Effective date January 1, 2023
We collect personal information from and about you.
Information collected directly from you. We collect the information you provide to us, for example, by making purchases of our products and services, such as registering for one of our product warranties or guarantees or purchasing a subscription to one of our digital platforms; registering for, and entering information on, our digital platforms; or posting in public forums. We may receive the following types of personal information directly from you:
- identifiers (e.g., name, mailing address, email address, phone number, account login credentials for our services);
- protected characteristics (e.g., gender, age, or other classifications under applicable law);
- family details (e.g., name of partner or household members);
- financial information (e.g., income, bank account information, bank or credit card information, and payment information);
- professional or employment-related information (e.g., job title, department, office address and business contact information, professional communications, and correspondence);
- communications (e.g., responses to polls or surveys, questions, comments, or requests you send us);
- audio, electronic, visual, thermal, olfactory, or similar information (e.g., graphics, photographs, recordings of calls or meetings, and ambient conditions such as humidity or temperature);
- commercial information (e.g., records of transactions, records of training, and program status);
- internet or other electronic network activity information (e.g., browsing history, search history, and interactions with our emails and digital platforms (including, but not limited to, downloads) and third party websites and applications);
- geolocation and precise geolocation data; and
- inferences drawn from any of the information identified herein.
Information collected from third parties. We may obtain information about you from third parties. For example, our business partners (such as lead providers, roofing contractors, search engines, data brokers, and their representatives) may provide us with information about you. The types of personal information we may obtain from third parties may include, without limitation, and to the extent permitted by applicable law, the categories set out above.
We use personal information as described here.
We use information to provide you with services, including, without limitation, on our digital platforms or in connection with our products and services, and to respond to your requests, inquiries, comments, and questions. We also use information to provide contractors and others with services.
We use information to troubleshoot and improve our products and services, including, without limitation, our digital platforms. We may use the information we collect to customize your experience with us. We use information for online and offline marketing purposes. For example, we might use the information we collect to send you information about products, services or special offers that we believe may interest you. This might include information about upcoming contests or promotions. We may use the information we collect to deliver advertisements based on your activities on our digital platforms and third party websites and applications. For example, if you view one of our products on our website, you may receive a postcard or an online ad for that product or a related product on our digital platforms or on third party websites and applications.
We use information to communicate with you about your accounts, your subscriptions, or our relationship. For example, we might tell you about changes to our digital platforms or to your accounts or subscriptions with us. Or we might reach out to you and ask you to take a customer satisfaction survey.
We may use the information we collect for analytical purposes, such as to better understand the interests and preferences of our customers, people who use our digital platforms, and people who buy our products and services. For example, we may use information to generate and analyze aggregate statistics about how users interact with our digital platforms.
We use information as permitted or required by law and as otherwise disclosed to you. For example, we may use the information we collect to protect the rights and property of us, you, and others; to comply with any legal or regulatory obligations; to handle legal claims or disputes; or to otherwise operate our business.
We disclose personal information to third parties.
We might disclose information to a company with whom we are running a joint promotion, or to online network advertisers and similar companies to facilitate the delivery of marketing communications on our digital platforms and third-party websites and applications. Those communications may include ads regarding our or others’ products based on your interests. We may use third party analytics providers that collect information about your use of our digital platforms to help us understand how people interact with our digital platforms.
If you participate in our training programs, we may disclose your progress and course completion to your employer or other entities associated with you. We may publish your successful achievement of a training certification we offer.
We might publish contact information and other business-relevant information about contractors.
We will disclose information in order to comply with the law or to protect the Company. For example, we or our service providers will disclose your information to legal authorities when it is permitted or necessary to do so, such as in response to a search warrant or other legally valid inquiry or order, or we may disclose the information to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing, or preventing fraud, or as otherwise may be required or permitted by applicable U.S., Canadian, or other law or legal process, which may include lawful access by U.S. or foreign courts, law enforcement or other government authorities. We may also disclose your information in situations where we think that our rights or the rights of our users or others are at risk.
We may disclose information to any successor to all or part of our business. We may disclose your information as part of or as reasonably necessary to proceed with a prospective or completed transfer of business assets.
