Peterson Cat Rentals

Federal Law │ Oregon Consumer Privacy Act (OCPA) │ Washington State Law
Effective Date: March 20, 2026

This Notice is provided in compliance with applicable federal privacy laws, the Oregon Consumer Privacy Act (ORS 646A.570–646A.589, effective July 1, 2024), and applicable Washington state law. It applies to personal data of Oregon and Washington residents received by Peterson Cat Rentals in connection with the Rent.Cat.com rental inquiry platform operated by Caterpillar Inc.

1. Introduction and Scope

Peterson Machinery Co., doing business as “Peterson Cat Rentals” (“we,” “us,” or “our”), is an authorized Caterpillar equipment dealer operating on the West Coast. This Privacy Notice explains how we receive, use, and protect personal data transmitted to us by Caterpillar Inc. when you submit a rental inquiry through the Caterpillar-operated platform at Rent.Cat.com (the “Platform”).

We do not operate or control the Platform, and we do not maintain a standalone web presence separate from the Platform for our rental operations. Rent.Cat.com is owned and operated by Caterpillar Inc., which maintains its own privacy notice and manages its own data collection practices, including any cookie consent mechanisms on the Platform. This Notice describes only our practices as a downstream recipient of personal data forwarded to us by Caterpillar when you express interest in equipment available through Peterson Cat Rentals.

This Notice applies to personal data of Oregon and Washington residents received through Platform-transmitted rental inquiries. It does not apply to personal data collected in an employment context or to business-to-business data received from individuals acting solely in a commercial representative capacity.

2. Personal Data We Receive

We do not independently collect personal data through Rent.Cat.com. When you submit a rental inquiry through the Platform, Caterpillar Inc. transmits to us the information you provided in connection with that inquiry. The categories of personal data we may receive include:

• Identifiers: name, email address, telephone number, mailing or business address
• Professional information: company name and job title
• Commercial information: equipment interests, rental needs, project descriptions, or other details you provided in your inquiry
• Geolocation data: general location relevant to your inquiry (city or region level)
• Communications: content of messages or notes submitted through the Platform

The scope of personal data received depends on what you provided through the Platform. We do not receive data that you did not submit through the inquiry form, and we do not receive data from Caterpillar’s cookie or tracking systems.

3. Sources of Personal Data

We receive personal data through the following sources:

• Caterpillar Inc., via the Platform, when you submit a rental inquiry requesting information about equipment available through Peterson Cat Rentals
• Directly from you, if you follow up with us separately by phone, email, or in person in connection with a rental inquiry or transaction

4. How We Use Your Personal Data

We use personal data received through the Platform for the following disclosed purposes:

• Receiving and reviewing rental leads forwarded to us by Caterpillar via the Platform
• Contacting you by phone or email to follow up on your rental inquiry
• Assessing your equipment needs and providing relevant rental information, availability, and pricing
• Coordinating rental agreements and related logistics if you proceed with a rental
• Maintaining records of customer inquiries and interactions in our internal CRM
• Sending marketing email communications if you have opted in to receive them
• Improving our internal processes and customer service delivery
• Complying with applicable legal obligations

We do not use personal data received through the Platform for cookie-based remarketing or targeted advertising through Google Ads Customer Match or similar audience tools. We do not upload Platform-sourced contact data to any advertising platform. Because we do not operate a standalone web presence for our rental operations, we do not engage in any website-based tracking or behavioral advertising.

We will not process your personal data for purposes materially different from those disclosed above without providing notice and, where required by applicable law, obtaining your consent.

5. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients:

5.1 Service Providers

We disclose personal data to third-party service providers that process data on our behalf in order to fulfill the purposes described in Section 4, including:

• Customer relationship management (CRM) platform providers — Texada and Integrated Rental/VitalEdge
• Email delivery and marketing automation platform providers — Marketo
• IT support, hosting, and cloud infrastructure providers — Microsoft

These providers are contractually required to use personal data only to provide the services we have engaged them for and are not permitted to use it for their own independent purposes.

