Core & Main LP Privacy Notice
Last Updated: Nov. 20, 2024
TABLE OF CONTENTS
INTRODUCTION
Core & Main LP and its subsidiaries, divisions, and affiliates (collectively, “Core & Main”, “we”, “us”, and “our”) recognize the importance of protecting the privacy of the personal information you provide to us. As a result, we have prepared this Privacy Notice (the “Notice”) to let you know about the manner in which we collect, use, disclose and otherwise manage the personal information you entrust to us by engaging our services at any of our warehouses or store locations (the “Stores”), through any Core & Main websites including subsidiary, division, and affiliate websites (the “Sites”), our mobile application (the “App”), our approved marketing partners (“Marketing Partners”), through our authorized service providers (“Service Providers”) or through any other communications or transactions (collectively the “Service”).
Your use of the Service is conditioned upon your agreement to this Notice and our Terms of Use.
Before using our Service, please read this Notice carefully as it contains important information on who we are and how and why we collect, store, use, and share your personal information. This Notice also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.
Core & Main reserves the right to change its privacy policies at its sole discretion and at any time by posting a revised Privacy Notice. By using or receiving any services provided by Core & Main, you agree to the Privacy Notice’s terms and agree to the practices described below.
This Notice is written in the English language. We do not guarantee the accuracy of any translated versions of this Notice. To the extent any translated versions of this Notice conflict with the English language version, the English language version of this Notice shall control.
CHILDREN AND INDIVIDUALS UNDER THE AGE OF EIGHTEEN
The Service is not meant for individuals under the age of eighteen, and the Service may use mechanisms to prevent the registration and use of the Service by such underage individuals. Core & Main will never knowingly request or collect personal information from any child. If you are under eighteen years old, please do not provide your information on our Service. Upon notification that a child has provided us with personally identifiable information, we will delete the child’s personally identifiable information from our records. If you believe we might have any information from a child, please contact us.
COLLECTION OF PERSONAL INFORMATION
Information you provide to us
Core & Main will directly collect personal information about you and your business when you interact with our Service; create an account; sign up to receive offers or emails from us; purchase, order, return, exchange or request certain information about our products and services; contact us; visit or register with our Sites or App; provide us with comments or suggestions; or fill out surveys.
Information we obtain indirectly
We may also indirectly collect information about you or your business from our Service Providers and Marketing Partners that provide us with such information as a part of their relationship with us. We may combine this with data that we already have collected about you. Such collected data could include contact details (such as email address) and previous purchase history or interests.
Information collected automatically
When you use our Sites or our App, we may collect certain information about you or your business automatically through our use of cookies and similar technologies as explained in detail below.
CATEGORIES OF PERSONAL INFORMATION COLLECTED AND PURPOSE FOR COLLECTION
Core & Main collects the following categories of personal information: (1) contact information including your name, business name, job title, phone number, email address, street address, city, state, and zip code; (2) authentication information, including the username, customer account number, and password that you use to register an account on the Service; (3) financial information, including credit card numbers, account information, and financial institution details; (4) comments, reviews, suggestions; (5) personal preferences including product preferences, online preferences, and interests; (6) online behavior information including online activity, preferences, and average time spent viewing features or visiting our Sites or App; and (7) device and usage information, such as your IP address, browser and device characteristics (e.g. type and operating system), language preferences, referring URLs, device name, country, general geolocation, page requests, information about content viewed information or text entered, links or buttons clicked, average time spent on our Sites or App, and how and when you use our Service and other technical information.
If you are a job applicant, employee, owner, director, officer, or contractor of Core & Main (individually referenced in this Notice as “employee” and collectively referenced as “employees”), we also collect educational, professional, and employment–related information, which may include certain sensitive personal information. Specifically, we collect information such as your Social Security Number, driver’s license number or state ID card number, passport number, and other unique personal identifiers associated with you or other beneficiaries such as your spouse or child; employment and education history, professional licenses, marital or domestic partner status, date of birth, age, gender, classifications protected under state or federal Equal Employment Opportunity laws (such as race or national origin), medical condition or information, and health insurance information and policy number; precise geolocation history, including badge access and telematics data; and financial Information, including bank account, billing address, and information about your income and account balances.
