PRIVACY POLICY

 

Last Updated: 6/1/24

 

By accessing Hilltower.com or forwarding domain addresses Hilltowerpersonnel.com and Hilltower.net (the 'Website'), you agree that this Privacy Policy applies to you and your data. You are responsible for reading this Privacy Policy and the Website Standards of the Website.

Data Collection

When visitors access our Website, we collect data including:

  • Visitor’s IP address
  • Browser user agent string

When visitors contact us through the Website, we collect the data shown in the Contact Us form, such as:

  • Name
  • Phone number
  • Email address

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/

After approval of your comment, your profile picture is visible to the public in the context of your comment.

Cookies

  • If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These cookies last for one year.
  • If you visit our login page, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
  • When you log in, several cookies will be set to save your login information and screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded Content from Other Websites

This Website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other sites behaves as if the visitor has visited the other website. These third-party websites may:

  • Collect data about you
  • Use cookies
  • Embed additional third-party tracking
  • Monitor your interaction with the embedded content, including tracking your interaction if you have an account and are logged in to that website

These third-party websites may not change their tracking practices in response to DNT settings in your web browser, nor do we obligate these third parties to adhere to your DNT settings.

Data Sharing

If you request a password reset, your IP address will be included in the reset email.

Data Retention

  • If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
  • For registered users, we store the personal information provided in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

Your Rights

If you hold an account or have left comments on this website, you have the right to request an exported file containing all personal data we possess about you. You also have the right to request that we expunge any personal data we possess about you, with certain exceptions for administrative, legal, or security purposes. To make such requests, please contact us through the email address provided at the end of this Privacy Policy.

Security Measures

We implement a variety of security measures to maintain the safety of your personal data when you enter, submit, or access your personal information. These measures include encryption, firewalls, and secure server environments.

Third-Party Services

We may use third-party services for various purposes, including analytics, marketing, and payment processing. These third parties may have access to your data as necessary to perform their functions, but they are not allowed to use it for other purposes. Some of the third-party services we use include:

  • Google Analytics
  • Mailchimp

Children’s Privacy

Our Website is not directed towards children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently received personal data from a child under 13, we will delete such information from our records.

Data Breach Procedures

In the event of a data breach, we will promptly notify affected users and take necessary steps to protect their information. This includes assessing the breach, containing the breach, and mitigating any harm that may result.

User Consent

By using our Website, you consent to our Privacy Policy and agree to its terms. When you provide us with your personal information, you consent to the collection, use, and disclosure of that information as described in this Privacy Policy.

CCPA (California Consumer Privacy Act)

  • California residents have the right to know what categories of personal information we collect, where we obtain it from, how we use it, and with whom we share it.
  • You have the right to request the deletion of your personal information, with some exceptions allowed by law.
  • We do not sell personal information to third parties, and you have the right to opt-out of the sale of your personal information.
  • We will not discriminate against you for exercising your CCPA rights, although certain services or features may be unavailable if you choose to exercise your rights.

To exercise your CCPA rights, please contact us using the information provided at the end of this Privacy Policy.

GDPR (General Data Protection Regulation)

If you are located in the European Union (EU), we process your personal data in compliance with the GDPR. Our legal basis for processing personal data includes contract performance, legitimate interests, and consent. By providing us with your personal data, you consent to its transfer and processing in the United States. Under the GDPR, you have rights such as the right to access, rectify, restrict, and delete your personal information. You also have the right to object to the processing of your personal data and the right to data portability. To exercise your GDPR rights, please contact us using the information provided at the end of this Privacy Policy. Hilltower acts as the data controller for the personal data collected through this website.

Data Sent

Visitor comments may be checked through an automated third-party spam detection service. We may share your data with governmental agencies in response to an investigation or subpoena and may share your data in response to a subpoena from third parties that we believe to be validly issued.

Updates to Privacy Policy/Effective Date

We may update this Privacy Policy from time to time, and the updated Privacy Policy will be posted to our Website. By continuing to access the Website, you agree to be bound to the Privacy Policy as updated and agree that it is your responsibility to regularly review the Privacy Policy for updates. This Privacy Policy and updates to this Privacy Policy are effective as of the date posted to the Website.

Website Standards/Arbitration

This Privacy Policy is incorporated into and subject to the Website’s Website Standards, including but not limited to the Website Standards Arbitration Provision.

Waiver of Jury

You acknowledge that this Privacy Policy is subject to the Waiver of Jury Provision contained in the Website Standards, whereby you irrevocably, knowingly, and voluntarily waive all rights to trial by jury in any claim, dispute, or cause of action (whether in law or equity and whether based on contract, tort, or otherwise) arising out of or relating to the Website Standards (including but not limited to the Privacy Policy), this Website, the content, the services provided by Hilltower, and/or otherwise involving you and Hilltower. You further waive the right to any claim, dispute, or cause of action in which a right to jury trial has been waived with any other claim, dispute, or cause of action in which a right to jury trial has not been waived.

For any inquiries or to exercise your rights, please contact us at:

Contact: ‎privacy[at]hilltower[dot]com‎‎