Crandall Policies

Refund Policy
You (the customer) may cancel your order for Crandall Corporation web based services within 24 hours upon placing an order, less a 25 percent administrative fee. No refunds will be issued upon expiration of the 24 hour period after initial purchase. You may request to cancel your web based service via telephone or via email. A full refund may only be issued if Crandall Corporation is unable to deliver agreed upon web services, except for those causes that are beyond its control such as acts of nature, violence, etc. If Crandall Corporation is responsible for cancellation of services, within its control, a full credit or refund may be allowed. However, once any of the work is performed or services have begun or are rendered by Crandall Corporation, you are liable for full payment of the entire invoice amount.� You are liable for all work performed and services rendered. If Crandall Corporation commits resources that it cannot recoup as part of preparation or performing your service and you wish to cancel services, you will be subject to those charges.

Not all services are refundable. Depending on the type of service you purchased, you may not be eligible for a refund. This policy applies to web based products or services or products or services ordered through Crandall Corporation web site and prior contracts, agreements, and quotations supersede this policy. Crandall Corporation's refund policy is limited to web based services only. All other payments for non-web based services are non-refundable.

Our Refunds Department will process an eligible refund to the original credit/debit card or appropriate account within seven business days from the date we receive your request. Your card-issuing bank may then take up to ten business days to post the credit to your account. Based on your individual billing cycle, you will see the refund on your statement within one to two statement mailings.

You may initiate a cancellation of web based services by:
Calling our accounting department at�800-248-4801, or
Submitting an email to�cranar@crandallusa.com

We reserve the right to change this Policy at any time, without notice. If we make a material change with regard to our collection or use of personally identifiable information, we will note on the main page of our websites that this Policy has been updated. Current service agreements, contracts, or quotes between Crandall Corporation and customer remain in force with the terms contained within those documents and supersede this policy; this policy has no effect on those agreements, contracts or quotes, and the terms contained within those documents are not negated by this policy.

Crandall Corporation Customer Privacy Policy
Last Updated: September 8, 2026

Crandall Corporation ("Crandall," "we," "us," or "our") is committed to protecting the privacy and security of information entrusted to us. This Privacy Policy ("Policy") explains how we collect, use, maintain, and disclose information in connection with customers who purchase, subscribe to, access, or use Crandall products and services, including the Radar compliance management system.

This Policy applies to Crandall's customer-facing products and services. Areas of Crandall Corporation websites that are accessible to the general public may be governed by a separate website privacy policy. This Policy also does not alter the terms of any applicable customer agreement, contract, or other agreement between Crandall and a customer.

Information We Collect
We may collect information when a customer or authorized user requests products or services, establishes or maintains an account, accesses or uses our services, communicates with us, or uses features provided through our products and services.

Depending on the products or services used, this information may include name, business address, email address, telephone number, account and login information, customer and facility information, records associated with the use of our services, training and compliance records, system activity and security information, and payment or financial account information when applicable.

Our systems may also automatically collect certain technical information associated with access to and use of our services, such as login activity, date and time of access, browser or device information, Internet Protocol (IP) address, and other information reasonably necessary to operate, maintain, troubleshoot, and secure our systems.

How We Use Information
We use information collected through our products and services for legitimate business purposes, including to provide and administer services; authenticate users and manage access; maintain customer, facility, training, compliance, and service records; communicate with customers and authorized users; respond to requests for service or support; maintain and improve our products and services; protect the security and integrity of our systems; investigate suspected unauthorized or fraudulent activity; comply with legal and regulatory requirements; and perform our contractual obligations.

Cookies and Session Information
Crandall's secure online services, including Radar, use cookies and similar technologies that are necessary for the operation and security of those services. These technologies may be used to maintain an authenticated user session, provide access to authorized features, maintain application functionality, and help protect against unauthorized access.

Cookies that are necessary for the operation of our secure services are not used by Crandall for advertising, behavioral tracking, or marketing purposes. Because these cookies are required for the service to function, disabling them may prevent users from logging in or using certain features of the service.

Disclosure of Information
Crandall does not sell personal information or use personal information collected through its secure customer services for third-party advertising or behavioral marketing.

We may disclose information when reasonably necessary to provide our products and services, including to service providers that perform functions on our behalf, such as website hosting, data storage, email delivery, payment processing, or other technology and business services. Such providers receive information only as reasonably necessary to perform services on our behalf and are expected to handle that information appropriately.