We may disclose information for other reasons we may describe to you. And we may disclose aggregate information or information that does not reasonably identify you with third parties for any reason.
Your privacy rights.
Subject to local law, you may have certain rights in relation to your personal information. Such rights may include rights to access your personal information; update your personal information; have inaccurate information corrected; request that your personal information be deleted; limit the use or disclosure of your personal information; or request to receive your personal information in a usable electronic format that can be transmitted to a third party. We will fulfill your data requests in accordance with applicable law.
To exercise these rights, you may be required to provide additional information to verify your identity or otherwise as necessary to assist us in fulfilling your request. Californians can exercise rights under California law by following the instructions in the next section. All other individuals can exercise any legally available data rights here.
Details for California Residents:
The following section provides detailed information applicable only to California residents under the California Consumer Protection Act (CCPA). It does not cover “publicly available information” as defined in the CCPA.
Collection, Use, and Disclosure of California Personal Information
|CATEGORY OF PERSONAL INFORMATION||CATEGORIES OF ENTITIES TO WHICH IT WAS|
|identifiers (e.g., name, mailing address, email address, phone number, username, and password)||Affiliates; vendors (e.g., vendors that handle credit card processing and shipping, provide us with data management services, manage our digital platforms, or manage our communications and perform market research for us) and third parties such as marketing partners or contractors|
|protected characteristics (e.g., gender, age, or other classifications under applicable law)||Same as first row, except not to vendors that handle credit card processing and shipping|
|family details (e.g., name of partner and household members)||Same as first row|
|financial information (e.g., bank account information, bank or credit card numbers, and payment information)||Same as the first row (though in some cases a portion of the card number is disclosed instead of the entire number).|
|professional or employment-related information (e.g., job title, department, office address and business contact information, professional communications, and correspondence)||Same as first row|
|communications (e.g., responses to polls or surveys, questions, comments, or requests you send us)||Same as first row, except not to vendors that handle credit card processing and shipping|
|audio, electronic, visual, thermal, olfactory, or similar information (e.g., graphics, photographs, recordings of calls or meetings, and ambient humidity or temperature)||Same as first row, except not to vendors that handle credit card processing and shipping|
|commercial information (e.g., records of transactions)||Same as first row|
|internet or other electronic network activity information (e.g., browsing history, search history, and interactions with our digital platforms and third party websites and applications)||Same as first row, except not to vendors that handle shipping|
|geolocation data||Same as first row, except not to vendors that handle credit card processing|
|precise geolocation data||Affiliates, vendors that help us manage our digital platforms|
|account login credentials||Affiliates, vendors that help us manage our digital platforms|
|Inferences drawn from any of the information identified herein||Same as first row, except not to vendors that handle credit card processing and shipping|
Below are metrics of CCPA-related requests received by GAF Energy LLC during calendar year 2022.
|ACCESS REQUESTS||JAN-DEC 2022|
|Total number of Requests Received||22|
|Total number of Requests Complied in whole or in part||22|
|Total number of Requests Denied||0|
|DELETION REQUESTS||JAN-DEC 2022|
|Total number of Requests Received||33|
|Total number of Requests Complied in whole or in part||33|
|Total number of Requests Denied||0|
|DO NOT SELL (DNS) REQUESTS||JAN-DEC 2022|
|Total number of Requests Received||46|
|Total number of Requests Complied in whole or in part||46|
|Total number of Requests Denied||0|
|AVERAGE DAYS TO RESPOND||JAN-DEC 2022|
|Average number of days to respond to Access requests||9|
|Average number of days to respond to Deletion requests||12|
|Average number of days to respond to DNS requests||8|
Your CCPA Information, Correction & Deletion Rights
- The CCPA allows you to request us to:
- provide access to and/or a copy of certain personal information we hold about you;
- correct certain personal information we have about you;
- delete certain personal information we have about you; and
Please note that certain information may be exempt from such requests under California law. For example, we need certain information to provide our services to you, so we may reject a deletion request for that information while providing services to you.
