Privacy Policy
Privacy Policy
Effective date February 1, 2026
This Privacy Notice describes how GAF Materials LLC d/b/a GAF, GAF Canada ULC, GAF Energy LLC, and their direct and indirect subsidiaries that do not maintain their own privacy policy (collectively, “Company,” “we,” “us,” or “our”) collect, process, and disclose your personal information (including sensitive personal information).
This Privacy Notice applies to all instances in which you provide, or we otherwise collect, personal information, including, but not limited to, through or in connection with (a) our products and services, such as by registering for any of our product warranties or guarantees; (b) our emails and digital platforms, such as social media platforms, portals, websites, and applications, and accounts and subscriptions for such digital platforms (collectively, “our digital platforms”) that link to this Privacy Notice; and (c) our electronic communications.
Please read this Privacy Notice carefully to understand how we handle your information. We will notify you of any material changes by posting the updated policy on this page and, where required by law, seeking your affirmative consent for new ways we may use your data.
Who This Notice Covers
This Privacy Notice covers consumers and individuals acting in a personal context. Except where required by law, this Notice does not apply to personal information we collect from our own employees acting within the scope of their employment or job applicants in an applicant capacity. Except where required by law, this Notice does not apply to personal information we collect from employees of our business partners or vendors acting in a purely commercial context.
Our Data Collection Practices
Personal information is information about an identifiable individual and includes information, or a combination of pieces of information, that can be used to identify you, or, in certain jurisdictions, your device or household.
The following table summarizes the categories of personal information we collect, the purposes for collection, and whether we “sell” or “share” this information, as defined by applicable privacy laws.
| Category of Personal Information | Examples | Primary Purposes | Sold or Shared? * |
| Identifiers | Name, email, mailing address, IP address, account login credentials | Service delivery, warranty registration, account security, lead qualification, contacting you about your inquiries | Yes (to marketing partners) |
| Work and communication details | Job title, department, business contact info, and professional correspondence; responses to polls, surveys, questions, or comments | Business-to-business relations, customer feedback, and certification tracking | Yes (to marketing partners) |
| Family information | Gender, age, partner or household member names | Marketing personalization and warranty verification | No |
| Financial information | Credit card number, bank account details | Payment processing, fraud prevention | No |
| Commercial Info | Purchase history, warranty coverage, training records, program status, and product preferences | Order fulfillment, analytics, and personalized offers | Yes (to analytics partners) |
| Photos, Recordings & Environmental Data | Call recordings, roof photos, project images, and ambient conditions like humidity, temperature, or thermal data | Quality assurance, claims processing, and product research | No |
| Internet Activity | Browsing and search history, interactions with our digital platforms, and email downloads | Website optimization, targeted advertising | Yes (shared for cross-context ads) |
| General Location | General location (City/State/Zip) | Territory management, contractor matching | Yes |
| Precise Geolocation | Precise GPS coordinates (e.g., tracking for company vehicles, Standard Logistics trucks or trailers) | Strictly Necessary for logistics and delivery tracking only | No |
| Inferences | Predicted purchasing behavior, preferences | Marketing personalization and potential profiling for commercial purposes | Yes |
What Information We Collect About You
We collect personal information from three primary sources.
- Information You provide directly. We collect the information you provide on our digital platforms or provide to our teams. For example, you provide information to us by purchasing our products and services, such as registering for one of our product warranties or guarantees or purchasing a subscription to one of our digital platforms; registering for, and entering information on, our digital platforms; or posting in public forums. We may receive various types of personal information directly from you, including identifiers like your name and contact info, financial details for purchases, and commercial history. A full list of these categories and examples can be found in the 'Notice at Collection' table at the beginning of this policy.
You represent and warrant that you own or otherwise control all of the rights to the information, materials and other content that you provide to us; that such information, materials and other content is accurate; and that our use of such information, materials and other content does not, and will not, violate this Privacy Notice or cause injury to any person or entity. We take no responsibility and assume no liability for any information, materials or other content provided to us by you or any third party.
