ONLINE PRIVACY NOTICE

 

Effective Date: July 1, 2024

This Online Privacy Notice describes the types of personal information Builders FirstSource, Inc. along with our subsidiaries and affiliates (collectively, “BFS”, “we”, “our” or “us”) may obtain through our websites, including www.bldr.com and other BFS affiliated websites that link to this notice (the “Site”), how we may use the information and with whom we may share it. The Notice also describes how you can contact us about our privacy practices.

If you create a profile to apply for positions or apply for positions on the Site, our Applicant Privacy Notice details the information we may collect. Please review the Applicant Privacy Notice for more information.

Click on one of the links below to jump to the listed section:

Personal Information We Obtain
How We Use Personal Information
How We Disclose Personal Information
Personal Information Obtained By Automated Means
Interactive Features and Integrations
Your Choices
Links To External Websites
Site Visitors From Outside the United States
How We Protect Personal Information
Additional California Disclosures
Additional Texas Disclosures
Updates To Our Online Privacy Notice
How To Contact Us

 

PERSONAL INFORMATION WE OBTAIN

We may obtain the following types of personal information directly from you, automatically through our Site’s interaction with your browser and devices, or from our service providers or third parties, depending on how you interact with us:

  • Identifiers, such as name, email address, postal address, IP address, Site login credentials, and online identifiers.
  • Personal Records, such as telephone number, credit card number, debit card number, education, employment, or financial information.
  • Professional or Employment Information, such as your job title, position, and company.
  • Commercial Information, such as purchase details, delivery details, and purchase history.
  • Financial Account Information, such as credit or debit card details and billing information.
  • Internet or other electronic network activity information, such as browser type, operating system type or mobile device model; viewed webpages, links that are clicked, and movement of the mouse or pointer; websites or apps visited before coming to our Site; the amount of time you spend viewing or using the Site and the pages visited, the number of times you return, or other click-stream or Site usage data; and emails we send that you open, forward, or click through to our Site; type of device (such as laptop or smart phone); and device cookie settings and other device details (such as MAC address).
  • Geolocation data, such as location data inferred from your device IP address.
  • Inferences used to create a profile reflecting the preferences, characteristics, behavior, and attitudes.

  • Information Provided through Communications that we have with you.

If you provide us with information about other individuals (such as your references or the principals of your company), you represent that you have notified and obtained consent from the relevant individuals to provide us with their information for the applicable purpose. Please do not provide us with information about third parties unless you have notified them.

 

HOW WE USE PERSONAL INFORMATION

We may use personal information for:

  • Providing Products and Services, such as creating, managing, or servicing your account; operating and maintaining our Site; providing quotes and estimates related to materials and solutions for professional homebuilders and contractors; and processing payments and orders.
  • Communications, such as sending promotional materials and newsletters; handling requests; contacting you when necessary or requested, including responding to your questions and comments and providing customer support; and obtaining feedback.
  • Event and Promotion Management, such as communicating about and administering participation in special events, programs, promotions, offers, surveys, and market research.
  • Site Services, such as making sure our Site and app technology functions, customizing our users’ visits to our Site, delivering content tailored to our users’ interests and the manner in which our users browse our Site, diagnosing technical and service problems, administering our Site, identifying users of our Site, and developing statistics on engagement with our Site.
  • Advertising and Marketing, including measuring the use of our services and effectiveness of our advertising and marketing; and uncovering insights to improve our services and provide our users with enhanced features and functionalities, such as personalized experiences.
  • Business Operations, such as developing new products and services; enhancing, improving, and analyzing our Site, products and services, customer service, and customer shopping experience; tracking and responding to quality and security issues; performing system administration and technology management, including optimizing our Site; identifying prospective customers, business clients, suppliers, and other vendors; administering our relationships with our customers, business clients, suppliers, and other vendors; fulling purposes that we describe to you at the time we collect your information; carrying out mergers, acquisitions, divestitures, or similar corporate transactions; and performing accounting, auditing, recordkeeping, and other internal functions.

  • Security and Integrity, such as protecting the security or integrity of the Site and our business; protecting against, identifying, and preventing fraud and other unlawful activity; complying with and enforcing applicable legal requirements, relevant industry standards and our policies, including our Terms of Use; performing investigations; managing risk exposure, including by identifying potential hackers and other unauthorized users; complying with requests by law enforcement or government authorities; and for other legal and compliance reasons.