5.2 Caterpillar Inc. and Affiliated Entities

Because rental inquiries originate through the Caterpillar Platform, Caterpillar Inc. and its affiliates may independently retain access to personal data you submitted. Caterpillar’s processing is governed by its own privacy notice on the Platform. We are not responsible for Caterpillar’s data practices.

5.3 Legal Disclosures

We may disclose personal data when required by applicable federal, Oregon, or Washington law, court order, subpoena, or other legal process, or when we reasonably believe disclosure is necessary to protect rights, property, or safety.

5.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction. We will provide notice of any such change as required by applicable law.

5.5 Sale or Sharing of Personal Data

We do not sell personal data for monetary consideration. We do not share personal data received through the Platform for targeted advertising purposes. Accordingly, we do not operate opt-out mechanisms for the sale or sharing of personal data with respect to Platform-sourced data.

6. Your Rights Under the Oregon Consumer Privacy Act

Oregon residents have the following rights under the OCPA (ORS 646A.574):

6.1 Right to Confirm and Access

You have the right to confirm whether we are processing or have processed your personal data, to access the categories of personal data involved, and to obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.

6.2 Right to a List of Specific Third Parties

Oregon residents have the right to obtain a list of the specific third parties to which we have disclosed your personal data, or a list of all third parties to which we have disclosed any personal data. We maintain records of all third-party disclosures in order to fulfill this obligation upon request.

6.3 Right to Correct

You have the right to request that we correct inaccuracies in personal data we hold about you, including CRM records, taking into account the nature of the data and our processing purposes.

6.4 Right to Delete

You have the right to request deletion of personal data about you, including data you provided to us and data we received from Caterpillar through the Platform, subject to applicable exceptions under ORS 646A.574. Note that a deletion request to us does not require Caterpillar to delete data it independently holds; you would need to submit a separate request to Caterpillar under its privacy notice.

6.5 Right to Opt Out of Targeted Advertising

As described in Section 5.5, we do not use personal data received through the Platform for targeted advertising, and we do not operate a standalone web presence through which behavioral advertising could occur. This right is not applicable to our current data practices with respect to Platform-sourced data.

6.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your OCPA rights. You will not receive a lower quality of service or be denied products or services as a result of exercising these rights.

6.7 How to Submit an Oregon Privacy Request

Submit a verifiable consumer request to:

Email: privacy@petersoncat.com
Mail: Peterson Tractor Co., 955 Marina Boulevard, San Leandro, California 94577, Attn: Legal Department, Privacy

We will respond within 45 days of receipt. We may extend this period by an additional 45 days where reasonably necessary and will notify you within the initial period. We will not charge a fee for the first request in a 12-month period. You may designate an authorized agent to submit requests on your behalf with commercially verifiable authority.

Oregon residents who wish to file a complaint with the state may contact the Oregon Department of Justice at 1-877-877-9392 or www.oregonconsumer.gov.

7. Washington State Privacy — Applicable Framework

7.1 Washington Consumer Protection Act (RCW 19.86)

Our data practices are subject to the Washington Consumer Protection Act, which prohibits unfair or deceptive acts or practices in commerce. This Notice accurately describes our data receipt, use, and sharing practices with respect to Platform-sourced personal data. We do not make false or misleading representations about our data handling activities.

7.2 Washington My Health My Data Act (RCW 19.373)

Washington’s My Health My Data Act (effective March 31, 2024) regulates “consumer health data” — defined as personal information linked to a consumer that identifies past, present, or future physical or mental health status. The Act has no volume or revenue threshold and includes a private right of action enforceable under the Washington Consumer Protection Act.

