Colorado River Communications, Inc.
Effective Date: September 29, 2026
Last Updated: September 29, 2026

Colorado River Communications, Inc. (“Colorado River Communications,” “CRC,” “we,” “us,” or “our”) respects the privacy of our customers, website visitors, end users, business partners, and others who interact with us.

We are committed to handling personal information responsibly, securely, and in accordance with applicable privacy, telecommunications, consumer-protection, and data-security laws.

This Privacy Policy explains the types of information we may collect, how we collect and use that information, when information may be disclosed to others, how we protect information, and the privacy choices and rights that may be available to you.

Because CRC provides telecommunications and interconnected Voice over Internet Protocol (“VoIP”) services, certain customer information may also constitute Customer Proprietary Network Information (“CPNI”) and is subject to additional protections under federal telecommunications law and Federal Communications Commission (“FCC”) regulations.

This Privacy Policy applies to information collected through our websites, customer interactions, communications services, support activities, and other services where this Privacy Policy is referenced.

Colorado River Communications, Inc. is an Arizona-based communications and low-voltage technology provider.

Our services may include:

• Business telephone and VoIP services;
• SIP trunking;
• Unified Communications as a Service (“UCaaS”);
• Internet and network services;
• Structured cabling and fiber-optic systems;
• Security and intrusion alarm systems;
• Alarm monitoring services;
• Video surveillance and camera systems;
• Access control and keyless-entry systems;
• Fire alarm systems and related services;
• Audio/visual systems;
• Network infrastructure;
• Technical support; and
• Related communications and technology services.

Some telecommunications and cloud communications services offered by CRC may rely upon third-party wholesale carriers, platform providers, network operators, data centers, cloud providers, or other service providers.

CRC may act as the provider or reseller of services to commercial and residential end users while using third-party infrastructure and platforms to deliver some of those services.

This Privacy Policy applies to personal information we collect in connection with:

• Our website and online services;
• Customer accounts;
• Telecommunications and VoIP services;
• UCaaS and SIP services;
• Technical support;
• Sales inquiries and proposals;
• Installation and service appointments;
• Billing and payment activities;
• Customer communications;
• Monitoring and managed services;
• Mobile or desktop applications made available in connection with our services, where applicable;
• Business partners, vendors, and contractors;
• Job applicants; and
• Other interactions with CRC.

This Privacy Policy does not necessarily apply to third-party websites, applications, platforms, or services that maintain their own privacy policies.

The personal information we collect depends upon your relationship with CRC and the services you use.

We may collect:

• Name;
• Business or company name;
• Job title;
• Mailing or service address;
• Billing address;
• Email address;
• Telephone number; and
• Other contact information you provide to us.

We may collect information associated with your CRC account, including:

• Account number;
• Username;
• Account credentials;
• Account preferences;
• Authorized users;
• Services subscribed to;
• Service locations;
• Support history; and
• Account configuration information.

When you use CRC telecommunications, VoIP, SIP, UCaaS, internet, or related communications services, we may receive or process information necessary to provide those services.

This may include:

• Telephone numbers;
• Calling and called numbers;
• Call routing information;
• Call dates and times;
• Call duration;
• Call detail records;
• Messaging routing information;
• IP addresses;
• Device identifiers;
• Network identifiers;
• Equipment information;
• Service configuration;
• Network usage;
• Quality and performance information;
• Diagnostic information;
• Service features; and
• Other communications metadata.

Certain telecommunications information may constitute Customer Proprietary Network Information (“CPNI”) under federal law.

We may collect:

• Products and services purchased;
• Invoices;
• Payment status;
• Transaction history;
• Billing contact information;
• Contract information; and
• Payment information.

Payment card or banking information may be processed by third-party payment processors. CRC may not directly store complete payment-card information when payment processing is performed by those providers.

For installation, repair, maintenance, monitoring, and support services, we may collect information regarding:

• Service locations;
• Installed equipment;
• Network configuration;
• Device serial numbers;
• System configuration;
• Access-control equipment;
• Security equipment;
• Alarm zones;
• Network addresses;
• Service history;
• Maintenance records;
• Photographs relating to installation or service work; and
• Other information necessary to install, maintain, troubleshoot, or support a system.

When you access our website or online services, we may automatically collect certain information, including:

• IP address;
• Browser type;
• Operating system;
• Device type;
• Referring website;
• Pages viewed;
• Date and time of access;
• Approximate geographic information derived from an IP address;
• Website interaction information;
• Cookies; and
• Similar technical information.

If you contact us, we may retain information contained in:

• Emails;
• Support tickets;
• Telephone inquiries;
• Website forms;
• Service requests;
• Customer complaints;
• Sales inquiries; and
• Other correspondence.

If you apply for employment with CRC, we may collect information such as:

• Name and contact information;
• Employment history;
• Education;
• Professional licenses or certifications;
• Resume or application information;
• References; and
• Other information reasonably necessary to evaluate your application.

Federal telecommunications law provides special protections for certain information generated through a customer's use of telecommunications services.

CPNI may include information concerning:

• The quantity of telecommunications services used;
• Technical configuration;
• Type of service;
• Destination of communications;
• Location information where applicable;
• Amount of telecommunications service used;
• Calling patterns;
• Telephone numbers called;
• Frequency, duration, and timing of calls;
• Certain billing information; and
• Telecommunications products or services purchased by a customer.

CRC protects CPNI in accordance with applicable provisions of the Communications Act and FCC regulations.

We may use CPNI without additional customer authorization when permitted by law, including when reasonably necessary to:

• Provide the telecommunications service from which the CPNI was derived;
• Provide services necessary to or used in providing that telecommunications service;
• Bill for services;
• Protect customers, CRC, and other carriers from fraud or unlawful use;
• Provide customer support;
• Maintain and repair services;
• Protect the rights or property of CRC;
• Respond to emergencies as permitted by law; or
• Comply with applicable legal requirements.

Where customer approval is required before CPNI may be used or disclosed for another purpose, CRC will obtain the appropriate approval.

CRC maintains safeguards intended to prevent unauthorized access to or disclosure of CPNI and follows applicable customer-authentication requirements before disclosing protected account information.

We may collect personal information:

For example, when you:

• Request a quote;
• Purchase a service;
• Establish an account;
• Sign a service agreement;
• Contact customer support;
• Submit a website form;
• Make a payment;
• Request installation or repair;
• Communicate with our employees; or
• Apply for employment.

Certain information may be collected automatically when you use our websites, networks, portals, applications, or communications services.

This may occur through:

• Cookies;
• Server logs;
• Network logs;
• Service telemetry;
• Analytics technologies; and
• Similar technologies.

We may receive information from third parties involved in delivering our services, including:

• Wholesale telecommunications providers;
• Underlying carriers;
• Cloud communications providers;
• Network operators;
• Alarm monitoring providers;
• Equipment manufacturers;
• Software providers;
• Payment processors;
• Fraud-prevention providers;
• Dealers and distributors; and
• Other service providers.

Where lawful and appropriate, we may obtain business contact or similar information from publicly available sources.

CRC may use personal information to:

• Provide products and services;
• Establish and administer customer accounts;
• Route telephone calls and communications;
• Provide VoIP, SIP, UCaaS, internet, and other network services;
• Install, maintain, monitor, and repair systems;
• Process orders;
• Generate invoices;
• Process payments;
• Provide technical and customer support;
• Troubleshoot service problems;
• Monitor network and service performance;
• Maintain service quality and reliability;
• Communicate service notices;
• Notify customers of outages, maintenance, or service changes;
• Detect and prevent fraud;
• Detect unauthorized access;
• Protect our networks, systems, customers, and employees;
• Authenticate customers;
• Maintain business and accounting records;
• Enforce contracts and terms of service;
• Improve our products and services;
• Analyze website performance;
• Respond to inquiries;
• Provide requested proposals or estimates;
• Send marketing communications where permitted;
• Comply with FCC requirements;
• Comply with tax, accounting, legal, regulatory, and law-enforcement requirements;
• Establish, exercise, or defend legal claims; and
• Conduct ordinary business operations.

If you provide a mobile telephone number and consent to receive text messages from CRC, we may use your number to send communications relating to:

• Customer service;
• Appointments;
• Service notifications;
• Account information;
• Technical support;
• Requested communications; and
• Marketing communications where you have provided any consent required by law.

Consent to receive marketing text messages is not a condition of purchasing CRC products or services unless otherwise permitted by applicable law.

You may opt out of applicable text messaging programs by replying STOP to a message. Additional instructions may be provided in the applicable messaging program.

Message and data rates may apply.

Mobile information, text-message opt-in data, and text-message consent will not be sold or shared with third parties or affiliates for their own marketing or promotional purposes.

CRC may disclose information to telecommunications providers, messaging platforms, vendors, and other service providers when necessary to transmit or administer messages on CRC's behalf. Those disclosures are made for operational purposes and not for the recipient's independent marketing.

Our website may use cookies and similar technologies.

A cookie is a small data file stored on a device or browser that helps websites recognize browsers and remember certain information.

We may use cookies for purposes such as:

These cookies support essential website functions, security, navigation, and account access.

These cookies may remember preferences or settings to improve the user experience.

These technologies help us understand how visitors interact with our website, including which pages are visited and how the website performs.

If CRC uses advertising or marketing technologies, those technologies may be used to measure advertising effectiveness or provide more relevant advertising.

Where required by applicable law, we will provide appropriate choices regarding nonessential cookies.

You may also control certain cookies using your browser settings. Disabling cookies may affect the functionality of some website features.

CRC does not disclose personal information indiscriminately.

We may disclose information to the following categories of recipients when reasonably necessary for the purposes described in this Privacy Policy.

We may disclose or transmit information to:

• Underlying telecommunications carriers;
• Wholesale communications providers;
• SIP and VoIP platform providers;
• UCaaS providers;
• Internet providers;
• Data centers;
• Network operators; and
• Other communications providers.

These disclosures may be necessary to establish, route, complete, maintain, troubleshoot, or bill for communications services.

We may use third parties for services such as:

• Cloud hosting;
• Data storage;
• Software;
• Customer relationship management;
• Billing;
• Payment processing;
• Technical support;
• Cybersecurity;
• Fraud detection;
• Analytics;
• Email;
• Messaging;
• Alarm monitoring; and
• Other operational functions.

These providers may receive information necessary to perform services for CRC.

We may disclose information to accountants, attorneys, insurance providers, auditors, consultants, and similar professional advisers when reasonably necessary.

We may disclose information when we reasonably believe disclosure is required or permitted by law, including in response to:

• Court orders;
• Warrants;
• Subpoenas;
• Regulatory requirements;
• Law-enforcement requests;
• Emergency requests; or
• Other lawful governmental demands.

Information may be transferred or disclosed in connection with a potential or completed:

• Merger;
• Acquisition;
• Financing;
• Reorganization;
• Sale of assets;
• Sale of the business; or
• Similar corporate transaction.

Any successor organization receiving personal information will be expected to handle that information consistent with applicable law.

CRC does not sell personal information for monetary compensation.

CRC does not sell CPNI.

We also do not disclose mobile telephone opt-in information or SMS consent information to third parties for their own marketing or promotional purposes.

Certain website advertising or analytics activities may be subject to additional privacy requirements under applicable law. Where applicable law provides an opt-out right and CRC engages in such activities, CRC will provide the required method for exercising that right.

Our services may interact with third-party products, platforms, applications, websites, telecommunications carriers, manufacturers, and service providers.

Third parties may maintain their own privacy policies and terms governing information they independently collect or process.

CRC is not responsible for the privacy practices of independently operated third-party websites or services.

We encourage users to review the privacy policies of third-party services they choose to use.

CRC retains personal information only for as long as reasonably necessary for the purposes for which the information was collected and to satisfy applicable legal, regulatory, contractual, accounting, operational, and security requirements.

Retention periods may vary depending upon the type of information and service involved.

Factors affecting retention may include:

• The duration of the customer relationship;
• Contract requirements;
• Billing and accounting requirements;
• FCC requirements;
• Telecommunications recordkeeping requirements;
• Fraud-prevention requirements;
• Tax requirements;
• Litigation or legal holds;
• Warranty and service requirements; and
• Applicable statutes of limitation.

When information is no longer reasonably necessary, CRC may securely delete, destroy, de-identify, or anonymize it, as appropriate.

CRC uses administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, disclosure, alteration, destruction, or loss.

Depending upon the information and systems involved, safeguards may include:

• Access controls;
• Password protections;
• Authentication procedures;
• Network security controls;
• Encryption where appropriate;
• Firewalls;
• Logging and monitoring;
• Employee access restrictions;
• Vendor controls;
• Secure backup procedures;
• Software updates and patching;
• Physical security; and
• Incident-response procedures.

For CPNI, CRC maintains safeguards designed to prevent unauthorized access, use, or disclosure and follows applicable FCC requirements concerning customer authentication and access.

No network, information system, transmission method, or storage system can be guaranteed to be completely secure. CRC therefore cannot guarantee absolute security.

CRC maintains procedures for evaluating and responding to suspected security incidents.

When required by applicable law, CRC will provide notifications to affected individuals, government agencies, regulators, law enforcement, or other parties.

