Privacy Policy

Your privacy is important to us.

aim to respect your privacy. This Privacy Policy sets forth how we collect, use, disclose, and retain personal information we collect, including when you when you visit our websites that link to this Privacy Policy (“Sites”) or otherwise interact with us.

Assistance For Individuals With Disabilities

Alternative formats of this Privacy Policy are available to individuals with a disability.  Please contact privacyinquiries@gms.com for assistance.

Special Policy Regarding Information from Children Under Sixteen

This Site is not targeted to children under the age of 16, and we do not knowingly request personally identifiable information from any child under the age of 16 without parental consent. When we do receive such information, we delete it as soon as we discover it and do not use it or share it with third parties.

This Privacy Policy explains:

1. The categories of information we collect and the sources from which we collect this personal information
2. The purposes for which we use your personal information
3. How we may disclose your personal information
4. Data Retention
5. Information for California residents
6. Information for Canadian residents
7. Notification of Changes

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

Other websites

The Site may contain links to other websites not operated or controlled by us (“Third party Sites”).  The policies and procedures we describe here do not apply to Third Party Sites.  The links from the Site do not imply that we endorse or have reviewed the Third Party Sites.  We suggest contacting those sites directly for information on their privacy policies.

1. Categories of Personal Information We May Collect And the Sources From Which We Collect This Personal Information

We collect the following categories of personal information about you. These also include the categories of information we have collected over the past 12 months. The sources of this information are directly from you or from others on your behalf (such as your employer) , our service providers, affiliated companies with the GMS family of companies, government reporting agencies, automated technologies , for example, browsing activity collected by automated technologies on the Site, and third parties, for example, lawyers, auditors, and insurers who provide legal, insurance, and accounting services.  Note that the categories listed below may be defined by law. We included all categories of personal information that we have collected, however, depending on the services and products we provide you, we may not collect all of the types of information within that category (e.g., depending on the services and products we provide, we may collect your name, postal address, and email address for a particular purpose without collecting your social security number, driver’s license number, or other information within the “personal identifiers” category). =

Note on Sensitive Personal Information: Company does not infer characteristics from sensitive personal information.  Company only uses sensitive personal information as necessary to perform the services or provide the goods the average person would reasonably expect when requesting those goods or services, to ensure security and integrity, short term transient use, to maintain the quality of our products and services, or for other purposes permitted by applicable law, including the California Privacy Rights Act and implementing regulations (“CPRA”) without the right to opt out.

Cookies

What are cookies?

When you visit our website, we place a so-called “cookie” in a file on your browser so that our website is more user-friendly, effective, and secure. By using a cookie, your browser can remember specific information about you across several pages or between visits to our website. In addition to cookies, we use scripting, which is code run on the website to collect information such as actions you’ve completed on our website or items you click on. We also collect information through “referrers”, which are small pieces of data your web browser passes to us indicating which website linked you to our website. For example, if you click on a link on a Google search result page that takes you to our website, we will receive a referrer that tells us you were linked to our page from Google. For the purposes of this Policy, we refer to these technologies as “cookies.”

We do not store any sensitive personal information within the cookies we place on your device. Our website does not read any information stored in cookies placed on your browser by other websites.

Why do we use cookies?

We use cookies to offer you a better experience on our website. Most of the cookies we use are “session cookies” which are automatically deleted as soon as you leave our website. Other cookies, so-called “persistent cookies,” remain on your computer until you delete them. Using these cookies allow us to enhance your experience when you interact with our website, such as by helping recognize your browser the next time you visit.

The cookies we use fall into three different categories:

Strictly Necessary Cookies

These cookies are necessary for the website to function. They are usually only set in response to actions taken by you which amount to a request for services, such as logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not work if you do block these cookies. These cookies do not store any personally identifiable information.

Performance Cookies

These cookies collect browsing information in order to improve your overall experience. We use this information to track website usage and compile statistics. This helps us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous.