We may also disclose information when reasonably necessary to comply with applicable law, regulation, legal process, subpoena, court order, or governmental request; enforce applicable customer agreements or other Crandall policies and agreements; protect the rights, property, security, or safety of Crandall, our customers, authorized users, or others; investigate or prevent fraud, unauthorized access, security incidents, or misuse of our products and services; or as otherwise permitted or required by law.

Data Retention
We retain information for as long as reasonably necessary to provide our products and services, fulfill the purposes for which the information was collected, meet contractual or business requirements, resolve disputes, maintain appropriate business and compliance records, and satisfy applicable legal or regulatory requirements.

When information is no longer reasonably necessary for these purposes, we may delete, destroy, or de-identify it in accordance with our business practices and applicable legal requirements, subject to any obligation or request requiring its preservation.

Information Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction. These safeguards may include access controls, authentication measures, security monitoring, and other protections appropriate to the nature of the information and services involved.

Although Crandall takes reasonable measures to protect information, no electronic information system, network, or method of transmission or storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute security of information.

Authorized Users and Customer Responsibility
Access to certain Crandall services, including Radar, may be provided to employees, representatives, or other individuals authorized by a Crandall customer. Customers are responsible for determining which individuals are authorized to access their accounts and for promptly notifying Crandall when access should be changed or terminated.

Users are responsible for maintaining the confidentiality of their account credentials and should not share passwords or other authentication information with unauthorized persons.

Access to and Correction of Information
Customers and authorized users may contact Crandall regarding questions about personal information associated with their account or to request that inaccurate account information be corrected. Certain information may need to be retained when required for legitimate business, contractual, compliance, security, or legal purposes.

Changes to This Policy
We may update this Policy periodically to reflect changes in our products, services, business practices, technology, or applicable legal requirements. When material changes are made, we will update the "Last Updated" date above and may provide additional notice when appropriate.

Relationship to Customer Agreements
Current service agreements, contracts, quotes, or other agreements between Crandall Corporation and a customer remain in effect according to their terms. To the extent the terms of an applicable agreement address matters covered by this Policy and conflict with this Policy, the applicable agreement will control.

Contact Us
Questions regarding this Privacy Policy or Crandall's privacy practices may be directed to Crandall Corporation using the contact information provided through our website or customer service channels.

Delivery Policy
Crandall Corporation is dedicated to delivering goods and services as promised and agreed upon with the customer. This policy applies to web based services or products and has no effect on other services or products such as agreements, contracts, and quotes for work through traditional methods.

Customer refusal: Customer is responsible for payment of all agreed upon services.
Force majeure:� Any delay or failure on the part of Crandall Corporation to perform the Services will be excused, to the extent that such delay or failure was a result of an act of God, an order or demand from a governmental authority, or any other event beyond Crandall Corporation's reasonable control.

For web based services such as online training, the customer will normally receive a response via email, telephone, or other means within 48 hours after payment has cleared.

Environmental services obtained and paid for through the Crandall Corporation web site will be coordinated with the customer within a reasonable and customary time frame during normal business hours. Scheduling of services is ultimately at the discretion of Crandall Corporation.

Emergencies: Occasionally, emergencies arise that cause our resources to be allocated in a manner that may prevent or delay delivery of products or services. We make every effort to prevent such circumstances. However, in the event of an emergency that interferes with the delivery of agreed upon products or services, Crandall reserves the right to reschedule such products or services at a later date.

Equipment breakdown: Crandall Corporation has a proactive preventative maintenance program to minimize the occurrence of equipment breakdowns. Unfortunately, breakdowns or equipment malfunctions occasionally occur. We will do everything we can to minimize equipment breakdowns. If equipment problems prevent Crandall from delivering agreed upon products or services, we reserve the right to reschedule such products or services at a later date.

Third party: On rare occasions, third party service providers may be used. Crandall Corporation is not responsible for the availability of third party vendors. However, we will do everything we can to ensure prompt and timely delivery of goods or services.

Current service agreements, contracts, or quotes between Crandall Corporation and customer remain in force with the terms contained within those documents and supersede this policy; this policy has no effect on those agreements, contracts or quotes, and the terms contained within those documents are not negated by this policy.