Additional Information for California Residents: Notice At Collection

Last Updated: February 12, 2025

The following Privacy Notice and Notice At Collection provides information for California residents, as required under California privacy laws, including the California Consumer Privacy Act, as amended ("CCPA"). California privacy laws require that we provide California residents information about how we use their personal information, whether collected online or offline, and this portion of our Privacy Policy is intended to satisfy that requirement.

Under the CCPA, "personal information" is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Please note that this definition of personal information applies to only this section of our Privacy Policy.

Categories of personal information collected and disclosed

Generally, we may collect the following categories of personal information (as set forth in the CCPA) about California residents. We may disclose this personal information for a business or commercial purpose to the third parties outlined below. In some cases (such as where required by law), we may ask for consent or give you certain choices prior to collecting or using certain personal information.

Categories	Description	Third Party Disclosures for Business or Commercial Purposes
Identifiers (Name, contact info and other identifiers)	Such as a real name, alias, postal address, unique personal identifier, online identifiers, Internet Protocol address, email address, account number and similar identifiers.	· advisors and agents · affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · data analytics providers · advertising networks · social networks · data brokers · Ace franchises or operating companies · others as permitted by law
Categories of Personal Information Described in Cal. Civ. Code § 1798.80.	Records containing Personal Information, such as name, signature, photo, contact information, financial or payment information.	· advisors and agents · affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · advertising networks · data analytics providers · social networks · data brokers · Ace franchises or operating companies · others as permitted by law
Commercial Information	Including records of services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	· advisors and agents · affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · advertising networks · data analytics providers · social networks · data brokers · Ace franchises or operating companies · others as permitted by law
Internet or Other Electronic Network Activity Information	Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with an internet website or application, as well as physical and network access logs and other network activity information related to your use of any Ace device, network or other information resource.	· advisors and agents · affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · advertising networks · data analytics providers · social networks · data brokers · others as permitted by law
Geolocation Data	Precise and general location information about a particular individual, vehicle or device.	· affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · advertising networks · data analytics providers · social networks · data brokers · Ace franchises or operating companies · others as permitted by law
Audio, Electronic, Visual, Thermal or Similar Information	Audio, electronic, visual, or similar information, such as, CCTV/ camera/ video footage, photographs, call recordings and other audio recording (e.g., recorded webinars).	· advisors and agents · affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · data analytics providers · others as permitted by law
Inferences	Such as inferences drawn from any of the information identified above to create a profile about an individual regarding her or his preferences, characteristics, predispositions, behaviors, and personality tests and profiles reflecting skill and aptitude.	· affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · advertising networks · data analytics providers · social networks · data brokers · Ace franchises or operating companies · others as permitted by law
Sensitive Personal Information	Such as financial account and payment information and precise geolocation information.	· advisors and agents · affiliates and subsidiaries · regulators, government entities and law enforcement · internet service providers · operating systems and platforms · Ace franchises or operating companies · others as permitted by law

Sales and Sharing of Personal Information

The CCPA defines “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” includes disclosing or making available personal information to a third-party for purposes of cross-contextual behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may “sell” or “share” the following categories of personal information: identifiers; commercial information; location data; and internet and network activity information. We may disclose these categories to third-party advertising networks, analytics providers, franchises or operating companies, and social networks for purposes of marketing and advertising and to improve and measure our ad campaigns. We may also share limited information, such as name and email address to data brokers for purposes of marketing and advertising and to improve and measure our ad campaigns. You can opt-out of sale and sharing in the Right to Opt Out of Sales and Sharing section below.

We do not sell or share sensitive personal information, nor do we sell or share personal information about individuals we know are under age sixteen (16).

Purpose for Processing Personal information

We use your personal information to provide you Services, such as to fulfill your requests for Services and market to you. We also may use your personal information to support our business functions, such as fraud prevention, marketing and legal functions. Some examples may include:

Providing services and support:To provide and operate our Services, fulfill your requests for Services and provide customer service, communicate with you about your use of the Services, provide troubleshooting and technical support, debug to identify and repair errors that impair existing intended functionality, respond to your inquiries, process your payments, communicate with you, and for similar service and support purposes.
Responding to inquiries:To respond to your questions and consider your requests.
Analytics and improvement:To better understand how users’ access and use the Services and our other offerings, conduct auditing and monitoring of transactions and engagement, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, develop Services and features, and for internal quality control and training purposes.
Customization and personalization:To tailor the content we may send or display on the Services, including to offer location customization and personalized help and instructions, and to otherwise personalize your experiences.
Marketing and advertising:For marketing and advertising purposes. For example, to send you information about our Services, such as offers, promotions, newsletters, and other marketing content, including about third-party products and services we think may interest you, as well as any other information that you sign up to receive. We also may use certain personal information we collect to manage, measure, and improve our advertising campaigns so that we can better reach people with relevant content.
Planning and managing events:For event planning and management, including registration, attendance, connecting you with other event attendees and contacting you about relevant events and Services.
Research and surveys:To administer surveys and questionnaires, such as for market research or member satisfaction purposes.
Safety, quality, and improvement:To undertake activities to verify or maintain quality or safety and improve, upgrade, or enhance the Services owned or controlled by us.
Security and protection of rights:To protect you and others, the Services and our business operations; to help ensure security and integrity and prevent and detect fraud, unauthorized activities and access, and other misuse; where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third party, or violations of our Terms of Use available at acehardwarehomeservices.com/terms-and-conditions, our contracts, if any, with you, or this Privacy Policy.
Legal proceedings and obligations:To comply with the law and our legal obligations, to handle legal processes and related to legal proceedings.
General business and operational support:To conduct business analysis, such as analytics and projections, or to identify areas for operational improvement, and to consider and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions, and related to the administration of our general business, accounting, auditing, compliance, recordkeeping, and legal functions.
Other notified purposes:For other lawful purposes that you reasonable expect, are permitted under applicable law and regulation, or that we may notify you of from time to time.

