Privacy Notice

Your privacy is important to us. Please read this Privacy Notice carefully to learn how Core Ranger, Inc. (“Core Ranger,” “we,” “our,” or “us”) collects, uses, shares, and otherwise processes information relating to individuals (“Personal Data”).

Core Ranger is the controller of your Personal Data as described in this Privacy Notice, unless specified otherwise. This Privacy Notice applies to the collection and processing of Personal Data when you:

• Visit our branded websites that link to this Privacy Notice;
• Use our online products and services as an authorized user where we act as a controller of your Personal Data;
• Visit our branded social media pages;
• Visit our facilities;
• Communicate with us (including emails, phone calls, texts, or fax); or
• Register for, attend, or take part in our events, webinars, trade shows, or contests.

Disclosure Regarding Customer Data. This Privacy Notice does not apply to the Personal Data that we process solely on behalf of our customers pursuant to a written agreement we have entered into with such customers, including notetaker data (“Customer Data”). Our customers’ respective privacy notices or policies govern their collection and use of Customer Data. Our processing of Customer Data is governed by the contracts that we have in place with our customers, not this Privacy Notice. Any questions or requests relating to Customer Data should be directed to our customer.

Collection of Personal Data

We collect three types of Personal Data from you:

Information You Provide: Includes personal identifiers, contact details, employment information, financial account information, commercial information, and any other data you submit to us directly.

Information We Collect Automatically: We automatically collect information about your use of our websites and services using cookies and other tracking technologies (e.g., IP address, browser type, geolocation, device identifiers, and website interactions). The specific analytics and advertising tools we use, and your choices about them, are described in “Analytics and How We Measure Site Usage” and “Your Choices About Analytics” below.

Other Information We Collect: We may receive Personal Data from third parties or public sources (e.g., employment, education, commercial interactions, or internet activity data).

If you provide us with Personal Data relating to other individuals, you represent that you have the authority to do so and have obtained necessary consent for that information to be used in accordance with this Privacy Notice.

Types of Personal Data We May Collect

• Identifiers (e.g., name, email address, phone number, IP address)
• Records about you (e.g., account details, communications, uploaded content)
• Demographic information
• Financial and commercial information (e.g., billing details, purchase history)
• Internet or online activity information
• Geolocation data
• Audio/visual information (e.g., photos, video, audio recordings)
• Professional/educational information
• Sensitive personal information (e.g., account log-in credentials, precise geolocation, certain communications data)
• Inferences drawn from the above categories

How We Process Personal Data

We process Personal Data for the following purposes:

• Providing our services, products, and website access
• Internal business operations (accounting, auditing, reporting, security, IT administration)
• Product development and improvement (debugging, quality assurance, research, design of new features)
• Securing facilities, websites, and services (fraud prevention, suspicious activity monitoring, enforcement of policies)
• Responding to inquiries (support, communications, quality assurance)
• Managing payments and billing
• Creating de-identified and/or aggregated data
• Marketing and advertising (where legally permitted, including consent where required)
• Legal and compliance obligations (government reporting, litigation, regulatory requests)
• Corporate transactions (mergers, acquisitions, reorganizations, or sales of assets)

Payment Information

Payments on our online store are processed by Stripe, Inc. (“Stripe”). Your full payment card number is collected by and stored with Stripe; it is not transmitted to or stored on Core Ranger’s systems. When you place an order while signed in to your account, your payment method is saved with Stripe and linked to your account so it can be offered back to you at checkout for future purchases, as disclosed at checkout. Core Ranger receives and retains only limited payment metadata — such as the card brand, the last four digits of the card number, the expiration date, and the billing name and address — and uses it to display your saved payment methods, complete transactions you initiate, prevent fraud, and maintain order and billing records. Saved payment methods are used only for purchases you initiate, and you can remove a saved payment method at any time from the payment section at checkout. Stripe processes your payment information as described in its own privacy policy, available at stripe.com/privacy.

Exclusions

This Privacy Notice does not apply to:

• Personal Data we process on behalf of customers as a processor or service provider; or
• Personal Data of employees, job applicants, or others processed for employment-related purposes.

Disclosures to Third Parties

We may share Personal Data with:

• Core Ranger’s affiliates and subsidiaries;
• Third-party service providers (e.g., hosting, analytics, payment processors, logistics providers, and the email and text-messaging platforms we use to send the communications described below);
• Vendors necessary to complete requested transactions;
• Law enforcement or regulators to comply with legal obligations;
• Transactional parties in the event of a corporate merger, sale, or reorganization;
• The public, where you post or share Personal Data in public areas of our services;
• Entities to which you have consented.

We may also share de-identified or aggregated data for lawful purposes.

Analytics and How We Measure Site Usage

We use the following tools to understand how our websites are used, to improve them, and to measure our advertising:

• PostHog (PostHog Inc.) — product analytics and session replay. PostHog collects information such as pages viewed, buttons clicked, device and browser type, approximate location derived from IP address, and identifiers we assign to your browser. PostHog processes this information solely on our behalf as our service provider and is contractually prohibited from using it for any other purpose.
• Google Analytics 4 (Google LLC), loaded via Google Tag Manager — aggregate site usage measurement: pages viewed, traffic sources, device and browser type, approximate location, and on-site actions such as adding items to a cart or completing a purchase.
• Google Ads (Google LLC), loaded via Google Tag Manager, which we use in two ways. Conversion measurement: when you arrive from a Google ad, a click identifier is stored in a cookie on our site and, if you later make a purchase, that identifier and the conversion event — including the order value and the products purchased — are sent to Google so we can measure whether our advertising works. To improve measurement accuracy, we also send Google a hashed (unreadable) version of the email address, phone number, name, and address you provide at checkout (“enhanced conversions”); Google cannot recover the original values from the hashes. Remarketing: information about products you view, add to your cart, or purchase is shared with Google to show you more relevant Core Ranger ads on other websites and services. This is the “sharing” you can opt out of, as described below.

