CAMO CAN / ROLL-OUT RENTALS LLC — PRIVACY POLICY

Effective Date: October 22, 2026 — Version v2026-10-22

This Privacy Policy describes how Roll-Out Rentals LLC d/b/a Camo Can ("Company," "we," "us") collects, uses, discloses, and protects personal information collected through our website, booking system, approval links, phone, text, and email communications, and in connection with our Dumpster rental services (the "Services"). This Policy describes our practices in connection with our Dumpster Rental Agreement ("Rental Agreement") and applies to customers, Site visitors, and people we meet or speak with in person in the course of our business. It is a notice, not a contract, and does not create contractual rights or obligations. Capitalized terms not defined here have the meanings given in the Rental Agreement.

SECTION 1 — INFORMATION WE COLLECT

1.1 Categories Collected.

Contact information: name, email address, mobile number, mailing address, and Service Address. When you change your email address or mobile number, we keep the previous one, with when and how the change was verified, as part of the booking record.
Booking information: Service Address, placement instructions (including the placement surface, backup location, routes, and areas to avoid, such as septic systems or buried lines, that you mark), selected waste type(s) and Specialty Items, any estimated load weight or volume you enter, Rental Period, scheduled dates, booking reference, and communications between you and us.
Access information: gate or lockbox codes you provide for service.
Payment information: payment card type, last four digits, expiration date, and cardholder name; our payment processor collects and stores the full card number, which we never receive.
Estimate and reconciliation records: tiers, facility assignments, pre-assigned credits, scale tickets, facility receipts, and Basis Record entries.
Scheduling and quote records: when you ask for a price or choose dates, we work out what the job would cost us to run on the dates you chose and on nearby dates, and we keep that working — the dates considered, the Service Address, and what each option would cost us — together with any offer we made you and whether you took it. These records are linked to the Service Address and, where you have given them, to your phone number and email address, so that the same enquiry is recognized whichever way you reach us.
Photographs and video: of the Service Address, placement area, Dumpster, and load, taken at delivery, pickup, and during service; and photos or video you upload (for example, with a damage report or feedback), including the date, time, and location information stored in the photo file.
Facility and compliance records: load characterization information, refrigerant recovery statements, asbestos screening answers, and facility forms.
Insurance certificates: where a business booking requires one, the certificate of insurance you provide.
Tax exemption records: where you claim a sales tax exemption, the exempt entity's name, the basis claimed, the exemption permit or certificate number, the copy of the permit, letter, or certificate you upload, and the certification you made, with the date and time you made it.
Consent and signature records: the acknowledgments and signatures you provide, with the document versions presented and the date, time, IP address, device, and session details of each.
Email and phone verification: one-time codes sent to verify your email address or mobile number. Whether a code is required, and at which steps, depends on our settings at the time; where verification is turned off, we collect the email address or mobile number you enter without a code.
Fraud-prevention data: a device identifier created from browser and device characteristics, a random identifier stored in your browser's local storage, IP address, and device signals, which we link to the contact and address details used in booking attempts to detect duplicate, fraudulent, or abusive bookings, to limit automated or abusive use of the Site (including the load estimator), and to limit promotional offers to one per person, household, device, and internet connection. We do not save the materials entered in the load estimator or its results.
Marketing sign-ups: your email address, a record of your agreement to receive marketing emails (the wording shown, and the date, time, IP address, and browser), and any offer codes we send you.
Feedback: ratings, comments, and photos you submit through our feedback page.
In-person contacts: when we meet or speak with people in person in the course of our business, the time and location of the visit, what we left (such as a doorhanger or business card), the business or organization involved, and the person's name and role if they give them to us.
Calls, texts and recordings: the phone number, time, and length of calls and texts to and from our business number; the content of texts; voicemail messages and their automatic transcripts; and audio recordings of telephone calls and in-person conversations we take part in, made to keep an accurate record of what was discussed. When a call may be recorded, we say so at the start of the call. Calls, texts, voicemails, and recordings that relate to a booking are kept as records of that booking.
Route and placement records: driver route records, tire-track photographs, and GPS records at the Service Address; and the name of any adult at the Service Address who gives an approval, choice, or request for you in person, with the driver's record of it and of any approval, choice, or request made by telephone — kept to document service and charges.
Site usage data: information collected automatically through the Site, such as IP address and the approximate city and state derived from it, browser type, device identifiers, and pages visited, used to operate, analyze, and secure the Site.

