Crescent Electric Supply Company and its wholly owned subsidiaries (hereinafter referred to as “CESCO” “us,” “we,” “our,” or “Company”) has created this Privacy Policy (“Policy”) to disclose how we collect, use, share, and protect information about you, as well as to inform you of privacy rights you may have and how to exercise them. CESCO, is committed to protecting the privacy and security of your information. This Policy applies to anyone who interacts with CESCO through our offices, websites, products, and services (collectively, our “Services), except as noted below.

This Policy does not apply to information collected for or provided in connection with an individual’s current or former employment or independent contractor arrangement with CESCO. If you are a CESCO employee, independent contractor, or applicant for employment, please contact the CESCO human resources department for information about how we collect, use, process, disclose, and retain employment related information not covered by this Policy.

This Policy is integrated into our Terms & Conditions which can be viewed at https://www.crescentelectric.com/terms-and-conditions.

Please read this Policy carefully to understand our policies and practices regarding your information and how we may use or disclose your information. By accessing or using our Services, you consent to the use of your personal information collected, submitted, used or shared as described in this Policy and Terms & Conditions. If you do not agree with our policies and practices, your choice is not to use our Services.

If you are a resident of California, Virginia, Colorado, Connecticut, or Utah, you may be entitled to certain individual rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CPRA”) (collectively, “CCPA”), Virginia Consumer Data Protection Act (“VCDPA”), Colorado Privacy Act (“CPA”), Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), or Utah Consumer Privacy Act (“UCPA”) respectively.  Please see the Notice to Certain Residents of Data Subject Rights Section of our Policy for your rights and how to exercise them for users located in California, Virginia, Colorado, Connecticut, or Utah. For more information, please contact us at privacy@cesco.com.

Information We Collect About You

The types of personal information we may collect about you depend on your interactions with us and are described in more detail below. CESCO may collect the following types of information from you and other users who use our Services:   

Category	Information We Collect
Identifiers	Your name, username, and contact information such as mailing address, phone number, email address, Social Security numbers (“SSN”), and employer identification numbers (“EIN”).
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	Your name, address, telephone number, bank account number, credit card number, debit card number, or any other financial information including Services purchased, SSNs, and EINs. Note that we use third party payment processors to facilitate your payments and do not store your payment information. Some personal information included in this category may overlap with other categories.
Internet or other similar network activity	IP addresses, website pages viewed and the duration, browser or operating system information, mobile device type, system settings, and aggregate and/or deidentified data related to a person’s interaction with our website.

 

We also collect your communications with us, preferences, and other information you provide to us, including any messages (including via online chat feature), opinions, and feedback that you provide to us, your user preferences (such as in receiving updates or marketing information), and other information that you share with us when you contact us directly (such as for customer support services).

How We Collect Information

We generally collect personal information and create and maintain records about individuals for our legitimate business purposes and in relation to the Services we provide to you.

1. Personal Information You Provide to Us: We collect information that you decide to share with us. For example, we collect personal information directly from you when you engage with our Services through our website, sign up for our mailing list, contact us via email or a form on our website, interact with our chat feature, engage with us on social media, or otherwise interact with us or use our Services. At times, we may require you to provide certain information, including personal information, in order to provide you with Services you request. For instance, we may require you to provide your name, email address, and payment card information when you use our Services. We may also require you to provide your name, email address, or other contact information when you contact us with a question or comment. In some circumstances, we will not be able to further our relationship with you (for example, to fulfill an order you place) without certain personal information. We will inform you at the relevant time if this is the case.

We collect any other information or content you provide to us, such as when you provide feedback about our products or services or make other submissions to us or use other features of our Services that may be offered from time to time, which may require the collection of certain personal information in order to utilize the features. Examples of user content data may include information about your opinions, feedback, preferences, and any other personal information you choose to provide in your interactions with us.

