TEJAVA/CRYSTAL GEYSER WATER COMPANY PRIVACY POLICY

Last Updated: June 1, 2026 

This Privacy Policy (“Policy”) describes how Crystal Geyser Water Company (“CGW,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information about individuals who visit our website, https://crystalgeyserwatercompany.com, visit our other websites that link to this Policy, or that otherwise engage with us online or offline (collectively, the “Services”). This Policy also describes the rights that residents in states with comprehensive privacy legislation that applies to us (“U.S. Privacy Laws”) have regarding our processing of their personal information under applicable local law. Some portions of this Policy only apply to residents of particular states. In those instances, we have indicated that such language only applies to those residents. 

This Policy does not cover information we may collect from job applicants, employees, or business contacts.
 
By accessing the Services, you acknowledge and agree that your personal information will be handled as described in this Policy. If you do not agree with the practices we have described in this Policy, please do not provide us with your personal information. Your use of the Services, and any dispute of privacy is subject to this Policy and our Terms of Use, including its applicable limitations of liability. The CGW Terms of Service are incorporated by reference into this Policy.
 
Please note that the Services are intended only for consumers who reside in the United States. If you visit our website or use our Services from outside the United States, please note that the United States has data protection laws that may not be consistent with those of other countries and that information collected about you in connection with your use of the Services will be processed in accordance with United States law.

DEFINITIONS

  • “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information also includes “sensitive personal information” that we specifically describe in this Policy. Personal information does not include publicly available information or deidentified or aggregated consumer information.

  • “Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s personal information to a third party for money or other valuable consideration.

  • "Share,” “Shared,” or “Sharing” means transferring an individual’s personal information to a third party for cross-context behavioral advertising or targeted advertising purposes, whether or not for money or other valuable consideration. Sharing includes “targeted advertising,” as that term is defined by U.S. Privacy Laws.

  • “Third Party” means any non-affiliated person that is not a Service Provider.

  • “Service Provider” means a service provider, contractor, or processor which collects, stores, or otherwise handles personal information for us and is bound by contractual obligations to use your personal information only as directed by us.

CATEGORIES OF PERSONAL INFORMATION WE COLLECT 

We collect, process, and disclose, and in the past 12 months have collected, processed, and disclosed the following categories of personal information for the purposes described in this Policy.

CATEGORY

EXAMPLES

Identifiers

Name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account name, signatures, physical characteristics or description, telephone number, or other similar identifiers

Financial Information

Bank account number, credit card number, debit card number, or any other financial information that does not allow access or withdrawal of funds.

Characteristics of Protected Classifications under state or federal law

Age, gender, and marital status

Commercial Information

Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

Internet or Other Network Information

Browsing history, search history, information regarding your interactions with our websites or advertisements

Geolocation Data

Device location

Audio, Electronic, Visual, and Similar Information

Call and video recordings

Inferences drawn from any of the information listed above

A profile or summary about an individual’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

Sensitive Personal Information

Personal Information collected and analyzed concerning your health

Personal Information of consumers we know are under age 16.

 

DATA RETENTION

Your personal information will be retained for only so long as it is necessary for the purpose for which it was originally collected, and in accordance with applicable local law. We will retain your personal information for the period necessary to fulfill the purposes outlined in the “How We Use Your Personal Information” section of this Policy or longer if retention is required by applicable laws. When assessing retention periods, we first examine whether it is necessary to retain the personal information collected and, if retention is required, work to retain the personal information for the shortest possible period permissible under applicable law.

HOW WE USE YOUR PERSONAL INFORMATION

Depending on your interaction with us, we may use the categories of personal information described above for the following purposes:

  • To provide our services and fulfill your requests, including to provide and maintain our products and services including the Services, to process and fulfill your requests, and for other customer service purposes.

  • To communicate with you, including to communicate with you about your use of our Services, to respond to your inquiries, concerns, and requests, and to provide other legal or service-related notices about our Services.

  • To improve our Services, including to operate and improve our business and our Services, to maintain our programs, accounts, and records, for research purposes, and to understand your satisfaction with our products and services.

  • To personalize your experiences with us, including to remember your interests and preferences, personalize our Services and the content we make available to you through the Services, facilitate interactions with us, track and categorize your activity and interests on the Services, including identifying and linking the different devices you use, and to enrich your experience on the Services.

  • For analytics, including understanding how you use our Services, and our other products, and services, and to analyze or predict consumer preferences to identify aggregated trends to develop, improve or modify our products, services and business activities.

