PRIVACY POLICY – WINCHES AND TOWINGS DECLARATION AND PRIOR CONSENT TO THE PRIVACY POLICY

By accepting this Privacy Policy, you authorize Winches and Towings to process your personal data contained in the forms made available through our websites (newsletter, contact, or account forms), of which you confirm to be the holder, as well as data relating to your commercial and contractual relationship and its management, as described herein, in accordance with applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy regulations.

You declare: – that you are aware and informed that the processing of your personal data encompasses all operations carried out on the data you have provided.

Such processing may be carried out by automated or non-automated means, for purposes such as: improving the functioning and features of the Winches and Towings website, including aggregation and statistical processing of data (without personal identification), personalization of services provided, processing of transactions, contact by email, messages, or phone to send information and updates about services or products, and interaction through digital platforms or social networks.

You also declare: – that you accept and consent that your data may be shared with entities subcontracted by Winches and Towings for the purposes of service analysis, promotions, or market studies, always under contracts that guarantee the same level of data protection. You are informed that your data will not be sold, exchanged, or transferred to unauthorized third parties, nor processed for other purposes.

– that your data will be retained for as long as you wish to benefit from the communications and advantages associated with the Winches and Towings database;

– that you consent to the use and reproduction by Winches and Towings of publicly available content published by you on social networks when it expressly and specifically refers to our services;

– that you are aware of your legal rights of access, correction, deletion, and opt-out, by submitting a request to the email: contact@winchesandtowings.com, and of your right to file a complaint with the Federal Trade Commission (FTC) or your applicable state privacy authority.

PURPOSES AND LEGAL BASIS FOR PROCESSING

Winches and Towings processes your personal data based on the following purposes and legal grounds under applicable U.S. law:

Performance of a contract: To provide the contracted towing and recovery services;

Legitimate interest: To improve our services, conduct statistical analyses, and personalize your experience;

Consent: To send marketing communications, newsletters, and promotions;

Compliance with a legal obligation: To meet applicable federal and state tax, labor, and regulatory requirements.

DATA COLLECTION AND USE

Winches and Towings only collects personal data voluntarily provided. This occurs when you fill out a form, contact us directly, or participate in any activity promoted by us.

The data collected may include: name, email, phone number, address, vehicle information, and other data necessary for the provision of services. You may visit our website anonymously, but this may limit some features.

Data collection enables us to:

Personalize your experience with our services;

Improve our digital channels;

Improve customer service;

Process transactions and payments;

Send information about services and updates;

Conduct research, promotions, or other specific features;

Comply with applicable federal and state legal and regulatory obligations.

Your data will not be shared with unauthorized third parties. Only trusted entities, bound by confidentiality agreements and compliance with applicable U.S. privacy laws, may access the data for legitimate operational purposes.

INFORMATION SECURITY

We employ appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with standards recognized under U.S. law, including compliance with applicable requirements of the Federal Trade Commission Act (FTC Act) and relevant state data security laws. We use industry-recognized security practices, including encryption, access controls, and security monitoring.

However, no digital system is entirely invulnerable, and therefore we cannot guarantee absolute security against all risks.

USE OF COOKIES

We use cookies to record sessions and browsing preferences. These files help improve your online experience and may collect browsing data for statistical purposes. In accordance with applicable U.S. regulations, you may manage or disable cookies through your browser settings or through any cookie preference tool available on our website.

DATA RETENTION

Your personal data will be retained for the period necessary for the stated purposes, observing the following:

Contractual data: For the duration of the contract and for up to 5 years after its termination, as required by applicable law; Marketing data: Until consent is withdrawn or for up to 2 years without interaction; Tax and financial data: In accordance with IRS recordkeeping requirements and applicable federal and state tax regulations.

DATA SHARING

Your data may be shared in the following situations:

With service providers who assist us in our operations (always under data protection agreements); To comply with legal obligations, regulatory requirements, or court orders under U.S. law; In the event of a merger, acquisition, or business transfer (with prior notice).

We do not sell, rent, or commercialize your personal data. California residents have the right to opt out of the sale or sharing of their personal information under the CCPA/CPRA.

YOUR RIGHTS AS A DATA SUBJECT

Under applicable U.S. federal and state privacy laws, you may have the following rights depending on your state of residence:

Right to Know: To know what personal data we collect, use, disclose, and sell;

Right to Access: To request a copy of the personal data we hold about you;

Right to Correction: To request correction of inaccurate personal data;

Right to Deletion: To request the deletion of your personal data, subject to certain exceptions;

Right to Opt-Out: To opt out of the sale or sharing of your personal data (applicable under CCPA/CPRA);

Right to Non-Discrimination: To not receive discriminatory treatment for exercising your privacy rights;

Right to Data Portability: To receive your data in a structured, commonly used format, where applicable.

To exercise your rights, please contact us at: contact@winchesandtowings.com. We will respond to verified requests within the timeframes required by applicable law (e.g., 45 days under the CCPA).

EXTERNAL LINKS

Our website may contain links to third-party websites. These have their own policies and are not controlled by Winches and Towings. We recommend carefully reading their policies before providing any personal data.

CONSENT AND ACCEPTANCE

By using the Winches and Towings website and services, you agree to this Privacy Policy.

For questions or complaints regarding data processing, you may:

Contact us at contact@winchesandtowings.com File a complaint with the Federal Trade Commission (FTC) at www.ftc.gov California residents may also contact the California Privacy Protection Agency (CPPA) at www.cppa.ca.gov

DATA PROTECTION OFFICER

For matters related to the protection of personal data, our designated privacy contact can be reached at: contact@winchesandtowings.com

CHANGES TO THE PRIVACY POLICY

This policy may be updated periodically to reflect changes in our practices or in applicable law. Changes will be published on our website and, when significant, communicated through the indicated channels. Continued use of our services following any updates will be interpreted as acceptance thereof.

Date of last update: 09/10/2025