Multi-State Notice at Collection and Privacy Policy

Effective Date: December 30, 2022
Last Revised/Reviewed on: October 2, 2023

This Multi-State Notice at Collection and Privacy Policy ("State Privacy Disclosure") explains how WRJ Holdings, LLC, d/b/a Classic Firearms and its subsidiaries and affiliates ("Classic Firearms", "Company", "us", "our", or "we") collect, use, disclose, sell, share, and/or retain personal information ("Information Practices") subject to applicable state privacy laws.

This State Privacy Disclosure applies solely to California, Colorado, Connecticut and Virginia residents (“consumers” or “you”).

The terms used in this State Privacy Disclosure shall have the same or similar meaning as those terms in each of the respective state laws, or the closest approximation of such term, as defined in each statute. Similarly, different states may provide different rights to state residents.

General Personal Information

Category	In the preceding 12 months this category was:		Business or Commercial Purpose for Collection & Disclosure	Categories of third parties to whom the information was disclosed
	Collected	Disclosed
Identifiers			For our operational purposes or the operational purposes of our service provider or contractors. Keeping track of visitors to our website and monitoring the effectiveness of our advertising, including auditing relating to counting ad impressions of unique visitors, verifying positioning and quality, and auditing compliance. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Debugging to identify and repair errors that impair existing functionality. Short-term, transient use. Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing financing, providing analytic services, storage, or other similar services. To facilitate contests, sweepstakes, and giveaways. Providing advertising and marketing services, except for cross-context behavioral advertising. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device.	Managed service provider for back office functionality Payment processors Web analytics providers Web hosting service providers E-mail and SMS text distribution service providers Contest and sweepstakes promotion service providers Call center and help desk service providers Financial and accounting service providers Cybersecurity and fraud detection service providers Review platform providers Government entities Data brokers
(Pursuant to California Law) Personal Information Categories from Cal. Civ. Code § 1798.80(e)
(Pursuant to California Law) Characteristics of California or Federal protected Classifications				E-mail and SMS text distribution service providers
Commercial Information				Managed service provider for back office functionality Payment processors Web analytics providers Web hosting service providers E-mail and SMS text distribution service providers Contest and sweepstakes promotion service providers Call center and help desk service providers Financial and accounting service providers Cybersecurity and fraud detection service providers Review platform providers
Internet or Other Similar Network Activity				Managed service provider for back office functionality Payment processors Web analytics providers Web hosting service providers E-mail and SMS text distribution service providers Contest and sweepstakes promotion service providers Call center and help desk service providers Financial and accounting service providers Cybersecurity and fraud detection service providers Review platform providers Data brokers
Geolocation Data
Sensory or Surveillance Data				Managed service provider for back office functionality Web hosting service providers
(Pursuant to California Law) Profile Data				Managed service provider for back office functionality Web hosting service providers E-mail and SMS text distribution service providers

We do not collect: biometric information, professional or employment related information, or education information under this policy.

Sensitive Personal Information

We do not use or disclose the below sensitive personal information for purposes other than those business purposes specifically enumerated under applicable state law, including California. As a result, we do not offer a right to limit our use or disclosure of these categories of sensitive personal information.

Category	In the preceding 12 months this category was:		Business or Commercial Purpose for Collection & Disclosure	Categories of third parties to whom the information was disclosed
	Collected	Disclosed
(Pursuant to California law) Social Security Number			To perform services or provide goods you request and reasonably expect from us. We only collect and use Social Security Numbers ("SSN") if a contestant wins a contest, sweepstakes, or giveaway, and we only disclose SSN for tax compliance purposes.	Government entities for legal compliance Financial and accounting service providers
(Pursuant to California law) Account log-in, financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account			To perform services or provide goods you request and reasonably expect from us. To detect, prevent, and investigate security incidents involving your information. To investigate or curtail malicious, fraudulent, or illegal actions directed at us and to prosecute those responsible. To enhance your experience on our website in real time, so long as we do not disclose your information to a third party. To perform services for our business needs such as maintaining accounts, providing customer service, providing financing, verifying customer information, processing payments, providing analytics services, storage, and to fulfill orders. To ensure the quality or safety of a product, service, or device.	Managed service providers for back office functionality Payment processors

We do not collect: any other sensitive personal information under the applicable state laws.