We may also use aggregate or deidentified information to perform data analyses including market and consumer research.

We also may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

 

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following parties:

  • Our Family of Brands, including our affiliates, subsidiaries, branches, brands, and other related entities that may process your personal information as described in this Privacy Notice.
  • Your Affiliated Company if you interact with us as part of a company account, including with your company’s account administrator.
  • Service Providers, Vendors, and Suppliers that we engage to provide services on our behalf, such as support for our Site operations (including payment processors and third parties we use to process orders on our behalf); electronic mail; product and service delivery; conducting analysis to improve our products, services, Site, and store experiences; research; digital marketing; advertising; fulfilling orders you place; managing payments; and responding to questions.
  • Business Partners and Other Third Parties where appropriate to provide our services and products and to operate our business.
  • Corporate Transaction Partners, including to prospective or actual purchasers, investors, or successor entities in connection with a contemplated reorganization or an actual reorganization of our business, in connection with financing, a sale, reorganization, dissolution, liquidation, or other transactions involving the disposal of all or part of our business or assets, including for the purpose of permitting the due diligence required to decide whether to proceed with a transaction.
  • Law Enforcement, Government or Regulatory Bodies, or Other Authorized Parties in order to comply with laws, regulations, subpoenas, court orders, or other legal obligations; assist in investigations; protect and defend our rights and property or the rights or safety of other parties; enforce our Terms of Use, this Privacy Notice, or agreements with third parties; or prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity.

  • Parties with Your Notice or Consent when we have provided specific notice to you or asked for your consent, as applicable.

We may combine your personal information with data we obtain from our Site, our services, other users, or other parties. We reserve the right to convert, or permit others to convert, your personal information into deidentified, anonymized, or aggregated data, as permitted by law.

 

PERSONAL INFORMATION OBTAINED BY AUTOMATED MEANS

Cookies and other Tracking Technologies

We, and vendors acting on our behalf, may use automated means, such as cookies, pixels, and web beacons (referred to as “Cookies”), to collect and analyze information about Site interactions, including internet or other electronic network activity information. We may use Cookies to help the Site function, allow you to access and navigate the Site, recognize your login and preferences, analyze your use of the Site, collect information about how you navigate the Site, customize your browsing experience, and deliver and customize advertisements and track advertising campaigns.

We may link certain data elements we have collected through automated means, such as your browser information, with other information we have obtained about you to let us know, for example, whether you have opened an email we sent to you. We, and our vendors, may combine the information collected by Cookies with other information collected about you, which may include data we obtain from others.

We also may use web analytics services that collect information to analyze your use of our Site, such as Google Analytics and Datadog. These services help us analyze how visitors use the Site, help us administer and improve the quality of our Site, and serve ads on our behalf across the internet. The information obtained for this purpose (including your IP address and other information collected by automated means) will be disclosed to or collected directly by our vendors.

We may contract with vendors to help us analyze activity on our Site and our chat functionality, as applicable, through session replay technologies to help us understand and analyze how visitors use our Site, and to improve the Site. These technologies may collect personal information, including IP address, screen size, device type through unique device identifiers, browser information, geographic location, and preferred language.

 

Interest-Based Advertising

Interest-based advertising (also known as online behavioral advertising) occurs when advertisements are displayed to you based on information collected from your online interactions over time and across multiple websites that you visit, or across multiple devices or online services that you may use. Companies that engage in interest-based advertising use this information to predict your preferences and show you ads that are most likely to be of interest to you.

We, and our vendors, may obtain personal information about your online activities, over time and across different devices and online services.

Some of the content, applications, and tracking technologies on our websites and mobile applications is controlled by other parties, which include ad tech companies (such as Meta or Google) or other online service providers that serve interest-based advertisements. These parties may use Cookies and other storage technologies to collect or receive information from our Site and elsewhere on the internet and use that information to provide measurement services as well as for interest-based advertising.

We use information collected from web analytics services to implement Google advertising features such as dynamic remarketing, interest-based advertising, audience targeting, behavioral reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, and impression reporting. For more information on how Google Analytics uses data collected through our Site, visit: www.google.com/policies/privacy/partners/.

We do not control vendors’ collection or use of your information to serve interest-based advertising. However, these parties may provide you with ways to choose not to have your information collected or used in this way, as set out in the Your Choices – Cookies section below. You may still see “contextual” ads even if you opt out of interest-based ads. These ads, however, are based on the context of what you are looking at on the websites and pages you visit. Even if you opt out of interest-based ads you will still receive these non-personalized, contextual ads.