Unless you are an employee, or as otherwise stated in a separate agreement, Core & Main does not collect sensitive personal information such as your social security, driver’s license, state identification card, or passport number; your account login, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; your racial or ethnic origin, religious or philosophical beliefs, or union membership; the contents of your mail, email and text messages, unless we are the intended recipient of the communication; your genetic data; your biometric information for the purpose of uniquely identifying you; and personal information collected and analyzed concerning your sex life or sexual orientation. We ask that you not send nor disclose this sensitive personal information to us.
Core & Main only collects and processes the minimum amount of personal information from you that is necessary to the purposes of our information processing activities and retains such information only if required to fulfill such purposes. To conduct our business, we engage in the following information processing activities:
  • Payment Processing. Core & Main collects and uses your financial information to process transactions you enter into with us (e.g., purchase of goods and services, refunds, discounts and offers), and may require users to register with Core & Main and provide information to make purchases.
  • Service Maintenance and Improvements. We collect information about your online behavior and device and usage information to monitor and improve our Sites and App.
  • Personalizing Your Experience on Our Sites and App. Registration is an optional service provided by some of our Sites or App. When you register, you may be asked for authentication information and contact information (collectively, “Registration Information”). This Registration Information may be used to help make your online shopping quicker and easier by pre-populating certain parts of your shopping information. This information may also be used to communicate, interact, and identify you and customize the content, products, and services that are offered to you. Registration is also used to verify your authority to enter into and use our Service and comply with legal requirements.
  • Marketing. Core & Main uses personal information, including information provided to us from our Service Providers, to continually assess and improve the products and services we offer. If you opt–in to receive such communications from us (i.e., when you register online or participate in a survey and sign up for emails about our products, services, sales, and special offers), we may inform your company about the products, services, sales, and special offers that might benefit your business. We may also send you email, faxes, mail, or call your business with information about our product and service offerings if you have provided us with your business’s name and address, email address, fax, or phone numbers, and if you have requested or consented to receive such communications.
  • Quality Management Services, Customer Communications, and Support. We use your company’s feedback, suggestions, survey information, and comments solely to monitor and improve the ways we serve you. If you request our assistance, we may also use your personal information to contact you to help you resolve any Service issues.
  • Legal Compliance. We also use your personal information to comply with legal requirements.
Core & Main may also collect certain non-identifying information, or aggregate information, such as anonymous demographic information including zip codes, dates of birth, customer preferences, information about customer computer hardware and software, as well as information about the links and pages that users access within Sites or the App. Certain non–identifying information may be considered personally identifiable information if combined with other information which may enable you to be identified (such as a zip code with a street address); however, the same information when taken alone or combined with other non–identifying information will be considered non–identifying information.
If you are an employee, we also collect and process personal information, including the categories of sensitive personal information described above, for employment–related purposes such as determining your eligibility for a position with the company; managing compensation, benefits, and employment–related expenses; managing professional development, performance, and conduct; protecting the company against illegal activity and other misconduct; undertaking activities to verify and maintain the quality, safety, and performance of our products and services; and complying with our legal obligations.
Where applicable, if Core & Main intends to further process your personal information for a purpose other than that for which the personal information was initially collected, Core & Main shall, prior to such processing, provide you with any relevant information on such additional purpose, and, to the extent required by applicable law, obtain your consent for this.
DISCLOSURE OF PERSONAL INFORMATION
Core & Main does not trade, rent, or sell your personal information to third parties, share your personal information with third parties for cross–context behavioral advertising, or process it for targeted advertising or consumer profiling. Core & Main does not share phone numbers collected for SMS consent with third parties or affiliates for marketing purposes. We may share or disclose your personal information for the following limited purposes:
  • Service Providers. We may share information with Service Providers who perform services and functions on our behalf to support our interactions with you. Our Service Providers may help us process payments, facilitate or improve the Service, provide customer support, perform website–related services (e.g., without limitation, maintenance services, database management, web analytics, and improvement of the Service’s features), or assist Core & Main in analyzing how the Service is used. These Service Providers have access to your personal information only to perform these tasks on Core & Main’s behalf and do not have the right to use personal information we share with them beyond what is necessary to assist us. Additionally, these Service Providers must adhere to confidentiality, security, and legal obligations in a way that is consistent with this Notice and any applicable law.