1.2 Sources. We collect this information directly from you (through bookings, forms, emails, texts, and calls, and in person), from our payment processor and service providers, from vehicle recovery and repair providers (their invoices and records for a charge under Section 3.13(j) of the Rental Agreement), from our drivers' service documentation, and automatically through the Site.

1.3 Sensitive Information. We do not intentionally collect sensitive personal information. Please do not include Social Security numbers, health information, or government identification numbers in emails, texts, placement instructions, or loads.

SECTION 2 — HOW WE USE PERSONAL INFORMATION

We use personal information to: provide, schedule, and perform the Services; process payments, refunds, and credits; send Booking Confirmations, estimates, approval links, reminders, invoices, and notices; communicate about scheduling, reschedules, and force majeure events; assess loads, reconcile charges, and maintain the Basis Record; document Dumpster and site condition and service performance; decide which dates to offer and whether to offer you additional days or a discount for taking a different date; comply with disposal facility, landfill, tax, and regulatory requirements; detect, prevent, and respond to fraud, misuse, and security incidents; enforce our agreements and defend legal claims; and improve the Site and our Services.

Fraud prevention. Our fraud-prevention tools may automatically flag or decline a booking attempt. You may contact support@camo-can.com to request review.

Scheduling offers. We use the scheduling and quote records described in Section 1.1 to work out which dates suit our routes, and we may offer you a different date with additional rental days at no charge, a discount, or both. Keeping the working means that if you come back, or call us about the same job, we do not have to calculate it again. We keep a record of the offers we make and whether they were accepted so we can judge whether the practice is worth continuing. These records are not used for advertising and are not sold. What we decide to offer never changes the price of the dates you originally chose.

Tax exemption claims. Where you claim a sales tax exemption, we use the information in Section 1.1 to apply the exemption, to respond to any question from a taxing authority, and to recover tax, interest, and penalties if the exemption is later disallowed, as provided in Section 8.9 of the Rental Agreement. We may provide it to the Oklahoma Tax Commission or another taxing authority on request or as the law requires.

Marketing. We may send you marketing emails — such as offer codes and promotions, and a reminder or offer if you start a booking and don't finish it. Every marketing email identifies Camo Can, includes our postal address and an unsubscribe link, and we honor unsubscribe requests promptly and within 10 business days (Monday through Friday, excluding federal holidays). We do not use fraud-prevention data to decide who receives marketing messages, except that we use it to decide whether to show or accept a promotional sign-up offer; we also use it to decide whether a promotional offer applies to a booking. We send marketing text messages only with your separate prior express written consent.

In-person contacts. We use in-person contact information to follow up with people we have met, to plan our sales and service activity, and to avoid returning to properties that ask not to be solicited. We send marketing text messages only with prior express written consent, and every marketing email identifies us and includes an unsubscribe link. We do not sell this information. The time and place of each visit, without names, also forms part of our business mileage records.

Recordings. We may record telephone calls and in-person conversations we take part in, as the law permits, to keep accurate notes and to document service, requests, and approvals. We do not record conversations we are not part of.

Calls and texts to our business number. When you call or text our business number, we match your phone number to our booking and customer records so we know who we are talking with and can link the conversation to your booking. If you text us, we may send one automatic reply acknowledging your message, and if you have an open booking it may include the link to your booking page; it is not a marketing message, and replying STOP stops it. Calls to our business number may be forwarded to the phone of the person answering for us. Calls and texts we send you show our business number.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising. The Site does not respond to browser Do-Not-Track signals.