2. Personal Information We Collect Automatically: We automatically collect certain personal information when you access and use our Services. The types of information we collect may include:
   1. Internet Activity. We collect certain information about your internet activity when you use our website and Services. Such information may include your IP address, operating system, and browser type.
   2. Usage Data. CESCO collects information about your activity on our Services, including details of your visits to our website and other communication data and the resources that you access and use on the website. This may include the date and time you visited or used our Services, domain server from which you are using our Services, , and your movement and activity within the website. CESCO collects information via cookies and similar technologies. Please see the “Cookies” section below for more information on cookies and your cookie choices.
   3. Analytics are tools we may use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. You can view Google’s Privacy Practices here: Privacy Policy – Privacy & Terms – Google.
3. Personal Information We May Collect from Third Parties & Other Sources. We may collect additional personal information about you from third-party websites, publicly available sources (e.g., from the U.S. postal service), and/or other external agencies, but always in accordance with the authorization procedures and privacy settings you establish with the other sources. We may also collect personal information stored by third parties such as social media sites (e.g., Facebook and X, formerly known as Twitter) if you choose to provide us access to that information. This personal information is collected to help us provide services to you, help prevent fraud, for marketing and advertising purposes, and the other purposes included in the “How We Use Your Information” section below.

This Policy only applies to personal information collected by our Services.  We are not responsible for the privacy and security practices of other websites or social media platforms and the personal information they may collect.  You should contact third parties directly to determine their respective privacy policies.  Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, social media platform, and/or content.

Cookies & Technologies Used to Collect Information About You

A cookie is a small file placed on the hard drive of your computer. The website uses cookies, and other similar technologies, to track which areas of our website are used the most and to help us make our website more informative and user-friendly, and other purposes as described in this Policy. You may refuse to accept browser cookies by activating the appropriate setting on your browser.  However, if you select this setting, you may be unable to access certain parts of our Services.  Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our website. 

CESCO may receive, store and use the information you enter on our website or which is collected during your visit to our Services. Such information will generally not personally identify you and may include the date and time of your visit, pages accessed, the web browser you use, the internet address of any website from which you linked directly to our website and related information.

Our website uses the following types of cookies:

• 'Session cookies' which are stored temporarily during a browsing session in order to allow normal use of the system and are deleted from your device when the browser is closed;
• 'Persistent cookies ' which are read only by the website, saved on your computer for a fixed period and are not deleted when the browser is closed. Such cookies are used where we need to know who you are for repeat visits, for example to allow us to store your preferences for the next sign-in;
• 'Third party cookies', which are set by other online services who run content or provide services on the page you are viewing, for example by third party analytics companies who monitor and analyze our web access.

Your Cookie Choices

You are in control of how you want to allow cookies to be used on your devices. You may set your browser to block or otherwise control what cookies your browser or device accepts via your settings. Additionally, you can choose to modify your settings and delete cookies that are otherwise stored on your device. Please note that, if you choose not to accept cookies, some website features and the personalization of our Services may no longer work for you. You will continue to receive advertising material, but it will not be tailored to your interests. Please consult the instructions provided by your browser or your mobile device manufacturer to determine how you can limit the placement of and/or remove cookies or other similarly used technologies.

“Do Not Track” Signals   

Our website is not currently configured to respond to “Do Not Track” signals. “Do Not Track” is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable “Do Not Track” by visiting the “Preferences” or “Settings” page of your web browser. Do Not Track is different from Global Privacy Controls (“GPC"), which may notify websites of consumers’ privacy preferences regarding the sale or sharing of Personal Information, or the use of Sensitive Personal Information.     

Third parties may collect data that relates to you. We cannot control third parties’ responses to do-not-track signals or other such mechanisms. Third parties’ use of data relating to you and responsiveness to do-not-track signals is governed by their respective privacy policies.