 

INTERACTIVE FEATURES AND INTEGRATIONS

We may engage vendors to provide certain interactive features on the Site. Your use of these interactive features is voluntary, and we may retain the information that you submit through the features. For example, we may offer an interactive chat feature on our Site to answer questions and for other customer service purposes. When you participate in the interactive chat, either with a virtual or live agent, the contents of the chat may be captured and kept as a transcript. By using these features, you understand that our vendors may process the information obtained through the feature to provide the service on our behalf.

We have implemented Google reCAPTCHA to protect our websites from fraud and abuse. Your use of reCAPTCHA is subject to Google’s Privacy Policy, available at policies.google.com/privacy, and Terms of Use, available at policies.google.com/terms.

While using the Site, you may intentionally interact with providers of external services, apps, tools, widgets and plug-ins, such as third-party Facebook “Like” buttons, which also may use automated means to collect information regarding your interactions with these features. If you use these features, information you post or provide access to may be publicly displayed by the service you use and both BFS and the other party may have access to certain information about you and your use of the Site and the external service. This information is subject to the privacy policies or notices of these providers.

We may also offer third-party integrations on the Site. If you choose to connect a third-party account to our system, you should refer to that party’s privacy policy for information on how your personal information is collected, used, and protected.

 

YOUR CHOICES

Your Account

If you have an account with us, you can log in and update, modify, and delete certain personal information.

Your Communication Options

We offer you certain choices about how we communicate with you. To unsubscribe from our marketing emails, click the unsubscribe link in a relevant email. To submit a request, please contact us as indicated in the “How To Contact Us” section of this Online Privacy Notice.

Cookies

Certain brand Sites offer the opportunity for you to opt out of the use of certain Cookies, including Cookies that may be considered a sale or sharing under California law, by clicking the “Do Not Sell or Share My Personal Information” link in the footer of the Site you are visiting. If you choose to use the Global Privacy Control (GPC) browser signal, brand Sites that offer the opportunity to manage your Cookie preferences will opt you out of certain Cookies, as explained in the Site’s Cookie preference center. You will need to turn GPC on for each browser you use.

Your web browser may have settings that allow you to transmit a “Do Not Track” signal when you visit various websites or use online services. Like many websites, our Site is not designed to respond to “Do Not Track” signals received from browsers. To learn more about “Do Not Track” signals, visit allaboutdnt.com. You may set your browser to notify you of or decline the receipt of Cookies; however, certain features of the Site may not function properly or be available if your browser is configured to disable Cookies. We are not responsible for opt-out processes provided by external parties.

Some of the vendors we work with offer tools that you can use to limit or opt out of their Cookies, such as:

You can block the collection and use of information related to you by certain online platforms and ad tech companies for the purpose of serving interest-based advertising by visiting the following websites of the self-regulatory programs of which those companies are members:

State Privacy Rights

Please see our California and Texas Privacy sections for information on rights related to California and Texas residents’ personal information.

 

LINKS TO EXTERNAL WEBSITES

Our Site may contain links to other websites for your convenience and information. These websites may be operated by companies not affiliated with BFS. We are not responsible for the content of any websites that are not affiliated with BFS, any use of those websites, or the privacy practices of those websites. Linked websites may have their own privacy policies or notices, which we strongly suggest you review if you visit any linked websites.

 

SITE VISITORS FROM OUTSIDE THE UNITED STATES

The Site is hosted in the United States. If you are visiting the Site from outside the United States, please be aware that your information will be transferred to, stored, and processed in jurisdictions other than your country of residence, including the United States. The data protection laws of these jurisdictions, including the United States, might not be the same as those in your country.

 

HOW WE PROTECT PERSONAL INFORMATION

We maintain administrative, technical and physical safeguards designed to protect the personal information you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

 

ADDITIONAL CALIFORNIA DISCLOSURES

In the event of a conflict between any other policy, statement, or notice and this section, this section will prevail as to California consumers as required under the California Consumer Privacy Act (the “CCPA”).

Unless otherwise noted, the disclosures in this section that describe how and why we collect, use, and disclose personal information also describe how we have collected, used, and disclosed personal information in the preceding twelve (12) months.