SECTION 3 — HOW WE SHARE INFORMATION

We disclose personal information only as follows:

(a) Service providers acting on our instructions and bound by confidentiality obligations, such as our payment processor (for example, Stripe, through which we also share information with card issuers and card networks, including in a payment dispute), text-messaging and telephone provider (for example, Twilio, which carries our business calls and texts and stores call recordings, voicemails, and their transcripts for us), email-delivery provider (for example, Resend), mapping and address-lookup provider (for example, Google, which receives addresses entered into the Site), application-hosting provider (for example, Base44), and file-storage provider (for example, Cloudflare, which stores the photographs and documents we collect), bot-protection provider (for example, Cloudflare Turnstile), map-imagery providers (for example, Esri and OpenStreetMap, which receive the map area your browser displays and your IP address), and IP-lookup services that tell us your approximate city and state. Our payment processor and mapping provider also use information they receive under their own privacy policies, including for fraud prevention and to provide their services.

(b) Disposal facilities: load characterization information and facility forms, as required or requested by the facility under its permits, acceptance procedures, or applicable law (Section 4).

(c) Equipment and service subcontractors, solely as needed to perform services for your booking.

(c-1) Vehicle recovery and repair providers, solely as needed to recover or repair our vehicle and to document the charge.

(d) Legal and safety: to comply with law, legal process, or regulatory requirements; to respond to lawful requests from public authorities; to establish or defend legal claims; and to protect the rights, property, or safety of Company, our customers, and the public — including referrals regarding unlawful or hazardous waste.

(e) Business transfers: in connection with a sale, merger, or transfer of all or substantially all of our business, subject to this Policy's continued application to the transferred information.

(f) Professional advisers and insurers, such as attorneys, accountants, and our insurers, and collection agencies for unpaid balances.

(g) At your direction or with your consent, such as the property owner or the person for whom you booked.

We do not sell, rent, or share mobile phone numbers or text-message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Text-messaging opt-in data and consent are shared only with our text-messaging provider, to deliver our texts.

SECTION 4 — DISCLOSURE TO DISPOSAL FACILITIES

Load characterization information — including waste type(s), the presence or absence of Specialty Items, refrigerant recovery statements, and statements on facility forms — may be disclosed to the receiving facility as required or requested by the facility under its permits, acceptance procedures, or applicable law, and we complete facility forms in reliance on your certifications under Section 4.5 of the Rental Agreement. Facility operators may independently collect information at the scale (such as vehicle identification and weight) under their own legal obligations; those collections are governed by the facility's practices, not this Policy.

SECTION 5 — YOUR CHOICES AND RIGHTS

Requests. You may ask to access, correct, or delete personal information we hold about you by emailing support@camo-can.com. We will verify your identity before responding. Where a law applicable to us grants specific rights, we will honor them to the extent that law requires. Deletion is subject to our retention obligations in Section 8. You will not be discriminated against for making a request.

Text messages. You can stop text messages at any time by replying STOP (or QUIT, END, REVOKE, OPT OUT, CANCEL, UNSUBSCRIBE), or by telling us in any other reasonable way, including by email to support@camo-can.com. We honor opt-outs within 10 business days (Monday through Friday, excluding federal holidays) and may send one text confirming it; we will then send service messages for your booking by email.

Email. Transactional emails about a booking continue until the booking is complete and all amounts under it are settled. You can unsubscribe from marketing email at any time using the link in the message.

SECTION 6 — HOW WE PROTECT PERSONAL INFORMATION

We maintain administrative, technical, and physical safeguards appropriate to our size and the information we hold, designed to protect personal information against unauthorized access, acquisition, use, modification, or disclosure, consistent with the Oklahoma Security Breach Notification Act (24 O.S. §§ 161–166). These include:

(a) Data minimization. We collect only the information described in Section 1 and retain it only as described in Section 8. Payment card data resides with our payment processor.

(b) Access controls. Access to customer and booking records is limited to personnel and contractors who need it to perform the Services, with individual accounts on administrative systems, protected by strong passwords and, where available, two-factor authentication.

(c) Access codes. Access codes you give us, such as gate or lockbox codes, are visible only to personnel servicing your booking and are deleted after final pickup.

(d) Records integrity. Consent records, Booking Confirmations, estimate approvals, and document versions are archived with timestamps so they can be verified. Single-use approval links expire upon use. Your booking link is unique to your booking and stops working 180 days after the rental ends (or sooner if the booking is archived); while it works, we can send you a new one at any time, which turns off the earlier booking link. Single-use links for a specific estimate, approval, or payment keep working until used or expired.