  • For marketing and advertising, including to deliver marketing communications, promotional materials, or advertisements, including interest-based advertisements about products and services that may be of interest to you, and to improve our advertising efforts.

  • For product safety purposes, including to notify you of product recalls or safety issues with our products or services, and to collect information about adverse events and comply with our adverse event reporting obligations.
     
  • For security purposes, including to authenticate the information you provide us, to protect the security and integrity of our Services and information technology infrastructure, and to detect, prevent, and respond to fraud and misuse of our products and services.

  • To comply with legal obligations, including comply with applicable laws and regulations, to exercise or defend our rights or the rights of a third party, including complying with law enforcement or government authority requests and participating in compliance audits.

  • To protect us and others, including where we believe necessary to investigate, prevent, or take action regarding suspected or actual illegal activities, fraud, situations involving potential threats to the safety of any person or to otherwise enforce this Policy, our Terms of Use, and the integrity of the Services.

In general, we collect, process, and disclose the categories of sensitive personal information described in this Policy only for purposes that are permitted by the CCPA regulations, including to perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services and to verify or maintain the quality or safety of our products and services. However, we may collect, process, and disclose personal information of consumers that are at least 13 years old but less than 16 years old for all of the purposes listed in this Policy.
 
We may merge, co-mingle, or otherwise combine information, including your personal information, in furtherance of the purposes described in this Policy.

We may also deidentify or anonymize your data in such a way that you may not reasonably be re-identified by us or another party, and we may use this deidentified data for any purpose permitted under applicable law. To the extent we deidentify any data originally based on personal information, we will maintain and use such data in deidentified form and will not attempt to reidentify the data except that we may attempt to reidentify the information solely for the purpose of determining whether our deidentification processes satisfy applicable legal requirements. After it has been deidentified, the information is no longer personal information and is not subject to this Policy.
 
Please note that we may also process personal information via use of automated technologies, including artificial intelligence, for the purposes listed above. To the extent permitted by applicable law, we may also use personal information we collect to train automated technologies we use for the above purposes.  However, we do not process personal information subject to this Policy for profiling in furtherance of decisions that produce legal or similarly significant effects (meaning decisions that results in the provision or denial of financial or lending services, housing, insurance, education enrollment or opportunity, criminal justice, employment opportunities, health-care services, or access to essential goods or services).

SALES, SHARES, AND TARGETED ADVERTISING

We are required to describe certain disclosures of personal information as “Sales” or “Shares” where we received valuable consideration or where the disclosure is made for cross-context behavioral advertising or targeted advertising purposes. Accordingly, we Sell and Share, and in the past 12 months, have Sold and Shared the following categories of personal information about consumers, including consumers who are at least 13 years old and less than 18 years old: identifiers, such as IP addresses and other device identifiers, commercial information, internet or other electronic network activities information, and inferences via cookies and other tracking technologies (“Cookies”) used on our Services to third party marketing and analytics providers. We Sell and Share these categories of personal information for marketing, advertising, and analytics purposes, including to analyze or predict consumer preferences to identify aggregated trends to develop, improve or modify our products, services and business activities, and to deliver marketing communications, promotional materials, or advertisements, including interest-based advertisements, and improve our advertising efforts.

Residents of certain states, including California, have the right to opt out of the Sale and Sharing of your personal information for targeted advertising. To do so, click the “Your Privacy Choices” link in the footer of our websites and click “Reject All.”

We obtain opt-in consent from consumers who are at least 13 years old and less than 18 years old prior to Selling or Sharing for targeted advertising their personal information. Consumers that are at least 13 years old and less than 18 years old that opt in to the Sale and Sharing of their personal information may opt-out of the Sale and Sharing of their personal information at any time by clicking the “Your Privacy Choices” link in the footer of our websites and clicking “Reject All.”

DISCLOSURES OF PERSONAL INFORMATION

We may disclose, and in the past 12 months, may have disclosed, the categories of personal information listed above in the following contexts:

  • Affiliates. We may disclose the personal information we collect about you to our parent company, affiliates, subsidiaries, and related entities for the purposes set out in the “How We Use Your Personal Information” section of this Policy.
     
