CALIFORNIA PRIVACY RIGHTS

This section provides information for eligible California residents on their rights with respect to our collection, retention, and use of Personal Information under the California Consumer Privacy Act of 2018 (CCPA). This section also explains California residents’ rights under the California Civil Code section 1789.83 (the “Shine the Light Law”). For the purposes of this section, “Personal Information” has the definition given in the CCPA.

We provide relocation services and/or other related services (“Relocation Services”), both under our own brand/authority and on behalf of Mayflower. Specifically, we an independently owned local moving company that operates, sells and provides a variety of our own Relocation Services or related services, typically locally and/or intrastate, that are outside of our relationship with Mayflower and have absolutely nothing to do with Mayflower’s Relocation Services or other services. We also represent Mayflower and sell/provide Mayflower’s (typically interstate) Relocation Services; while we are legally acting on Mayflower’s behalf, we are called an “Agent” of Mayflower. For information we send to and/or receive from Mayflower and/or its related companies in relation to Mayflower’s Relocation Services/business, the terms of Mayflower’s Privacy Policy and Data Security Policy shall apply. You also can learn about Mayflower’s cookie management and, when applicable, opt out of Mayflower’s sale/sharing of your information at https://www.unigroup.com/data-rights-request . Mayflower’s Privacy Policy and our other, related policies do not apply to information collected by us for our independent business(es).

1. Our Personal Information Collection and Use Practices.
   1. Categories. Depending on how you have interacted with us, we may collect and may have collected the following categories of Personal Information from you in the last twelve (12) months, which we may also share with third parties for the purposes outlined in this Privacy Policy. The categories of Personal Information we collect are described below by reference to the statutory categories of Personal Information specified in the CCPA. Personal Information does not include information exempted from the scope of the CCPA.
      • Identifiers, such as name, email address, postal address, username, password, IP address, and other online identifiers.
      • Sensory information, such as profile photos.
      • California customer records (as defined in California Civil Code §1798.80), such as contact details and communications we collect through our support channels, marketing webpages, social media, and connections with other marketing activities.
      • Commercial information, such as billing and transaction information and purchase history.
      • Internet or network activity information, such as information generated from interactions with our online services, such as data collected through server logs and cookies and similar technologies.
      • Geolocation, such as your city or other general location.
      • Professional or employment-related information, such as current or prior organizational affiliation, job title, information about your role, and work-related contact details.
      • Inferences that we may derive from the above identified information.
   2. Sources. Directly from you and cookies/action tags and other tracking technologies as described in this Privacy Policy.
   3. Disclosure to Third Parties for Business Purposes. We may disclose the Personal Information we collect for the purposes described in the Information Sharing section of this Privacy Policy.
   4. Business/Commercial Purposes for Use. We describe the business and commercial purposes for which we use the Personal Information we collect for the business purposes in the Information Collection and Information Use sections of this Privacy Policy.
2. Arrow Moving & Storage has not sold consumers’ personal information in the twelve (12) months preceding the effective date of this Privacy Policy.
3. Your California Privacy Rights Under the CCPA.
   1. Right to Request. If you are a California resident, pursuant to the CCPA, you have the right to request:
      • the categories of Personal Information collected about you;
      • the categories of sources from which your personal information is collected;
      • the business or commercial purpose of collecting or selling your Personal Information;
      • the categories of third parties with which your Personal Information is shared;
      • the specific pieces of Personal Information collected about you;
      • the categories of Personal Information sold about you and the categories of third parties to whom the Personal Information was sold, if applicable;
      • a copy of the Personal Information that we have collected about you during the past 12 months;
      • deletion of your Personal Information; and
      • an opt out of having your Personal Information disclosed or sold to third parties.
   2. Right to Request Deletion of Personal Information. You have the right to request that we delete Personal Information that we have collected and maintain about you, subject to certain exceptions. For example, Arrow Moving & Storage will not be required to comply with your request to delete your Personal Information if it is necessary for Arrow Moving & Storage to maintain your Personal Information in order to:
      • complete the transaction for which the Personal Information was collected, provide a good or service requested by you, or reasonably anticipated within the context of Arrow Moving & Storage’s ongoing business relationship with you, or otherwise perform a contract between you and Arrow Moving & Storage;
      • detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
      • debug to identify and repair errors that impair existing intended functionality;
      • exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
      • comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code;
      • engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when Arrow Moving & Storage’s deletion of the information is likely to render impossible or seriously impair the achievement of such research, if you have provided informed consent;
      • to enable solely internal uses that are reasonably aligned with your expectations based on your relationship with Arrow Moving & Storage ;
      • comply with a legal obligation; or
      • otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
   3. Exercising Your California Privacy Rights. To submit a request, or designate an authorized agent to make a request under the CCPA on your behalf, please contact us by phone at (719) 527-0616. To verify your identity when you submit a request and confirm your California residency, Arrow Moving & Storage  will match the identifying information you provide us to the Personal Information we have about you. If necessary, we may ask you to provide additional information for verification regarding your request.
   4. Right to Non-Discrimination for Exercising Rights. Arrow Moving & Storage will not discriminate against you in the event you exercise any of the aforementioned rights under CCPA, including, but not limited to, by:
      • denying goods or services to you;
      • charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
      • providing a different level or quality of goods or services to you; or;
      • suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.
4. California Shine the Light Law. In addition to your rights under the CCPA, the California Shine the Light Law permits California residents to request information regarding our disclosure, if any, of their personal information (as defined in the Shine the Light Law) to third parties for their own direct marketing purposes and the categories of personal information disclosed. You may send us requests for this information using our information provided in the “How to Contact Us” section of this Privacy Policy.