How We Use Your Information

CESCO may use the personal information it collects in a variety of ways for its business or commercial purposes, such as to:

• Facilitate your use of the Services;
• Confirm your eligibility to use the Services;
• Fulfill your requests and provide support;
• Facilitate your movement through the Services;
• Send you communications such as administrative e-mails, promotional e-mails, answers to your questions, and updates about the Services; by letter, e-mail, or other forms of communication;
• Improve the website’s content, features, and/or services;
• Improve or develop new CESCO Services, and/or marketing efforts;
• Analyze traffic to and through the website;
• Monitor and analyze user behavior and activity on or through the website in order to keep the website secure and personalize your user experience;
• Protect or enforce CESCO’s rights and properties;
• Protect or enforce the rights and properties of others;
• In any way we may describe when you provide the information;
• Comply with applicable laws, in response to a lawful and enforceable request by a law enforcement, judicial, or other public authority, or in connection with an applicable legal obligation; and
• Where you otherwise have given CESCO your consent and permission to do so.

We may also use personal information that has been de-identified and/or aggregated for purposes not otherwise listed above.

 How We Disclose Your Information

We may disclose your personal information to third parties to help provide our Services, as set forth in Policy, and in the following circumstances:

 

• To protect our users and network against fraud and security threats,
• To comply with a legal obligation,
• To protect and defend our rights or property,
• To prevent or investigate possible wrongdoing in connection with the Services,
• To protect the personal safety of individuals or the public,
• To protect against legal liability,
• When there is a good faith belief that such action is necessary to investigate or protect against harmful activities to our guests, visitors, associates, or property (including the websites), or to others. This may include disclosures to law enforcement to investigate potential criminal activity or other civil violations,
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CESCO’s assets,
• To a third party on an aggregated basis for any purpose in which your specific personal information is blinded, masked, or otherwise not identifiable, and/or
• With your consent.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may disclose your information to the following types of entities and third parties:

• Service Providers: CESCO may engage fulfillment companies, service providers, individuals, and agents that perform certain functions or services on our behalf to facilitate and help us provide our Services. Such service providers perform tasks, services, or functions on our behalf, or assist us in analyzing how our Services are used or delivered. Service providers may assist us with analyses, process credit card payments, provide customer service, marketing, shipping, delivery, web hosting or development, technical support and other support services. These service providers are authorized to use your Information only as necessary to provide these services to us. Any such companies must agree to maintain the confidentiality of any personal information we may provide to them and are contractually obligated not to disclose or use it for any other purpose. Such companies may also collect personal information directly from you in connection with providing their services, and they will have the right to provide that personal information to us. Such other companies may not use your private or personal information for purposes other than providing services through or on CESCO’s behalf.
• Law Enforcement or Other Lawful Authority: We may disclose your personal information without notice when required to provide information to law enforcement or other governmental authorities pursuant to a warrant, subpoena, court order, or other lawful process.
• Subsidiaries: We may disclose your personal information to our wholly owned subsidiaries covered by this Policy.

Disclosures: Over the last 12 months, we have disclosed for a business purpose the following categories of personal information:

Personal Information Category	Business Purpose Disclosures
Personal Identifiers.	Our service providers, including marketing service providers, and government entities (where required by law)
California Customer Records personal information categories.	Our service providers, and government entities (where required by law)
Internet or other similar network activity.	Our service providers, including marketing service providers, and government entities (where required by law)

 

Categories of Personal Information Sold

We do not sell your personal information, including Sensitive Personal Information, to third parties.  Please note that “sale” of personal information does not include those instances when such information is part of a merger, acquisition, or other transaction involving all or part of our business.  If we sell all or part of our business, make a sale or transfer of assets, or are otherwise involved in a merger or other business transaction, we may transfer your personal information to a third party as part of that transaction. 

How Your Information is Stored and Secured

Retention and Deletion of Personal Information

We will retain your personal information for as long as necessary to provide our Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined considering the type of information that is collected and the purpose for which it is collected. Under applicable regulations, we will keep records containing customer personal information, account documents, communications and anything else as required by applicable laws and regulations. We will not retain your personal information or sensitive personal information longer than reasonably necessary for the purposes for which the information was collected.