  • Service Providers. We may disclose the personal information we collect about you to Service Providers who perform functions and business operations on our behalf. For example, we engage Service Providers to help audit our interactions and transactions with you, address security, fix errors, help with our internal research, verify service quality and safety, and provide other services such as information technology and hosting services, processing and fulfillment services, advertising and marketing services and legal and other professional services. We impose contractual limitations on our vendors’ use of personal information they collect in conjunction with providing services to us.

  • Third Parties for Marketing & Advertising Purposes. We may disclose certain categories of personal information to Third Parties, including third party marketing and advertising or analytics providers. Please note this may constitute a Sale or Share of your Personal Information. For more information, please see the “Sales, Shares, and Targeted Advertising” section of this Policy, above.

We may also disclose your personal information in the following circumstances:

  • Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected about you to the other company. As part of the business transfer process, we may disclose certain of your information to lenders, auditors, and third party advisors, including attorneys and consultants. If such a transfer occurs, we will seek assurances that the recipients, including any successor organization, will treat the personal information we disclose to it in accordance with this Policy.

  • In Response to Legal Process. We may disclose your personal information to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.

  • To Protect Us and Others. We disclose your personal information where we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Policy, or as evidence in litigation in which we are involved.

  • Aggregated and Deidentified Information. We may disclose aggregated, anonymized, or deidentified information about you for any purpose permitted under applicable law.

  • Consent. We may disclose personal information as described in any privacy notice we provide to you via our Services, or with your consent if we obtain it from you in a particular context, to the extent permitted by applicable law.

SOURCES OF PERSONAL INFORMATION

We collect your personal information from the following sources:

  • Directly From You. We collect personal information directly from you when interact with us, such as when you provide us with information through our Services or contact us by phone, mail, email, or fax. If you contact us, we may collect your contact information (e.g., name, address, phone number, or email address), the contents of a message or attachments that you may send to us, and other information you choose to provide.

  • From Other Sources. CGW also collects personal information from other sources, such as our Service Providers and Third Parties when they disclose personal information to us.

  • Via Cookies & Other Tracking Technologies. We collect personal information passively via cookies and other tracking technologies. This typically includes information about our website visitors, such as IP address, other device identifiers, and internet or other electronic network activity information. For example, we use Google Analytics, a web analytics tool that helps us understand how visitors engage with our Services. To learn more about Google Analytics, visit http://www.google.com/intl/en/analytics/privacyoverview.html.  Please also note that our websites do not currently comply with the “Do Not Track” signal.

SECURITY OF PERSONAL INFORMATION

We implement reasonable physical, technical, and organizational security measures designed to safeguard personal information. These measures are aimed to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security. We therefore cannot ensure that your Personal Information will not be disclosed, misused, or lost by accident or by the unauthorized acts of others.

CHILDREN UNDER THE AGE OF 13

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If we discover that a child under 13 has provided us with personal information, we will take reasonable steps to promptly delete such information from our systems. If you believe we might have collected Personal Information from your child who is under 13, please contact us at HR@crystalgeyser.com.

THIRD PARTY LINKS

Our Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but is instead governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites, and we encourage you to review the privacy policies of any third-party sites you choose to visit.

YOUR PRIVACY RIGHTS AND CHOICES

This section provides additional disclosures to residents of states with U.S. Privacy Laws that apply to CGW and describes the rights such consumers have with respect to their personal information, subject to certain exceptions.

Rights that Require Verification

Right to Know

You have the right to request that we disclose certain information to you about our collection and use of your personal information, including:

  • The categories of personal information we have collected about you.

  • The categories of sources of the personal information we have collected about you.

  • Our business or commercial purposes for collecting, Selling, and Sharing the personal information.

  • The categories of Third Parties to whom we have disclosed personal information.

  • The categories of personal information we have Sold or Shared about you and the categories of Third Parties to whom we have Sold or Shared the personal information.

  • The categories of personal information we have disclosed for a business purpose and the categories of Service Providers to whom we have disclosed the personal information.

  • Residents of certain states, including Minnesota and Oregon, also have the right to obtain a list of the specific Third Parties to whom we have disclosed Personal Information. 

Please note that you can only make a request to know twice within a 12-month period.

Right to Data Portability

You have the right to request the specific pieces of personal information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the personal information to another data controller.

Right to Correct

You have the right to request that we correct any inaccurate personal information we maintain about you. Please note that this right does not apply to Iowa or Utah residents.

Right to Delete

You have the right to request that we delete the personal information that we collected from you or about you, depending on your state of residence.

