U.S. State Privacy Supplement

1. Scope

This Supplement forms part of the SiteHeros Privacy Policy and describes additional rights where applicable United States state privacy law covers the individual and processing. Good Ground Serves LLC operates SiteHeros. Eligibility depends on the particular law, our activities and the capacity in which we hold information.

Providing business services does not automatically exempt every record from privacy law. Information we hold for a customer-controlled website is ordinarily addressed through that customer’s privacy notice and our Data Processing Addendum.

2. Information and purposes

The applicable collection notice must identify the actual categories collected, sources, purposes, recipient categories, retention periods or criteria, and any sale, sharing, targeted advertising or sensitive-data use. For SiteHeros’s own inquiries and accounts, the anticipated categories include identifiers and business contact information, service preferences and correspondence, transaction records, internet/network activity and account or service security information.

The Privacy Policy describes SiteHeros’s information categories and purposes. The categories applicable to you depend on your interaction with SiteHeros and the services used.

3. Available rights

Depending on the law that applies, you may request confirmation of processing, access to personal information, correction, deletion, a portable copy, and information about disclosures or specific recipients. You may also have rights to opt out of sale, sharing, targeted advertising or certain profiling and automated decisions, to restrict specified uses of sensitive information, and to appeal a refusal.

These rights have statutory conditions and exceptions. SiteHeros will not unlawfully discriminate or retaliate because you exercise a protected privacy right.

4. Submitting a request

Use the Privacy Rights Request page or the privacy contact stated in the Privacy Policy. Identify your request and the relationship or website involved. Do not submit passwords, full payment-card details, government identification numbers or unrelated sensitive documents.

For requests requiring identity verification, we will use proportionate steps appropriate to the information and risk. We may request limited additional information. We do not require identity verification for an opt-out request where the applicable law prohibits it, and we do not require a new account solely to exercise a right.

5. Agents and appeals

An authorized agent may submit a request with evidence of authority where permitted. We may seek direct confirmation or other proof only as the law allows.

If we decline a request, we will explain the basis and applicable appeal method. An appeal may be submitted through the same privacy channel with the original request reference. Where law provides a further regulator complaint route, our appeal response will identify it.

6. Sale, sharing, targeted advertising and preference signals

Sale, sharing and targeted-advertising rules depend on the actual processing, not solely on whether money changes hands. Analytics and advertising are not interchangeable.

Where applicable law requires recognition of opt-out preference signals, including Global Privacy Control, those rights apply to the covered browser, device and associated profile. You may also contact legal@siteheros.com about an applicable opt-out right.

Consent to service terms is not consent to unrelated advertising. Any legally required sale/sharing opt-out or sensitive-information limitation choice must be provided separately.

7. California

Where the CCPA applies, California residents may have rights to know, access, correct and delete information, opt out of sale/sharing, limit specified sensitive-information uses and receive equal treatment. California business contacts and workforce data must be assessed under current law rather than excluded under expired temporary exemptions.

The Privacy Policy describes information categories, purposes, recipient categories and retention criteria. Applicable California rights and disclosures depend on the processing and statutory coverage.

Contracted service providers and contractors must observe the applicable purpose and use restrictions. Independent third-party use requires separate analysis. California’s additional risk assessment, cybersecurity audit and automated-decision rules have their own applicability criteria and compliance dates; they must not be represented as universally triggered by running a website.

8. Timing, exceptions and complaints

We respond within the period required by the applicable law and provide permitted extension notices when needed. We will explain a lawful refusal, partial response or retained category without disclosing another person’s information or compromising security.

An individual may complain to the relevant state authority. Contract terms do not eliminate non-waivable privacy rights. Changes to this Supplement apply prospectively subject to any required notice or consent.