We have assessed our data receipt and use activities against the MHMDA’s definition of consumer health data. Equipment rental inquiries relate to construction, forestry, and industrial equipment, not health care services or health status. Our CRM records contain contact and commercial information only. We do not operate a web presence through which health-adjacent behavioral tracking could occur, and we do not engage in any advertising targeting based on health conditions.

Accordingly, we have determined that the Washington My Health My Data Act does not apply to our current data processing activities. We will reassess this position if our data practices change in ways that could implicate health-adjacent content or services.

7.3 General Privacy Commitments to Washington Residents

We extend the following commitments to Washington residents:

• We will confirm, upon request, whether we hold personal data about you in our CRM or received through the Platform
• We will correct inaccurate personal data upon verified request
• We will delete personal data upon verified request, subject to legal retention obligations
• We will not sell your personal data for monetary consideration
• We will not use your personal data for targeted advertising
• We will not discriminate against you for making privacy-related requests

To submit any of these requests, use the contact information provided in Section 11.

Washington residents who wish to file a complaint may contact the Washington Attorney General’s Office at 1-800-551-4636 or www.atg.wa.gov.

8. Applicable Federal Privacy Framework

In addition to state law, our data practices are governed by applicable federal requirements:

8.1 CAN-SPAM Act

Commercial email communications sent in connection with your rental inquiry comply with the CAN-SPAM Act (15 U.S.C. § 7701 et seq.). Each commercial email includes a clear opt-out mechanism. We honor opt-out requests promptly and remove opted-out addresses from marketing communications. Marketing emails are only sent to individuals who have opted in.

8.2 Telephone Consumer Protection Act (TCPA)

If we contact you by telephone or text message, we comply with the TCPA (47 U.S.C. § 227) and applicable FCC regulations. We will not send automated text messages or use autodialers to contact you without appropriate consent.

8.3 FTC Act — Section 5

Our data practices are subject to Section 5 of the Federal Trade Commission Act (15 U.S.C. § 45), which prohibits unfair or deceptive practices. This Notice is intended to provide clear and accurate disclosure of our data practices with respect to Platform-sourced personal data.

9. Data Retention

• We retain personal data only as long as necessary to fulfill the purposes described in this Notice:
• Rental inquiries that do not result in a completed agreement are retained for [90 days?] from the date of receipt.
• Records related to completed rental transactions are retained for [? Years] in accordance with applicable legal and business requirements.
• CRM records of customers and contacts are retained in accordance with our standard CRM retention policy.
• Marketing opt-out records are retained indefinitely to ensure suppression is maintained.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data from unauthorized access, disclosure, alteration, or destruction. Access to CRM records is limited to authorized personnel with a need to know.

In the event of a data breach affecting Oregon residents, we will provide notification as required under Oregon law (ORS 646A.604). For Washington residents, we will provide notification as required under the Washington Data Breach Notification Act (RCW 19.255.010).

11. Third-Party Platforms

Rent.Cat.com is operated by Caterpillar Inc. This Notice does not govern Caterpillar’s data practices, cookie and tracking technologies, or consent management on the Platform. We encourage you to review Caterpillar’s privacy notice at the point of inquiry submission. We are not responsible for Caterpillar’s privacy practices.

12. Contact Us

For questions, concerns, or privacy rights requests related to personal data we hold, contact our Legal and Privacy team:

Peterson Cat Rentals
Peterson Machinery Co.
Email: privacy@petersoncat.com
Mail: Peterson Tractor Co., 955 Marina Boulevard, San Leandro, California 94577, Attn: Legal Department, Privacy

Oregon residents: We will acknowledge receipt of your request and respond within 45 days as required by the OCPA.
Washington residents: We will respond to requests within a reasonable time consistent with our commitments in Section 7.3.

13. Updates to This Notice

We may update this Privacy Notice periodically to reflect changes in our data practices or applicable law, including if Washington enacts comprehensive consumer privacy legislation. Revised notices will be posted with an updated effective date. For material changes, we will provide more prominent notice where feasible.