In accordance with our routine record keeping, we may delete certain records that contain information you have submitted to us.  We are under no obligation to store such information indefinitely and disclaim any liability arising out of, or related to, the destruction of such information.

Securing Your Information

CESCO takes the privacy and security of your information seriously, and uses reasonable, appropriate and customary procedures and technologies to help protect the confidentiality of any personal information we collect. CESCO employs reasonable administrative, physical, and technical safeguards to protect the information we collect, process, and store.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our website (such as your online account), you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

However, no website, network, or system can be 100% secure against intentional or malicious intrusion attempts despite taking appropriate and reasonable precautions. Furthermore, CESCO does not control the devices, computer or network through which you access the website or over which you may choose to send personal information or other information to us, and therefore cannot prevent potential interceptions or compromises to your information while in transit. CESCO makes no guarantee as to the security, integrity or confidentiality of any information transmitted to or from the website. CESCO is committed to safeguarding your information to the best of its ability but cannot guarantee the security of electronic communications or transmission made over the Internet.

Children’s Privacy

All of our Services, including our website, are intended for adult audiences, and are not directed to or meant for individuals under the age of 16 (“Children”). If we become aware that a user is under sixteen (16) (or a higher age threshold where applicable) and has provided us with Information, we will take steps to comply with any applicable legal requirement to remove such Information.  Contact us if you believe that we have mistakenly or unintentionally collected Information from a child under the age of sixteen (16).

California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see Rights of California Residents section for more information.

Notice to Certain Residents of Data Subject Rights

Rights of California Residents

To the extent any California data privacy law applies to the collection of your personal information, this supplemental section of our Policy outlines the rights that California residents may have, and how they can exercise those rights.  This notice applies solely to California residents.  We provide the supplemental section below to comply with the CCPA and any terms defined in the CCPA have the same meaning when used below.

• Your Privacy Rights Subject to certain limitations, if you are a California resident, you have the following rights:
  • Right to Access: You have the right to have access to your personal information upon verifiable request. You may receive a copy of such information upon receipt of a verifiable request, along with other information related to the collection or processing.

You have the right to request that the information described above be provided to you in a portable and readily useable format, to the extent technically feasible (“data portability”).

• Right to Correct: You have the right to correct inaccuracies in the personal information that CESCO holds about you upon receipt of a verifiable request.
• Right to Disclosure of Direct Marketers: You have the right to have access upon simple request, and free of charge, the categories and names/addresses of third parties that have received personal information for their direct marketing purposes. 
• Right to Information About Collecting, Selling, Sharing, or Disclosing Personal Information:  Upon receipt of a verifiable request, you may obtain a list of:
  • The specific pieces of your personal information CESCO holds;
  • The categories of personal information collected about you, sold to or shared with third parties, or disclosed to third parties for business purposes;
  • The categories of personal information sold or shared within the last 12 months;
  • The categories of sources from which personal information is collected;
  • The business or commercial purpose for collecting, selling, or sharing personal information; and
  • The categories of third parties with whom personal information is shared, sold, or disclosed for a business purpose.
• Right to Opt-Out of the Sale or Sharing of Personal Information: Although we do not sell or share the personal information of consumers as defined under California law, we state your rights here. California residents have the right to opt-out of the sale or sharing of their personal information under certain circumstances.   If you are age 16 or older, you have the right to direct us to not sell your personal information at any time. Consumers who opt-in to personal information sales may opt-out of future sales at any time. You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.  
• Right to Deletion:  You have the right to obtain the deletion of your personal information in the situations set forth by applicable data protection law and upon receipt of a verifiable request.
• Right to Limit: You have the right to limit certain uses or disclosures of sensitive personal information.
• Right to Non-Discrimination.  As defined under relevant law, you have a right to non-discrimination in the Services or quality of Services you receive from us for exercising your rights.