  • Legal Disclosure. Core & Main cooperates with government and law enforcement officials and private parties to enforce and comply with the law. Accordingly, we may disclose any information about you to government or law enforcement officials or private parties as Core & Main, in its sole discretion, believes necessary or appropriate to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of Core & Main, a user of the Service, or a third party, to protect the safety of the public or any person, to take emergency action, or to prevent or stop activity Core & Main considers to be or to have the potential to be, illegal, unethical, or legally actionable. In addition, Core & Main may disclose information about you to counter or prevent any malicious access or use of the Service or to prevent harm or loss to any user of the Service.
  • Transfer in the Event of Sale or Change of Control. Core & Main may provide your personal information to a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Core & Main’s assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information maintained by the Service is among the assets transferred. In such a case, unless prohibited by applicable law, your information would remain subject to the privacy policy applicable at the time of such transfer, unless you discontinue use of our Service.
  • Voluntary Disclosure of Personal Information. Your personal information may be shared when you voluntarily post, or authorize a third party to post on your behalf, to our wikis, forums, blogs, message boards, chat rooms and other social networking environments or Sites or App.
  • Aggregate Information. We may also share non–identifying information, such as aggregate statistics or usage information, with third parties for advertising, research, analytics or similar purposes. Specifically, this non–identifying information may be used to demonstrate how Core & Main is used, spot industry trends, or provide marketing materials for Core & Main. Any aggregated information shared in this way will not contain any personal information, and Core & Main is not limited in our use of aggregate information that does not permit direct association with any specific individual, such as the number of users of our services, the geographic distribution of our users, the amount of information located or removed, etc. For example, Core & Main may use aggregate information concerning which links and pages users access within the Sites or App for many reasons, including to determine which products and services are the most popular. This data may be used to deliver customized content and advertising to customers whose behavior indicates that they are interested in a particular subject area.
  • Your Consent to Have Your Personal Information Shared. Core & Main may share personal information with third parties when we have your consent to do so. If you agree to have your personal information shared with a third party, your personal information will be disclosed to the third party and will be subject to the privacy policy and business practices of that third party. To the extent that we obtain your consent to process your personal information, you may withdraw this consent at any time by emailing us at: [email protected]
DO NOT TRACK SIGNALS, COOKIES, AND OTHER TECHNOLOGIES
We may use “cookies” to help us process your order and to customize information that we may present to you. We may also use web beacons, pixel tags, mobile analytics software, log files, or other technologies to collect certain information about your online activity and interactions with our emails, online and mobile advertisements, and to allow us to keep track of analytics and certain statistical information that enables Core & Main to improve our services and provide you with more relevant content and advertising offered by Core & Main or through or linked from our services.
  • Cookies. Our Sites use cookies to improve the overall function and efficiency of our Sites. We utilize Google Analytics, and for more information on how Google Analytics collects and processes data, please visit www.google.com/policies/privacy/partners/. We also use Hotjar to monitor user interactions with the Service, and for more information on how Hotjar collects and processes data, please visit https://www.hotjar.com/legal/policies/privacy/.
A cookie is a tiny element of data that our Sites and our third party technology providers can send to your browser, which may then be stored on your hard drive so we can recognize you when you return. All pages on our Sites where you are prompted to log in or that are customizable require that you accept cookies. If you have registered with our Sites, these cookies (1) may let us know who you are, (2) are necessary to access your account information (stored on our computers) in order to deliver products and personalized services, and (3) will provide us and our Service Providers with information that we will use to personalize our Sites in accordance with your preferences.
Cookies are also required to optimize your shopping experience in that they allow you to add multiple items to your shopping basket before checking out and help us to recommend relevant products to you.
You can control what cookies your Web browser accepts through your browser settings. You may set your Web browser to accept all cookies, limit the cookies your browser accepts, or notify you when you receive a cookie. However, please note that some aspects of our Sites may not function properly, which could impact your experience, should you decide not to accept cookies from our Sites. Similarly, you may set your mobile device to refuse to provide certain information, but certain features of the Service may also not work without such information. It is not our intention to use cookies to retrieve information that is unrelated to our Service or your interaction with our Service.