- Information we collect automatically or generate about you. We, our service providers, and other businesses that support our business operations, including, but not limited to, third party providers of advertising or analytics services, may use technologies like cookies, other forms of local storage, pixel tags, JavaScript, web beacons, and other computer code to automatically collect information when you access our digital platforms or interact with our electronic communications. The information that we collect automatically or manually may include technical information from or about your computer, mobile device or Wi-Fi network (including, but not limited to, SSID and password for certain applications), DHCP, the browser you use, your search history, the number of times you visit our digital platforms, the device you use, identifiers associated with your device, browser or internet connection (such as IP address), your device’s operating system, the content you view on our digital platforms, the content you view immediately before and after using our digital platforms, product preferences, and the programs and services you use with us or others, as well as data from connected devices, such as ambient humidity or temperature. We, our service providers, and third parties (e.g., network advertising companies) may collect information about your online activities over time and across different websites when you use our digital platforms. In some cases (such as cookies), the tools described here may involve reading information on your device (such as unique identifiers) or storing such information on your device for later review.
- Information collected from third parties. We may obtain information about you from third parties. For example, our business partners (such as lead providers, roofing contractors, search engines, social media networks, data brokers, and their representatives) may provide us with information about you. The types of personal information we may obtain from third parties may include, without limitation, and to the extent permitted by applicable law, the categories set out above.
How We Use Your Information
We use information to provide you with services, including, without limitation, on our digital platforms or in connection with our products and services, and to respond to your requests, inquiries, comments, and questions. We use your telephone number to qualify leads, verify your interest in our products, and connect you with local contractors. In doing so, we will only contact you via automated dialing systems or SMS for these commercial purposes with your prior express written consent, which you may withdraw at any time. We also use information to provide contractors and others with services.
We use information to troubleshoot and improve our products and services, including, without limitation, our digital platforms. We use information to improve our internal operations and business processes, including through the use of automated tools and technologies to enhance service efficiency and accuracy. We may use the information we collect to customize your experience with us. We use information for online and offline marketing purposes. For example, we might use the information we collect to send you information about products, services or special offers that we believe may interest you. This might include information about upcoming contests or promotions. We may use the information we collect to deliver advertisements based on your activities on our digital platforms and third party websites and applications. For example, if you view one of our products on our website, you may receive a postcard or an online ad for that product or a related product on our digital platforms or on third party websites and applications.
We use information to communicate with you about your accounts, your subscriptions, or our relationship. For example, we might tell you about changes to our digital platforms or to your accounts or subscriptions with us. Or we might reach out to you and ask you to take a customer satisfaction survey.
We may use the information we collect for analytical purposes, such as to better understand the interests and preferences of our customers, people who use our digital platforms, and people who buy our products and services. For example, we may use information to generate and analyze aggregate statistics about how users interact with our digital platforms.
We may combine the information we collect. For example, we might combine information you give us with information we get from a public source. We might also combine information we collect from you with information we get from third parties. When we do so, we treat the combined information as disclosed in this Privacy Notice.
We use information as permitted or required by law and as otherwise disclosed to you. When you complete our 'Find a Contractor' form, we use your telephone number to qualify your project needs and, with your express consent, connect you with local independent contractors who may contact you via automated dialing or SMS. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. This excludes text messaging originator opt-in data and consent, which will not be shared with any third parties.
Who We Share Your Information With
We will disclose information to other members of our corporate family for all reasons described in this Privacy Notice.We will disclose personal information to vendors and other third parties that help us with various aspects of our business. For example, we may disclose your information to vendors that handle credit card processing and shipping, provide us with data management services, manage our digital platforms, provide advertising services, manage our communications, or perform market research for us.
Service providers and vendors may host or operate those or any other aspects of our business, potentially including any mechanism through which we send or receive communications, such as email systems, call centers, websites, applications, or components of any of them. Vendors and service providers engaged in this manner may collect information from you directly when you communicate or interact with us.