Personal Information We Obtain, Use, and Disclose

We may obtain the types of personal information described in the Personal Information We Obtain section above from offline sources as well, such as our in-store locations. We may also collect:

  • Audio, Electronic, Visual, or Similar Information, such as audio recordings of customer service calls and CCTV footage.

We will use and disclose your personal information as described in the How We Use Personal Information and How We Disclose Personal Information sections above.

If you apply for credit from or a position with BFS, we may evaluate your application, obtain background and credit information, and contact your references, as appropriate.

Record Retention

We may retain your personal information for as long as necessary to fulfil the purpose for which it was collected or a disclosed purpose that is reasonably compatible with the context in which the personal information was collected, to manage our operations, as reasonably required to protect or defend our rights or property, to comply with legal or regulatory requirements, or as otherwise permitted by law.

We strive to retain your personal information no longer than is reasonably necessary to carry out the purposes listed in this Notice or as required by law. Where personal information is used for more than one purpose, we will retain it until the purpose with the latest retention period expires. We retain your personal information in accordance with applicable law and internal document retention practices.  For more information about our retention policies, please contact us using the contact details in the How To Contact Us section.

Selling and Sharing Personal Information

Under California law, a sale of personal information can refer to disclosing personal information to third parties who may use the information for their own purposes, such as Cookie providers. Similarly, under California law, sharing personal information refers to disclosing personal information to third parties for cross-context behavioral advertising. In this context, some of our brands sell and share the following categories of personal information through Cookies: Identifiers, Personal Records, Internet or Other Electronic Network Activity, Geolocation Data, and Inferences. We have sold and shared personal information to third parties, including our vendors and other third parties for cross-context behavioral advertising and other marketing and advertising services that we utilize on our Site. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

California Privacy Rights

California residents have the following rights under the CCPA:

Right to Know. You have the right to know what personal information we have collected about you, which includes:

(1) The categories of personal information we have collected about you, including:

  1. The categories of sources from which the personal information was collected;
  2. Our business or commercial purposes for collecting, selling, sharing, or disclosing personal information;
  3. The categories of recipients to which we disclose personal information;
  4. The categories of personal information that we sold or shared, and for each category identified, the categories of third parties to which we sold or shared that particular category of personal information; and
  5. The categories of personal information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of personal information; and

(2) The specific pieces of personal information we have collected about you:

Right to Delete Your Personal Information. You have the right to request that we delete personal information we collected from you, subject to certain exceptions.

Right to Correct Inaccurate Personal Information. If you believe that personal information we maintain about you is inaccurate, you have the right to request that we correct that information.

Right to Opt Out of Sales and Sharing of Personal Information. You have the right to opt out of the sale of your personal information, and to request that we do not share your personal information for cross-context behavioral advertising. Brand Sites that sell and/or share personal information offer a “Do Not Sell or Share My Personal Information” link in the Site footer. To opt out of sales or sharing of your personal information using Cookies, click “Do Not Sell or Share My Personal Information in the footer of the brand website you are visiting. Brands that do not include this link, do not sell or share Personal Information as defined under the CCPA. If you choose to use the Global Privacy Control (GPC) browser signal, brand Sites that offer the opportunity to opt out of sales or sharing of your personal information will opt you out of sales and sharing, as explained in the Site’s Cookie preference center. You will need to turn GPC on for each browser you use.

Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes to which the right to limit use and disclosure applies under the CCPA. For this reason, this right is not applicable.

 

Submitting Rights Requests

California residents have the right to submit certain requests related to your privacy rights. We will not discriminate against you for exercising any of your privacy rights.

You may submit requests to delete, correct, and/or to know personal information we have collected about you by accessing our California Consumer Rights request portals at:

or by contacting our Toll-Free Telephone Number at: (214) 880-3500.

You may designate an authorized agent to make a request on your behalf. An authorized agent may submit a request on your behalf using the webforms or toll-free number listed above.

We will respond to your request in compliance with the requirements of the CCPA or other applicable law.

Verification of Your Identity

When you exercise these rights and submit a request to us, we or our partners will verify your identity via standard authentication procedures. For example, we may ask you to log in to your account if you have one with us. If you do not have an account with us, we may ask for your email address, order numbers of previous orders of our products and services, the last four digits of a credit or debit card or a bank account number used to make a purchase, or the date of your last purchase from us. We also may use a third party verification provider to verify your identity.

