RoyallStays State Privacy Policy

STATE PRIVACY POLICY
FOR STATE RESIDENTS OF
CALIFORNIA, MARYLAND, MONTANA, NEVADA, AND TEXAS

Last updated September, 2024

This state privacy policy (“State Privacy Policy”) supplements the information contained in the Privacy Policy of Royall Stays, LLC (“Company,” “we,” “us,” or “our”) and applies solely to all visitors, users, and others who reside in the states listed below. We adopt this State Privacy Policy to comply with state laws, including but not limited to, the California Consumer Privacy Act of 2018 (the “CCPA”), Maryland Online Data Privacy Act, Montana Consumer Data Privacy Act, Nevada Revised Statutes § 603.A.300-360, and Texas Data Privacy and Security Act (collectively, the “State Specific Statutes”). For the purposes of this State Privacy Policy, unless otherwise specifically stated, “Personal Information” has the definition ascribed to it under the applicable State Specific Statute or United States (“US”) privacy law.

PLEASE REVIEW THIS STATE PRIVACY POLICY, OUR PRIVACY POLICY, AND OUR TERMS OF USE CAREFULLY. YOUR USE OF THIS WEBSITE AND/OR OUR SERVICES SIGNIFIES YOUR AGREEMENT TO THIS STATE PRIVACY POLICY, OUR PRIVACY POLICY, AND OUR TERMS OF USE.

If you do not reside in one of the states listed in this State Privacy Policy, your privacy rights and our data handling practices are governed by our Privacy Policy.

TABLE OF CONTENTS:

A. GENERAL INFORMATION APPLICABLE UNDER THE STATE SPECIFIC STATUTES

B. CALIFORNIA

C. MARYLAND

D. MONTANA

E. NEVADA

F. TEXAS

G. MAKING REQUESTS OR EXERCISING YOUR RIGHT(S)

H. CHANGES TO THIS STATE PRIVACY POLICY

I. CONTACT US

A. GENERAL INFORMATION APPLICABLE UNDER THE STATE SPECIFIC STATUTES

As a US user and subject to certain limitations under US privacy laws, if you reside in a state governed by one of the State Specific Statutes you may have choices regarding our use and disclosure of your Personal Information. In addition to your rights under the Privacy Policy, your other rights may include:

1. Exercising the right to know: You have a right to request additional information about the categories of Personal Information collected, sold, disclosed, or shared; purposes for which this Personal Information was collected, sold, or shared; categories of sources of Personal Information; and categories of third parties with whom we disclosed or shared this Personal Information.
2. Exercising the right to opt-out from a sale or sharing: We do not transfer your Personal Information to third parties in exchange for payment. However, as noted below, we may provide the data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and Services to you. Because these third parties may use the data we provide for their own purposes, our provision of data to these parties may be considered a data “sale” or “sharing” as those terms are defined under certain State Specific Statutes and/or applicable US privacy laws. You can opt-out of targeted advertising and any related data “sales” or “sharing” by [insert method to opt-out] or by emailing optout@royallstays.com.
   1. Google Analytics: You can opt-out of having made your activity on the Services available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visits activity. For more information, please visit the Google Privacy & Terms web page. 
3. Exercising the right to limit the use or sharing of Sensitive Personal Information: We do not sell or share Sensitive Personal Information as defined by US privacy laws and have not done so in the past twelve (12) months. We use Identifiers and Location Data for the purposes set out below, including, without limitation, for providing our Services, complying with legal obligations, and other purposes consistent with your consent and applicable law.

B. CALIFORNIA

Any terms defined in the CCPA have the same meaning when used in this Section B.

