OUR ONLINE PRIVACY POLICY

Effective Date: April 30, 2025.

Sunrock Group Holdings Corporation and our United States affiliates and subsidiaries (“Sunrock”, “we”, “us”, or “our”) value your privacy and are committed to protecting your personal information. This Privacy Policy (“Policy”) describes the types of information we may collect from you or that you may provide when you visit, access, and use the website https://www.thesunrockgroup.com/ (our “Website”) and in emails, text, and other electronic messages between you and our Website, telephone, and electronic communications between you and Sunrock. Our Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing your personal information. For your convenience, our Policy is detailed below.

This Privacy Policy does not apply to information we may receive about you through any other means, including any website or application operated by any third party or any application or content (including advertising) that may link to or be accessible from or on the Website.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website.

By accessing or using this Website, you consent to the collection, processing, use, retention, protection, and disclosure of your information by Sunrock as described in this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the Privacy Policy periodically for updates.

What information does the website collect?

We collect several types of information from you, including information you may provide — such as when you fill out a form or a job application — and information we collect automatically.

In the last twelve (12) months, we may have collected and disclosed the following information to third parties, including service providers, vendors, and our business partners:

• Identifiers. Including any information by which you may be personally identified, including without limitation your name, title, postal address, e-mail address, telephone number and email address. 
• Internet or other Electronic Network Activity Information. Including information about your internet connection, your operating system, and browser type, the equipment you use to access our Website, identifiers, interactions with our Website, and information about how and when you access our Website, such as the date and time of your visit, and other session statistics.
• Communications Information. Including information that you provide during communications and interactions with our Website and us, including information that you provide by filling in forms on our Website. This may also include information you provide when you report a problem with our Website.
• Geolocation Information. Including country, city, and region information when using our Website (if your device settings permit us to collect this information). 

(together, “Personal Information”).

We collect your Personal Information:

• Directly from you when you provide it, such as by filling out forms on our Website; 
• From records and copies of your correspondence (including email addresses) when you contact us; and
• Automatically as you navigate our Website, through cookies and other tracking technologies.

What is the information used for?

We may use information that we collect about you or that you provide to us, including any Personal Information, in aggregated, anonymized, and/or non-personally identifiable form, for any of the lawful bases listed below (except to the extent prohibited by applicable law). We may use your Personal Information as follows:

• To present our Website and its content to you, including to personalize your experience – Your information helps us to better respond to your individual needs;

• To administer, support, improve, and develop our Website – We continually strive to improve our Website offerings based on the information and feedback we receive from you;
• To improve customer service – Your information helps us to more effectively respond to your customer service requests and support needs;
• To administer a contest, promotion, survey or other site feature;
• To comply with legal processes and safety requirements, including to maintain the security of our visitors, employees, and property, respond to court orders, lawsuits, subpoenas, and government requests, as well as to address legal and regulatory compliance purposes;
• To share with contractors, service providers, and other third parties we use to support our business, who shall be required to maintain such Personal Information in confidence; and
• In any other way we may describe when you provide the information and with your consent.

 

Does the Sunrock Website use automatic data collection technologies?

Yes, as you navigate through and interact with our Website, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns (collectively, “Automatic Data”). We use Google Analytics to help improve our Website and understand how visitors interact with our Website. Google maintains its own security and privacy policies for Google Analytics. You can choose not to have your data used by Google Analytics by downloading their opt-out browser add-on.

Is any information disclosed to outside parties?

Other than as set forth in this Privacy Policy, Sunrock will not collect Personal Information about you when you visit our Website, unless you choose to provide such information to us, nor will such information be sold or otherwise transferred to unaffiliated third parties without the approval of the user at the time of collection. 

We may disclose Personal Information when legally compelled to do so, in other words, when we believe in good faith, that the law requires it or for the protection of our legal rights. We may also include or offer third-party products or services on our Website. These third-party sites have separate and independent privacy policies. We are not responsible or liable for the content and activities of any linked third-party sites.