Ace may combine personal information, collected online and offline, including personal information from third party sources as described below. Ace also may transfer or share your personal information within our corporate family of companies and Ace franchises or operating companies for these purposes, as permitted by law.

Categories of Third Parties from Whom We Collect Information

In general, we may collect the personal information identified in the table above from the following categories of sources: advisors and agents, affiliates and subsidiaries, regulators, government entities and law enforcement, internet service providers, operating systems and platforms, advertising networks, data analytics providers, social networks, data brokers, Ace franchises or operating companies, and others, as permitted by law.

Deidentified Data Requirements

In the event we use, disclose, or process deidentified data about consumers, we will do so in deidentified form. We commit to maintaining and using deidentified data in its deidentified form and will not attempt to reidentify it, except as permitted by law.

Data Retention

We endeavor not to collect more personal information than necessary to fulfill our business needs. We retain the personal information we collect only as reasonably necessary for the purposes described herein or otherwise disclosed to you at the time of collection. We retain personal information as necessary to comply with our tax, accounting and recordkeeping obligations, to provide you with the services you have requested, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and comply with our legal obligations. In some cases, rather than delete your personal information, we may deidentify or aggregate it and use it in compliance with the CCPA. If you request we delete your personal information, please note we may still retain your personal information as necessary to comply with our legal obligations, regulatory requests, resolve disputes, and enforce our agreements.

California Residents' Rights

California law grants California residents' certain rights and imposes restrictions on particular business practices as set forth below. Subject to certain exceptions, California residents have the right to make the following requests:

Right to Deletion: California residents have the right to request deletion of their personal information that we have collected from them, subject to certain exemptions.

Right to Know: California residents have the right to request that we provide them certain information about how we have handled their personal information, including the:

categories of personal information collected
categories of sources which personal information was collected from
business and/or commercial purposes for collecting, selling, or sharing their personal information
categories of third parties with whom we have disclosed their personal information
specific pieces of personal information the business has collected about the consumer

Right to Correction: California residents have the right to correct inaccuracies in their personal information.

Right of Portability: California residents have the right to obtain a copy of the personal information that they previously provided to us in a portable and, to the extent technically feasible, readily usable format that allows them to transmit their personal information to another controller without hindrance.

Right to Limit the Use of Sensitive Personal Information: California residents have the right to request a business limit the use of their sensitive personal information to what is necessary for the business purpose and for purposes permitted by the CCPA. Ace does not collect or process sensitive personal information for the purpose of inferring characteristics about California residents or for any business uses other than those permitted by the CCPA.

Right to Opt Out of Sales and Sharing: California residents have the right to opt-out of the sale or sharing of their personal information. California residents may submit a request to opt out of sales and sharing by:

Submitting a request through our webform available at https://privacyportal.onetrust.com/webform/08fcfb30-e571-44e6-a1de-eb62fe3d7b00/d31e7b56-6dcc-44e0-9a63-9189d1f7f5b3, or by clicking the Your Privacy Choices link in the footer of our website and
Updating their cookie preferences by clicking here and opting out of "Share or Sale of Personal Information" or
Turning on "Global Privacy Control" signals through your browser, which our website shall process as a request to opt out of sales and sharing for the relevant browser and device. You can configure certain browsers and other technologies to send opt-out preference signals to a website notifying the website of your express request to stop the sale or sharing of your personal information. For more information, please see globalprivacycontrols.org. At this time, this signal only applies to the browser and device you are searching from.

Right to Non-Discrimination: Ace will not discriminate against California residents for exercising their rights under the CCPA.

Submitting Requests

Requests to exercise privacy rights may be submitted on our Your Privacy Choices webform, available at https://privacyportal.onetrust.com/webform/08fcfb30-e571-44e6-a1de-eb62fe3d7b00/d31e7b56-6dcc-44e0-9a63-9189d1f7f5b3 or by clicking the "Your Privacy Choices" button on the bottom of AceHardwareHomeServices.com. Additionally, individuals may contact your local franchise or operating company office. We will respond to verifiable requests received from California residents as required by law.

Verification of Requests

In order to process requests to know, delete or correct, we require first name, last name, zip code, email, and/or phone number, and we may ask for additional information such as recent purchases or authenticated interactions with us depending on the nature of the request and the need to prevent fraud and protect security. The information provided in the request will be compared to the data Ace maintains for that customer. If the information does not match, we will be unable to process the request.

Authorized Agent Requests

An authorized agent is a person or business who has authorization to request to know what personal information we have about you, to delete the personal information we have about you, to correct the personal information we have about you, or to opt-out of the sale/sharing of personal information on behalf of a California resident. Authorized agents use the same links described above to submit requests.

If you are submitting a request on behalf of another person, we require an authorization, and/or other documentation demonstrating your authority to submit this request. This can be a letter or other documentation signed by the California resident authorizing you to submit this request. Ace reserves the right to contact the consumer directly to verify their identity and ensure that they have elected an authorized agent.

Contact for Privacy Questions

For questions or concerns about the practices described in this Privacy Policy, please contact your local franchise or operating company office.