Privacy Policy

This privacy notice for High Meadow Solutions, Inc. ("we," "us," or "our") describes how and why we may collect, store, use, and share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at highmeadowsolutions.com, or any website of ours that links to this privacy notice.
• Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at info@highmeadowsolutions.com.

Summary of Key Points

This summary highlights the key points from our privacy notice. You can find more detail on each topic below.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the features you use.
• Do we process any sensitive personal information? No.
• Do we receive any information from third parties? We may receive information from public databases, marketing partners, social media platforms, and other outside sources.
• How do we process your information? To provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with the law. We process your information only when we have a valid legal reason to do so.
• In what situations and with whom do we share personal information? We share information in specific situations and with specific third parties, described below.
• How do we keep your information safe? We use organizational and technical safeguards to protect your personal information. No system is 100% secure, so we cannot guarantee absolute protection.
• What are your rights? Depending on where you live, applicable privacy law may give you rights regarding your personal information.
• How do you exercise your rights? The easiest way is to contact us. We will consider and act on any request in accordance with applicable data protection laws.

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you express an interest in our Services, participate in activities on our Services, or otherwise contact us. The personal information we collect depends on the context of your interactions and may include:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Job titles
• Company names

Sensitive information. We do not process sensitive personal information.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information collected from other sources

In short: We may collect limited data from public databases, marketing partners, and other outside sources.

To enhance our ability to provide relevant marketing, offers, and services to you and to update our records, we may obtain information about you from sources such as public databases, joint marketing partners, affiliate programs, data providers, and other third parties. This information may include mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with the law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To respond to inquiries and deliver requested information.
• To send marketing and promotional communications, where you have opted in.
• To deliver targeted advertising consistent with applicable law.
• To prevent fraud, secure our systems, and protect our rights.
• To comply with legal obligations.
• To enable user-to-user communications, where applicable.

We process your information only when we have a valid legal reason to do so.

3. When and with whom do we share your personal information?

In short: We share information in specific situations described in this section. We do not share SMS consent with third parties.

We may share your personal information in the following situations:

• Service providers. With vendors, consultants, and other service providers who perform services for us under written contract.
• Business transfers. In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Legal obligations. When required by law, subpoena, court order, or other legal process, or when necessary to protect our rights, your safety, or the safety of others.
• With your consent. When you direct us to share information with another party.

4. How long do we keep your information?

In short: We keep your information only as long as necessary to fulfill the purposes outlined in this notice unless otherwise required by law.

We will retain your personal information only for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements).

When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize it. If deletion is not immediately possible (for example, because the information is stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.

5. How do we keep your information safe?

In short: We aim to protect your personal information through reasonable organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational safeguards designed to protect the security of any personal information we process. However, despite our efforts, no transmission over the internet or electronic storage system is guaranteed to be 100% secure. We cannot promise that unauthorized third parties will never defeat our security and improperly access, collect, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should access our Services only within a secure environment.

6. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18. By using our Services, you represent that you are at least 18 years old, or that you are the parent or guardian of a minor and consent to such minor's use of the Services. If we learn that personal information from users under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data from our records. If you become aware of any such data, please contact us at info@highmeadowsolutions.com.

7. What are your privacy rights?

In short: You may review, change, or terminate your account at any time.

Withdrawing your consent.If we are relying on your consent to process your personal information — express or implied, depending on applicable law — you have the right to withdraw your consent at any time by contacting us. Withdrawing consent does not affect the lawfulness of processing before its withdrawal, or processing conducted on lawful grounds other than consent.

If you have questions or comments about your privacy rights, you can email us at info@highmeadowsolutions.com.

8. Controls for do-not-track features

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized. We do not currently respond to DNT browser signals or any other mechanism that automatically communicates a choice not to be tracked online. If a standard is adopted that we must follow, we will update this notice.

9. Do United States residents have specific privacy rights?

In short: If you are a resident of a state with a comprehensive privacy law, you have specific rights regarding your personal information.

Categories of personal information we collect

In the past twelve (12) months, we have collected the following categories of personal information. "Yes" indicates we have collected the category; "No" indicates we have not.

We may also collect other personal information through interactions with us in person, online, by phone, or by mail in the context of:

• Responding to inquiries through our customer support channels.
• Participation in customer surveys, webinars, or events.
• Facilitation of our Services and responses to your questions.

Will your information be shared with anyone else?

We may disclose your personal information to our service providers under written contract. We may also use your personal information for our own business purposes, such as undertaking internal research for product development. This is not "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We do not sell or share personal information belonging to website visitors, users, or other consumers.

State-specific rights

The following sections describe rights granted to residents of US states with comprehensive consumer privacy laws. These rights are not absolute, and in certain cases we may decline a request as permitted by law. To exercise any of the rights described below, email us at info@highmeadowsolutions.com.