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalization.

Third-Party Cookies

We may allow third-party advertising cookies to be placed on your computer or mobile device when you visit our website. Third-party cookies, including social media plugins, belong to and are managed by other parties, such as Google or other online advertisers. These kinds of persistent cookies remember the websites you visit, and that information is shared with other parties, such as advertisers. We may use third-party advertising networks to help us deliver tailored online ads to you.

How can I control cookies?

You can control cookies using the cookie “door” available on our Site.

You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it. Browsers may also be set up to display a warning when a cookie is used. You may even disable your browser from accepting cookies. Disabling cookies is unique to each browser and device you use. Disabling cookies on one device will restrict the ability to tie that device to other devices you use. Parts of our website may not function properly if you disable cookies. To provide you with the best possible experience while visiting our website, please enable cookies within your browser.

Separate from our website(s), some third-party websites may enable cookies to be placed or accessed on your device by third party advertising networks. These kinds of persistent cookies remember the websites you visit including ours, and that information is shared with other parties, such as advertisers. To learn more about opting-out of this type of interest-based advertising, please visit the Network Advertising Alliance (NAI) Consumer opt-out website.

Google Analytics

We use cookies provided by Google Analytics to collect information about use of our Site. These cookies collect data tied to a user’s IP address, such as the length of time a user spends on a page, the page a user visits, and the websites a user visits before and after visiting the Site.  Based on this information, Google Analytics compiles aggregate data about Site traffic and Site interactions, which we use to offer better website experiences and tools in the future. For more information on Google Analytics, visit https://support.google.com/analytics. . You can opt out of Google Analytics without affecting your visit to our Site. For more information on opting out of Google Analytics tracking, visit this Google page.

Tracking Across Time and Different Sites

The Site does not track your online activities over time and across websites or online services on an individually identifiable basis.  .

Do Not Track Signals

We have implemented a cookie “door” to ensure your cookie preferences are honored. We also have tools in place to better detect and honor requests made using the Global Privacy Control (“GPC”) signal as requests to opt-out of the sharing of personal information to the extent required by applicable law. We endeavor to honor these requests with respect to any personal information connected to the GPC opt-out request based on the information made available by GPC. Note that we may not be able to tie a GPC request to all personal information we have about you. If you wish to exercise your rights under applicable privacy laws, we recommend submitting your preferences via our cookie “door”.

2. Purposes For Which We Use Your Personal Information

We may use information about you for the following business or commercial purposes:

• To provide you with products and services
• To establish, manage, and administer your customer account and our business
• To invoice and deliver orders
• To enable business communication related to orders, such as communications about invoicing, delivery, and payments
• To allow you to apply for and, if approved, obtain products and services on credit
• To detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity
• For auditing and compliance management, institutional risk management, data analytics and technological development of our systems
• For research and development of our products
• For quality assurance
• In connection with a proposed sale or merger
• To comply with legal requirements
• To comply with legal investigations and subpoenas
• To respond to judicial process or government authorities
• For customer support
• To respond to any requests, queries, suggestions, feedback, or comments you may have
• To inform you of any changes to the services, your account (if applicable), this Privacy Policy, or any other policies or terms in relation thereto
• To store, host, or backup (whether for disaster recovery or otherwise) our services or any data contained therein
• To protect the rights, property, or safety of Company, you, or others
• To administer and protect our business and our Site (including troubleshooting, analysis, testing, system maintenance, support, reporting and hosting of data, and preventing fraud and abuse).
• In connection with a corporate transaction, sale, or assignment of assets, merger, divestiture, or other changes of control or financial status of Company and any of its subsidiaries or affiliates.
• To exercise Company’s rights under applicable law and to support any claim, defense, or declaration in a case or before a jurisdictional and/or administrative authority, arbitration, or mediation panel.
• To ensure compliance with applicable laws and regulatory obligations.
• Any incidental purposes related to, or in connection with, the above