Exercising your Rights to Know, Data Portability, Correct, and Delete

To submit a request to exercise your rights to know, data portability, correct, and delete, you may contact us at 1-844-441-9869 (pin 842689) or submit a request through our Webform. Depending on your state of residence, you may also authorize an agent to make a data subject request on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your personal information, we may ask the requestor to provide information, such as your name, email address, or mailing address, that will enable us to verify your identity. Authorized agents must also provide a copy of the consumer’s signed permission authorizing the agent to submit requests on the consumer’s behalf, or we may ask you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.

Rights that Do Not Require Verification

Right to Opt-Out of Sale, Sharing, and Processing for Targeted Advertising

You have the right to opt out of the Sale and Sharing of your personal information and the processing of your personal information for targeted advertising. To do so, click the “Your Privacy Choices” link in the footer of our websites and click “Reject All.”

Right to Limit the Use of Your Sensitive Personal Information/Right to Revoke Consent

We may process personal information of consumers at least 13 years old and less than 16 years old for purposes other than those that are permitted by the CCPA regulations. Accordingly, California residents have the right to limit the use of their sensitive personal information to the purposes permitted by the CCPA. To limit the use of your Sensitive Personal Information collected via Cookies, click the “Your Privacy Choices” link in the footer of each page of our website and click “Reject All.” To limit the use of your Sensitive Personal Information in all other contexts, call us at 1-844-441-9869 (pin 842689) or submit a request through our Webform.  

For residents of certain states, if we have obtained your consent for processing of sensitive personal information about you in a particular context, you can revoke your consent by calling us at 1-844-441-9869 (pin 842689) or submitting a request through our Webform. Authorized agents may also submit requests via these methods, where permitted by U.S. Privacy Laws.

Right to Opt-Out of Profiling or ADMT

As described above, we do not engage in Profiling or automated decision making that have legal or similarly significant effects. But if we did, you would have the right to opt out of the profiling of data in furtherance of solely automated decisions that have legal effects or similarly significant effects concerning consumers.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment for the exercise of these rights. CGW will not discriminate or retaliate against you for exercising your rights under this Policy.

Appeals

Residents of certain states have the right to appeal a decision we make relating to requests to exercise your rights under applicable local law. This section does not apply to California or Utah consumers, or to residents who reside in other states where the applicable U.S. Privacy Law does not give them the right to appeal controllers’ decisions regarding data subject rights. To appeal a decision, please contact us at HR@crystalgeyser.com. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

OPT OUT PREFERENCE SIGNALS

We recognize opt-out preference signals that we are required to recognize for compliance with applicable law. Where required by U.S. Privacy Laws, we treat such opt-out preference signals as a valid request to opt-out of Sale, Sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of Sale and Sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit. However, our sites do not respond to the “Do Not Track” signal, which is different from the opt-out preference signals described above.

OTHER DISCLOSURES 

California Residents Under Age 18

If you are a resident of California under the age of 18, you may ask us to remove content or data that you have posted to the Services by writing to HR@crystalgeyser.com. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.

Disclosure About Direct Marketing for California Residents

California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of personal information to other entities for their direct marketing purposes in the preceding calendar year. We do not distribute your personal information, as defined under California Civil Code § 1798.83, such as your name or email address, to other entities for their own direct marketing purposes.

Financial Incentives and Bona Fide Loyalty Programs for California and Colorado Consumers

We do not provide financial incentives to California consumers or bona fide loyalty programs to Colorado consumers who allow us to collect, retain, Sell, or Share their personal information. We will describe such programs to you if and when we offer them to you.

Disclosure for Nevada Consumers

We may sell “covered information” as defined under Nevada law, but we generally do not disclose or share “personal information” as defined under Nevada law for commercial purposes. Under Nevada law, you have the right to direct us to not sell your covered information to third parties, as defined under Nevada law. To exercise this right, if applicable, you or your authorized representative may contact us at HR@crystalgeyser.com or call us toll free at 1-844-441-9869 (pin 842689).

CHANGES TO OUR PRIVACY POLICY

This Policy is current as of the Last Updated date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. If we make any changes to this Policy that materially affect our practices with regard to the information we have previously collected about you, we will, if required by applicable law, provide you with additional notice of such change by, for example, highlighting the change on our Services or sending you an email.

CONTACT US

If you have any questions, comments, concerns, or complaints regarding your personal information or our privacy practices, please contact us by telephone at 1-844-441-9869 (pin 842689) or submit a request to us through our Contact page.

Submit Online Request