Your CCPA Right to Opt Out of “Sale” or “Sharing” of Personal Information
Californians have a right to direct us not to “sell” or “share” certain personal information as those terms are defined in the CCPA. You can exercise that right by following the steps on our Your Privacy Choices page. You also can contact the Compliance Team at (866) 958-9975 to perform the portion of the “sale”/”sharing” opt-out process in which you provide us with contact information.
Your browser may also offer a way to activate the Global Privacy Control signal (“GPC”). Our websites each treat qualifying browsers for which the user has activated the GPC signal as having opted out of what CCPA calls a “sale” of any California personal information that is collected on that site from that browser using cookies and similar technology. You can override that treatment for a GPC-enabled browser by using the cookie controls available from the website’s footer.
Opting out of “sales” and “sharing” limits only some types of disclosures of personal information, and there are exceptions to all of the rights described in this section.
Verification of Requests to Exercise CCPA Rights
We may take reasonable steps to verify your identity before responding to your request, which may include, depending on the sensitivity of the information involved, the nature of our relationship with you, and the type of request you are making, verifying your name, email address, and other information regarding your use of our services.
Requests Made by Agents
You can designate an authorized agent to make a CCPA request on your behalf. To do so, we must receive a legally sufficient power of attorney signed by you pursuant to California Probate Code sections 4121 to 4130, or other written authorization acceptable to us, for the agent to act on your behalf. You may still need to verify your identity and confirm the agent’s authority directly with us if we are not convinced of the validity of the agent’s request. For security and legal reasons, we may refuse to accept requests that require us to visit an agent’s website. Because opt-out requests for sales made through cookies and related technology must be performed from each browser that is used to access our services, it is easiest for the consumer to perform such opt-outs themselves. However, if you wish for an agent to perform browser-based requests on your behalf, you may arrange for the agent to your consumer’s browser to make such requests, but you may not share your login credentials or logged-in access to our websites with an agent or any other third party. We are not responsible for the security risks of giving an agent browser access or any other arrangements that you may have with an agent.
Nondiscrimination You also have a right not to receive “discriminatory treatment” (within the meaning of the CCPA) for the exercise of the privacy rights conferred by the CCPA.
Details for Virginia residents.
Virginia residents have certain rights to request access to their personal information, correct it, or delete it, which they can exercise by using the Data Subject Rights Request form. They also have a right to opt out of the “sale” of their personal information and use/disclosure of their personal information for “targeted advertising,” as those terms are defined under the Virginia Consumer Data Protection Act (“VCDPA”), and they can exercise these rights by following the instructions on our Your Privacy Choices page.
You have certain choices about marketing and cookies.
You can opt out of receiving our marketing emails, by following the “unsubscribe” instructions in any promotional message you get from us. Even if you opt out of getting marketing messages, we may still send you service-related announcements and transactional messages. In our applications, you may be able to disable push notifications within the settings menu.
Our websites allow you to control the use of some kinds of cookies. How you can do so depends on the website, but using the Cookie Preferences hyperlink available in the footer of each GAF Energy website you use is the best option when it is available. The choices you make using this cookie control mechanism on a GAF Energy website are specific to that website.
Certain browsers can be set to reject certain kinds of browser cookies. Flash cookies cannot be controlled through browser settings; to control flash cookies go here. If you choose to block cookies, you may not be able to take advantage of all aspects of our digital platforms.
In addition, you can learn about opting out of receiving certain interest-based ads from some participating companies by clicking here and here.
Since most of the cookie-related preferences described above are stored in a cookie, if you change or reset your browser, or your browser’s cookies are cleared, you will need to repeat the cookie-related steps you have taken above.
Our digital platforms and children.
We use security measures.
We use security measures to protect our systems, our digital platforms, and the personal information we hold. Please be aware that, despite our ongoing efforts, no security measure is perfect or impenetrable.
We process your information in the United States and elsewhere.
We process your information in the United States and elsewhere. In some cases, our service providers may transfer or store your information in the United States, or another foreign jurisdiction, that may not have the same legal protections as your home country. Additionally, information located outside of your home country may be subject to access by that country’s government or its agencies under lawful order.
We retain information.
Our digital platforms offer links to other websites and third party services that we don’t control.
Contact us if you have any questions.
You can also call or write us at:
GAF Energy LLC
5981 Optical Court
San Jose, CA 95138