We may disclose information to third parties, such as marketing partners, contractors, and certain vendors, who may use your information for their own purposes, not solely on our behalf. For example:
- We might disclose information to a company with whom we are running a joint promotion, or to online network advertisers and similar companies to facilitate the delivery of marketing communications on our digital platforms and third-party websites and applications. Those communications may include ads regarding our or others’ products based on your interests. We may use third party analytics providers that collect information about your use of our digital platforms to help us understand how people interact with our digital platforms.
- If you participate in our training programs, we may disclose your progress and course completion to your employer or other entities associated with you. We may publish your successful achievement of a training certification we offer.
- We might publish contact information and other business-relevant information about contractors.
We may disclose information to any successor to all or part of our business. We may disclose your information as part of or as reasonably necessary to proceed with a prospective or completed transfer of business assets.
We may disclose information for other reasons we may describe to you. And we may disclose aggregate information or information that does not reasonably identify you with third parties for any reason.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Your Privacy Rights and How to Exercise Them
Depending on your jurisdiction, you may have the right to make certain requests related to your personal information. For example, depending on where you live, you may have the right to ask us to:- Provide you access to or a copy of certain personal information;
- Delete certain personal information;
- Correct or update personal information;
- Restrict or opt you out of certain uses of your information (such as some kinds of profiling for significant decisions);
- Disregard a consent that you previously provided (without affecting the lawfulness of processing based on consent before the withdrawal takes effect);
- Provide a list of specific third parties to whom we have disclosed your information; or
- Provide you with certain details regarding the processing of your information (like the categories we collect and how we process it, similar to the detail in this Privacy Notice).
We may take reasonable steps to verify your identity before responding to certain requests, which may require verifying your name and email address. If we are unable to verify your identity, we may be unable to respond to your requests.
Residents of certain US and other jurisdictions have a right to opt out of what the main consumer privacy law in those jurisdictions calls a “sale” of personal information, as well as to opt out of certain uses and disclosures of personal information for certain targeted advertising purposes. Under California law, the disclosures for targeted advertising purposes that are subject to this opt-out are called “sharing.”
During the 12 months leading up to the effective date of this Privacy Notice, we “sold” (as that term is defined under those laws) and disclosed for targeted advertising purposes (“shared” under California law) commercial information (transaction data) and internet or electronic network activity (like a record of a browser’s visit to our website) to marketing and advertising services to assist with such activities. This practice continues today. We do not engage in those disclosures if we have actual knowledge that the relevant consumer is less than 16 years of age.
If you reside in one of these states and would like to exercise these particular opt-out rights, you can take these steps:
- Follow the process on our Your Privacy Choices form or contact the Privacy Team at (866) 958-9975; and
- If you would like your request to apply to personal information collected through cookies and similar technologies during your future visits to a particular GAF website, then, with each browser you use to visit the website, click the Cookie Preferences link in the website’s footer and follow the instructions to turn off all categories of cookies that can be turned off on that website. If you reset your browser, clear your cookies, or use a browser that automatically clears cookies, you'll need to perform these steps again.
Opting out of “sales,” “sharing,” and other disclosures for targeted advertising purposes limits only some types of disclosures of personal information.
In a limited number of states, you can designate an authorized agent to make a privacy request on your behalf. To do so, you must provide us with a written authorization acceptable to us for the agent to act on your behalf. You may still need to verify your identity and confirm the agent’s authority directly with us if we are not convinced of the validity of the agent’s request. For security and legal reasons, we may refuse to accept requests that require us to visit an agent’s website. We will also honor opt-out requests submitted by authorized agents via universal opt-out signals.
If you use an authorized agent to trigger a browser-based opt-out signal (like GPC), the opt-out will only apply to that specific browser. To ensure an agent can opt you out across all platforms, the agent must use your browser directly or you must use our manual opt-out form. You may not share your login credentials or logged-in access to our websites with an agent or any other third party. We are not responsible for the security risks of giving an agent browser access or any other arrangements that you may have with an agent.