1. As a resident of California you may have the right to:

   Category:	Category Examples:	Collected:	Disclosed:
   Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other identifiers.	Yes	Yes. We may disclose the data, pursuant to applicable law, to service enablers (including service providers), the Host, third parties like ad partners that help us advertise our Services, an entity engaged in a business transfer/merger, law enforcement, courts, governments, and regulatory agencies.
   Protected classification characteristics under California or federal law	Age (40 year+), race, color, ancestry, citizenship, origin, religion or creed, marital status, medical condition, disability, sex, sexual orientation, veteran/military status, or genetic information.	Yes	No
   Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Yes	Yes. We may disclose the data, pursuant to applicable law, to service enablers (including service providers), the Host, third parties like ad partners that help us advertise our Services, an entity engaged in a business transfer/merger, law enforcement, courts, governments, and regulatory agencies.
   Biometric information	Genetic, biological, or other identifying information, such as fingerprints, to verify your identity.	No	No
   Internet or other similar network activity	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.	Yes	Yes. We may disclose the data, pursuant to applicable law, to service enablers (including service providers), the Host, third parties like ad partners that help us advertise our Services, an entity engaged in a business transfer/merger, law enforcement, courts, governments, and regulatory agencies.
   Geolocation data	Physical location or movements.	Yes	Yes. We may disclose the data, pursuant to applicable law, to service enablers (including service providers), the Host, third parties like ad partners that help us advertise our Services, an entity engaged in a business transfer/merger, law enforcement, courts, governments, and regulatory agencies.
   Sensory data	Audio, electronic, visual, or similar.	No	No
   Professional or employment- related information	Current or past job history or performance evaluations.	No	No
   Non-public education information (20 U.S.C. §1232g, 34 C.F.R. Part 99)	Education records, such as grades, transcripts, financial information, or disciplinary records.	No	No
   Inferences drawn from other person information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes	Yes. We may disclose the data, pursuant to applicable law, to service enablers (including service providers), the Host, third parties like ad partners that help us advertise our Services, an entity engaged in a business transfer/merger, law enforcement, courts, governments, and regulatory agencies.
   Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	A name, physical characteristics or description, address, number, driver’s license or state identification card number, or payment or any other financial information. Some information included in this category may overlap with other categories.	Yes	Yes. We may disclose the data, pursuant to applicable law, to service enablers (including service providers), the Host, third parties like ad partners that help us advertise our Services, an entity engaged in a business transfer/merger, law enforcement, courts, governments, and regulatory agencies.

   Purpose of Collection: Where “Yes” is indicated under “Collected” above, we collect the Personal Information to assist us in providing the Services, advertising and promoting the Services, complying with law, and for related Business Purposes and Commercial Purposes as each of those terms are defined in § 1798.140 of the CCPA.

   1. Request we delete any of your Personal Information that we collected for you and still retain, subject to certain exceptions.
   2. Direct us not to sell your Personal Information at any time.
   3. As applicable under the California Privacy Rights Act, request we (i) correct inaccuracies in their Personal Information; and/or (ii) direct us not to use certain sensitive information.
   4. Request we disclose certain information to you about our collection, use, disclosure, and sale of your Personal Information over the past twelve (12) months. We do not sell any of your Personal Information nor transfer your personal data to third parties in exchange for payment. However, as noted below and in our Privacy Policy, we may provide your personal data to third party partners, such as advertising partners, analytics providers, and social networks, who assist us in advertising our products and services to you. Because these third parties may use the data we provide for their own purposes (such as to improve their ad delivery), our provision of data to these parties may be considered a data “sale” or “sharing” as those terms are defined under the CCPA and other applicable US privacy laws.
      1. Within the past twelve (12) months, the following categories of Personal Information described in §1798.80(e) of the California Civil Code have been “sold” or “shared” (as defined under the CCPA) to third parties (including advertising partners) who assist us in advertising our services:
         1. Identifiers (e.g., a device identifier)
            1. Online activity information (e.g., information about devices and browsers across certain business sites that use the Services and IP addresses associated with those devices, browsers, and usage data).
            2. Geolocation Data (e.g., IP addresses).
         2. You can opt-out of targeted advertising and any related data “sales” or “sharing” by [insert method to opt-out] or by emailing optout@royallstays.com.
      2. Within the past twelve (12) months, we collected and/or disclosed (for business purposes) the following categories of Personal Information from users:
2. We will not discriminate against anyone exercising any of their rights under the CCPA.
3. We will only process Sensitive Personal Information for the purposes specified in § 7027(m) of the California Consumer Privacy Act Regulations, or without the purpose of inferring characteristics about a consumer. We use Identifiers and Location Data for the purposes set out above, including, without limitation, for providing our Services, complying with legal obligations, and other purposes consistent with your consent and applicable law.
4. You may request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. All Personal Information will be retained in accordance with the CCPA and all other applicable governing laws.
5. You have the right to exercise your right to know and access, delete, and opt-out:
   1. Right to Know and Access: you have the right to request from us: (i) the categories of Personal Information we have collected about you, the categories of sources from which the Personal Information is collected, the business purpose or commercial purpose for collecting the Personal Information, the categories of third parties with whom we share Personal Information, the categories of Personal Information we have shared and the reasons we shared it; and (ii) a copy of the specific pieces of Personal Information we have collected about you in the preceding twelve (12) months.
   2. Right to Delete: You have the right to request that we delete the Personal Information we collect from you if applicable. In certain situations, we are not required to delete your Personal Information, such as to services requested by you, to comply with a legal obligation, to engage in research, to secure our Websites or other online services, or to otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.
   3. Right to Opt-Out: please refer to Section G.