(e) Transmission protection. Data transmitted through the Site and approval links is encrypted in transit.

(f) Vendor oversight. We select service providers that maintain appropriate safeguards for the information they process for us.

No method of transmission or storage is completely secure. If you believe your information has been compromised, contact support@camo-can.com.

SECTION 7 — SECURITY BREACH NOTIFICATION

If a breach of our system's security involves your personal information, we will notify you, and the Oklahoma Attorney General and consumer reporting agencies where required, as and when the Oklahoma Security Breach Notification Act (24 O.S. §§ 161–166), as amended, requires.

SECTION 8 — DATA RETENTION

We retain personal information as follows, subject to longer periods required by law or to establish or defend legal claims:

| Category | Retention | |---|---| | Booking records, agreements and document versions, consent and signature records, photographs and video, scale tickets, insurance certificates, correspondence | 5 years after the booking's final settlement; longer while a dispute or legal hold is open | | Route and placement records (tire-track photographs, GPS records, on-site approvals and choices) | Same as the booking | | Tax exemption records | Same as the booking, and in any event as long as the applicable taxing authority may assess the tax | | Scheduling and quote records for an enquiry that did not become a booking | A short configurable period, 24 hours by default, after which they expire; discarded sooner whenever our schedule changes | | Records of scheduling offers made and whether they were accepted | 24 months from the offer | | Fraud-prevention records tied to a booking | Same as the booking | | Contact-change history (previous email addresses and phone numbers, and when and how each change was verified) | Same as the booking | | Fraud-prevention records not tied to a booking (estimator visitors, blocked attempts, unverified phone numbers) | 12 months from collection | | Access codes | Deleted after final pickup | | Feedback, with its photos | 5 years from submission | | In-person contacts (a person's name and role) | Deleted 2 years after the contact | | Visit records from in-person contacts (time, location, what was left, business visited; no personal names) | As long as tax law requires us to keep the mileage records they support | | Business mileage records (the Service Address and booking number of each trip, without your name) | As long as tax law requires for the tax year and the vehicle, which can be longer than 5 years | | Recordings that relate to a booking | Same as the booking | | Calls, texts, voicemails, and recordings not related to a booking (for example, a question from someone who did not book) | 2 years from the last contact | | Other recordings, including of in-person contacts | Only as long as we need them to keep accurate notes, and no longer than 2 years | | One-time verification codes | Deleted on use or expiry | | Payment records | At least as long as tax and accounting law requires | | Text and email opt-out records | As long as needed to keep honoring your opt-out | | Promotional sign-up limit records (a one-way scrambled form of the internet address an offer was shown to or claimed from, and when) | As long as we run sign-up offers limited this way | | Marketing sign-up and consent records | While you're subscribed, and afterward as needed to show your consent and keep honoring your opt-out | | Site usage data | As needed for security and operations |

Where a scheduling or quote record becomes part of a booking, it is retained with that booking rather than expiring on its own.

SECTION 9 — CHILDREN'S PRIVACY

The Services are not directed to anyone under eighteen (18), and we do not knowingly collect personal information from anyone under eighteen, consistent with Section 1.3 of the Terms of Service. If you believe a minor has provided us personal information, contact support@camo-can.com and we will delete it, subject to legal holds.

SECTION 10 — OTHER STATE PRIVACY LAWS

If a comprehensive state consumer privacy law applies to us, we will honor the rights it provides to the extent we are subject to it. Contact support@camo-can.com to exercise any such right.

SECTION 11 — CHANGES TO THIS POLICY

We may update this Policy. The version presented at booking governs that booking, and an existing booking's version does not change. We will not use information we already hold in a materially different way without your consent. A revised Policy applies to information collected after it is posted.

SECTION 12 — CONTACT US

Roll-Out Rentals LLC d/b/a Camo Can 9905 S Pennsylvania Ave. Ste A, Oklahoma City, OK 73159 support@camo-can.com — (918) 935-1054

Roll-Out Rentals LLC d/b/a Camo Can — 9905 S Pennsylvania Ave. Ste A, Oklahoma City, OK 73159 — support@camo-can.com — (918) 935-1054 Version v2026-10-22 · Effective October 22, 2026