Session replay. For some visits, PostHog session replay records how the page is used — mouse movement, scrolling, clicks, and navigation — so we can diagnose problems and improve the site. Text you type into form fields (such as passwords, payment fields, and addresses) is masked and not captured. In California, session replay runs only after you explicitly accept analytics via our consent controls.

Retention. Analytics data is retained for a limited period in each tool and then deleted or aggregated. Your consent preference itself is stored in a cookie for 13 months.

Your Choices About Analytics

You can opt out of analytics and advertising cookies at any time using the “Privacy choices” link in the footer of this site and our storefront. Your choice is stored in a cookie and respected on every future visit from that browser.

Global Privacy Control. You have the right to opt out of the sale or sharing of your personal information, and we honor the Global Privacy Control (GPC) signal as a valid exercise of that right. We process GPC in a frictionless manner: if your browser or a browser extension sends the signal, we disable analytics and advertising cookies automatically — no further action, account, or confirmation is needed, and your experience of the site is otherwise unchanged. You can enable GPC by using a browser or browser extension that supports it (see globalprivacycontrol.org for options). You may also opt out via the “Privacy choices” footer link described above.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”) gives you the following rights:

• Right to know — request the categories and specific pieces of personal information we have collected about you, the sources, our purposes, and the categories of third parties to whom we disclose it.
• Right to delete — request deletion of personal information we collected from you, subject to legal exceptions (e.g., completing a transaction, security, legal obligations).
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell your personal information for money. However, we disclose identifiers, internet-activity, and commercial information to Google for advertising measurement and to show you personalized ads on other sites (remarketing), which constitutes “sharing” (and may constitute a “sale”) under the CCPA. You may opt out at any time by broadcasting the Global Privacy Control signal, which we honor and process in a frictionless manner, or via the “Privacy choices” link in the footer. We do not knowingly sell or share the personal information of consumers under 16.
• Right to limit use of sensitive personal information — we collect account log-in credentials solely to authenticate you; we do not use or disclose sensitive personal information for purposes that require a Right to Limit notice under the CCPA.
• Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

How to exercise these rights. Use GPC or the “Privacy choices” link (opt-out of sale/sharing) or contact us using the details in the “Contact Us” section below for access, deletion, or correction requests. We will verify your request using information associated with your account or order history. You may designate an authorized agent to act on your behalf. We respond within the timeframes the CCPA requires (generally 45 days, extendable once).

Notice at Collection

We collect the following categories of personal information, as defined by the CCPA:

We retain personal information for as long as needed for the purposes above: order and account records for as long as required for tax, accounting, and legal purposes; analytics data per the retention periods in the Analytics section; and your consent preference for 13 months. We do not collect sensitive personal information requiring a Right-to-Limit notice, and we do not knowingly collect personal information from consumers under 16. Full details are in the sections above; opt out via GPC or “Privacy choices” in the footer.

Text Messaging Opt-In Data and Consent

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We use your mobile number only for the communications described in our Terms and Conditions: automated order-status notifications if you have opted in to receive them; promotional text messages if you have separately opted in to receive those; and coordination of your active deliveries, including calls and text messages with your driver through masked phone numbers. The only third parties that receive your mobile number are the service providers that operate the messaging program on our behalf — the platform that determines when a message is due and the telecommunications provider that delivers it — and they are contractually barred from using it for any other purpose. You can opt out of automated texts at any time by replying STOP to any message.

We keep a record of each opt-in and opt-out: the phone number, whether you consented, the date and time, and which page or message the consent came from. We keep that record for as long as you have an account with us and for four years after your last consent change, because it is the evidence that we had your permission to text you. Withdrawing consent stops the messages; it does not erase the record that you had once given it.

Email Marketing and Subscription Choices

We send transactional email about your orders — confirmations, delivery updates, receipts, and account notices — to the address on your account. These are not marketing messages and are sent because you placed an order or hold an account with us.

We send promotional email — product announcements, offers, and inventory alerts — only to people who have opted in to receive it, by checking the unchecked-by-default promotions box at account setup or in your account settings. Consent to receive promotional email is not a condition of any purchase.

Every promotional email includes a one-click unsubscribe link and an unsubscribe footer; you can also manage which kinds of email you receive from the subscription-preferences link in any of our emails, or by contacting us at the address below. Unsubscribing from promotional email does not stop transactional email about orders you have placed. We use a third-party email and messaging platform to send this mail; it processes your name, email address, phone number, and order history on our behalf as a service provider and may not use them for its own purposes.

Changes to This Notice

We may update this Privacy Notice from time to time. Updates will be posted on this page with a revised effective date.

Contact Us

If you have questions about this Privacy Notice, please contact us: