Privacy Policy (California)
Last updated: October 20th 2025
Company: Hightower Management Inc. (“Hightower,” “we,” “us,” “our”)
Website: https://www.hightowermanagement.com (the “Site”)
We respect your privacy and are committed to protecting it. This Policy explains what personal information we collect, how we use it, whom we disclose it to, and your choices—with a focus on California law (CCPA/CPRA).
If you have questions, contact info@hightowermanagement.com.
Scope
This Policy applies to personal information collected online through the Site and pages that link to it. It does not cover offline collection unless stated otherwise.
California residents: If and to the extent Hightower is a “business” under Cal. Civ. Code §1798.100 et seq., the California Privacy Notice below applies.
Information We Collect
1) Information you provide
Contact details (name, email, phone)
Account/portal info and preferences
Maintenance/rent submissions (descriptions, attachments)
Payment details processed by our payment processor (we do not store full card numbers)
2) Information collected automatically
Device/usage data (IP address, browser, time zone, pages viewed, referral URLs, clicks, interactions)
Cookies or similar technologies for functionality, analytics, and security
3) Information from other sources
Service providers/contractors (analytics, payments, communication tools)
Public sources (where permitted)
How We Use Information
Operate, maintain, and secure the Site
Process payments and send confirmations (via our payment provider)
Respond to maintenance, rent, and general inquiries
Send transactional notices and service updates
Detect, prevent, and address fraud, abuse, or security incidents
Comply with legal obligations and enforce our terms
We do not use or disclose sensitive personal information for purposes other than those permitted by California law (e.g., security, short-term transient use, or as otherwise allowed).
Disclosures of Information
We may disclose personal information to:
Service providers/contractors (hosting, payments, analytics, email/forms) under contracts limiting their use to our instructions
Authorities when required by law or to protect rights, safety, and property
Successors/assignees in the event of a merger, acquisition, or asset transfer
We do not sell personal information and do not share it for cross-context behavioral advertising as defined by California law. If this changes, we will update this Policy and provide a “Do Not Sell or Share My Personal Information” link.
Retention
We keep personal information only as long as necessary for the purposes above (e.g., providing services, meeting legal obligations, resolving disputes). Retention periods vary by data type and legal requirements.
Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is 100% secure.
Children’s Privacy
The Site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact us and we will delete it.
Links to Other Sites
The Site may link to third-party websites. We are not responsible for their content or privacy practices. Review their policies before providing information.
Your Choices
Cookies/Tracking: Control cookies via your browser settings. Some features may not work without them.
Marketing: If we send non-transactional emails, you may opt out via the email footer.
California Privacy Notice (CCPA/CPRA)
Categories of Personal Information We May Collect
Identifiers (e.g., name, email, IP address)
Customer records (contact details, payment confirmations from our processor)
Internet/Network activity (pages viewed, interactions, device data)
Approximate geolocation (derived from IP)
Inferences (limited, for site improvement/security)
Sources
Directly from you
Automatically from your device/browser
Service providers/contractors
Public sources (where permitted)
Purposes of Use
As described in How We Use Information (operate/provide services, secure the Site, compliance, etc.).
Disclosures for Business Purposes
We disclose personal information to service providers/contractors for the business purposes listed above (e.g., hosting, payments, analytics, communications).
Your Rights (subject to verification and exceptions)
Right to know/access the categories and specific pieces of personal information collected about you.
Right to delete personal information we collected from you.
Right to correct inaccurate personal information.
Right to data portability (receive certain information in a portable format).
Right to opt-out of sale or sharing (we don’t sell/share as defined; if that changes, we’ll provide a link).
Right to limit use/disclosure of sensitive personal information (not applicable to our current uses beyond allowed purposes).
Right to non-discrimination for exercising your rights.
How to Submit a Request
Email info@hightowermanagement.com with the subject “CCPA/CPRA Request” and specify which right(s) you want to exercise. We will verify your request (e.g., by matching information you provide with information we maintain). You may use an authorized agent; we may require proof of authorization.
Do Not Track / Global Privacy Control
We do not currently respond to browser DNT signals. We will honor legally required Global Privacy Control (GPC) signals when applicable and technically feasible.
Notice at Collection (Summary)
Categories collected: Identifiers, contact info, internet/network activity, approximate geolocation, limited inferences.
Purposes: Provide and improve services, security/fraud prevention, legal compliance.
Retention: For as long as necessary for stated purposes and legal requirements.
Sale/Sharing: We do not sell or share personal information as defined by California law.
Contact for questions/requests: info@hightowermanagement.com
Cookie & Tracking Disclosure
We use required cookies for functionality and security, and optional analytics cookies to understand site usage. Manage cookies in your browser settings. Third-party features (e.g., embedded videos, maps, analytics) may set their own cookies when used.
Service Providers (Examples)
Website Hosting: [Your host]
Analytics: Google Analytics (IP, device/usage data)
Payments: [Your payment processor] (card data handled by provider)
Forms/Email: [Your form tool or email service]
Changes to This Policy
We may update this Policy from time to time. The “Last updated” date shows the latest revision. Material changes will be posted on this page.
Contact Us
Questions or requests?
Email: info@hightowermanagement.com