River Rock Tobacco and Fuel is owned and operated by the Stillaguamish Tribe of Indians, a federally recognized Tribe and sovereign nation (collectively, “River Rock”, “we” or “us” or “our”); River Rock respects your privacy and is committed to protecting it. We provide this Privacy Policy (“Policy”) to inform you of our privacy practices and of the choices you can make about the way your Personal Information is collected and how that information is used. Our Privacy Policy outlines how we collect, use, and protect your personal information. We’re committed to maintaining the highest standards of data protection and ensuring that your privacy is respected at all times.
This Policy applies to all Personal Information collected at the River Rock location, during any written, electronic, and oral communications with River Rock parties, or by our River Rock services online (collectively, the “Services”). River Rock Services include the website located at Riverrock.stillaguamish.com and all corresponding webpages and websites that link to this Policy (“Site”), River Rock, web, console, desktop and other applications (e.g., Apple iOS Apps, etc.) (collectively and individually, (“App”); and any other content, applications, features, functionality, information and services offered by us though the Site and/or the Apps.
1. PERSONAL INFORMATION WE COLLECT
We collect Personal Information when you use our Services, create an account with us or submit Personal Information to us. Personal Information is any information that relates to you, identifies you personally or could be used to identify you, including but not limited to as your user ID, name, email address, phone number, address, date of birth, age, and gender. We collect this information in a variety of ways which include, but are not limited to the following ways:
a. Information You Voluntarily Provide to Us on Our Services. If you decide to contact us or make use of personalized services (e.g. by filling in a form on our Site), then you will be asked to submit limited Personal Information which is necessary for us to provide applicable Services to you. Providing Personal Information this way is voluntary. If any form which collects your Personal Information allows you to voluntarily provide additional information, we seek this information because we think it will help us to give you a better-quality service. You do not have to provide such information if you do not wish to do so.
b. Information You Provide to Other Tribal Enterprises. We may get your Personal Information from the Tribe and other Tribal Enterprises, including the Angel of the Winds Casino Resort.
c. Information Automatically Collected. When you use the Services online, we may automatically collect information about the Services you use and how you use them by using cookies, tags, and similar technologies to automatically collect information in connection with our Services. To learn more about our usage of the cookies and other tracking technologies, please see section 2 below.
2. COOKIES AND OTHER TRACKING TECHNOLOGIES
We may use cookies, tags, and similar technologies to automatically collect information on our Services. These tracking technologies allow our technology partners to collect information including your computer’s IP address, your mobile device identifier, the type of internet browser you are using, operating system, referral URLs, date/time stamps, pages viewed, and simple keyword tags.
Generally, we use first-party and third-party cookies for the following purposes: to make our Services function properly; to provide a secure browsing experience during your use of our Services; to collect passive information about your use of our Services; to measure how you interact with our marketing campaigns; to help us improve our Services; and to remember your preferences for your convenience.
3. HOW WE USE YOUR PERSONAL INFORMATION
We will use your Personal Information only as described in this Policy or as disclosed to you prior to such processing taking place.
To Provide You, Our Services. We will use your Personal Information to provide information or perform Services that you request. If the applicable information is to be provided or Service is to be performed by a third party, then we will disclose the applicable information to the third party providing the information or performing applicable Services. All third parties that we work with are contractually obligated to protect your information as disclosed in this Policy.
a. For Internal Use. We use your Personal Information for the purposes of furthering our business, including improving our Site’s content and functionality by analyzing where, on which types of devices and how our Site is used, how many visitors we receive, and where they click through to the Site from. We also use it to remember you in case you re-visit our Site, so we will know if you have already been served with surveys, or (where Site content is undergoing testing) which version of the content you were served.
b. To Provide You with Service-Related Communications. We will send you administrative or account-related information to keep you updated about your account and the Services. Such communications may include information about Policy updates, confirmations of your account actions or transactions, security updates or tips or other relevant transaction-related information. We process your contact information to send you such communications. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Services.
c. To Provide Customer Support or Respond to You. We collect any information that you provide to us when you contact us. Without your Personal Information, we cannot respond to you or ensure your continued use and enjoyment of the Services.
d. To Ensure the Security of the Services. We care about keeping you secure and safe while using our Services. Keeping you safe requires us to process your Personal Information, such as your device information, activity information and other relevant information. We use such information to combat spam, malware, malicious activities or security risks; improve and enforce our security measures; and to monitor and verify your identity so that unauthorized users do not gain access to your information. We cannot ensure the security of our Services if we do not process your Personal Information for security purposes.
e. To Enforce Compliance with Our Terms and Agreements or Policies. When you access or use our Services, you are bound to our Terms and Conditions and this Policy. To ensure you comply with them, we process your Personal Information by actively monitoring, investigating, preventing and mitigating any alleged or actual prohibited, illicit or illegal activities on our Services. We also process your Personal Information to: investigate, prevent or mitigate violations of our internal terms, agreements or policies and enforce our agreements with third parties and business partners.
f. To Maintain Legal and Regulatory Compliance. Our Services are subject to certain laws and regulations which may require us to process your Personal Information. For example, we process your Personal Information to pay our taxes, to fulfill our business obligations, ensure compliance with employment and recruitment laws or as necessary to manage risk as required under applicable law. Without processing your Personal Information for such purposes, we cannot perform the Services in accordance with our legal and regulatory requirements.