For information subject to telecommunications privacy requirements, CRC will follow applicable FCC requirements governing CPNI breaches.

For personal information subject to state breach-notification laws, CRC will provide notices within the time and manner required by applicable law.

Depending upon where you reside and which privacy laws apply to CRC and your information, you may have certain rights concerning your personal information.

Those rights may include the ability to:

• Request information regarding personal information we maintain about you;
• Request access to certain personal information;
• Request correction of inaccurate personal information;
• Request deletion of certain personal information;
• Request a portable copy of certain information;
• Opt out of certain marketing communications;
• Withdraw consent where processing depends upon consent;
• Opt out of certain uses or disclosures where applicable; and
• Exercise other privacy rights established by applicable law.

These rights are subject to exceptions and limitations established by law.

For example, CRC may need to retain certain information to:

• Provide an active telecommunications service;
• Maintain billing records;
• Comply with FCC regulations;
• Meet tax or accounting obligations;
• Prevent fraud;
• Establish or defend legal claims; or
• Meet other legal obligations.

CRC may need to verify your identity before fulfilling certain privacy requests.

CRC is based in Arizona and handles personal information in accordance with applicable Arizona law.

If CRC determines that a qualifying breach of personal information has occurred, CRC will provide notifications required by Arizona law and any other applicable state or federal requirements.

Depending upon the circumstances, applicable law may also require notification to government agencies, consumer reporting agencies, or other entities.

CRC may send customers and prospective customers information regarding products, services, promotions, or company updates where permitted by law.

You may unsubscribe from marketing email by using the unsubscribe mechanism contained in the message or by contacting CRC.

Opting out of marketing communications will not prevent CRC from sending non-marketing communications reasonably necessary to:

• Administer your account;
• Provide services;
• Respond to support requests;
• Send invoices;
• Provide security notifications;
• Communicate outages;
• Provide legally required notices; or
• Communicate other transactional or service-related information.

CRC's websites and services are not directed to children under the age of 13.

We do not knowingly collect personal information online from children under 13 without authorization where required by law.

If we learn that personal information from a child under 13 has been collected in circumstances requiring parental consent and the appropriate consent was not obtained, we will take reasonable steps to delete the information.

Some browsers provide “Do Not Track” or similar privacy signals.

Because there is not a universally accepted standard governing all such signals, our website may not respond to every browser-based Do Not Track signal.

Where applicable law requires CRC to recognize a particular universal opt-out mechanism or privacy preference signal, CRC will process supported signals as required by applicable law.

CRC's website may contain links to websites operated by third parties.

CRC does not control those websites and is not responsible for their privacy practices.

A link from CRC's website does not necessarily indicate that CRC endorses the third party's privacy practices.

We encourage users to review the privacy policy of any third-party website before providing personal information.

Many CRC services are provided to businesses and organizations.

When an employer, property manager, organization, account administrator, or other business customer provides access to CRC services, that organization may control certain account information and user settings.

Authorized account administrators may be able to:

• Add or remove users;
• Configure services;
• View account information;
• Manage telephone numbers;
• Access certain usage information; and
• Perform other administrative functions.

Individuals should contact their organization's account administrator regarding the organization's own privacy practices and administrative access.

CRC may update this Privacy Policy periodically to reflect:

• Changes to our services;
• Changes to our business practices;
• New technologies;
• Changes in applicable law or regulation; or
• Changes to our privacy and security practices.

When this Privacy Policy is updated, we will revise the Last Updated date at the top of the policy.

If changes are material, we may provide additional notice where appropriate or required by law.

Questions, concerns, or privacy requests regarding this Privacy Policy or CRC's privacy practices may be directed to:

Colorado River Communications, Inc.
Lake Havasu City, Arizona

Phone: 928-505-7301

Email: techsupport@crc-inc.net

Mailing Address:
911 N Lake Havasu Ave
Lake Havasu City, Arizona 86403

Please include sufficient information for us to identify your request and respond appropriately.

For privacy requests involving an account, CRC may require reasonable verification of your identity or authority before releasing, correcting, or deleting information.

Customers with questions regarding the use or protection of Customer Proprietary Network Information (CPNI) may contact CRC using the contact information above.

CRC maintains policies and procedures intended to comply with applicable FCC requirements regarding the protection, use, disclosure, authentication, and safeguarding of CPNI.

Nothing in this Privacy Policy is intended to limit any privacy right provided to a customer under applicable federal or state law.