Privacy Policy

This Policy applies to information collected through goseegraham.com, including equipment browsing, quote and contact forms, rental and financing inquiries, privacy request forms, cookie and tracking controls, advertising measurement, and analytics.

This Policy does not replace any separate privacy notice, financial privacy notice, credit application disclosure, lender notice, purchase or rental agreement, service order, manufacturer or OEM program notice, or dealership-specific document provided by us, a lender, manufacturer, warranty provider, service provider, or other third party.

If you submit credit, financing, or leasing information, that information may also be subject to federal financial privacy and safeguards requirements and to separate dealership or lender notices.

We may collect the following categories of information.

A. Information you submit. This may include:

• Name
• Email address
• Phone number
• State or general location
• Preferred store
• Equipment of interest (model, category, stock number, VIN, or serial number where applicable)
• Quote, rental, parts, service, or financing request details
• Message content
• Contact preferences
• Privacy request details and verification information
• Appeal information if you appeal a privacy decision

Do not submit Social Security numbers, driver's license numbers, bank account numbers, payment card numbers, passwords, credit application details, income details, or other sensitive information through general contact or quote forms unless the form specifically requests that information and is intended for that purpose.

B. Website, device, and usage information. When you use the website, we and our service providers may collect or process:

• IP address
• Device type
• Browser type
• Operating system
• Referring page or campaign source
• Pages and equipment listings viewed
• Search and filter activity
• Clicks on equipment, phone, directions, contact, and quote tools
• Approximate location derived from IP address (country, state/region, or city)
• Cookie identifiers
• Advertising click identifiers, such as gclid, gbraid, wbraid, fbclid, _gcl_*, _fbp, or _fbc
• Security, fraud-prevention, and rate-limit signals
• Consent and privacy-choice records

We do not request browser-based precise geolocation through goseegraham.com, and we do not intentionally retain a visitor's precise location from browser geolocation APIs.

C. Privacy request records. If you submit a privacy request, we may collect and retain:

• Name
• Email address
• Phone number
• State
• Request type
• Store or website area connected to the request
• Request details
• Verification status
• Response records
• Appeal records
• Internal notes needed to process, document, and defend the request

Privacy request information is used only to receive, verify, fulfill, document, and defend privacy requests. Submitting a privacy request does not add you to a marketing list.

The table below summarizes the categories of personal information the website may collect, the parties to whom each category may be disclosed, and whether each category may be “sold” or “shared” as those terms are broadly defined under some state privacy laws. We do not sell submitted lead contact information for money. Allowing analytics and advertising providers to process online identifiers and site activity for advertising can qualify as a sale or share under those broad definitions, and you can opt out as described in the Your Privacy Choices and Global Privacy Control sections.

Sources of personal information include you, your device and browser, your interactions with the website, our stores, and our analytics, advertising, security, and infrastructure providers. We use each category for the business and commercial purposes described in the How We Use Information section.

Sensitive personal information. We do not intentionally collect sensitive personal information through general website forms. Where a financing or credit application collects financial information, that information is handled under separate dealership and lender financial privacy notices. We do not use or disclose sensitive personal information to infer characteristics about you, and we do not sell or share sensitive personal information.

We use information for the following purposes:

• Operating, maintaining, and securing the website
• Displaying new and used Bobcat equipment inventory
• Responding to equipment, rental, parts, and service inquiries
• Routing leads and requests to the applicable store
• Helping users contact the correct store
• Processing quote, rental, financing, parts, and service requests
• Preventing spam, fraud, abuse, automated attacks, and unauthorized access
• Remembering privacy choices
• Measuring website performance
• Measuring advertising performance
• Understanding page navigation, equipment interaction, searches, lead requests, phone clicks, and directions clicks
• Personalizing advertising where permitted and not opted out
• Maintaining business records
• Complying with legal, regulatory, manufacturer, OEM, lender, tax, warranty, security, and contractual obligations
• Responding to privacy rights requests
• Defending legal claims and enforcing website terms

We do not use reCAPTCHA, security scoring, or analytics to determine creditworthiness, employment eligibility, financial status, insurability, or equipment-purchase eligibility.

The website uses cookies and similar technologies for security, functionality, analytics, advertising measurement, advertising personalization, and social media measurement.

These may include:

• Google Analytics 4 connected through Firebase and/or Google Tag Manager
• Google Ads tags and conversion measurement
• Google Consent Mode v2
• Meta Pixel (when enabled)
• Firebase security technologies
• Google reCAPTCHA or reCAPTCHA Enterprise
• First-party preference cookies used to remember privacy choices

Analytics and advertising events may include page views, equipment views, searches, accepted lead requests, phone clicks, directions clicks, and similar website interactions.

We do not intentionally send form-field values, names, email addresses, phone numbers, Social Security numbers, financial-account information, credit application fields, or free-text financing details in Google Analytics or Meta Pixel events.