3. How We May Disclose Your Personal Information

1. Disclosures Generally

Company discloses personal information as necessary for the purposes described in Section 2 above to the following categories of external recipients:

• Service providers and contractors: Company discloses your personal information to service providers and contractors for the purposes above to assist us in meeting our business needs and contractual and legal obligations.
• .
• Public: Company may disclose personal information to the public as part of a press release, for example, to announce the winner of a sweepstakes if required by law.
• Required Disclosures: We may be required to disclose personal information in a court proceeding, in response to a court order, subpoena, civil discovery request, other legal process, or as otherwise required by law.
• Legal Compliance and Protections: We may disclose personal information when we believe disclosure is necessary to comply with the law or to protect the rights, property, or safety of Company, our users, or others.
• Corporate Transactions: We reserve the right to disclose and transfer your personal information, including your personal information to a subsequent owner or co-owner, or in connection with a merger, consolidation, bankruptcy, the sale of substantially all of our membership interests and/or assets or other corporate change, including to any prospective purchasers.

1. Disclosures for Business Purposes

Company has disclosed each of the categories of personal information listed in Section 1, above, for the following “business purposes”, including in the last 12 months:

• Service providers:  For the business purpose of performing services on Company’s behalf and, in particular, for the specific purposes described in Section 2, above.
• Auditors, lawyers, consultants, and accountants engaged by Company:  For the business purpose of auditing compliance with policies and applicable laws, in addition to performing services on Company’s behalf.

• Affiliated companies:  To other companies within the GMS family of companies for the business purposes of (1) auditing compliance with policies and applicable laws, (2) helping to ensure security and integrity, (3) debugging, (4) short-term transient use, (5) performing services on behalf of Company, (6) internal research, and (7) activities to maintain or improve the quality or safety of a service or device.

1. Sales and Sharing

We do not sell consumer personal information or share it for cross context behavioral advertising purposes. Without limiting the foregoing, we have not, and have no actual knowledge that we have sold or “shared” the personal information of individuals of any age, including the personal information of children under 16, in the last 12 months.

4. Data Retention

We retain your personal information for the duration of the customer relationship, if any. We also retain your personal information for 12 months after our last interaction with you.  We will retain personal information longer as necessary to comply with legal, administrative, or procedural requirements, for example, a litigation hold.

In some circumstances, we will anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely, .

5. Information For California Residents

Notice at Collection

We collect the personal information identified in Section 1 for the purposes identified in Section 2 and retain it for the period described in Section 4. We do not sell your personal information or disclose it for cross-context behavioral advertising (“sharing”).  We also do not collect or process sensitive personal information for the purpose of inferring characteristics about you.  To the extent you provide Company with personal information about other California residents, you are responsible for providing this notice to them.

Your California Privacy Rights

Subject to applicable law, California residents have the following rights:

• Right to Know: You have the right to submit a verifiable request for to know the specific pieces of your personal information obtained from you and for information about Company’s collection, use, and disclosure of your personal information.  Please note that the CPRA’s right to obtain copies does not grant a right to the whole of any document that contains personal information, but only to copies of “specific pieces” of personal information.  Moreover, California residents generally just have a right to know categories, for example, categories of third parties to which personal information is disclosed, but not the individual third parties. 
• Right to Delete: You have the right to submit a verifiable request for the deletion of personal information that you have provided to Company.
• Right to Correct: You have the right to submit a verifiable request for the correction of inaccurate personal information maintained by Company, taking into account the nature of the personal information and the purposes of processing the personal information.