The categories identified as collected in the tables above were collected from the following categories of sources:

• You directly
• Fraud monitoring services
• Marketing partners
• Licensing entities
• Data brokers
• Data analytics providers
• Operating systems and platforms
• Social networks

What We Sell to Third Parties or Share with Third Parties for Cross-Context Behavioral Advertising and Right to Opt-Out

We have sold or shared with third parties for cross-context behavioral advertising (e.g., targeted advertising) personal information to third parties in the preceding 12 months as disclosed in the table below. We do not sell or share your sensitive personal information.

General Personal Information

We do not sell or share: personal information categories from cal. Civ. Code § 1798.80(e), characteristics of California or Federal Protected Classification, commercial information, sensory or surveillance data, professional or employment related information, education information, or profile data; or any sensitive personal information.

The purpose of the notice of Right to Opt-Out is to inform you that you have the right to direct us to stop selling or sharing your personal information, which is called the "Right to Opt-Out." 

You may exercise your Right to Opt-Out by: (1) clicking "Do Not Sell or Share My Personal Info" to use the interactive form, or (2) submitting your request through an opt-out preference signal (described further below in the section titled "Opt-Out Preference Signals").

Once you make an opt-out request, we will comply within 15 business days.

We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

Your Right to Know

You have the right to request that we disclose any of the following:

• the categories of personal information we have collected about you
• the categories of sources from which the personal information is collected
• the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g. targeted advertising)
• the categories of third parties to whom we disclose personal information
• the specific pieces of personal information we have collected about you

You can do this through a verified consumer request. That process is described below in the section, "How to Exercise Your Rights."

Your Right to Request Correction of Inaccurate Personal Information

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used for the purpose of correcting your personal information and complying with our recordkeeping requirements.

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under applicable law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, " How to Exercise Your Rights."

Your Right to Request Deletion of Your Personal Information

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, "How to Exercise Your Rights."

There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.

How to Exercise Your Rights

You have the right to exercise your rights and submit verified consumer requests to know information (and to receive your personal information in a portable format), to correct information, or for deletion.

The response to a request to know will provide the personal information we have collected and maintained about you, in a portable format, unless an exception under applicable state law applies. Please note that, depending on the applicable state law, we may not be required to provide personal information to you if you make multiple requests in a certain time period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

A form is available at https://classicfirearms.com/privacy-form/ to request your personal information or request to delete or correct your personal information. You can also place a request by calling (855) 831-3337. If you call that toll-free number, you will be asked to provide the same information requested on the webform in order for us to authenticate your request. Your request either through the webform or over the phone will be verified using information you provide as described on the webform.

If you submit a request that is not through one of the above designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies with your request.

Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days, or as allowed under applicable law, describing our verification process. We will respond to your request within 45 calendar days, or as allowed under applicable law, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.

Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13.

Opt-Out Preference Signals/Universal Opt-Out Mechanism

Our use of tracking technologies may be considered a sale/sharing for targeted advertising under applicable state law. You can opt-out of being tracked by these third parties by clicking the "Do Not Sell of Share My Personal Info" link at the bottom of our website and selecting your preferences, or by broadcasting an Opt-Out Preference Signal/Universal Opt-Out Mechanism, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us. Because the signal is browser-specific, you will need to broadcast subsequent signals if you are accessing our website through different online devices (e.g., computers, smartphones, tablets).

Notice of Financial Incentive/Loyalty Program

The purpose of this notice of financial incentive is to explain to you the material terms of a financial incentive we are offering so that you may make an informed decision on whether to participate.

 We currently provide the following financial incentives:

Your Right to Non-Discrimination for the Exercise of a Privacy Right

We will not discriminate against you for exercising any of your state privacy rights. However, we may still offer you certain financial incentives permitted under applicable state law, such as discounts, rewards, premium features, loyalty accounts, or club card programs that can result in different prices, rates, or quality levels.

Using an Authorized Agent to Submit a Request

Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information, to opt-out of sale or sharing, or to limit the use or disclosure of your sensitive personal information. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section "How to Exercise Your Rights," and directly confirm with us that you provided the authorized agent permission to submit the request by emailing us at privacy@classicfirearms.com.

Using an Authorized Agent to Submit a Request

If you use an authorized agent, you may provide a power of attorney executed pursuant to applicable state law. If a power of attorney is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly by submitting a verified consumer request according to the procedures in the section "How to Exercise Your Rights," and directly confirm with us that you provided the authorized agent permission to submit the request by emailing us at privacy@classicfirearms.com.

Changes to Our Privacy Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice's effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

Contact for More Information

If you have any questions or comments about this notice, the ways in which we collect and use your information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: