THE QUIKRETE^® COMPANIES PRIVACY POLICY – CALIFORNIA

This Privacy Policy for California Consumers supplements the Quikrete^® Privacy Policy and applies solely to California consumers. This Privacy Policy has been adopted by The Quikrete^® Companies (hereinafter "Quikrete^®") to comply with the California Consumer Privacy Act of 2018 ("CCPA") as amended by the California Privacy Rights Act of 2020 ("CRPA") effective January 1, 2023, and any implementing regulations (collectively referred to as "California Privacy Laws"). Terms used, but not defined, herein shall have the meanings given to such terms in the California Privacy Laws.

Consent
By accessing the Quikrete^® website or otherwise interacting with Quikrete^®, you expressly consent to the collection of personal information received by Quikrete^® as a result of such use or interaction in accordance with this Privacy Policy.

Collection of Personal Information
Pursuant to the California Privacy Laws, Personal Information is "information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household." Quikrete^® collects personal information when individuals use the website or otherwise interact with Quikrete^®.

In particular, in the last twelve (12) months, Quikrete^® has collected the following categories of personal information from California consumers:

• Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, or other similar identifiers.
• Personal information categories as listed in the California Customer Records Statute (Cal. Civ. Code 1798.80(e)), such as name, signature, address, and telephone number.
• Protected classification characteristics, such as race, color, national origin, religion, sex, disability, age, citizenship status, general information, ancestry, marital status, sexual orientation, medical condition, and military or veteran status.
• Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other similar network activity, such as browsing history, search history, and information regarding a consumer's interaction with an Internet website, application, or advertisement.
• Geolocation data, or physical location.
• Audio, electronic, visual, or other similar information.
• Professional or employment-related information.
• Inferences drawn from other personal information reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Quikrete^® collects personal information of California consumers from the following sources:

• Information provided by the consumer: Information provided directly or indirectly by the consumer is collected by Quikrete^® to provide the consumer with a service, including but not limited to submissions through the website.
• Information collected using third parties: Quikrete^® utilizes third party service providers to assist us in providing services.
• Advertisements: Quikrete^® may utilize third party service providers to serve advertisements.
• Affiliates: Any Quikrete^® company may receive personal information from an affiliated Quikrete^® company.
• Analytics: Quikrete^® utilizes third party analytics service providers to track traffic and usage trends. This is used to improve consumer use of our website and other automated or mobile marketing efforts.
• Cookies: Cookies are small text files created by websites that are stored in the consumer's computer either temporarily for one session or permanent on a hard disk. Cookies only keep track of information that a consumer provides directly, such as personal information supplied by a consumer when interacting with services on a website. Cookies are used to allow a website to recognize consumers and keep track of consumers' preferences.
• Partnerships: Quikrete^® utilizes third party entities to directly engage with consumers through partner sites or partner-owned properties.
• Payment Services: Quikrete^® utilizes third party entities to assist with online payments and billing.
• Promotions: Quikrete^® utilizes third party entities to facilitate promotional events and practices.
• Surveys: Quikrete^® utilizes third party entities to issue surveys to improve customer experience and/or products.
• Publically available information: Publically available information may also be collected by Quikrete^®.

Personal information may be used for the following purposes:

• To provide consumers with a service (i.e., to answer a consumer's question or concern) and/or manage services;
• To provide third party service providers with information necessary to provide services that Quikrete^® contracts with them to provide (i.e., to track trends in how the website is accessed and utilized; to send emails; to provide customer support);
• To provide third party advertising partners with data relating to use of the website to deliver advertisements that may be of interest to you;
• To help investigate complaints about services;
• To provide consumers with email alerts, event registrations, and other notifications regarding Quikrete^® products, services, or news;
• To gather statistical data about website traffic, sales volume, and consumer behavior in navigating the website;
• To improve the website, Quikrete^® products, and/or service; and
• To comply with applicable laws, court orders, or governmental regulations.

Please note that while Quikrete^® collects some personal information, Quikrete^® does not share, sell, rent, or lease personal information to non-affiliated third parties unless otherwise stated at the time of collection.

Links to Other Websites and Services
Please remember that when you use a link to go from our website to another website, our Privacy Policy is no longer in effect. We are not responsible for the practices employed by websites linked to or from our website nor the information or content contained therein.

