Privacy Policy

Last Updated: August 11, 2025

Overview

Roy I Kaufman, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.rikaufman.com, including any other media form, media channel, mobile website, or mobile application related or connected thereto. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Complete forms or request quotes on our website
• Subscribe to our newsletter
• Use our wire rope configurator tool
• Send us questions or feedback through contact forms
• Participate in surveys or provide feedback

The personal information we may collect includes:

• Name, email address, phone number
• Company name and job title
• Project specifications and technical requirements
• File uploads related to quote requests
• Industry preferences and product interests
• Any other information you choose to provide in forms

Automatically Collected Information

When you access our website, we may automatically collect:

• Device information (e.g., device type, operating system, browser type)
• Log information (e.g., IP address, access times, pages viewed)
• Location information (general geographic area based on IP address)
• Information collected through cookies, web beacons, and other tracking technologies
• reCAPTCHA data (processed by Google to verify human interactions)
• Google Analytics data (website usage patterns and demographics)

Categories of Sources

We collect personal information from the following categories of sources:

• Directly from you when you fill out forms, request quotes, or contact us
• Automatically through cookies and tracking technologies
• Third-party services like Google Analytics, Google reCAPTCHA, and Microsoft Graph (for email)
• Publicly available sources when researching business inquiries

How We Use Your Information

Business Purposes (CCPA Categories)

We use personal information for the following business and commercial purposes:

• Service Delivery: Provide, maintain, and improve our website and manufacturing quote services
• Quote Processing: Process quote requests, technical specifications, and send related communications
• Customer Support: Respond to your comments, questions, and requests
• Communication: Send technical notices, updates, security alerts, and business communications
• Marketing: Communicate about products, services, offers, and industry events (with consent)
• Personalization: Customize your website experience based on preferences
• Analytics: Monitor and analyze usage trends, website performance, and user behavior
• Security: Detect, investigate, and prevent fraudulent transactions and illegal activities
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

Legal Basis for Processing (GDPR)

When processing personal information of EU residents, we rely on the following legal bases:

• Legitimate Interest: Website analytics, security monitoring, business communications
• Contract Performance: Processing quotes, technical specifications, and customer service
• Consent: Marketing communications, non-essential cookies, newsletters
• Legal Obligation: Record keeping, tax reporting, regulatory compliance

Disclosure of Your Information

Categories of Third Parties

We may share personal information with the following categories of third parties:

• Service Providers: Email services (Microsoft Graph), cloud hosting, website analytics, payment processors
• Technology Partners: Google (Analytics, reCAPTCHA), content delivery networks, security services
• Professional Advisors: Legal counsel, accountants, consultants, and business advisors
• Government Authorities: When required by law, regulation, or legal process
• Business Transferees: In connection with mergers, acquisitions, or asset sales

Data Sharing vs. Sale (CCPA/CPRA)

Business Purpose Sharing

We share personal information for business purposes with:

• Email service providers (Microsoft Graph) to deliver quote responses and business communications
• Analytics providers (Google Analytics) to understand website usage and improve services
• Security services (Google reCAPTCHA) to prevent spam on contact and quote forms
• Cloud hosting providers to maintain website functionality and store quote data
• File storage services for uploaded technical specifications and documents

Cookies and Other Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

Types of Cookies We Use

Managing Your Cookie Preferences

You have several options to manage your cookie preferences:

1. Cookie Settings Page: You can manage your cookie preferences through our Cookie Settings page.
2. Browser Settings: You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

Third-Party Analytics

We use Google Analytics to help analyze how users use the site. Google Analytics uses cookies to collect standard internet log information and visitor behavior information in an anonymous form. The information generated by the cookie about your use of the website (including IP address) is transmitted to Google. This information is then used to evaluate visitors' use of the website and to compile statistical reports on website activity.

For more information about Google Analytics, please visit Google's Privacy Policy.

Your Privacy Rights

California Consumer Privacy Act (CCPA/CPRA) Rights

If you are a California resident, you have the following rights:

European Union (GDPR) Rights

If you are an EU resident, you have additional rights including:

• Access: Obtain a copy of your personal data
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Restrict: Limit how we process your data
• Complain: Lodge complaints with your data protection authority

Global Privacy Control (GPC)

We recognize and respond to Global Privacy Control signals. When we detect a GPC signal from your browser, we will treat it as a request to opt-out of data sharing under applicable privacy laws.

Response Timeframes

We will respond to verified requests within:

• 45 days for standard requests (may extend to 90 days for complex requests)
• 10 business days to confirm receipt of your request
• No charge for up to 2 requests per 12-month period

Data Security

We implement appropriate technical and organizational measures to protect personal information, including:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Role-based access to personal information
• Monitoring: Security monitoring and incident response procedures
• Regular Updates: Security patches and system updates
• Staff Training: Privacy and security awareness training

Despite these measures, no internet transmission is completely secure. We cannot guarantee absolute security but will notify affected individuals and authorities of any data breaches as required by law.

International Transfers

Your personal information may be transferred to and processed in countries other than your own, including:

• United States: Our primary servers and business operations
• Google Services: Analytics and reCAPTCHA services may process data globally
• Microsoft Services: Email services may involve international data transfers

When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions for certain countries
• Certification schemes and codes of conduct

Data Retention

Retention Periods by Category

We automatically delete personal information when retention periods expire, unless longer retention is required by law or for legitimate business purposes.

Children's Privacy

Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to Our Privacy Policy

We may update our Privacy Policy from time to time to reflect:

• Changes in applicable privacy laws and regulations
• Updates to our data collection or processing practices
• New features or services we offer
• Improvements to our security measures

We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending email notification to registered users (if applicable)
• Providing prominent notice on our website for significant changes

CCPA Requirement: We will update this privacy policy at least annually and within 30 days of any material changes.

Contact Information

Privacy Questions and Requests

For privacy-related questions, data subject requests, or concerns about this Privacy Policy:

Data Protection Authority Contacts

If you are not satisfied with our response to privacy concerns, you may contact:

• California: California Privacy Protection Agency (CPPA) - cppa.ca.gov
• EU/EEA: Your local Data Protection Authority
• Other US States: Your state's Attorney General's office