PRIVACY POLICY

Last Updated: June 15, 2023

PGT Innovations, Inc. and its affiliates and subsidiaries (collectively, “PGTI,” “we,” “our,” or “us”) are committed to creating and providing our customers and others interested in our business (collectively, “you” and “your”) the strongest, safest building products on the market (the “Products”).

This privacy policy (“Privacy Policy”) explains PGTI’s privacy practices for the types of information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as defined by applicable privacy laws (“Personal Information”) that we may collect or receive from the website, pgtinnovations.com, any of PGTI’s affiliates and subsidiaries’ websites, any other web address, mobile site, or application controlled by PGTI that links to this Privacy Policy (collectively, the “Sites”), or when you use any services of PGTI ( “PGTI Services”).

By accessing and using the Sites, using PGTI Services, receiving the Products, or otherwise providing information to PGTI (collectively, the “Services”) you have consented to the terms of this Privacy Policy, and consent to our privacy practices described herein including our use and disclosure of your Personal Information. If you do not agree to the terms and conditions of this Privacy Policy, then please do not provide us with your information. Please note, however, that if you choose to limit the information that you provide to us while using the Sites, you may not be able to use or participate in certain features of the Sites.

REVISIONS AND MODIFICATIONS

We may occasionally update this Privacy Policy to reflect changes in our practices. When we post modifications to this Privacy Policy, we will revise the “Last Modified” date at the top of this web page. If the revision or modification is material, we will provide you notification via email. The modified Privacy Policy will be effective immediately upon posting on the Sites. Your continued use of the Sites after the posting of the modified Privacy Policy constitutes your agreement to abide and be bound by it. We encourage you to periodically review this page for the latest information on our privacy practices. If you object to any modification, your sole recourse is to stop using the Sites or Services.

COLLECTION OF PERSONAL INFORMATION

We collect Personal Information about you in various ways, including:

a.     Personal Information from You Directly

PGTI may collect Personal Information directly from you when you use the Services. For example, when you register for an account, pay for the Services, or contact us. We collect the following types of Personal Information:

b.     Personal Information Automatically Collected

PGTI and third-party service providers may automatically collect information about you when you use the Sites.  This information is primarily needed to maintain the security and operation of the Site, and for our internal analytics so that we can improve the Services and Sites. This information includes:

c.     Personal Information from Third Parties

In some instances, PGTI may receive Personal Information and/or anonymous information about you from other parties, such as our affiliates, business partners, and service providers. That information may be obtained online, offline, or through publicly available resources.  We may combine this information with the information you provide, and other data we already have about you.

PURPOSE OF COLLECTION

PGTI processes your Personal Information for the following purposes:

DISCLOSURE OF PERSONAL INFORMATION

Except as otherwise described in this Privacy Policy, PGTI will not sell, share, rent, or otherwise disclose Personal Information that we collect from the Sites or Services to any third party for monetary or other valuable consideration, unless stated below or with your consent:

We may share and disclose de-identified and/or aggregate analytics with third-party partners for the purposes described in this Privacy Policy or where it is collected, or any other legal purpose, including, when and where applicable, sharing and disclosing non-personally identifiable information combined with Personal Information.

CHOICES

We strive to provide you with choices regarding how we use the Personal Information you provide to us. Please understand that if you choose not to disclose information to us, it may affect your ability to use some features of the Sites. We have created mechanisms to provide you with the following control over your information:

a.     Advertising

We may also use third-party advertisers, ad networks, and other advertising, marketing, and promotional companies, to serve advertisements about the Products and PGTI Services. Such third parties may gather information about your visit to the Sites, monitor your access or market products or services to you, monitor the ads you view, click-on, or interact with, when they were delivered, and the screens and pages that they are on. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt out by clicking here. Please note this does not opt you out of being served advertising. You will continue to receive generic ads.

