Privacy Policy

Privacy Policy

Effective date July 20, 2021

This Privacy Policy describes how GAF Materials LLC d/b/a GAF and GAF Canada ULC and their direct and indirect subsidiaries (“Company,” “we,” “us,” or “our”) collect and process your personal information, including the types of personal information we hold about you, our purposes for processing that information, the entities with which we share personal information, and your rights with respect to this information. Personal information is information about an identifiable individual and includes information, or a combination of pieces of information, that can be used to identify you, or, in certain jurisdictions, your device or household. This Privacy Policy applies to all instances in which you provide, or we otherwise collect, personal information, including, but not limited to, through or in connection with (a) our products and services, such as by registering for any of our product warranties or guarantees; (b) our emails and digital platforms, such as social media platforms, portals, websites, and applications, and accounts and subscriptions for such digital platforms (collectively, “our digital platforms”) that link to this Privacy Policy; and (d) our electronic communications, with two exceptions: this Privacy Policy does not apply to personal information that we handle (i) in our capacity as an employer, or (ii) solely on behalf of a contractor or other third party.

By providing us with your personal information, you agree to this Privacy Policy. Your agreement to this Privacy Policy includes changes that we may make to this Privacy Policy as described in the “We may update this Privacy Policy” section below.

The following two sections of this Privacy Policy are our “Notice at Collection” for purposes of the California Consumer Privacy Act (“CCPA”), but they also apply outside California.

We collect personal information from and about you.
Information collected directly from you. We collect the information you provide to us, for example, by making purchases of our products and services, such as registering for one of our product warranties or guarantees or purchasing a subscription to one of our digital platforms; registering for, and entering information on, our digital platforms; or posting in public forums. We may receive the following types of personal information directly from you:

identifiers (e.g., name, mailing address, email address, phone number, username, and password);
protected characteristics (e.g., gender, age, or other classifications under applicable law);
family details (e.g., name of partner or household members);
financial information (e.g., income, bank account information, bank or credit card information, and payment information);
professional or employment-related information (e.g., job title, department, office address and business contact information, professional communications, and correspondence);
communications (e.g., responses to polls or surveys, questions, comments, or requests you send us);
audio, electronic, visual, thermal, olfactory, or similar information (e.g., graphics, photographs, and recordings of calls or meetings);
commercial information (e.g., records of transactions);
internet or other electronic network activity information (e.g., browsing history, search history, and interactions with our emails and digital platforms (including downloads) and third party websites and applications)
geolocation data; and
inferences drawn from any of the information identified herein.

By providing information to us, you represent and warrant that you own or otherwise control all of the rights to the content that you provide to us; that the content is accurate; and that our use of the content you supply to us does not, and will not, violate this Privacy Policy and will not cause injury to any person or entity. We take no responsibility and assume no liability for any content provided by you or any third party.

Information we collect automatically or generate about you. We, our service providers, and other businesses that support our business operations, including, but not limited to, third party providers of advertising or analytics services, may use technologies like cookies and pixel tags to automatically collect information when you access our digital platforms or interact with our electronic communications. The information that we collect automatically or manually may include technical information from or about your computer, mobile device or Wi-Fi network (including SSID and password for certain applications), DHCP, the browser you use, your search history, the number of times you visit our digital platforms, the device you use, identifiers associated with your device, your device’s operating system, the content you view on our digital platforms, the content you view immediately before and after using our digital platforms, product preferences, and the programs and services you use with us or others. We, our service providers, and third parties (e.g., network advertising companies) may collect information about your online activities over time and across different websites when you use our digital platforms. For more information about the cookies we use please see our Cookie Notice.

Information collected from third parties. We may obtain information about you from third parties. For example, our business partners (such as lead providers, roofing contractors, search engines, data brokers, and their representatives) may provide us with information about you. The types of personal information we may obtain from third parties may include, without limitation, and to the extent permitted by applicable law, the categories set out above.

We use personal information as described here.
We use information to provide you with services, including, without limitation, on our digital platforms or in connection with our products and services, and to respond to your requests, inquiries, comments, and questions.

We use information to troubleshoot and improve our products and services, including, without limitation, our digital platforms. We may use the information we collect to customize your experience with us. We use information for marketing purposes. For example, we might use the information we collect to send you information about products, services or special offers that we believe may interest you. This might include information about upcoming contests or promotions. We may use the information we collect to deliver advertisements based on your activities on our digital platforms and third party websites and applications. For example, if you view one of our products on our website, you may receive an online ad for that product or a related product on our digital platforms or on third party websites and applications. For more information see our Cookie Notice.

We use information to communicate with you about your accounts, your subscriptions, or our relationship. For example, we might tell you about changes to our digital platforms or to your accounts or subscriptions with us. Or we might reach out to you and ask you to take a customer satisfaction survey.

We may use the information we collect for analytical purposes, such as to better understand the interests and preferences of our customers, people who use our digital platforms, and people who buy our products and services. For example, we may use information to generate and analyze aggregate statistics about how users interact with our digital platforms.

We may combine the information we collect. For example, we might combine information you give us with information we get from a public source. We might also combine information we collect from you with information we get from third parties. When we do so, we treat the combined information as disclosed in this Privacy Policy.