  • Web Beacons. Our Sites may also use a technology called “web beacons.” These may also be referred to as “tags,” “Clear GIFs,” or “tracking pixels.” Web beacons are tiny, unobtrusive graphics embedded on a web page that signal a user has accessed content. This technology allows us and our third–party technology providers to understand which pages you visit on our Sites. These web beacons do not collect any business or personally identifiable information and are used to help us optimize and tailor our Sites for you and other future website visitors.
At this time, we do not respond to browser “do not track” or “DNT” signals.
LINKED SITES
Our Service may contain links to third–party owned or operated websites including, without limitation, social media websites (“Linked Site”). When you click on a link to a Linked Site, you will leave our Service and go to that Linked Site, and another entity may collect personal information or anonymous data from you. We have no control over, do not review, and cannot be responsible for, these Linked Sites or their content. Please be aware that the terms of this Notice do not apply to these Linked Sites or their content, or to any collection of your personal information by third parties through the Linked Sites.
Core & Main expressly disclaims any liability that may arise from your use or provision of any of your information whatsoever to Linked Sites. You understand and agree that by clicking on a link to a Linked Site that you have left our Service.
SUBMISSIONS
Some features of the Service may now or in the future allow you to provide content, such as written comments or reviews, product images, or interactive responses to content such as quizzes or surveys, to be published or displayed on public areas of the Service (“Submissions”). Be careful about giving out information in public areas of the Service. The information you share in public areas may be viewed by any user of the Service. We cannot control the actions of other users of the Service with whom you may choose to share your Submissions.
OPTING OUT OF CERTAIN EMAILS
When you register, create an account, sign up to receive offers or emails from us, or otherwise communicate with us through our Service, you may “opt out” of receiving future communications from us for direct marketing purposes by indicating that you decline such communications. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or contacting us at [email protected].
CHANGES TO OUR PRIVACY NOTICE
We reserve the right to change or modify this Notice or any of our tools or services at any time, and any changes are effective upon being posted unless we advise otherwise. If we make any material changes to this Notice, we will notify you by email or post a notice on this website before the change becomes effective. We encourage you to frequently review this website for the latest information on our privacy practices. Use of information we collect now is subject to the Privacy Notice in effect at the time such information is used. You are bound by any changes to our Privacy Notice when you use the Service after such changes have been first posted. If you do not accept the terms of our Privacy Notice, we ask that you do not register with us and that you do not use our Service. Please exit the Service immediately if you do not agree to the terms of this Privacy Notice.
SECURITY MEASURES ON OUR SITES
If you choose to provide us with your personal information, you understand that we are transferring it to Core & Main’s locations and systems in the United States or to the locations and systems of Core & Main’s service providers around the world. Core & Main uses reasonable security measures control and has safeguards and security controls in place to protect your personal information. Specifically, Core & Main implements appropriate technical and organizational measures to protect the personal information (i) from accidental or unlawful destruction, and (ii) loss, alteration, unauthorized disclosure of, or access to the data. Core & Main also uses encryption protocols for sensitive information, such as credit card or payment information, and obtains written assurances from any third–party data processors given access to your data so as to require them to adopt standards that ensure an equivalent level of protection for data as that adopted by Core & Main. These measures may change from time to time, depending on industry standards and perceived security risks.
Please be advised, however, that while we take reasonable security measures to protect your personal information, such measures cannot be guaranteed to be secure. Core & Main cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security, and improperly collect, access, steal, or modify your personal information. For this reason, Core & Main disclaims liability for loss, misuse, and alteration of your information under its control to the maximum extent permitted under applicable law. By using the Service, you agree to assume any security risk related to personal information.
The security of your Core & Main account relies on your protection of your user profile information. You are responsible for maintaining the security of your user profile information, including your password and for all activities that occur under your account. You may not share your password with anyone. We will never ask you to send your password or other sensitive information to us in an email, though we may ask you to enter this type of information on a Core & Main Site or App. Any email or other communication purporting to be from us or one of our Services requesting your password or asking you to provide sensitive account information via email, should be treated as unauthorized and suspicious and should be reported to us immediately by using the “Contact Us” feature of our website or writing to us at the addresses provided below. If you believe someone else has obtained access to your password, please change it immediately by logging in to your account and report it immediately by using the “Contact Us” feature of our website or writing to us at the addresses provided below.
CONSENT TO PROCESSING AND INTERNATIONAL TRANSFERS
Core & Main is a U.S.–based business and may process, transfer, and store information about users of the Service on servers located in a number of countries, including the United States. As a result, your personal information may be subject to data protection and other laws that may differ from your country of residence. Your personal information may be disclosed in response to inquiries or requests from government authorities or to respond to judicial process in the countries in which we operate. By using the Service, or by providing us with any information, you consent to the collection, processing, maintenance, and transfer of such information in and to the United States and other applicable territories in which the privacy laws may not be as comprehensive as, or equivalent to, those in the country where you reside or are a citizen.
SPECIAL NOTICE TO CALIFORNIA RESIDENTS
If you would like to submit a Consumer Request, you can call Core & Main, toll–free, at 1-800-492-6909 or email [email protected] to submit a Consumer Request. If you choose to submit a Consumer Request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information if we cannot verify that the person making the Consumer Request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf. “Personal information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include publicly available information.
  • Request to Correct. You may correct or update your personal information at any time by logging into your account or by contacting us.
  • Request to Access. You may submit a Consumer Request to obtain a copy of or access to the personal information that we have collected on you.
  • Request to Know. You may submit a Consumer Request to receive information about our data collection practices.

    • Right to Know what Personal Information is being Collected. You may request information on the categories of personal information we have collected about you; the categories of sources from which the personal information is collected; our business or commercial purpose for collecting, selling, or sharing personal information; the categories of third parties to whom we have disclosed personal information, if any; and the specific pieces of personal information it has collected about you.
    • Right to Know what Personal Information is Sold or Shared and to Whom. You may also request the categories of personal information that we have collected about you; the categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each category of third parties to whom the personal information was sold or shared, and the categories of personal information that we have disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.

Please note that the categories of personal information, sources, and disclosure will not exceed what is contained in this Notice. Additionally, we are not required to retain any information about you if it is only used for a one–time transaction and would not be maintained in the ordinary course of business. We are also not required to reidentify personal information if it is not stored in that manner already, nor is it required to provide the personal information to you more than twice in a twelve–month period.
  • Request to Limit the Use of Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment–related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may request that we limit the use or disclosure of your sensitive personal information.
  • Request to Delete. You may request that we delete personal information it has collected from you. Subject to certain exceptions set out below we will, on receipt of a verifiable Consumer Request, delete your personal information from our records, direct any service providers to do the same, and notify all third parties to whom we have shared your personal information to delete it unless this proves impossible or involves disproportionate effort.
  • Please note that we may not delete your personal information if it is necessary to:

    • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the consumer, or reasonably anticipated by the consumer within the context of a business’ ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer.
    • Help to ensure security and integrity to the extent the use of the consumer’s personal information is reasonably necessary and proportionate for those purposes.
    • Debug to identify and repair errors that impair existing intended functionality.
    • Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
    • Comply with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12 of Part 2 of the Penal Code.
    • Engage in public or peer–reviewed scientific, historical, or statistical research that conforms or adheres to all other applicable ethics and privacy laws, when the business’ deletion of the information is likely to render impossible or seriously impair the ability to complete such research, if the consumer has provided informed consent.
    • To enable solely internal uses that are reasonably aligned with the expectations of the consumer based on the consumer’s relationship with the business and compatible with the context in which the consumer provided the information.
    • Comply with a legal obligation.

  • Right to Access Information About Automatic Decision-Making. We do not currently engage in automated individual decision–making. However, in the event we ever do so, we will inform you of such change and you may request information about and opt out of such automated decision-making.
  • Right to Data Portability. You may also request that we transfer your personal information to another entity, to the extent such transfer is technically feasible.
We may not, and will not, treat you differently because of your Consumer Request activity. As a result of your Consumer Request activity, we may not and will not deny goods or services to you; charge different rates for goods or services; provide a different level quality of goods or services; or suggest any of the preceding will occur. However, we can and may charge you a different rate, or provide a different level of quality, if the difference is reasonably related to the value provided by your personal information.
SPECIAL NOTICE TO NEVADA RESIDENTS
Core & Main does not sell, rent, or lease your personally identifiable information to third parties. However, if you are a resident of Nevada and would like to submit a request not to sell your personally identifiable information, you may do so by emailing us at [email protected]. or calling us at 1–800-492-6909.