Please contact us at privacy@cesco.com in relation to exercising these rights. We may ask you to provide information about yourself so that we can verify your identity as part of this process. This information may include your name, email address, and any other information necessary to reasonably verify your identity, to ensure that your information is not shared with anyone impersonating you. We may ask for additional information if we have difficulty confirming your identity. Once we have verified your identity, we will work to fulfill your request in a timely manner. Please note there may be some situations in which we are unable to fulfill your request, such as if we cannot find any information about you within our systems. Additionally, we may not be able to honor a deletion request in some situations, such as if your information is necessary to fulfill the Services you requested or meet a legal obligation. We will inform you whether we can fulfill your rights request.

You may use an authorized agent to submit verifiable consumer requests on your behalf provided that the authorized agent is a natural person or a business entity that you have authorized to act on your behalf.  If you use an authorized agent, we will require: (1) proof of written permission for the authorized agent to make requests on your behalf, and identity verification from you; or (2) proof of power of attorney pursuant to California Probate Code sections 4000 to 4665.  We may deny a request from an authorized agent that does not submit proper verification proof.

If you are a California resident and have any questions about this Policy, our practices, your personal information, or your rights and choices under applicable laws, please contact us at the information below.

Your California Privacy Rights Regarding Direct Marketing Information

California residents have the right to request information from a company regarding the manner in which it shares certain categories of personal information with third parties for their direct marketing purposes, in addition to the rights set forth above.  

Under California law, you have the right to send us a request at privacy@cesco.com to receive the following information:

• The categories of information we disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year;
• The names and addresses of the third parties that received the information; and
• If the nature of the third party’s business cannot be determined from their name, examples of the products or services marketed.

To make such a request, please provide sufficient information for us to determine if this applies to you, and attest to the fact that you are a California resident.  Please also provide a current California address for our response. You may make this request in writing to us at the address provided in the “Contact Us” Section.  Any such request must include “California Privacy Rights Direct Marketing Information Request” in the first line of the description, and include your name, street address, city, state and ZIP code.  Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through the address provided for this purpose below.

Note that responsive information may be provided in a standardized format that is not specific to you.

Privacy Rights Information for Residents of Other States

Residents of other states may also be guaranteed certain privacy rights depending on where they live. To learn more about whether you are guaranteed certain rights, or to submit a request to exercise your rights, please contact us at privacy@cesco.com or using any of the methods in the “Contact Us” Section. Any request to exercise your rights must include your name, state of residence, the right(s) you would like to exercise, and a means of contacting you.

Virginia Resident Rights

Under the Virginia Data Protection Act, Virginia residents, subject to certain exceptions, may be entitled to the following rights:

• Right to Opt Out of the Sale of Personal Information, Targeted Advertising, Profiling. The right to opt out of the processing of personal information for purposes of targeted advertising, the sale of personal information, and profiling that creates legal or other significant results;
• Right to Access. The right to confirm whether CESCO processes personal information and to access the personal information CESCO has about you;
• Right to Correct Inaccurate Information. Virginia residents may correct inaccuracies in the personal information CESCO has about you, considering the nature of the personal information and the purposes of the processing of the personal information;
• Right to Delete. You have the right to request that we delete certain of your personal information provided by or obtained about you, subject to certain limitations; and
• Right to Data Portability. The right to obtain a copy of the personal information CESCO holds about you in a portable, readily usable, and easily transmittable format.
• Right to Appeal. You have the right to appeal our denial of any request you make under this section. To exercise your right to appeal, please submit an appeal request to privacy@cesco.com.  Within sixty (60) days of receipt of your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions.

