Genfare Privacy Policy

Introduction

At Rock Region METRO, your privacy is a priority. This Privacy Policy outlines how we collect, use, and safeguard your personal information through our digital platforms, including Rock Region METRO’s third-party payment systems. By using our services, you agree to the terms of this Privacy Policy.

We encourage you to read this policy carefully to understand what data we collect, how it’s used, and the choices available to you.

Information We Collect

We collect personal and transactional information through the Rock Region METRO website and its integrated systems when you interact with our services, including the Open Payment-enabled fareboxes.

1. Personally Identifiable Information (PII)

This includes data that directly identifies you or can be used to identify you, such as:

• Name (required)
• Email address
• Password
• Credit Card Information
• Address (optional for account creation, required for placing orders)
• Phone Number (optional)
• Date of Birth (optional)
• ID Number
• Account Notes (if applicable)
• Photograph (optional)

2. Non-Personally Identifiable Information

This includes technical and usage data to improve your experience:

• Device Identifiers (e.g., cookies or browser fingerprinting)
• Device Information (e.g., operating system, browser type)
• IP Address and Log Data
• Usage and Tracking Information (used internally or by third-party analytics tools)

How We Use Your Information

We use the information we collect to provide, manage, and improve our transit services and digital platforms. Personally Identifiable Information is used solely for the purposes for which it was provided. This includes processing fare purchases and payments securely, managing and supporting your transit account, responding to inquiries, and communicating with you about your transactions or account status. Additionally, we may use this information to personalize your experience and fulfill legal, regulatory, or security obligations. Non-Personally Identifiable Information is used to enhance the overall user experience, improve website and system functionality, and conduct statistical analysis that helps us optimize our services and better understand user behavior. All information is handled with care and in accordance with applicable privacy standards.

How We Protect Your Information

We take the security of your personal information seriously and implement robust measures to protect it from unauthorized access, misuse, or disclosure. Your data is stored behind secure networks and is only accessible by authorized personnel who are required to maintain its confidentiality. In addition, we employ industry-standard security protocols to safeguard all personal and payment information. This includes PCI-compliant payment processing through GenPay, which ensures that all transactions meet strict credit card security standards. Sensitive data is encrypted both in transit and at rest, and our systems operate on secure servers with access controls in place to prevent unauthorized use. These comprehensive security practices help ensure that your information remains protected throughout your interaction with our services.

Use of Cookies

A cookie is a small file stored on your device that allows us to identify your device during future visits. Cookies help us analyze traffic patterns and personalize your experience. While cookies do not collect Personally Identifiable Information, they may collect data such as IP addresses or browser information. You can manage your cookie preferences through your browser settings. Some features of our website may require cookies to function properly.

Do Not Track

Your browser may allow you to send a “Do Not Track” signal to websites. However, as a standard industry protocol for “Do Not Track” requests has not yet been established, we do not disable tracking technology that may be active on the service in response to any “do not track” requests that we receive from your browser or device.

Third-Party Disclosure

We do not sell or trade your Personally Identifiable Information. We may share it only with trusted service providers (e.g., Genfare, Chase Paymentech) who help us operate our services and are contractually obligated to keep your information secure to comply with legal obligations or protect rights, safety, or property

Third-Party Links

Our website may contain links to other websites. Please note that we are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies separately.

Children’s Privacy

The Children’s Online Privacy Protection Act (“COPPA”) imposes certain requirements on operators of websites or online services that have actual knowledge that they are collecting personal information online from a child under 13 years of age. If Rock Region METRO has actual knowledge that we have collected Personally Identifiable Information online from children under the age of 13, Rock Region METRO will make all reasonable efforts to obtain parental or legal consent before any further use of the Personally Identifiable Information occurs. When Company obtains parental or legal guardian consent, Company will maintain reasonable procedures to protect the confidentiality, security, and integrity of the Personally Identifiable Information collected from children under the age of 13.

When Company does not obtain parental or legal guardian consent to use Personally Identifiable Information for children under the age of 13, Company will no longer maintain the Personally Identifiable Information in any retrievable form.

Changes to Privacy Policy

Rock Region METRO reserves the right to update or change this Privacy Policy. Any updates will be posted on this page, and we will make efforts to notify users of significant changes.

Last Updated: April 2025