The default tracking experience depends on your approximate region, which we infer from your IP address without asking for location permission. If you appear to be in Oregon, we use an opt-out model: non-essential categories are permitted by default and no consent banner is shown. If you appear to be in California, any other U.S. state, the EEA, the UK, or Switzerland, or if your region cannot be determined, we use an opt-in model: a consent banner appears on your first visit and no non-essential cookies or tracking technologies are set until you accept or choose categories. You can review and adjust tracking choices at any time through the Your Privacy Choices / Do Not Sell or Share link. Details about each category and the regional defaults are in the Cookie Notice.

Advertising and analytics providers may use cookies and similar technologies to deliver advertising based on your activity over time and across websites. This is sometimes called interest-based or targeted advertising.

In addition to the website's Your Privacy Choices / Do Not Sell or Share control and Global Privacy Control, you can use these industry and platform tools:

• Digital Advertising Alliance (DAA)
• Network Advertising Initiative (NAI)
• Google Ads Settings
• Meta Ad Preferences

These tools are operated by third parties and are cookie- and device-specific, so you may need to set them again if you change browsers or devices, use another device, use private browsing, or clear cookies. Opting out does not stop all advertising; it limits advertising that is tailored to your interests.

Some technologies are necessary to operate the website and cannot be fully disabled through the website privacy controls. These include technologies used for:

• Core navigation
• Security
• Form protection
• Fraud and spam prevention
• Rate limiting
• Load balancing
• Privacy preference storage
• Legal and compliance recordkeeping

Disabling necessary technologies in your browser may cause parts of the website to stop working.

We may disclose personal information to:

• Our three store locations and the store associated with your inquiry or transaction
• Website hosting and infrastructure providers
• Firebase, Google Cloud, authentication, security, and database providers
• Google Analytics, Google Tag Manager, and Google Ads providers
• Meta Pixel and Meta advertising tools (when enabled)
• CRM, lead routing, email, SMS, phone, and communication vendors
• Bobcat, Doosan Bobcat, and OEM partners when related to your request or transaction
• Lenders, finance companies, warranty providers, or aftermarket providers when related to your request or transaction
• Legal, accounting, security, compliance, audit, and professional advisors
• Government, law enforcement, regulatory, or judicial authorities when required or permitted by law
• Successors or parties involved in a merger, sale, acquisition, financing, restructuring, or transfer of business assets

Service providers are expected to process information only as needed to provide services, protect systems, comply with law, or fulfill contractual obligations.

We do not sell submitted lead contact information for money.

However, some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly. Under those laws, allowing advertising or analytics providers such as Google or Meta to process online identifiers, cookie identifiers, advertising click identifiers, and website activity for advertising measurement, audience creation, retargeting, or ad personalization may be considered a sale, sharing, or processing for targeted advertising.

You may opt out of:

• Sale or sharing of personal information where applicable
• Targeted advertising
• Advertising personalization
• Social media tracking
• Certain advertising measurement technologies

Use the Your Privacy Choices / Do Not Sell or Share link or email Contact Uswith the subject line “Privacy Request.”

Where required by law, we treat a valid Global Privacy Control or similar recognized universal opt-out signal as an opt-out of sale, sharing, targeted advertising, advertising personalization, and social media tracking for the browser or device sending the signal. As of January 1, 2026, the OCPA requires Oregon businesses to honor universal opt-out signals.

A universal opt-out signal does not disable necessary storage, security technologies, fraud-prevention tools, or all privacy-limited measurement that may occur without cookies.

Because browser signals are browser- or device-specific, you may need to enable the signal on each browser or device you use.

You may use the website privacy controls to allow, reject, or configure:

• Analytics
• Advertising measurement
• Advertising personalization
• Social media measurement

You may also:

• Clear cookies in your browser
• Block cookies in your browser
• Use Global Privacy Control where supported
• Use platform-level ad settings offered by Google, Meta, or your device
• Email us with a privacy request
• Unsubscribe from marketing emails using the link in the email
• Reply STOP to marketing text messages if you receive marketing texts from us or an approved provider

Opting out of advertising tracking does not prevent all ads. It means the website will not intentionally use covered website activity for targeted advertising from the opted-out browser or device.

Or visit our dedicated Your Privacy Choices page.

Depending on where you live and the law that applies, you may have the right to request that we:

• Confirm whether we process your personal information
• Provide access to certain personal information
• Provide a copy of certain personal information in a portable format
• Correct inaccurate personal information
• Delete certain personal information
• Provide information about certain third parties to whom personal information was disclosed
• Opt you out of sale, sharing, targeted advertising, or certain profiling
• Limit the use of sensitive personal information
• Revoke consent where processing is based on consent
• Appeal a denied privacy request

These rights may be limited by law. For example, we may retain information needed for security, fraud prevention, legal compliance, equipment transactions, warranty records, tax records, accounting records, dispute resolution, completed transactions, or to honor a prior opt-out or deletion request. We will not discriminate against you for exercising your privacy rights.

Depending on your state of residence, you may have additional rights under a comprehensive state privacy law. These laws currently include the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA); the Colorado Privacy Act; the Connecticut Data Privacy Act; the Oregon Consumer Privacy Act; the Texas Data Privacy and Security Act; the Utah Consumer Privacy Act; and the Virginia Consumer Data Protection Act, along with comparable laws in other states as they take effect, including Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, and Tennessee.

Where these laws apply, eligible residents may request to confirm processing and access their personal information; obtain a portable copy; correct inaccuracies; delete personal information; opt out of the sale or sharing of personal information and of targeted advertising and certain profiling; limit the use of sensitive personal information; and appeal a denied request.

California residents have the right to know the categories of personal information we collect, the categories of sources, the business or commercial purpose for collecting it, the categories of third parties to whom it is disclosed, and the categories that are “sold” or “shared” under California law. That information is provided in the Notice at Collection section above.

To exercise any of these rights, use the Your Privacy Choices / Do Not Sell or Share control or email Contact Uswith the subject line “Privacy Request.”

California Civil Code Section 1798.83, known as “Shine the Light,” allows California residents to request information about personal information shared with third parties for those third parties' own direct marketing purposes. We do not share personal information collected through the website with third parties for those third parties' own direct marketing.

California residents may submit a Shine the Light request by emailing Contact Us.

To submit a privacy request, email:

Contact Uswith the subject line “Privacy Request.”

Please include enough information for us to understand the request, identify the store or website area involved, and verify the request where required. You do not need to create an account to submit a privacy request.

For access, copy, correction, deletion, and similar requests, we may ask for additional information reasonably necessary to verify your identity and connect the request to the correct store or website records.

We will use verification information only to verify and process the request.

For opt-out requests, we will not require full identity verification unless additional information is necessary to process the request or we have a good-faith basis to believe the request is fraudulent.

You may use an authorized agent to submit certain requests where permitted by law. We may require proof that the agent has authority to act for you and may require you to verify your identity directly, unless the law provides otherwise.

Where applicable, we generally respond to privacy requests within 45 days after receiving the request. If reasonably necessary due to the complexity or number of requests, we may extend the response period as permitted by law and will notify you of the extension.

If we deny a request, we will explain the reason where required and provide instructions for appealing the decision. You may appeal a denied request by emailing Contact Uswith the subject line “Privacy Appeal.”

We retain personal information for the period reasonably necessary for the purpose collected and for legitimate business, security, legal, accounting, tax, warranty, transaction, compliance, dispute-resolution, and recordkeeping purposes.

Examples:

• Lead and inquiry records may be retained as needed for store follow-up, CRM records, legal compliance, and transaction history — generally up to 24 months.
• Privacy request records may be retained for at least 24 months after closure or longer if needed for compliance or dispute defense.
• Security logs may be retained for fraud prevention, abuse detection, and system protection.
• Cookie and tracking identifiers remain according to provider settings, browser settings, and the choices you make. The graham_region cookie persists for up to 30 days; the graham_consent_v2 cookie persists for up to 180 days.

When information is no longer reasonably needed, we delete, deidentify, aggregate, or otherwise handle it according to applicable schedules and legal requirements.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Safeguards may include access controls, authentication controls, origin checks, form protection, reCAPTCHA, Firebase security tools, rate limits, logging, vendor controls, and limited access to personal information.

No website, database, transmission, vendor, or storage system can be guaranteed to be completely secure.

The website is intended for equipment shoppers and is not directed to children under 16.

We do not knowingly collect personal information from children under 13 through goseegraham.com. We do not knowingly sell or share personal information of consumers under 16 or knowingly process personal information of consumers under 16 for targeted advertising.

If you believe a child has provided personal information through the website, email Contact Us and we will delete it.

We may arrange or facilitate financing or leasing through third-party lenders and may be subject to separate financial privacy, safeguards, and customer-information requirements.

Credit application information, financing information, leasing information, lender communications, and nonpublic personal financial information may be handled under separate dealership, lender, or financial privacy notices. This website Privacy Policy does not replace those notices.

Do not submit credit application details through general website forms.

The website may link to third-party websites or services, including Bobcat and OEM websites, lender websites, map providers, advertising platforms, social media platforms, or service schedulers.

Third-party websites and services are governed by their own terms and privacy policies. We are not responsible for their content, availability, security, or privacy practices.

We may update this Policy from time to time. The updated version will be posted on this page with a new effective date or last updated date. Material changes will apply prospectively unless otherwise permitted by law.

Privacy questions and privacy requests:

GRAHAM MANAGEMENT LLC
1625 Sherman Avenue, North Bend, OR 97459
Email: Contact Us

Equipment, pricing, availability, rental, parts, service, financing, or dealership questions should be directed to the applicable store location.