California residents

This section applies to California residents under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). You have the rights to:

• Request to know what personal information we collect, use, disclose, and sell or share.
• Request deletion of your personal information, subject to legal exceptions.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of your personal information (we do not sell or share).
• Limit the use and disclosure of sensitive personal information (we do not process sensitive personal information).
• Non-discrimination for exercising your privacy rights.

California "Shine the Light" law (Civil Code §1798.83). California residents may request, once per year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. Submit a request in writing to info@highmeadowsolutions.com.

Minors under 18. If you are under 18, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. Email info@highmeadowsolutions.com with the email address associated with your account and a statement that you reside in California. We will ensure the data is not publicly displayed, but please be aware the data may not be completely removed from all our systems (for example, backups).

Verification. When you exercise a right, we will verify your identity by matching information you provide with information we already have on file. We will use information provided in your request only for verification and will avoid requesting additional information where possible.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof of valid authorization.

Global Privacy Control. We honor opt-out preferences signaled through Global Privacy Control (GPC).

Virginia residents

Under the Virginia Consumer Data Protection Act (VCDPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of personal data you previously shared.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.

We will respond within forty-five (45) days of receipt; the response period may be extended once by another forty-five (45) days when reasonably necessary, with notice to you.

Right to appeal. If we decline to act on your request, you may appeal by emailing info@highmeadowsolutions.com. Within sixty (60) days of an appeal, we will inform you in writing of any action taken or not taken, with reasons. If your appeal is denied, you may contact the Virginia Attorney General to submit a complaint.

Colorado residents

Under the Colorado Privacy Act (CPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Right to appeal. If we decline to act, you may appeal by emailing info@highmeadowsolutions.com. Within forty-five (45) days of an appeal, we will inform you in writing of any action taken or not taken, with reasons.

Connecticut residents

Under the Connecticut Data Privacy Act (CTDPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Right to appeal. If we decline to act, you may appeal by emailing info@highmeadowsolutions.com. Within sixty (60) days of an appeal, we will inform you in writing of any action taken or not taken, with reasons.

Utah residents

Under the Utah Consumer Privacy Act (UCPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising or the sale of personal data.

Texas residents

Under the Texas Data Privacy and Security Act (TDPSA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Oregon residents

Under the Oregon Consumer Privacy Act (OCPA), you have the right to:

• Confirm whether we are processing your personal data and obtain a list of specific third parties to whom we have disclosed personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Montana residents

Under the Montana Consumer Data Privacy Act (MCDPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Iowa, Tennessee, Indiana, and Kentucky residents

Under the Iowa Consumer Data Protection Act, the Tennessee Information Protection Act, the Indiana Consumer Data Protection Act, and the Kentucky Consumer Data Protection Act, you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising or the sale of personal data.

Tennessee, Indiana, and Kentucky residents also have the right to correct inaccuracies and to opt out of profiling.

Delaware residents

Under the Delaware Personal Data Privacy Act (DPDPA), you have the right to:

• Confirm whether we are processing your personal data and obtain a list of categories of third parties to whom we have disclosed personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

New Hampshire residents

Under the New Hampshire Privacy Act, you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

New Jersey residents

Under the New Jersey Data Privacy Act (NJDPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.

We will not sell sensitive personal data or personal data of consumers we know to be minors under sixteen (16) without consent.

Maryland residents

Under the Maryland Online Data Privacy Act (MODPA), you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

We do not sell sensitive personal data or process the sensitive personal data of Maryland consumers without consent.

Minnesota residents

Under the Minnesota Consumer Data Privacy Act (MCDPA), you have the right to:

• Confirm whether we are processing your personal data and the categories of personal data being processed.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.
• Question the result of profiling and request that we review the decision.

Rhode Island residents

Under the Rhode Island Data Transparency and Privacy Protection Act, you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Nebraska residents

Under the Nebraska Data Privacy Act, you have the right to:

• Confirm whether we are processing your personal data.
• Access your personal data.
• Correct inaccuracies.
• Request deletion.
• Obtain a portable copy of your personal data.
• Opt out of processing for targeted advertising, the sale of personal data, or profiling.

Verification process

Upon receiving your request, we will verify your identity by matching information you provide with information we already have on file. We will minimize the additional information we ask for. If we cannot verify your identity from existing information, we may request additional information for verification and security purposes, which we will delete as soon as verification is complete.

Right to non-discrimination

We will not discriminate against you for exercising your privacy rights.

10. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. If we make material changes, we may notify you by prominently posting a notice or by sending a direct notification. We encourage you to review this privacy notice periodically.

11. How can you contact us about this notice?

If you have questions or comments about this notice, email us at info@highmeadowsolutions.com.

12. How can you review, update, or delete the data we collect from you?

Depending on the laws of your jurisdiction, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To make a request, email us at info@highmeadowsolutions.com.