We use information as permitted or required by law and as otherwise disclosed to you. For example, we may use the information we collect to protect the rights and property of us, you, and others; to comply with any legal or regulatory obligations; to handle legal claims or disputes; or to otherwise operate our business.

Some of these uses involve what the CCPA labels a “sale” of personal information. Californians can exercise their right to opt out of eligible “sales” by visiting our Do Not Sell My Personal Information page.

We share personal information with third parties.
We will share information with other members of our corporate family for all reasons described in this Privacy Policy.

We will share information with service providers (including affiliates) who perform services on our behalf, in which cases your personal information may be used for any of the purposes set forth in this Privacy Policy, but only as directed by us for the purposes of performing certain services. For example, we may share your information with vendors that handle credit card processing and shipping, provide us with data management services, manage our digital platforms, provide advertising services, or manage our communications and perform market research for us.

We may share information with third parties, such as marketing partners or contractors, who may use your information for their own purposes, not solely on our behalf, and some of which may not be subject to the same data protection laws that govern our handling of personal information. For example, we might share information with a company with whom we are running a joint promotion, or with online network advertisers and similar companies to facilitate the delivery of marketing communications on our digital platforms and third-party websites and applications. Those communications may include ads regarding our or others’ products based on your interests. We may use third party analytics providers that collect information about your use of our digital platforms to help us understand how people interact with our digital platforms. For more information, see our Cookie Notice.

We will share information in order to comply with the law or to protect the Company. For example, we or our service providers will share your information with legal authorities when it is permitted or necessary to do so such as in response to a search warrant or other legally valid inquiry or order, or we may share the information with another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing, or preventing fraud, or as otherwise may be required or permitted by applicable U.S., Canadian, or other law or legal process, which may include lawful access by U.S. or foreign courts, law enforcement or other government authorities. We may also share your information in situations where we think that our rights or the rights of our users or others are at risk. We may share information with any successor to all or part of our business. We may share your information as part of or as reasonably necessary to proceed with a prospective or completed transfer of business assets.

We may share information for other reasons we may describe to you. And we may share aggregate information or information that does not reasonably identify you with third parties for any reason.

Your privacy rights.
Subject to local law, you may have certain rights in relation to your personal information. Such rights may include the following rights to: access your personal information; update your personal information; have inaccurate information corrected; request that your personal information be deleted; limit the use or disclosure of your personal information; or request to receive your personal information in a usable electronic format that can be transmitted to a third party. We will fulfill your data requests in accordance with applicable law.

To exercise these rights, you may be required to provide additional information to verify your identity or otherwise as necessary to assist us in fulfilling your request. Please use the contact details below for more information or to exercise available rights please click here.

Notice to California Residents:

The following section provides detailed information applicable to California residents under the CCPA.

Collection, Use, and Disclosure of California Personal Information
During the 12 months leading up to the effective date of this Privacy Policy, we have collected all of the types of personal information described in the “We collect personal information from and about you” section of this Privacy Policy. During that period, we made the following disclosures of personal information about Californians for the purposes described in the “We share personal information with third parties” section above:

Category of personal information	Categories of third parties to which it was disclosed
identifiers (e.g., name, mailing address, email address, phone number, username, and password)	Affiliates; vendors (e.g., vendors that handle credit card processing and shipping, provide us with data management services, manage our digital platforms, or manage our communications and perform market research for us) and third parties such as marketing partners or contractors
protected characteristics (e.g., gender, age, or other classifications under applicable law)	Same as first row, except not to vendors that handle credit card processing and shipping
family details (e.g., name of partner and household members	Same as first row
financial information (e.g., bank account information, bank or credit card numbers, and payment information)	Same as first row (though in some cases a portion of the card number is shared instead of the entire number).
professional or employment-related information (e.g., job title, department, office address and business contact information, professional communications, and correspondence)	Same as first row
communications (e.g., responses to polls or surveys, questions, comments, or requests you send us)	Same as first row, except not to vendors that handle credit card processing and shipping
audio, electronic, visual, thermal, olfactory, or similar information (e.g., graphics, photographs, and recordings of calls or meetings)	Same as first row, except not to vendors that handle credit card processing and shipping
commercial information (e.g., records of transactions)	Same as first row
internet or other electronic network activity information (e.g., browsing history, search history, and interactions with our digital platforms and third party websites and applications)	Same as first row, except not to vendors that handle shipping
geolocation data	Same as first row, except not to vendors that handle credit card processing
Inferences drawn from any of the information identified herein	Same as first row, except not to vendors that handle credit card processing and shipping

During the 12 months leading up to the effective date of this Privacy Policy, we “sold” (as that term is defined under the CCPA), commercial information (transaction data) and internet or electronic network activity (like a record of a browser’s visit to our website) to marketing and advertising services to assist with such activities. This practice continues today. We do not “sell” personal information if we have actual knowledge that the consumer is less than 16 years of age.

