Because Lift & Shift operates the Program on behalf of PrimeSource Building Products, Lift & Shift collects personal information in connection with the operation of the Program. Some of that information is shared with PrimeSource Building Products as described below.

Lift & Shift collects personal information in order to manage the Program. The following are examples of personal information that Lift & Shift collects:

• When you participate in the Program, identifying information, such as your name, mailing address, telephone number, email address and your employing company’s name.
• When you visit the Program’s website, information about your usage such as the webpages viewed, frequency of visits, time spent on the site, and location information.

Whenever you make qualifying rebate submissions, information may be transferred between Lift & Shift, and PrimeSource Building Products, such as:

• your email address or other unique identifier;
• a description of the transaction for which the rebates were earned; and
• the number of rebates earned within the Program.

Lift & Shift will always collect your personal information by fair and lawful means. Wherever possible, Lift & Shift will collect personal information directly from you, for example, when you submit for a rebate or by visiting our website. We sometimes collect personal information through third party service providers and may collect personal information through social media pages and contests and/or promotions undertaken by PrimeSource Building Products.

Lift & Shift relies on you to ensure that your contact information is accurate. On occasion, we may acquire additional data from trusted third parties who have the necessary consent to provide such information, in order to help us better administer our Program and understand your interests and preferences. Generally, the information received from third parties is used to help us update, expand and analyze the Program’s records.

We use your personal information to administer the Program and enhance your experience as a participant of the Program. We also use your personal information to better understand your preferences, needs, interests and usage in order to develop, enhance, and provide products and services that best meet your expectations, and to measure the success of the Program’s features, benefits and promotions.

In particular, we may collect, use and disclose your personal information for a number of purposes, including, but not limited to, the following:

• To contact and communicate with you, including via email or other channels;
• To verify your identity;
• To advise you of changes to the Program;
• To provide customer service;
• To communicate offers, benefits, products and services provided by the Program;
• For information security;
• When conferring with us regarding the Program;
• When done in compliance with this Policy;
• For marketing purposes where you have authorized marketing communications; and
• For quality assurance and record keeping purposes.

We will not collect, use or disclose personal information for other purposes without obtaining your further consent, except where authorized or required by law.

The Program respects the privacy of its participants when promoting products or services. You may withdraw your consent to uses of your information that are beyond what is necessary for the administration of the Program. If you no longer wish to receive marketing and promotional offers, you may withdraw your consent by clicking on the “unsubscribe” link in our email communications to you. We will timely implement your requested change(s).

Participants can also opt-out of receiving marketing and promotional communications in electronic, printed or verbal format by writing us at:

Grip-Rite Deck It Out Rebate Program
PO Box 273
West Seneca, NY 14224
or
By email to rebates@gripriterebates.com

The decision to opt-out of additional marketing and promotional communications does not affect a participant’s ability to participate in the Program. We may, however, still use your email address to provide information about your participation in the Program.

Like many other companies, we use cookies and other tracking technologies (such as pixels and web beacons) (collectively, “Cookies”). “Cookies” are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).

We use Cookies to:

• Estimate audience size and usage patterns;
• Understand and save your preferences for future visits, allowing us to customize the website and Program to your individual needs;
• Advertise new content and services that relate to your interests;
• Keep track of advertisements and search engine results;
• Compile aggregate data about site traffic and site interactions to resolve issues and offer better site experiences and tools in the future; and
• Recognize when you return to the website.

We set some Cookies ourselves and others are set by other entities. We use Cookies set by other entities to provide us with useful information to help us improve our website and Program, to conduct advertising, and to analyze the effectiveness of advertising. For example, this Site uses Cookies from Google.

Browser Settings

Your browser may give you the ability to control cookies or other tracking tools. How you do so depends on the type of tool. Certain browsers can be set to reject browser cookies. You can find out more about Cookies and how to manage them by visiting www.allaboutcookies.org.

Platform Controls

You can opt out of Cookies set by specific entities by following the instructions found at this link: Google: https://adssettings.google.com.

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the website and Program, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The technologies used by Google Analytics do not gather information that personally identifies you. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, click here.

Your information may be shared with other companies for the express purpose of administering the Program and delivering products or services to participants. To this end, your personal information will be transferred from PrimeSource Building Products to Lift & Shift and vice versa, in order to administer the Program.

We share your personal information in order to develop and promote the Program, and make offers related to, benefits, products and services.

Your personal information may be transferred to third-party service providers, including data processing and storage firms, that perform work or provide services in order to help us to manage and administer the Program. These service providers are contractually obligated to maintain confidentiality, safeguard all information provided to them, and use the information disclosed to them only for the purposes of the Program.

We may be required to disclose information about you:

• if required to do so by law, regulation or legal process (such as a court order or subpoena),
• in response to requests by government agencies, such as law enforcement authorities, or
• when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.

We reserve the right to transfer any information we have about you in the event of a sale or transfer of all or a portion of the business or assets (including in the event of a reorganization, dissolution, or liquidation) of either PrimeSource Building Products or Lift & Shift.

We have appropriate safeguards (physical, technological and organizational) in place that are designed to keep your personal information safe and secure. Employees are trained on the importance of maintaining the security and confidentiality of personal information. Please note that while we use reasonable efforts to protect your personal information, we cannot guarantee the security of any information that is transmitted via the Internet.

Your personal information will only be collected, used and disclosed, and will only be retained as long as required to fulfill the purposes for which it was collected, or as may be required by law. Your personal information is retained in secure facilities, such as offices and data centers with restricted access. Electronic data is protected by technological means, such as firewalls, access controls and encryption.

We retain your information for as long as needed to provide you services, comply with our legal obligations, resolve disputes and enforce our agreements. Personal information will be retained for seven (7) years following the completion of the program and will then be destroyed, anonymized or otherwise disposed of using secure methods.

Your personal information may be transferred to a third-party service provider who provides services to us or on our behalf such as hosting, data management and storage services. We may, or any such third-party service provider may, use servers for such purposes which are located outside of the country in which you reside. Where your personal information is processed in a location outside of your country, the laws of that foreign jurisdiction may apply and privacy protection rights in that jurisdiction may be weaker than the protections afforded in the country in which you reside.

You may contact our customer service center to request confirmation of the personal information we have on file.

Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. We do not sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales and we will record your instructions and incorporate them in the future if our policy changes. Opt-out requests may be sent to rebates@gripriterebates.com.

The California Consumer Privacy Act (CCPA) and the successor California Privacy Rights Act (CPRA) require that we provide California residents with a privacy policy that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of California residents regarding their personal information. This section of the Policy is intended solely for California residents. In addition, if you are located in a jurisdiction with comparable privacy laws that apply to both you and us, then we will provide you with the rights in this California section as well.

The CCPA defines “personal information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal information does not include publicly available, deidentified or aggregated information. For purposes of this “Notice to California Residents” section we will refer to this information as “Personal Information.”

Right to Know About Personal Information Collected, Disclosed, or Sold

You have the right to request that we disclose what Personal Information we have collected about you in the 12-month period preceding your request. This right includes the right to request any or all of the following:

• Specific pieces of Personal Information that we have collected about you;
• Categories of Personal Information that we have collected about you;
• Categories of sources from which the Personal Information was collected;
• Categories of Personal Information that we sold (if applicable) or disclosed for a business purpose about you;
• Categories of third parties to whom the Personal Information was sold (if applicable) or disclosed for a business purpose; and
• The business or commercial purpose for collecting or, if applicable, selling Personal Information.

Collection of Personal Information

We currently collect and, in the 12 months prior to the Last Updated date of this Policy, have collected the following categories of Personal Information:

• Identifiers (name, postal address, online identifier, IP address, email address)
• Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number)
• Telephone number
• Internet or other electronic network activity information (browsing history; search history; and information regarding a consumer’s interaction with the Sites, application or advertisement)
• Geolocation data
• Commercial information (records of products or services purchased, obtained or considered)
• Professional or employment-related information (e.g., company name and role)

The Personal Information is collected from users directly and from internet service providers, data analytics providers, and operating systems and platforms. Not all categories of Personal Information are collected from each source.

In addition to the purposes stated above in the section “How We Use Your Information”, we currently collect and have collected the above categories of Personal Information for the following business or commercial purposes:

• Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity
• Debugging to identify and repair errors that impair existing intended functionality
• Performing services, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, and providing advertising, marketing, and analytic services
• Undertaking internal research for technological development and demonstration
• Undertaking activities to verify or maintain the quality or safety of our services or products, and to improve, upgrade, or enhance same
• Commercial purposes, such as by inducing another person to buy, join, subscribe to, provide, or exchange products, goods, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

Disclosure or Sale of Personal Information

We do not sell personal information about you to outside parties. The following table identifies the categories of Personal Information that we disclosed for a business purpose to service providers in the prior 12 months and, for each category, the category of service providers or third parties to whom the Personal Information was disclosed or sold. We do not knowingly collect or sell the Personal Information of minors under 16 years of age.

Category of Personal Information	Category of Service Providers
name, postal address, company name and role, email address, account name, telephone number	Fulfillment providers
online identifier, IP address, device identifier, cookies, beacons, pixel tags, mobile ad identifiers	Data analytics providers
browsing history, search history, and information regarding a consumer’s interaction with the website, application or advertisement; records of products or services purchased, obtained or considered; geolocation data	Data analytics providers

Right to Request Deletion of Personal Information

You have the right to request that we delete the Personal Information about you that we have collected. However, we are not required to comply with a request to delete if it is necessary for us to maintain the Personal Information in order to, for example, complete a transaction, detect security incidents, comply with a legal obligation, or otherwise use the Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.

How to Submit a Request to Know or Delete

You may submit a request to know or delete by emailing us at rebates@gripriterebates.com.

Our Process for Verifying a Request to Know or Delete

If we determine that your request is not subject to an exemption or exception, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure or deletion as applicable.

For requests to access categories of Personal Information and for requests to delete Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.

For requests to access specific pieces of Personal Information or for requests to delete Personal Information that is sensitive and poses a risk of harm by unauthorized deletion, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you will be required to submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.

Right to Non-Discrimination for the Exercise of a California Resident’s Privacy Rights

We will not discriminate against California residents if they exercise any of the rights provided in the CCPA as described in this section “Notice to California Residents.”

Authorized Agents

If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, and if the request is not subject to an exemption or exception, we will require additional information to verify your authority to act on behalf of the California resident, such as a signed writing from the consumer to the authorized agent and information proving that the consumer is a California resident.

Financial Incentives

We may at times provide consumers with a financial incentive, such as different pricing or services, for providing their personal information. When we do so, we feel that the value of the different pricing or services you will receive exceeds the cost of providing such personal information. You will always have an option whether or not to partake in such incentive programs.

Shine the Light Law

We do not disclose personal information obtained through our Sites to third parties for their direct marketing purposes. Accordingly, we have no obligations under California Civil Code § 1798.83.

If you have any questions regarding this privacy policy, you may contact us in writing or by email at:

Grip-Rite Deck It Out Rebate Program
PO Box 273,
West Seneca, NY 14224
rebates@gripriterebates.com

From time to time, we may change our Policy. If we do, we will post an updated copy on this webpage. Please review this Policy periodically for updates.