC-P needs to share your Personal Information for a purpose not identified here, we will obtain your consent before doing so and will disclose this purpose at the time of obtaining your consent. For example, ROC-P may wish to use your information in demonstrations or other marketing materials and, if so, will contact you before doing so.
4. How long will ROC-P keep my information?
ROC-P keeps different kinds of information for different lengths of time depending on the purpose for which it is processing the information and depending upon your specific situation. In any event, ROC-P will retain your Personal Information as long as is necessary to accomplish the relevant purpose, but no longer.
5. How does ROC-P keep my information secure?
Taking into account the nature of the information gathered, ROC-P maintains a comprehensive security program that is reasonably designed to protect the security, confidentiality, and integrity of your Personal Information through administrative, technical, and physical controls appropriate to the sensitivity of the information. When developing or improving our goods and services, we incorporate privacy and security into our design.
6. What are my choices with respect to my information?
Your first choice is always to limit the information you provide. You may also opt out of certain marketing information by visiting our website and communicating your choices to us, or by clicking “unsubscribe” at the bottom of marketing emails you might receive.
Regarding cookies and other tracking technologies, you can manage these by adjusting the settings on your browser, commonly referred to as the browser’s “Do Not Track” settings. All browsers are different, so you may need to visit the “help” section of your browser to learn more about cookie preferences and other privacy settings that may be available. You can also manage how your mobile device and mobile browser share location information with ROC-P, as well as how your mobile browser handles cookies and related technologies by adjusting your mobile device privacy and security settings. Please refer to instructions provided by your mobile service provider or the manufacturer of your device to learn more. In general, ROC-P will comply with your browser’s “Do Not Track” settings, but may require the use of some cookies as necessary to provide the services.
ROC-P complies with applicable law regarding your ability to access, correct, and delete your identifiable information. If you have an online account, you may be able to log into your account to access and update certain information provided. For identifiable information that is not linked to an online account, please contact us directly.
ROC-P does not intend to collect Personal Information from children aged 16 and under. If you believe a child is providing us Personal Information, please contact us directly so we may investigate and delete it.
For assistance with exercising your choices, or if you have any questions about your choices, please contact us.
For EU residents:
The General Data Protection Regulation (“GDPR”), particularly Articles 15 to 21, affords you a number of rights as a data subject. We encourage you to read and learn about those rights on your own, but the following will help you to begin to understand those rights.
- Access: This allows you to request from us information about your Personal Information, including what data we have and how and why it is being processed.
- Rectification: In the event that some or all of the Personal Information that we have concerning you is inaccurate, this gives you the right to have those inaccuracies rectified.
- Erasure: In some cases, you may have the right to request that we erase your Personal Information in our possession.
- Restriction of Processing: This gives you the right, in some circumstances, to have us process your Personal Information only with your consent.
- Objection to Processing: Where we are processing your Personal Information on the grounds of its legitimate interests, or to carry out tasks in the public interest or to exercise official authority, you have a right to object to the processing on grounds relating to your particular situation. In cases where you object to our processing of your personal data for direct marketing purposes, the processing will cease.
- Data Portability: This allows you to request a copy of your Personal Information that it has on file and to transfer that information to someone else without any interference from us. In some cases, you may be able to request that we transfer your personal information directly to a third party on your behalf.
In addition, to the extent that we process any of your Personal Information on the basis of your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing that was based on your consent before its withdrawal.
If you are a natural person residing in the EU and at any time you believe we have violated one of your rights listed above, or if you believe we are in violation of one or more of the provisions of the GDPR, you have the right to lodge a complaint with a Data Protection Authority. More information about the Data Protection Authorities can be found at https://ec.europa.eu/info/law/law-topic/data-protection/reform/what-are-data-protection-authorities-dpas_en.
8. For California residents:
This notice does not apply to employment-related personal information collected from California-based employees, job applicants, contractors, or similar individuals.
The California Consumer Privacy Act (the “CCPA”) affords those who reside in the State of California certain rights as a data subject. If you are a resident of the State of California, we encourage you to read and learn about those rights on your own, but the following will help you to begin to understand them:
- Access: You have the right to request that we disclose certain information to you about our collection and use of your Personal Information.
- Erasure: In some cases, you may have the right to request that we erase your Personal Information in our possession.
- Data Portability: This allows you to request a copy of your Personal Information that we may have and transfer that information to someone else without any interference from us. In some cases, you may be able to request that we transfer your Personal Information directly to a third party on your behalf.
- The CCPA further provides California residents the right to direct us not to sell your personal information. WE DO NOT SELL YOUR PERSONAL INFORMATION.
We will not discriminate against you for exercising any of your CCPA rights.
The categories of Personal Information that ROC-P collects from California residents are described in Section 1, above, and include contact information, relationship information, and transactional information. The purposes for which ROC-P collects this Personal Information is described in Section 2, above, and includes fulfilling orders; operating, delivering, maintaining, and otherwise providing the ROC-P goods and services you request; supporting ROC-P goods and services; setting up and maintaining your customer account and allowing you to interact with ROC-P online; providing you with customer service by resolving disputes, addressing complaints, and troubleshooting problems encountered; measuring and understanding the effectiveness of ROC-P goods and services; improving ROC-P goods and services; complying with applicable laws and regulations; and engaging in marketing activities (subject to your right to opt-out of such marketing activities).
In addition, under California’s “Shine the Light” law, we state to you that we do not share your Personal Information with third parties for their direct marketing purposes.
To make a request regarding any of these rights or to ask questions or provide comments about this Privacy Notice for California Residents, please contact us.
It is our policy to post any changes to this Privacy Notice on this page. We may or may not contact you directly concerning significant changes. We encourage you to visit this page periodically and check for changes. To the extent permitted by law, your continued use of our services after a change is deemed to be your consent to any such change. 9. For international residents:
ROC-P is headquartered in the United States of America. It and its authorized processors may transfer your Personal Information to the United States of America and access it from the United States of America for the purposes described in this Policy. ROC-P protects the privacy and security of Personal Information in the manner described in this Policy regardless of where it is collected, stored, accessed, or otherwise Processed.
10. Does this Policy ever change?
ROC-P may post changes to this Policy on this page. Please refer to the “last updated” date above. We may or may not contact your directly concerning significant changes, and therefore we encourage you to visit this page periodically and check. By using ROC-P’s services or purchasing its goods after a change to this Policy, you are deemed to consent to any changes.
11. What if I have questions?
If you have any questions about this Policy or our information security and data privacy practices generally, or if you wish to provide comments or exercise any of your rights with respect to your personal information as identified above, please contact us at [EMAIL CONTACT]. You may also write us at:
215 2nd Ave. SE Ste. 300
Cedar Rapids, Iowa 52401