Colorado Resident Rights

The Colorado Privacy Act, becomes effective on July 1, 2023, after which time Colorado residents may be entitled to the following rights, subject to certain limitations:

• Right to Opt Out of the Sale of Personal Information, Targeted Advertising, and Profiling. The right to opt out of the processing of personal information for purposes of targeted advertising, the sale of personal information, and profiling that creates legal or other significant results;
• Right to Access. The right to confirm whether CESCO is processing your personal information and to access the personal information CESCO has about you;
• Right to Correct Inaccurate Information. The right to correct inaccuracies in the personal information CESCO has about you;
• Right to Delete. The right to request deletion of personal information about you that is held by CESCO; and
• Right to Data Portability. The right to obtain a copy of the personal information CESCO holds about you in a portable, readily usable, and easily transmittable format.
• Right to Appeal. You have the right to appeal our denial of any request you make under this section. To exercise your right to appeal, please submit an appeal request to privacy@cesco.com.  Within sixty (60) days of receipt of your appeal, we will inform you in writing of any action taken or not taken in response to your appeal, including a written explanation of the reasons for the decisions.

Authorized Agent

You may use an authorized agent to submit verifiable consumer requests on your behalf.  An authorized agent is a natural person or a business entity that you have authorized to act on your behalf.  If you use an authorized agent, we will require: (1) proof of written permission for the authorized agent to make requests on your behalf, and identity verification from you; or (2) proof of power of attorney. We may deny a request from an authorized agent that does not submit proper verification proof.

Connecticut Resident Rights

The Connecticut Data Privacy Act becomes effective on July 1, 2023, after which time Connecticut residents may be entitled to the following rights, subject to certain limitations:

• Right to Opt Out of the Sale of Personal Information, Targeted Advertising, and Profiling. The right to opt out of processing for the purposes of targeted advertising, sale of personal information, or profiling in furtherance of automated decision-making that produces legal or similarly significant effects;
• Right to Access. The right to confirm whether CESCO is processing your personal information and to access personal information about you that is held by CESCO;
• Right to Correct Inaccurate Information. The right to correct inaccuracies in the personal information about you that is held by CESCO;
• Right to Delete. The right to delete personal information about you that is held by CESCO; and
• Right to Data Portability. The right to obtain a copy of personal information about you that is held by CESCO.
• Right to Appeal. You have the right to appeal our denial of any request you make under this Section. To exercise your right to appeal, please submit an appeal request to privacy@cesco.com.

Authorized Agent

You may use an authorized agent to submit verifiable consumer requests on your behalf.  An authorized agent is a natural person or a business entity that you have authorized to act on your behalf.  If you use an authorized agent, we will require: (1) proof of written permission for the authorized agent to make requests on your behalf, including through technology means, and identity verification from you; or (2) proof of power of attorney.  We may deny a request from an authorized agent that does not submit proper verification proof.

Utah Resident Rights

The Utah Consumer Privacy Act becomes effective on December 31, 2023, after which time Utah residents may be entitled to the following rights, subject to certain limitations:

• Sale of your Personal Information, Targeted Advertising, and Right to Opt Out. The right to opt out of processing for the purposes of targeted advertising, sale of personal information, or profiling in furtherance of automated decision-making that produces legal or similarly significant effects;
• Right to Access. The right to confirm whether CESCO is processing your personal information and to access the personal information CESCO has about you;
• Right to Delete. The right to delete personal information about you that is held by CESCO; and
• Right to Data Portability. The right to obtain a copy of personal data about you that is held by CESCO.

Contact Us

Please direct any questions you may have about this Policy to any one of the following:

By mail:

Crescent Electric Supply Company

Attn: Legal Team

PO Box 500

East Dubuque, Illinois 61025

By e-mail: privacy@cesco.com

By Phone: 1-855-999-2372

For all other non-privacy specific questions, please contact us via our webform: https://www.crescentelectric.com/help/contact-us

Updates to this Privacy Policy

CESCO reserves the right to revise this Policy from time to time at our sole discretion. Our website will link to our current Policy and any changes we make will be reflected in an update to our Policy and by revising the “last updated” date at the bottom of this Policy. You are advised to check back to this page periodically to learn of any changes made to our policies. Changes to this Policy are effective when they are posted on this page.  

Difficulty Accessing Our Privacy Policy

Individuals with disabilities who are unable to usefully access our Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

 

Last Updated: 07/17/2024