How To Exercise Your Rights

Company will respond to request to know, delete, and correct in accordance with applicable law if it can verify the identity of the individual submitting the request.  You can exercise these rights in the following ways:

• Call 1-855-275-5787
• Email privacyinquiries@gms.com

How We Will Verify Your Request

We will ask you to confirm information we already have on file, or provide other information sufficient for us to determine and confirm your identity before responding to your request. We request this information as a security measure to ensure that your personal information is not disclosed to someone who is not authorized to receive it. For example, we may verify the email address we have on file with the email address from which you are sending a request. We may also ask you to verify certain past orders, or to confirm your last four digits on a card you recently used to place an order. If you have an account with us, we may ask you to verify yourself by logging in. We may also contact you to ask you for further information in relation to your request, in order to speed up our response.

The more risk entailed by the request (e.g., a request for specific pieces of personal information), the more items of personal information we may request to verify your identity.  If we cannot verify your identity to a sufficient level of certainty to respond securely to your request, we will let you know promptly and explain why we cannot verify your identity.

Authorized Agent

You may also authorize someone to make a request on your behalf. To do so, you must provide the agent with written, signed permission to submit privacy right requests on your behalf, or provide a letter from your attorney. The agent or attorney must provide this authorization at the time of request. Note that we may require you to verify your identity with us directly before we provide any requested information to your approved agent.

In the alternative, you can provide a power of attorney compliant with the California Probate Code.

Company’s Non-Discrimination Policy

Company will not unlawfully discriminate against you for exercising your privacy rights under the California Privacy Rights Act.

6. INFORMATION FOR CANADIAN RESIDENTS

This section applies to residents of Canada.

Personal information is maintained on our servers, or those of our service providers, and will be accessible to our authorized personnel who require access for the purposes described in this Privacy Policy. Company and our service providers may process and store your personal information outside of your province of residence or outside of Canada,

You have the right to request access to your personal information in our control, and to request information about how we have processed it. You also have the right to request that inaccurate, incomplete or out of date information be rectified. In certain circumstances, you also have the right to request that your personal information be deleted. These rights are subject to certain exceptions.

We process your personal information with your consent, except where otherwise permitted or required by law. Your consent may be express or implied, depending on the circumstances. You have the right to withdraw your consent, subject to contractual and legal restrictions.

To exercise any of your rights, please contact our [ ].  We may take steps to verify your identity before responding to your requests.

7. YOUR CHOICES

We provide the following choices to all our customers regarding our use of information about you.

• You may use our “cookie door” to control cookies or set your browser to reject cookies and to erase cookies that have already been placed on your hard drive. However, if you do so, your ability to navigate the Site will be limited.
• You may choose not to provide us with any personal information.
• If you would like us to manage your contact status or be removed from any of our on-line mailing lists, click on the unsubscribe link contained in every email. This allows you to unsubscribe from emails.

8. SECURITY

We strive to have reasonable security procedures in place to protect against the loss, misuse or alteration of information under our control. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.  If you have any questions about the security at our Site, or you have any reason to believe that the security of our Site or your information has been compromised, please contact us at the email address or phone number below.

Notification of Changes

If we change our privacy policy, we will post those changes on our Site so you will always be aware of what information we collect, how we use it, and under what circumstances we disclose it. We will use information in accordance with the privacy policy under which the information was collected.

CONTACT US

If you are contacting us to complain about an alleged breach of this privacy policy or our privacy obligations at law, please provide us with as much detail as possible in relation to your complaint. We will take any privacy complaint seriously and any complaint will be assessed with the aim of resolving it in a timely and efficient manner. We request that you cooperate with us during this process and provide us with any information that we may need.

Without prejudice to any other administrative or judicial remedy you might have, you may have the right to lodge a complaint with local state regulators or with data protection authorities if you believe that we have infringed applicable privacy or data protection requirements when processing personal data about you.

For most states in the United States, you may contact your state Attorney General to file a complaint. To the extent Colorado, Connecticut, or Virginia law applies, the Attorneys General have provided the following online submission methods for filing a complaint or registering any other concern about the result of your appeal.  

Colorado Attorney General: Submit a complaint online

Connecticut Attorney General: Submit a complaint online

Virginia Attorney General: Submit a complaint online