As of July 1, 2023, we have received, complied, and denied the following number of requests for California residents in the preceding twelve (12) months:

Request	Received	Complied	Denied	Average Response Time
Request to Know	0	0	0	0 Days
Request to Delete	0	0	0	0 Days
Request to Opt-out	0	0	0	0 Days

C. MARYLAND

Any terms defined in the Maryland Online Data Privacy Act, effective January 1, 2025. have the same meaning when used in this Section C of this State Privacy Policy:

Residents of Maryland may have the right to:

1. Exercise the right to know.
2. Exercise the right to opt-out from a sale or sharing.
3. Exercise the right to limit the use or sharing of Sensitive Personal Information.
4. Right to have Personal Information deleted.
5. Right to correct inaccuracies in their personal data.
6. Obtain a portable copy of their Personal Information.
7. Know about our data security measures. We employ industry-standard security measures to protect Personal Information from unauthorized access, disclosure, alteration, and destruction.
8. Be notified of any security breach. In the event of a security breach involving your Personal Information, we will notify you in accordance with Maryland law.
9. Opt-out of personal data processing for targeted advertising and/or sales; and
10. Opt-out of profiling in furtherance of decisions that produce legal or similarly significant effects.

Please refer to Section A for more information or instructions related to your rights under this Section C. Please refer to Section G for opt-out information.

D. MONTANA

Any terms defined in the Montana Consumer Data Privacy Act, effective October 1, 2024, have the same meaning when used in this Section D of this State Privacy Policy:

Residents of Montana may have the right to:

1. Exercise the right to know.
2. Exercise the right to opt-out from a sale or sharing.
3. Exercise the right to limit the use or sharing of Sensitive Personal Information.
4. Know about our data security measures. We employ industry-standard security measures to protect Personal Information from unauthorized access, disclosure, alteration, and destruction.
5. Be notified of any security breach. In the event of a security breach involving your Personal Information, we will notify you in accordance with Montana law.

Please refer to Section A for more information or instructions related to your rights under this Section D. Please refer to Section G for opt-out information.

E. NEVADA

Any terms defined in the Nevada Revised Statutes § 603.A.300-360 have the same meaning when used in this Section E of this State Privacy Policy. Residents of Nevada may have the right to a limited right to opt-out of certain sales of Personal Information. Please refer to Section G for opt-out information.

F. TEXAS

Any terms defined in the Texas Data Privacy and Security Act have the same meaning when used in this Section F of this State Privacy Policy. Residents of Texas have the right to know what Personal Information we collect, how we use it, and with whom we share it. You may also request access to your personal data and request corrections if necessary.

Please refer to Section A for more information or instructions related to your rights under this Section E. Please refer to Section G for opt-out information.

G. MAKING REQUESTS OR EXERCISING YOUR RIGHT(S)

State residents, or their authorized agents, exercising their rights under state laws, including under the CCPA, may make verifiable requests by:

• emailing us at optout@royallstays.com with “Opt-Out Rights” in the subject line.
• calling us at (843) 936-1555
• sending us a written request by mail to:

Royall Stays LLC
58 Shem Drive
Mount Pleasant, SC 29464

A request or exercise of your right(s) must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized agent, and should include: (i) the state of which you are a resident; (ii) a description of your request/exercise of your right, with sufficient detail that allows us to properly understand, evaluate, and respond; and (iii) identifying personal information. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm your information.

We will only use your information provided in the request to verify the requestor’s identity or authority to make said request. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

H. CHANGES TO THIS STATE PRIVACY POLICY

We may from time to time change the Privacy Policy, but we will always post those changes on this page so that you are always aware of what information we collect, how we use it, and under what circumstances we disclose it. If we make material changes to this State Privacy Policy, we will notify you here, by e-mail, and/or by means of a notice on our Website.

I. CONTACT US

We welcome your comments and questions regarding our privacy policies. If you have any questions about this State Privacy Policy, please contact us at:

Royall Stays LLC
58 Shem Drive
Mount Pleasant, SC 29464
(843) 936-1555
info@royallstays.com