We and our service providers may use information about your interactions with the Sites to predict your interests and select the ads you see on and off the Sites. This is known as interest-based advertising. In providing interest-based ads, we follow the Self-Regulatory Principles for Online Behavioral Advertising developed by the Digital Advertising Alliance (“DAA“).  For more information about interest-based advertising and how you can opt out, visit:

b.     Marketing

From time to time if you have supplied your email address, PGTI may send you marketing or informational emails. If you prefer not to receive any or all of our marketing and promotional communications, you may opt-out of these communications by following the opt-out prompts on these communications. You also may ask us not to send you other marketing or informational communications by contacting us as specified in the Contact Information section below, and we will honor your request. Please note that even after you are removed from our marketing lists, we may still send you non-promotional communications, such as responding to your support requests.

c.     Do Not Track

Some browsers have a “Do Not Track” (“DNT”) feature that lets you tell websites and online services that you do not want to have your online activities tracked. Such browser features and industry standards are not uniform. As such, PGTI does not monitor or respond to DNT browser requests.  If a standard is adopted that we must follow in the future, then we will inform you about that practice in a revised version of this Privacy Policy.

CALIFORNIA PRIVACY RIGHTS

This section explains how we collect, use, and disclose Personal Information about users, customers, and visitors who reside in California (“consumers” or “you”). It also explains certain rights afforded to consumers under California’s Shine the Light law and the California Consumer Privacy Act of 2018 (“CCPA”), as revised and updated by the California Privacy Rights Act (“CPRA”). This section uses certain terms that have the meaning given to them in the CCPA including Personal Information.

a.     Shine the Light

Under California Civil Code Section 1798.83 (“Shine the Light”), California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of Personal Information, such as name, e-mail and mailing address and the type of services provided to the customer, that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and (b) the names and addresses of all such third parties. To request the above information, please contact us here or call at 1-866-I-OPT-OUT (1-866-467-8688 – enter Service Code 1894#) section below with a reference to California Disclosure Information.

b.     Categories of Personal Information Collected

We may collect (and have collected during the 12-month period prior to the “Last Modified” date of this Privacy Policy) the above categories of Personal Information about you in the Collection of Personal Information section above.

c.     Purpose of Collection

We may use (and may have used during the 12-month period prior to the “Last Modified” date of this Privacy Policy) your Personal Information for the business or commercial purposes described in the Purpose of Collection section above.

d.     Sources of Personal Information

During the 12-month period prior to the “Last Modified” date of this Privacy Policy, we may obtain (and may have obtained) Personal Information about you from the sources identified in the Collection of Personal Information section above.

e.     Selling and Sharing Personal Information

We do not sell or share your Personal Information in exchange for monetary consideration; however, we may use tools described above such as Google Analytics, which may be interpreted as sharing your Personal Information.  As such, please see the above Personal Information Automatically Collected and Choices sections for more information regarding opting out of use of these tools.

During the 12-month period prior to the “Last Modified” date of this Privacy Policy, we may have shared or disclosed the following categories of Personal Information about you for a business or commercial purpose with certain categories of third parties, as described below:

Categories of Personal Information that May Be Sold, Shared, or Disclosed Categories of Third Parties to whom Personal Information May Be Sold, Shared, or Disclosed Business or Commercial Purpose of Selling, Sharing, or Disclosing Personal Information
Identifiers ·       Subsidiaries and Affiliates·       Service Providers and Contractors·       Business Partners·       Marketing Partners·       Advertising Partners ·       Provide the Products and PGTI Services·       Communicate with you about the Products and PGTI Services·       Monitor the Services·       Respond to Inquiries and Fulfill Requests·       Improve the Services·       Support Business Operations·       Fulfill Other Purposes
Personal Information Categories Listed in The California Customer Records Statute (Cal. Civ. Code §1798.80(e)) ·       Subsidiaries and Affiliates·       Service Providers and Contractors·       Business Partners·       Marketing Partners·       Advertising Partners ·       Provide the Products and PGTI Services·       Communicate with you about the Products and PGTI Services·       Monitor the Services·       Respond to Inquiries and Fulfill Requests·       Improve the Services·       Support Business Operations·       Fulfill Other Purposes
Commercial Purchase Information ·       Subsidiaries and Affiliates·       Service Providers and Contractors·       Business Partners·       Marketing Partners·       Advertising Partners ·       Improve the Products and PGTI Services·       Monitor trends and transaction·       Monitor the Services·       Improve the Services·       Support Business Operations·       Fulfill Other Purposes
Internet or Other Electronic Network Activity ·       Subsidiaries and Affiliates·       Service Providers and Contractors·       Business Partners·       Marketing Partners·       Advertising Partners ·       Provide the Sites·       Monitor and maintain the Sites·       Improve the Sites·       Support Business Operations·       Fulfill Other Purposes

f.      California Consumer Privacy Rights

Under CCPA, consumers have certain rights regarding their Personal Information, as described below.