SPECIAL NOTICE TO VIRGINIA RESIDENTS
Personal information or “personal data” means “any information that is linked or reasonably linkable to an identified or identifiable natural person.” “Personal data” does not include de–identified data or publicly available information.
  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data provided by or obtained about you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt–Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt–out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Virginia Attorney General or submit a complaint online at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment–related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.
If you’d like to make any of the above requests, you can call us, toll–free, at 1-800-492-6909 or email [email protected] to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.
SPECIAL NOTICE TO COLORADO RESIDENTS
Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de–identified or publicly available information.
  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt–Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Right to Data Portability. You may also request that we transfer your personal information to you or another entity, to the extent such transfer is technically feasible.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt–out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Colorado Attorney General.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment–related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.
If you’d like to make any of the above requests, you can call us, toll–free, at 1-800-492-6909 or email [email protected] to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.
SPECIAL NOTICE TO CONNECTICUT RESIDENTS
Personal information or “personal data” means “information that is linked or reasonably linkable to an identified or identifiable individual.” “Personal data” does not include de–identified or publicly available information.
  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data it has collected on you. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt–Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising or consumer profiling. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising or consumer profiling.
  • Appeal. If we notify you that no action is to be taken in response to your request to access, correct, delete, or opt–out, you may appeal this decision by contacting us within 30 days with the reason why you believe further action should be taken. If you are not satisfied with the result of the appeal, you may contact the Connecticut Attorney General or submit a complaint online at https://portal.ct.gov/AG/Common/Complaint–Form-Landing-page.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment–related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.
If you’d like to make any of the above requests, you can call us, toll–free, at 1-800-492-6909 or email [email protected] to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if it cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.
SPECIAL NOTICE TO UTAH RESIDENTS
Personal information or “personal data” means “information that is linked or reasonably linkable to an identified individual or an identifiable individual.” “Personal data” does not include deidentified data, aggregated data, or publicly available information.
  • Request to Access. You may submit a request to confirm or to obtain a copy of or access to the personal data that we have collected on you including what the data is, how it’s been used, and who it’s been disclosed to. Your personal data may no longer be available because it has been destroyed, erased, or made anonymous in accordance with our data retention policies in which case we will provide you with the reasons why the personal data no longer exists where possible.
  • Request to Correct. You may correct or update your personal data at any time by logging into your account or by contacting us.
  • Request to Delete. You may request that we delete the personal data that you have provided to us. We will delete your personal data from our records and direct any service providers to do the same unless retention is required by law.
  • Request to Opt–Out. You may submit a request to opt out of the sale of your personal data as well as its processing for targeted advertising. We do not sell, rent, or lease your personal data to third parties and do not process your personal data for targeted advertising.
  • Withdraw Consent for Your Sensitive Personal Information. We do not collect, use, or disclose sensitive personal information, unless you are an employee, in which case we collect, use, and disclose certain sensitive personal information only for employment–related purposes reasonably expected by employees. However, if you believe that we may have collected sensitive personal information about you, you may withdraw your consent to any use or disclosure of your personal sensitive information.
If you’d like to make any of the above requests, you can call us, toll–free, at 1-800-492-6909 or email [email protected] to submit a Consumer Request. If you choose to submit a request, you must provide us with enough information to identify you (e.g., your first and last name, email address, and telephone number) and enough specificity on the requested data. We will only use the information we receive to respond to your request. We will not be able to disclose information or comply with your request if we cannot verify that the person making the request is the person about whom we collected information, or someone authorized to act on such person’s behalf. We will verify your request by comparing the information you provide with the information we have on you and, if your request is submitted by an authorized agent, we will require you to provide signed, written permission for such agent to act on your behalf.
HOW TO CONTACT US
We want to assure you that Core & Main is dedicated to protecting the confidentiality and security of your personal information. Please feel free to contact us at any time if you have any questions or comments about this Privacy Notice.
You can contact us or otherwise communicate your privacy concerns by:
  • Calling us at (314) 432-4700
  • E-mailing us at [email protected]
  • Accessing your registration information on our Sites or App
  • Writing us at Core & Main LP, 1830 Craig Park Court, St. Louis, MO 63146