State-Specific Disclosures (including California)
The following section provides additional detailed information applicable to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia.Appeals. If we decline to take action on your privacy request as described in the “Your Privacy Rights” section, residents of these states (except California) have the right to appeal our decision within 60 days by writing to us at privacy@gaf.com.
Automated tools and AI training. For Connecticut residents, we do not collect or sell your personal information for the purpose of training large language models (AI) without your affirmative consent. We use automated tools to enhance service efficiency. You have the right to opt-out of certain kinds of profiling for significant decisions as described in our “Your Privacy Rights” section.
Nondiscrimination. You have a right not to receive “discriminatory treatment” (within the meaning of the privacy laws) for the exercise of the privacy rights conferred by the relevant privacy law.
Requests made by agents. You can designate an authorized agent to make a CCPA request on your behalf. To do so, we must receive a legally sufficient power of attorney signed by you pursuant to California Probate Code sections 4121 to 4130, or other written authorization acceptable to us, for the agent to act on your behalf. You may still need to verify your identity and confirm the agent’s authority directly with us if we are not convinced of the validity of the agent’s request. See the “Your Privacy Rights” section above for additional detail about agents
Disclosures in the prior 12 months. During the 12 months leading up to the effective date of this Privacy Notice, we have collected all of the types of personal information described in the “We collect personal information from and about you” section of this Privacy Notice. During that period, we made the following disclosures of personal information for the purposes described in the “We disclose personal information to third parties” section above:
| CATEGORY OF PERSONAL INFORMATION | CATEGORIES OF ENTITIES TO WHICH IT WAS DISCLOSED |
| identifiers (e.g., name, mailing address, email address, phone number, username, and password) | Affiliates; vendors (e.g., vendors (data management, digital platform, and communications); marketing partners and contractors |
| work and communication details (e.g., job title, department, office address and business contact information, professional communications, and correspondence) | Affiliates; marketing partners; vendors (excluding credit card/shipping processors) |
| protected characteristics (e.g., gender, age, or other classifications under applicable law) | Same as first row, except not to vendors that handle credit card processing and shipping |
| family details (e.g., name of partner and household members) | Affiliates; vendors; marketing partners |
| financial information (e.g., bank account information, bank or credit card numbers, and payment information) | Affiliates; vendors (including credit card/shipping processors) |
| communications (e.g., responses to polls or surveys, questions, comments, or requests you send us) | Same as first row, except not to vendors that handle credit card processing and shipping |
| audio, electronic, visual, thermal, olfactory, or similar information (e.g., graphics, photographs, recordings of calls or meetings, and ambient humidity or temperature) | Affiliates; marketing partners; vendors (excluding credit card/shipping processors) |
| commercial information (e.g., records of transactions) | Affiliates; vendors (e.g., vendors (data management, digital platform, and communications); marketing partners and contractors |
| internet or other electronic network activity information (e.g., browsing history, search history, and interactions with our digital platforms and third party websites and applications) | Affiliates; marketing partners; vendors (excluding shipping processors) |
| geolocation data (including precise geolocation, such as the precise geolocation of a Standard Logistics truck or trailer) | Affiliates; vendors (excluding credit card processors) |
| account login credentials | Affiliates, vendors managing our digital platforms |
| Inferences drawn from any of the information identified herein | Same as first row, except not to vendors that handle credit card processing and shipping |
California Metrics. Below are metrics of CCPA-related requests received by GAF during calendar year 2025.