Your CCPA Information & Deletion Rights
The CCPA allows you to request us to:

Inform you about the categories of personal information we have collected about you in the preceding 12 months; the categories of sources of such information; the business or commercial purpose for collecting or selling your personal information; and the categories of third parties with whom we share personal information, and more specific detail about what categories of information were sold or disclosed to particular categories of third parties, similar to the detail above this section of the Privacy Policy;
Provide access to and/or a copy of certain personal information we hold about you; and
Delete certain personal information we have about you.

If you would like to exercise any of these rights, you may submit your request by completing this CCPA Data Request Form or contacting us as described at the end of this Privacy Policy. Although not legally required, we welcome these types of requests from all US customers, and we will consider each request on a case by case basis.

Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide our services to you. We also will take reasonable steps to verify your identity before responding to your request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name, email address, and other information regarding your use of the services.

Your CCPA Right to Opt Out of “Sale” of Personal Information
Californians have a right to direct us not to “sell” certain personal information as that term is defined in the CCPA. You can exercise that right by performing BOTH of the following steps:

Complete our CCPA Data Request Form or contact us as described at the end of this Privacy Policy; AND
If you’d like your request to include CCPA “sales” that happen through cookies and related technology on our websites, then, in each browser you use, click the Cookie Preferences link in the footer of our website, deactivate Performance Cookies and Targeting Cookies by moving their switches to the left (if they aren’t already there), and click the “Confirm My Choices” button below them. You’ll need to repeat this process in a browser if you clear your cookies in that browser.

We may take reasonable steps to verify the validity of your request.

Requests Made by Agents
If you are an agent making a request on behalf of a consumer, we reserve the right to take steps to verify that you are authorized to make that request, which may include requiring you to provide us with written proof such as a notarized authentication letter or a power of attorney. We also may require the consumer to verify their identity directly with us. Because opt-out requests for sales made through cookies and related technology must be performed from each browser that is used to access our services, it is easiest for the consumer to perform such opt-outs themselves. However, if a consumer wishes for an agent to perform browser-based requests on their behalf, the consumer may arrange for the agent to use the consumer’s browser to make such requests. We are not responsible for the security risks of this or any other arrangements that a consumer may have with an agent.

Nondiscrimination
You also have a right not to receive “discriminatory treatment” (within the meaning of the CCPA) for the exercise of the privacy rights conferred by the CCPA. You have certain choices about marketing.

You can opt out of receiving our marketing emails. If you are a registered user of our digital platforms, you can opt out of marketing emails by clicking here. You can also follow the “unsubscribe” instructions in any promotional message you get from us. Even if you opt out of getting marketing messages, we may still send you service-related announcements and transactional messages. In our applications, you may be able to disable push notifications within the settings menu.

Our websites allow you to control cookies on their websites. How you do so depends on the type of cookie. Certain browsers can be set to reject browser cookies. Flash cookies cannot be controlled through browser settings; to control flash cookies go here. If you choose to block cookies, you may not be able to take advantage of all aspects of our digital platforms. For more information about the cookies we use please see our Cookie Notice.

In addition, you can learn about opting out of receiving interest-based ads from some or all participating companies by clicking here.

Our digital platforms and children.
Our digital platforms are intended for people who are 13 years of age or older. We do not knowingly collect personal information from children under 13 without permission from a parent or guardian. If you are a parent or legal guardian and think your child under 13 has given us personal information, you can email us at privacy@gaf.com. You can also write to us at the address listed at the end of this Privacy Policy. Please mark your inquiries “CPPA Information Request.”

Parents, you can learn more about how to protect children's privacy online here.

We use security measures.
We use security measures to protect our systems, our digital platforms, and the personal information we hold. Please be aware that, despite our ongoing efforts, no security measure is perfect or impenetrable.

We process your information in the United States and elsewhere.
We process your information in the United States and elsewhere. In some cases, our service providers may transfer or store your information in the United States, or another foreign jurisdiction, that may not have the same legal protections as your home country. Additionally, information located outside of your home country may be subject to access by that country’s government or its agencies under lawful order. We keep personal information as long as it is necessary or relevant for the practices described in this Privacy Policy. We also keep information as otherwise required by law.

Our digital platforms offer links to other websites and third party services that we don’t control.
If you click on a link to a third party website, you will be taken to a website or application that we do not control such as our business partners’ websites or social media networks. Please read the privacy policies of any third party websites or applications that you visit. Unless otherwise indicated, your use of those websites or applications will not be governed by this Privacy Policy, and we are not responsible for those third party practices. Our digital platforms may also have third party content or services we do not control. This may include passive tracking tools.

Contact us if you have any questions.
If you have any questions about this Privacy Policy or about the manner in which we or our service providers treat your personal information, or if you wish to exercise any available rights with respect to your personal information, please contact our Litigation & Compliance Counsel at: Privacy@gaf.com.

You can also call or write us at:

GAF Materials LLC d/b/a GAF
(973) 628-3000
1 Campus Drive
Parsippany, NJ 07054

We may update this Privacy Policy.
From time to time we may change our privacy practices, and we will update this Privacy Policy accordingly. We will notify you of any material changes to this Privacy Policy as required by law. We will also post an updated copy on our website. Please check our website periodically for updates.