Additionally, third party vendors may help us administer our Website, communication with you or others, comply with regulations, or deliver services. We may share your data with them in support of any of these goals. However, prior to doing so, we obtain assurances from our vendors that they will safeguard your Personal Information. There may be other limited instances where we need to share your Personal Information to respond to your request or inquiry.

Non-personally identifiable visitor information may be provided to other parties for marketing, advertising or other uses. 

Children Under the Age of 18

Our Website is not intended for children under 18 years of age. We do not knowingly collect Personal Information from children under 18. If you are under 18, do not use or provide any information on this Website or on or through any of its features. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at policy@thesunrockgroup.com.

SMS Terms of Service

By opting into SMS from a web form or other medium, you are agreeing to receive SMS messages from Sunrock Industries LLC. This includes SMS messages for conversations (between employees), conversations (external). Message frequency varies. Message and data rates may apply. See privacy policy at https://www.thesunrockgroup.com/privacy-policy/. Message HELP for help. Reply STOP to any message to opt out.

Data Retention

Your Personal Information is stored by Sunrock on its servers, and on the servers of the cloud-based database management services Sunrock engages, which are located in the United States. We will retain your Personal Information for as long as necessary to fulfil the purposes for which it is collected, including for the purposes of satisfying any legal, accounting, any legitimate administrative or operational purposes, your requirements, or reporting requirements. When it is no longer necessary to retain your Personal Information, it will be securely deleted. For more information about how long your Personal Information is stored, and for more information on your rights for erasure or portability, please contact us at policy@thesunrockgroup.com. 

Exercising Control Over Your Personal Information

To process your Personal Information, we rely upon your consent, contract performance, our legitimate business interest, or compliance with law. You may object or restrict our processing of your Personal Information. You may withdraw any prior consent you may have given to process your Personal Information at any time. It is also within your rights to refuse to provide any Personal Information we request. However, refusal to provide certain Personal Information may limit your access to information or use of the Website.

Should you wish to access or amend any Personal Information you may have provided to us or if you wish to request deletion, please contact us at policy@thesunrockgroup.com.

In any such case of your withdrawal of consent, you acknowledge that there may be a delay before we fully implement your request and you may therefore still be contacted by us for a period of time thereafter. Notwithstanding your withdrawal of consent, Sunrock may subsequently contact you for purposes unrelated to marketing and/or selling, including, but not limited to, legal or regulatory matters. Please be aware that applicable laws, statues, rules and/or regulations may require or permit the collection, processing, retention, use and disclosure of your Personal Information without your consent. Notwithstanding the foregoing, pursuant to applicable laws, statues, rules and/or regulations or other reasons, there may be circumstances in which you may not withdraw your consent to the collection, processing, use, retention and disclosure of your Personal Information.

Rights of Certain Types of Users

Subject to applicable law, you may have certain rights with regard to your Personal Information. To learn more about the Personal Information we collect about you or the rights you may have, please contact us at the contact information below. These rights may include the following rights to (1) access or rectify your Personal Information or request its deletion, (2) request a restriction on the processing or opt out of certain processing of your Personal Information, (3) object to the processing of your Personal Information (4) request a portable form of your Personal Information, or (5) exercise other rights with respect to your Personal Information. 

You can contact us at policy@thesunrockgroup.com or as described below. While we strongly encourage you to first raise any questions or concerns about your Personal Information directly with us, you may have a right to lodge a complaint with the relevant supervisory authority.

• Individuals Outside of the United States

Our servers are located in the United States. If you are accessing our Website from outside the United States, please be aware that your Personal Information may be transferred to, stored, and processed by us and by those third parties with whom we may share your Personal Information as set forth above (see Section “Is my information disclosed to outside parties?” above), in the United States and other countries. We will comply with applicable legal requirements when transferring your Personal Information to countries other than the country where you are located.

Canadian residents may access our Canadian privacy policy here: Privacy Policy For Canada

Individuals under EU and UK laws have certain rights with regard to your Personal Information including:

1. The right to be informed about our collection and use of your Personal Information. This Privacy Policy should tell you everything you need to know, but you can always contact us to find out more or to ask any questions.
2. The right to access the Personal Information we hold about you.
3. The right to have your personal data rectified if any of your Personal Information that we hold is inaccurate or incomplete. 
4. The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your Personal Information that we have.
5. The right to restrict (i.e. prevent) the processing of your Personal Information.
6. The right to object to us using your Personal Information for a particular purpose or purposes.
7. The right to data portability. This means that, if you have provided Personal Information to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that Personal Information to re-use with another service or business in many cases.
8. Rights relating to automated decision-making and profiling. We do not use your Personal Information in this way.

For more information about our use of your Personal Information or exercising your rights as outlined above, please contact us at policy@thesunrockgroup.com.

If you are not a resident in the EU or UK, your country may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will however take all reasonable measures to protect your Personal Information in accordance with this Policy and applicable law of your country of residence.

Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of your country of residence. If you wish to be informed about what Personal Information we hold and want it removed from our systems, please contact us at policy@thesunrockgroup.com.

• California.

Except where expressly noted, the subsections below apply only to “personal information” about California residents, as that term is defined in the California Consumer Privacy Act (“CCPA”), and as supplemented in the Privacy Policy as described above. California residents who wish to exercise the rights described here with respect to their Personal Information may contact us at policy@thesunrockgroup.com.

California residents may request and obtain information about the Personal Information that Sunrock has shared with third parties for such third parties’ direct marketing purposes within the prior calendar year (as defined by California Civil Code § 1798.83, commonly known as California’s “Shine the Light Law”). If applicable, this information would include a list of the categories of Personal Information that was shared, and the names and addresses of all third parties with which Sunrock shared this information in the immediately preceding calendar year. To obtain this information, please send an email message to policy@thesunrockgroup.com with the words “California Shine the Light Privacy Request” in the subject line as well as in the body of your message. 

Notice of Privacy Rights for California Residents

Right to request deletion of the data – Request to delete

You can ask for the deletion of your Personal Information. If you ask us to delete your Personal Information, we will respect your request and delete your Personal Information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation or any processing that may be required to protect against illegal activities.

Right to be informed – Request to know

Depending on the circumstances, you have a right to know:

• whether we collect and use your Personal Information;
• the categories of Personal Information that we collected in the last twelve months;
• the purposes for which the collected Personal Information is used;
• whether we sell your Personal Information to third parties;
• the categories of Personal Information that we sold or disclosed for a business purpose;
• the categories of third parties to whom the Personal Information was sold or disclosed for a business purpose; and
• the business or commercial purpose for collecting or selling Personal Information.

In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

We will not discriminate against you if you exercise your privacy rights.

Right to Limit Sensitive Personal Information Use

You may request that we limit our use of sensitive information (e.g. information relating to your government ID or geolocation) to specifically permitted purposes. 

Right to Opt-Out

You can request that we stop any sharing of your Personal Information. Upon receiving a request to opt-out, we will act upon the request as soon as feasibly possible.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use Personal Information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

To exercise these rights, you can contact us by email at policy@thesunrockgroup.com, or by referring to the contact details at the bottom of this Policy. If you have a complaint about how we handle your data, we would like to hear from you.  

• Other United States Users

For users residing in Colorado, Connecticut, Montana, Virginia, Tennessee, Texas, or Utah, and in other such states not explicitly listed, state law grants you additional rights with regard to your Personal Information under applicable law. You or your legally designated representative may submit a request to exercise your Personal Information rights by contacting us at policy@thesunrockgroup.com.

Contact Us

For questions, comments, or to submit any issues regarding our privacy practices or this Policy you may contact us at:
200 Horizon Drive, Suite 100
Raleigh, North Carolina 27615
policy@thesunrockgroup.com

Sunrock will respond to you promptly, especially with regard to any data breach, but in any event, within 30 days of receipt.