Automated Decision-Making

We generally do not use automated decision-making technology. If we make use of automated decision-making technology, you will be informed through a separate privacy notice.

Notice of Financial Incentive

We may offer our customers limited-time promotions and opportunities to participate in surveys. In exchange for participating in our promotions or surveys, and providing us with your personal information, we may offer you financial incentives and/or price or service differences such as a bonus card, discount, or a coupon. We may collect personal information such as your name, email address, preferences, experiences, and engagement with us (“Customer Data”). You can terminate participation at any time as explained in the applicable promotion or survey terms. We estimate that the value of the Customer Data is the value of the benefit we offer to you in connection with the promotion or survey, which is reasonably related to the costs associated with offering such benefit.

California Privacy Notice at Collection:

 

ADDITIONAL TEXAS DISCLOSURES

In the event of a conflict between any other policy, statement, or notice and this section, this section will prevail as to Texas consumers as required under the Texas Data Privacy and Security Act (“TDPSA”).

Personal Information We Obtain, Use, and Disclose

We may obtain the types of personal information described in the Personal Information We Obtain section above from offline sources as well, such as our in-store locations. We may also collect:

  • Audio, Electronic, Visual, or Similar Information, such as audio recordings of customer service calls and CCTV footage.

We will use and disclose your personal information as described in the How We Use Personal Information and How We Disclose Personal Information sections above.

If you apply for credit from or a position with BFS, we may evaluate your application, obtain background and credit information, and contact your references, as appropriate.

Texas Privacy Rights

Texas residents have the following rights under the TDPSA:

Right to Access and Data Portability. You have the right to confirm whether we are processing your personal information, access your personal information, and obtain a copy of certain personal information you provided to us in a portable format.

Right to Delete Your Personal Information. You have the right to request that we delete personal information we obtained about you, subject to certain exceptions.

Right to Correct Inaccurate Personal Information. If you believe that personal information we maintain about you is inaccurate, you have the right to request that we correct that information.

Right to Opt Out of Sales and Sharing of Personal Information. You have the right to opt out of the sale of your personal information and the processing of your personal information for targeted advertising. Brand Sites that sell and/or process personal information for targeted advertising offer a “Do Not Sell or Share My Personal Information” link in the Site footer. To opt out of sales or sharing of your personal information using Cookies, click “Do Not Sell or Share My Personal Information in the footer of the brand website you are visiting. Brands that do not include this link, do not sell or process personal information for targeted advertising as defined under the TDPSA. If you choose to use the Global Privacy Control (GPC) browser signal, brand Sites that offer the opportunity to opt out of the sale of your personal information and the processing of your personal information for targeted advertising will opt you out, as explained in the Site’s Cookie preference center. You will need to turn GPC on for each browser you use.

 

Submitting Rights Requests

Texas residents have the right to submit certain requests related to your privacy rights. We will not discriminate against you for exercising any of your privacy rights.

You may submit requests to delete, correct, and/or to know personal information we have collected about you by accessing our Texas Consumer Rights request portals at:

or by contacting our Toll-Free Telephone Number at: (214) 880-3500.

You may designate an authorized agent to make a request on your behalf. An authorized agent may submit a request on your behalf using the webforms or toll-free number listed above.

We will respond to your request in compliance with the requirements of the TDPSA or other applicable law.

If we deny your rights request and you believe such request was denied it in error, you may appeal for reconsideration of your request by emailing customerservice@bldr.com.

 

Verification of Your Identity

When you exercise these rights and submit a request to us, we or our partners will verify your identity via standard authentication procedures. For example, we may ask you to log in to your account if you have one with us. If you do not have an account with us, we may ask for your email address, order numbers of previous orders of our products and services, the last four digits of a credit or debit card or a bank account number used to make a purchase, or the date of your last purchase from us. We also may use a third-party verification provider to verify your identity.

 

UPDATES TO OUR ONLINE PRIVACY NOTICE

This Online Privacy Notice may be updated periodically and without prior notice to you to reflect changes in our personal information practices. We will notify you of any material changes to our Online Privacy Notice by updating the Effective Date at the top of this Notice.

 

HOW TO CONTACT US

If you would like to contact us regarding the disclosures or rights in this Online Privacy Notice, please contact us by email at privacy@bldr.com.

You also may write to us at:

Builders FirstSource
ATTN: General Counsel
6031 Connection Dr., Ste. 400
Irving, TX 75039