EUROPEAN PRIVACY RIGHTS

This section supplements the information contained in this Privacy Policy and provides additional information for eligible European Economic Area (“EEA”) and UK data subjects on their rights with respect to our collection, retention, and use of personal information.

1. Data Controller. We are the data controllers responsible for your personal data processed via the Website.
2. Legal Basis for Processing Personal Data. If you are an individual located in the EEA or UK, we collect and process personal data about you where we have a legal basis for doing so under applicable EEA and UK laws. This means we collect and process your data only when:
   • It is necessary for a legitimate interest (which is not overridden by your individual privacy interests), such as preventing fraud, improving our website, and increasing the security of the website and network infrastructure;
   • You have consented to this collection and processing for a specific purpose;
   • It is necessary to fulfill our contractual obligations; or
   • It is necessary to comply with a legal obligation.
3. Some examples of our legitimate interests for processing personal data include:
   • Website and network security;
   • Customer support;
   • Marketing to current customers;
   • Fraud prevention; or
   • Improving our website.
4. If you have any questions about or need further information concerning the legal basis on which we collect and use your personal data, please contact us at (719) 527-0616.
5. Data Subject’s Rights. You have the following rights in relation to the personal data we hold about you:
   • Right to withdraw consent. If we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time.
   • Right of access and/or portability. You may have the right to access the personal data we hold about you, and in some limited circumstances, have that data provided to you so you can provide or “port” that data to another provider.
   • Right to rectification. You may have the right to require us to correct any inaccurate or incomplete personal information.
   • Right to erasure. In certain circumstances, you may have the right to the erasure of personal data that we hold about you, for example, where we no longer need it or if you withdraw your consent (where applicable).
   • Right to restrict processing. You may have the right to request that we restrict processing of your personal data in certain circumstances such as where you contest the accuracy of that personal data or you object to us.
   • Right to object. You may have the right to request that we stop processing your personal data or stop sending you marketing communications.
   • Rights in relation to automated decision-making and profiling. You have the right not to be subject to a decision when it is based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.
   • Right to lodge a complaint with the supervisory authority. If you have a concern about any aspect of our privacy practices, including the way we have handled your personal data, you can report it to your local data protection regulators.
6. How to Exercise Your Rights. To exercise any of your rights, you may contact us using our information provided in the “How to Contact Us” section of this Privacy Policy.
7. Retention. We retain personal information for only so long as necessary for the intended purpose for which it was collected, unless a longer retention period is required or permitted by law or our document retention policies, which are based on professional standards and best practices.

Cookies. We describe our practices regarding cookie technologies in the Information Collection, Information Use, and Information Sharing sections of this Privacy Policy, and provide information regarding the management of cookies in the Your Choices section of this Privacy Policy.