| REQUESTS TO DELETE | JAN-DEC 2025 |
| Total number of Requests Received | 8 |
| Total number of Requests Complied in whole or in part | 7 |
| Total number of Requests Denied | 1 |
| REQUESTS TO CORRECT | JAN-DEC 2025 |
| Total number of Requests Received | 3 |
| Total number of Requests Complied in whole or in part | 3 |
| Total number of Requests Denied | 0 |
| REQUESTS TO ACCESS | JAN-DEC 2025 |
| Total number of Requests Received | 15 |
| Total number of Requests Complied in whole or in part | 11 |
| Total number of Requests Denied | 4 |
| REQUESTS TO OPT-OUT OF SALE/SHARING | JAN-DEC 2025 |
| Total number of Requests Received | 29 |
| Total number of Requests Complied in whole or in part | 29 |
| Total number of Requests Denied | 0 |
| AVERAGE DAYS TO RESPOND | JAN-DEC 2025 |
| Average number of days to respond to Deletion requests | 11 |
| Average number of days to respond to Correction requests | 7 |
| Average number of days to respond to Access requests* | 25 |
| Average number of days to respond to Opt-Out requests | 57 |
We use and disclose “sensitive personal information” only for purposes that are exempt from the “Right to Limit” under California law, such as to provide our services, maintain the security of our platforms, and ensure the quality and safety of our products.
How to Manage Your Marketing and Cookie Preferences
You can opt out of receiving our marketing emails. If you are a registered user of our digital platforms, you can opt out of marketing emails by clicking here. You can also follow the “unsubscribe” instructions in any promotional message you get from us. Even if you opt out of getting marketing messages, we may still send you service-related announcements and transactional messages. In our applications, you may be able to disable push notifications within the settings menu.Our websites allow you to control the use of some kinds of cookies. How you can do so depends on the website, but using the Cookie Preferences hyperlink available in the footer of each GAF website you use is the best option when it is available. The choices you make using this cookie control mechanism on a GAF website are specific to that website.
Certain browsers can be set to reject certain kinds of browser cookies. Flash cookies cannot be controlled through browser settings; to control flash cookies go here. If you choose to block cookies, you may not be able to take advantage of all aspects of our digital platforms.
In addition, you can learn about opting out of receiving certain interest-based ads from some participating companies by clicking here and here.
Since most of the cookie-related preferences described above are stored in a cookie, if you change or reset your browser, or your browser’s cookies are cleared, you will need to repeat the cookie-related steps you have taken above.
Children’s and Minors’ Privacy
Our digital platforms are intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13 without verifiable parental consent in accordance with COPPA or as otherwise permitted by law. If you are a parent or legal guardian and believe your child under 13 has provided us with personal information, please email us at privacy@gaf.com or write to us at the address at the end of this policy.For residents of states with enhanced minor protections, we treat all personal information of users we know or reasonably believe to be under 18 as Sensitive Data. Accordingly, we do not sell or share such information, nor do we use it for targeted advertising or profiling, without affirmative opt-in consent from the minor (if aged 13 - 17) or their parent or guardian (if under 13). Please mark any related inquiries as a “Privacy Request: Minor Data Subject”.
How We Secure Your Data
We use security measures to protect our systems, our digital platforms, and the personal information we hold. Please be aware that, despite our ongoing efforts, no security measure is perfect or impenetrable.
International Data Transfers
We process your information in the United States and elsewhere. In some cases, our service providers may transfer or store your information in the United States, or another foreign jurisdiction, that may not have the same legal protections as your home country. Additionally, information located outside of your home country may be subject to access by that country’s government or its agencies under lawful order.
How Long We Retain Your Data
We keep personal information as long as it is necessary or relevant for the practices described in this Privacy Notice. We also keep information as otherwise required by law.Third-Party Links and Services
If you click on a link to a third party website, you will be taken to a website or application that we do not control such as our business partners’ websites or social media networks. Please read the privacy policies of any third party websites or applications that you visit. Unless otherwise indicated, your use of those websites or applications will not be governed by this Privacy Notice, and we are not responsible for those third party practices. Our digital platforms may also have third party content or services we do not control. This may include passive tracking tools.How to Contact Us
If you have any questions about this Privacy Notice or about the manner in which we or our service providers treat your personal information, or if you wish to exercise any available rights with respect to your personal information, please follow the instructions above for location-specific rights, and otherwise contact our Privacy team at: privacy@gaf.com.You can also call or write us at:
GAF Materials LLC d/b/a GAF
(844) 565-0759
1 Campus Drive
Parsippany, NJ 07054