If you would like to exercise your California privacy rights, please refer to the Consumer Requests and Verification section below.

CONSUMER REQUESTS AND VERIFICATION

a.     Right to Non-Discrimination

We may not discriminate against you because you exercise any of your rights under CCPA, including, but not limited to:

b.     Verifying Requests

You may request to exercise your rights of access, deletion, or correction under CCPA by contacting us as described in the Contact Information section below. To help protect your privacy and maintain security, we will take steps to verify your identity before processing your request.  If you request access to or deletion of your Personal Information, we may require you to provide any of the following information: name, date of birth, email address, telephone number, or postal address. When you make such a request, you can expect the following:

c.     Authorized Agents

You may designate an authorized agent to request any of the above rights on your behalf. You may make such a designation by providing the agent with written permission, signed by you, to act on your behalf. Your agent may contact us as described in the Contact Information section below to make a request on your behalf. Even if you choose to use an agent, we may, as permitted by law, require:

INNOVATIONS

Any information, communications, or material of any type or nature that you submit through the Sites as an innovation either by email, posting, messaging, uploading, downloading, or otherwise (collectively, a “Innovations”), is done at your own risk and without any expectation of privacy. By submitting Innovations through the Sites or Services, you are representing and warranting to us that you have reviewed our Privacy Policy and terms of use and that you will abide by all such provisions contained therein.

PUBLIC FORUMS

We may provide public areas on the Sites, such as forums, message boards, and chat rooms (“Public Forum”), where you can post information about yourself and others. Please exercise discretion and use caution with respect to your information, especially in such public areas. We do not control who reads postings on the Sites, or how they may use or disclose such information. If you choose to voluntarily disclose information on Public Forums, that information will be publicly available and can be collected and used by others.

DATA RETENTION

PGTI may retain your Personal Information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. We are under no obligation to store such Personal Information indefinitely and, to the extent permitted by law, disclaim any liability arising out of, or related to, the destruction of such Personal Information.

CHILDREN

The Sites and Services are not intended for children and we encourage parents and guardians to be aware of and monitor the websites visited by their children. PGTI does not knowingly collect any Personal Information from children under 18 years of age. If PGTI learns that a child under the age of 18 has submitted Personal Information to the Sites without guardian or parental consent, we will take all reasonable measures to remove or delete such information as soon as practicable and not use such information for any purpose, except where necessary to protect the safety of the child or others or as required or allowed by law. If you believe a child under age 18 has provided us with Personal Information, please contact us as specified in the Contact Information section below.

INTERNATIONAL TRANSFER OF PERSONAL INFORMATION

The Sites are hosted in the United States. If you are visiting the Sites from outside the United States, your Personal Information may be transferred to, stored, and processed in the United States in accordance with this Privacy Policy and applicable U.S. laws. Please note your Personal Information will be transferred, processed, collected, use, accessed, and/or stored in the United States, a country and jurisdiction that may not have the same data protection laws or rights as the country in which you reside, and subject to U.S. laws. Please do not provide your Personal Information to us if you do not want this information to be transferred or processed outside of your country, or if the laws in your country restrict such transfers. By using the Sites, you consent to the transfer of your information to our facilities and the practices described in this Privacy Policy.

CONFIDENTIALITY AND SECURITY

We have instituted reasonable safeguards to promote the security of information collected on the Sites. Nevertheless, the Sites are not secure websites and PGTI cannot and does not make any representations or warranties about the privacy or security of any information transmitted over the Internet or maintained in our systems. You agree that any data you provide through the Sites is provided at your own risk and PGT Innovations is not responsible or liable to you for any lack of privacy or security you may experience. You are fully responsible for taking precautions and providing security measures best suited for your situation and intended use of the Sites.

THIRD PARTY WEBSITES

The Sites may provide links to third-party websites, services, applications, and/or contain advertisements from third parties that are not affiliates with us nor that we own or control– and which may link to other websites, services, or applications. We are not responsible for the security or information collection practices of any website that we do not own or control. We encourage you to review and understand the privacy practices of third-party websites, applications, and services before using or accessing such sites or providing any information to or through them. This Privacy Policy only governs information collected through the Sites.

CONTACT INFORMATION

If you have any questions about this Privacy Policy or our privacy practices, please contact us in any of the following methods: