PRIVACY AND DATA POLICY

SiteOne Landscape Supply, Inc. (the "Company," "we" or "SiteOne") respects the privacy of its customers and of users of and visitors to its website. This Privacy Policy explains how SiteOne collects, uses and discloses certain "Personal Information" (as defined below) via its website, mobile applications, in-branch interactions and other services (collectively, "Services"). By using our Services, you consent to this Privacy Policy. If you do not agree with all the items in this Privacy Policy, you must not use our Services. If you have additional questions, please contact us at the address provided below.

1. How We Collect Information & Dat

We collect Personal Information directly from you when you submit it to us, such as when you make an in-branch or online purchase, use our Services, visit our branches or website, register for an account, provide us with comments or reviews, contact our customer care line, share digital content through one of our websites or via social media channels, apply for credit, inquire about employment, submit a request for service or information, sign up as a Partners Program or other promotions or rebate program member or seek training or technical support. We also use cookies and other technological tools to collect information about your computer and your use of our Services. For more information about cookies and other technologies, please see the section Cookies and Similar Collection Technologies below.

2. Types of Information & Data We Collect

SiteOne collects information about you that is personally identifiable to you ("Personal Information"). It may also include other information about you that we may tie to Personal Information. The table below describes the categories of Personal Information we collect, the sources we collect the Personal Information from, our business or commercial purposes for collecting and using the Personal Information, and the categories of third parties that may share the Personal Information with.

Information You Provide to Us
SiteOne collects the following types of Personal Information:

We record and store telephone calls and chat transcripts for a period of time when you interact with our customer or technical support personnel.

Inferences:

Information We Receive from Other Sources
We may collect information about you from other sources that we may combine or link with information we have about you. We may combine information that we have collected offline with information we collect online. We may collect information in the following ways:

We collect information passively. We use tools like browser cookies and flash cookies to collect information when you use our websites or interact with our emails. We may also use cameras and other technologies at our branches.
Other Parties You Engage With. We receive information from parties with which you engage and who offer their products and services to you. These companies may share some information with us about you or your experience with them, such as the items or services you purchased and your contact information.
Vendors, Product Suppliers, or Service Providers. We receive information, including identification information, contact information, demographic information and purchase information from our vendors, product suppliers, and service providers.

3. How SiteOne Uses Information & Data

SiteOne uses Personal Information for a variety of purposes, including:

Product and Customer Service Support
Marketing and Advertising
Surveys & Promotional Events
Eligibility
Communications
Legal, Security, and Safety Reasons
Manage Business Needs
Personalization
For any other purpose described to you at the time information is collected.

In carrying out these purposes, we combine data we may collect from different sources to give you a more personalized experience. We do not knowingly collect Personal Information from individuals under the age of sixteen.

4. Disclosure of Personal Information

We limit our sharing of Personal Information as follows:

Primary Accountholder or Administrator. If you designate an administrator to manage your account, we may share contact information for accounts with that administrator.
Affiliates and Suppliers, such as affiliated companies, suppliers, and business partners.
Service Providers, such as delivery providers, payment processors, vendors or other third parties.
Marketing or Advertising Partners, such as to deliver ads either online or in person or as part of an advertising campaign.
We may disclose your Personal Information to third parties: (i) where we have a good faith belief that such disclosure is necessary to meet any applicable law, regulation, legal process or other legal obligation; (ii) when we believe disclosure is necessary to protect or prevent harm, illegal activity, or financial loss; (iii) to detect, investigate and help prevent security, fraud or technical issues; and (iv) to cooperate with law enforcement, government, quasi-governmental and public agency requests or reporting requirements. These third parties are referred to as "Special Circumstances Recipients" in this Privacy Policy.
We may transfer your Personal Information in the event we: (i) sell or transfer, or are considering selling or transferring, all or a portion of our business or assets; or (ii) are considering or engaging in any reorganization, conversion, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of our ownership interest, business or operations. These third parties are referred to as "Transaction Recipients" in this Privacy Policy.
We may share your Personal Information with third parties whenever you consent to or direct such sharing. These third parties are referred to as "Authorized Third Parties" in this Privacy Policy.

Additionally, we may disclose your Personal Information to any successors to our business, such as if we were to be acquired or sold to third party. Please note that we may also disclose information and data about you that is not Personal Information. For example, we may publish reports that contain aggregated and statistical data about our customers.

5. Cookies and Similar Collection TechnologiesWhen you visit our website or use our mobile applications, we may collect certain information by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs and web beacons. We collect many different types of information from cookies and other technologies. For example, we may collect information about the device you use to access our website, your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. Our server logs also may record the IP address of the device you use to connect to the Internet. We may also collect information about the website you were visiting before you came to SiteOne and the website you visit after you leave our site. In many cases, the information we collect using cookies and other tools is only used in a non-identifiable way, without reference to Personal Information. For example, we use information we collect about website users to optimize our websites and to understand website traffic patterns. In some cases, we do associate the information we collect using cookies and other technology with your Personal Information. Additionally, if the settings on your geo-aware mobile devices permit our mobile applications to collect location information, we will collect that information automatically. This Statement governs how we use all of this information when we associate it with your Personal Information. SiteOne has relationships with third party advertising and analytics companies to perform tracking and reporting functions for our web processing. These companies may place cookies on your computer so that they can display targeted advertisements to you. These third party advertising and analytics companies should not collect Personal Information in this process, and we do not give Personal Information to them as part of this process.

If you want to remove or block cookies and similar collection technology, you may be able to update your browser settings (consult your browser's "help" menu). You can find instructions on how to manage collection technology on different types of web browsers at www.allaboutcookies.org.

6. Children

We do not knowingly collect or store any personal information from anyone under the age of 16. If we become aware that we have collected or stored personal information from an individual under age 16, we will remove his or her personal information from our files. If you are a parent or guardian and believe we may have inadvertently collected personal information from your child, please notify us immediately by sending an email to privacyrequest@siteone.com.

7. Your Choices

You can limit the information you provide to SiteOne. You can also limit the communications that SiteOne sends to you. To opt-out of marketing emails, you can visit our website and communicate your choice to the relevant privacy contact. Alternatively, you may opt-out of receiving future marketing emails by clicking "unsubscribe" at the bottom of marketing emails we send you. Please note that even if you opt-out of receiving marketing material, we may still need to contact you with important Transactional Information about your account. For example, even if you opt-out of marketing emails, we may still send you a confirmation when you register with our Services, notify you of changes to this Statement or send product safety or recall communications. You can manage cookie preferences and opt-out of having cookies and other similar collection technologies used by adjusting the settings on your browser or interface. You can manage how your mobile device and mobile browser share location information with SiteOne, as well as how your mobile browser handles cookies and related technologies by adjusting your mobile device privacy and security settings.

8. Information & Data Security

SiteOne uses various controls that are designed to reasonably safeguard Personal Information, such as encrypted transmission and access-controlled storage. Even so, technical mistakes are possible. No service provider, including SiteOne, can fully eliminate security risks associated with Personal Information.

9. "Do Not Track" Disclosure

We do not collect or respond to Do Not Track signals and our websites do not function differently based on any Do Not Track preferences that may be received. For more information on Do Not Track signals, please visit https://allaboutdnt.com/.

10. Transfer of Information & Data to Other Countries

SiteOne is headquartered in the United States. Personal Information may be accessed by or transferred to the United States or to our affiliates and data processors elsewhere in the world for the purposes described in this Privacy Policy. When we access or transfer Personal Information, we do so in compliance with applicable law. Additionally, we take steps to protect the privacy and security of Personal Information, regardless of where it is processed or stored.

11. Privacy Policies of Third Parties

This Privacy Policy only addresses the use and disclosure of information and data by SiteOne. Other websites that may be accessible through this website have their own privacy policies and practices. We encourage you to familiarize yourself with the privacy policies provided by all third parties prior to providing them with information or taking advantage of an offer or promotion.

12. Job Applicants

If you have applied for employment with SiteOne, the Personal Information submitted with your job application will be used for recruitment and other internal human resources purposes and, if applicable, may be shared with third party service providers engaged by us to assist us with employment and background check matters.

13. California Privacy Rights

California affords California consumers certain rights over their personal information (subject to certain exceptions). To learn more about these rights, please visit our page for California Privacy Rights.

14. Changes to this Privacy Policy

From time to time, we may update this Privacy Policy to reflect new or different privacy practices. We may place a notice on our homepage when we make material changes to this Privacy Policy. We may also notify you about the change by sending a notice to you. LAST REVISED: February 3, 2021

15. How to Contact Us

Please contact us if you have any questions or comments about our privacy practices or this Privacy Policy. You can reach us Online at privacyrequest@siteone.com. You can also reach us via mail directed to SiteOne Landscape Supply, Attn: Data Privacy c/o Legal Department, 300 Colonial Center Parkway, Suite 600, Roswell, GA 30076.