Retention Policy
Quikrete^® will retain personal information for a commercially reasonable time for the purposes listed in this Privacy Policy and for archival and audit purposes.

Your Rights under the California Privacy Laws
The California Privacy Laws provides California consumers with privacy rights related to disclosure of personal information.

Disclosure of Information
You have the right to request that Quikrete^® disclose the collection and use of your personal information over the last 12 months. Once Quikrete^® receives a verifiable consumer request, it will promptly take steps to disclose and deliver, free of charge to the consumer, the personal information required by the California Privacy Laws. Specifically, Quikrete^® will address the following:

• The personal information gathered about the consumer
• The categories of personal information and specific pieces of personal information gathered about the consumer
• The business or commercial purpose for collecting that personal information
• The categories of third parties with whom we share this information
• If we disclosed your personal information for a business purpose, the personal information that each recipient obtained

Deletion of Personal Information
You have the right to request that Quikrete^® delete any personal information collected from you, subject to exceptions listed in the California Privacy Laws. Once Quikrete^® receives a verifiable consumer request to delete personal information, it will promptly take steps to delete such personal information and direct any service providers to delete the consumer's personal information from its records.

Quikrete^® may deny your deletion requests pursuant to the California Privacy Laws if retaining the information is necessary to:

• Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of the business's ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right to free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the businesses' deletion of the information is likely to render impossible or seriously impair the achievement of such research, if the consumer has provided informed consent;
• To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer's relationship with the business;
• Comply with a legal obligation;
• Otherwise use the consumer's personal information, internally, in a lawful manner that is compatible with the context in which the consumer provided the information.

Right to Correct Personal Information
You have the right to request that Quikrete^® correct inaccurate Personal Information that we maintain about you.  Quikrete^® reserves the right to delete this Personal Information in lieu of correcting it.

Right to Limit
In limited circumstances, a Consumer has the right to limit the use and disclosure of Sensitive Personal Information. Our use of your Sensitive Personal Information is solely for business purposes, and not for those purposes for which a Consumer may exercise right to limit the use or disclosure under the California Privacy Laws. Therefore, we include this disclosure for informational purposes only.

Exercising Your Rights Under the California Privacy Laws
To exercise your rights as detailed above and in the California Privacy Laws, please submit a verifiable consumer request to us by either:

• Calling us at 1(800) 282-5828
• Visiting https://www.Quikrete.com/contactus/main.asp

You may submit a request on your own behalf or on behalf of your minor child. Please note that we do not knowingly collect personal information of minors. If you have reason to believe that we may have accidentally received personal information of a minor, please contact us immediately.

Your verifiable consumer request must include sufficient information for Quikrete^® to verify that you are the person whose personal information was collected. We will only use the personal information provided in a verifiable consumer request to verify the requestor's identity and authority to make the request.

Verification Procedures
We are required by the California Privacy Laws to verify the identity of individuals who submit a request to know, request to delete, or request to correct. In compliance with the California Privacy Laws, we will take steps to verify your identity before granting you access to such Personal Information or acting on your request to exercise your rights.  If we cannot verify your identity based on the information already maintained, we may request limited additional information from you, solely for the purpose of verifying your identity and for security or fraud-prevention purposes. Except as required by law, we will delete any new personal information collected for the purposes of verification as soon as practical after processing the request.

Authorized Agents
You may designate an authorized agent to make requests on your behalf by sending Quikrete^® written authorization in writing at Privacy Policy Manager, Attn: Legal Department, 5 Concourse Parkway, Suite 1900, Atlanta, GA 30328. If you use an authorized agent to submit a request to know or a request to delete, we may require you to: (1) provide the authorized agent with written permission to do so; and (2) verify your identity directly with us. However, we will not require these actions if you have provided the authorized agent with power of attorney pursuant to the California Probate Code. We may deny a request from the agent that does not submit proof that they have been authorized by the consumer to act on their behalf.

Nondiscrimination
Quikrete^® will not discriminate against any consumer for exercising any California Privacy Laws rights.

Changes to the Privacy Policy
Quikrete^® may modify this Privacy Policy from time to time without prior notice. The most current version of this Privacy Policy will govern Quikrete^®'s processing of personal information and data. A current version of this Privacy Policy can be found at: https://www.quikrete.com/contactus/privacy.asp.

For the California Privacy Notice for employees and employee applicants, please click here.

Last updated February 23, 2023