4. SHARING OF YOUR PERSONAL INFORMATION
Other than sharing your Personal Information so that you can use our Services, or as required or permitted by law, we do not share Personal Information about our members or former members with non-affiliated third parties. We may disclose your Personal Information as described below.
a. Within the Tribe and its Enterprises. River Rock is owned by the Stillaguamish Tribe of Indians, which has many legal entities, business processes, management structures and technical systems. River Rock may share your Personal Information within this organization to provide you with the Services and take actions based on your request.
b. Third Parties. We may share your Personal Information with third-party service providers acting on our behalf to help us operate our Services. These third parties can only use your data in accordance with our written instructions and must comply with the information security protections we have put in place.
c. To Maintain Legal and Regulatory Compliance. We have the right to disclose your Personal Information as required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on River Rock. If there is a takeover, sale, or purchase of our business, we may disclose your Personal Information to the new (or prospective) owner of the business.
5. SECURITY PRECAUTIONS
In compliance with federal regulations, we maintain physical, electronic, and procedural safeguards designed to guard and prevent misuse of your Personal Information. Our security measures include industry-standard physical, technical, and administrative measures to prevent unauthorized access to or disclosure of your information, to maintain data accuracy, to ensure the appropriate use of information, and otherwise safeguard your Personal Information. We restrict access to your non-public Personal Information to those employees and third parties who need such information to provide products or Services.
Please recognize that protecting your Personal Information is also your responsibility. We ask you to be responsible for safeguarding your password, secret questions and answers, and other authentication information you use to access our Services.
6. OUR RETENTION PERIODS
We will retain your Personal Information only for as long as is necessary to fulfill the purposes for which it was collected. We may retain some of your Personal Information for a longer period insofar as it may be necessary to defend or prosecute any legal claim. Generally, your Personal Information is held for the duration of your subscription plus six (6) years for the purposes of managing your account, after which time it may be deleted or aggregated so that it no longer directly identifies you.
If you send us correspondence, including emails and faxes, we retain such information electronically in the records of your account. We will also electronically retain customer service correspondence and other correspondence from River Rock to you. We retain these records to measure and improve our customer service and to investigate potential fraud and violations. We may, over time, delete these records as permitted by law.
7. THIRD-PARTY WEBSITES AND EXTERNAL LINKS
Our Site and App may contain links to third-party sites. Other than as stated herein, this Policy does not apply to information collected by any third party (including our affiliates), including through any application or content (including advertising) that may link to or be accessible from or on our website. We recommend that you read the privacy statements of any other sites that you visit as we are not responsible for the privacy practices and content of those sites.
8. PERSONS UNDER THE AGE OF 18 YEARS
Pursuant to applicable law, persons under the age of 18 are not permitted to consume alcoholic beverages or tobacco products. Similarly, our Site, App, and Services are not intended or directed to persons under the age of 18. In accordance with the Children’s Online Privacy Act, persons younger than 18 years of age are not allowed to use our site. We do not knowingly collect, solicit, or maintain personal data from anyone under the age of 18, or knowingly allow such persons to register for our services. If you are under 18, please do not attempt to fill out our forms or send any Personal Information about yourself to us. If we become aware that a person under 18 has provided us with Personal Information, we will take steps to delete such information from our files.
9. OPTING OUT
By providing us with your email address, you consent to us using that email address to send you emails, including any notices required by law, in lieu of communication by postal mail. We may use your email address to send you messages or content, including, but not limited to, newsletters, additions or changes to services, or special offers. If you do not want to receive such email messages, you may opt out by clicking the “unsubscribe” link at the bottom of our emails. Opting out may prevent you from receiving email messages regarding updates, improvements, special features, announcements, or offers.
10. CHANGES TO OUR PRIVACY POLICY
We may modify this Policy at any time, without prior notice, and changes may apply to any Personal Information we already hold about you, as well as any new Personal Information collected after the Policy is modified. If we make changes, we will notify you by revising the date at the top of this Policy. We will provide you with advanced notice if we make any material changes to how we collect, use or disclose your Personal Information that impact your rights under this Policy. If you continue to access or use our Services after receiving the notice of changes, you acknowledge your acceptance of the updated Policy.
11. ACKNOWLEDGMENT AND CONSENT
Please read our Terms and Conditions Riverrock.stillaguamish.com this Policy before accessing or using our Services. By using our Services, you accept the Terms and Conditions and accept our privacy practices described in this Policy, and you hereby consent that we may collect, use, and share your information as described herein. If you cannot agree with this Policy or the Terms and Conditions, please do not access or use our Services.
In addition, we may provide you with real time disclosures or additional information about the Personal Information handling practices of specific parts of our Services. Such notices may supplement this Policy or provide you with additional choices about how we process your Personal Information.
12. CONTACT INFORMATION
If you have questions or concerns regarding any information in this Policy, please contact us by phone at 360-631-7531 or by email at cgillmore[at]stillaguamish.com. You can also contact us by mail:
ATTN: Christa Gilmore
3322 236th Street NE
Arlington, WA 98223
