California Privacy Policy

Effective October 24, 2022

Last modified as of March 5, 2025

This California Privacy Rights Notice supplements the information contained in the Privacy Policy, and applies solely to all visitors, users, and others who reside in the State of California (“Consumers” or “You”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 (collectively, the “CCPA”) and any terms defined in the CCPA have the same meaning when used in this Notice.

This Policy does not apply to workforce-related personal information collected from California-based employees, job applicants, contractors, or similar individuals.

Where noted in this Policy, the CCPA temporarily exempts personal information reflecting a written or verbal business-to-business communication (“B2B personal information”) from some its requirements.

Personal Information

Personal information includes information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information does not include publicly available information, including information lawfully made available to the general public by the consumer or from widely distributed media, and deidentified or aggregate consumer information. We may collect and use the following categories of personal information regarding California residents:

Categories of Personal Information Collected	Categories of Sources of Personal Information	Whether Sold, Shared and/or Disclosed for a Business Purpose and Categories of to Whom	Business or Commercial Purposes for Collection and Use of Personal Information
Personal Identifiers and Information. May include name, alias, username, signature, date of birth, Social Security number, passport number, driver’s license or state identification card number, address, telephone numbers, e-mail addresses, account name, unique personal identifiers, online identifier, device identifier, Internet Protocol address, or other similar identifiers.	Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.	Sold – yes. Categories of third parties to whom we may sell personal information: Third parties to whom you authorize us to disclose your Personal Information in connection with the products or services we provide to you. Shared – yes. Categories of third parties to whom we may share personal information: our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers. Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: our family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators.	To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services. To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services. To maintain and service your account, including to process orders and payments. To communicate with you about our terms and policies. To verify you, your account activity and your information. To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts. To provide customer service. To perform due diligence, credit and fraud prevention checks. To maintain accurate record keeping. To ensure security and integrity of our customers' personal information. To compile figures for market research, data analytics, and website performance. To measure our marketing campaigns and to audit consumer interactions. To display advertisements personalized to individual interests or preferences, either on our Sites or the sites of third parties.  To set in-home appointments upon your request.  To collect information for lead-generation or the sale of additional products/services. To comply with regulations and legal requirements. To comply with contractual requirements. For risk management and compliance. For legal advice and defense of claims. For general, operational and administrative purposes.
Commercial information. May include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories.	Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.	Sold – no. Shared – yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information. Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.
Internet or other Electronic Network Activity Information. May include information about your use of the Sites, including all the areas within the Sites that you visit, login information (such as your last log in), browsing history and actions, search history, online behavior, interest data, the URL or advertisement that referred you to the Sites you are visiting, and views and interactions with features, emails and advertisements, Sites, and products, including the date and time the services are viewed and/or used. It also includes information about your operating system and browser used on your device, your internet service provider, regional and language settings, IP address, your time zone, location information based off your IP address, MAC address, device advertising ID, mobile network (if applicable), and other unique identifying information broadcast from your device when visiting our website.	Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.	Sold -- no. Shared -- yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information. Disclosed for a Business Purpose -- yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.
Geolocation Data. May include location data obtained from your mobile device's GPS or your IP address, depending on whether you are visiting the mobile or online version of our Sites.	Consumer, consumer’s device, automatic collection by us.	Sold – no. Shared – yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information. Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.
Inferences drawn from any of the information above. This includes inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitude; and aggregate information from third parties.	Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.	Sold – no. Shared – yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information. Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.

Categories of Personal Information Collected

Categories of Sources of Personal Information

Whether Sold, Shared and/or Disclosed for a Business Purpose and Categories of to Whom

Business or Commercial Purposes for Collection and Use of Personal Information

Personal Identifiers and Information.

May include name, alias, username, signature, date of birth, Social Security number, passport number, driver’s license or state identification card number, address, telephone numbers, e-mail addresses, account name, unique personal identifiers, online identifier, device identifier, Internet Protocol address, or other similar identifiers.

Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.

Sold – yes. Categories of third parties to whom we may sell personal information: Third parties to whom you authorize us to disclose your Personal Information in connection with the products or services we provide to you.

Shared – yes. Categories of third parties to whom we may share personal information: our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers.

Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: our family of companies, including our affiliates both in and outside the United States; our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers; social networks; law enforcement; prospective purchasers of our business; outside auditors and lawyers; and government entities, agencies and regulators.

To manage our products and services, including to help us operate, provide, evaluate, improve, monitor, customize, bill and support our products and services.

To maintain the quality of our products and services, including to improve, upgrade, and enhance our products and services.

To maintain and service your account, including to process orders and payments.

To communicate with you about our terms and policies.

To verify you, your account activity and your information.

To detect, investigate and report fraud, abuse or illegal use of our products and services or customer accounts.

To provide customer service.

To perform due diligence, credit and fraud prevention checks.

To maintain accurate record keeping.

To ensure security and integrity of our customers' personal information.

To compile figures for market research, data analytics, and website performance.

To measure our marketing campaigns and to audit consumer interactions.

To display advertisements personalized to individual interests or preferences, either on our Sites or the sites of third parties. 

To set in-home appointments upon your request. 

To collect information for lead-generation or the sale of additional products/services.

To comply with regulations and legal requirements.

To comply with contractual requirements.

For risk management and compliance.

For legal advice and defense of claims.

For general, operational and administrative purposes.

Commercial information.

May include records of products or services purchased and used, diagnostic and service performance information, credit information from reporting agencies, transactional information, and other purchasing or consuming histories.

Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.

Sold – no.

Shared – yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information.

Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.

Internet or other Electronic Network Activity Information.

May include information about your use of the Sites, including all the areas within the Sites that you visit, login information (such as your last log in), browsing history and actions, search history, online behavior, interest data, the URL or advertisement that referred you to the Sites you are visiting, and views and interactions with features, emails and advertisements, Sites, and products, including the date and time the services are viewed and/or used. It also includes information about your operating system and browser used on your device, your internet service provider, regional and language settings, IP address, your time zone, location information based off your IP address, MAC address, device advertising ID, mobile network (if applicable), and other unique identifying information broadcast from your device when visiting our website.

Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.

Sold -- no.

Shared -- yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information.

Disclosed for a Business Purpose -- yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.

Geolocation Data.

May include location data obtained from your mobile device's GPS or your IP address, depending on whether you are visiting the mobile or online version of our Sites.

Consumer, consumer’s device, automatic collection by us.

Sold – no.

Shared – yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information.

Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.

Inferences drawn from any of the information above.

This includes inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitude; and aggregate information from third parties.

Consumer, consumer’s device, automatic collection by us, credit reporting companies, third-parties that provide us with advertising and analytics services, other service providers.

Sold – no.

Shared – yes. Categories of third parties to whom we may share personal information: see list under Personal Identifiers and Information.

Disclosed for a Business Purpose – yes. Categories of third parties to whom we may disclose personal information for a business purpose: see list under Personal Identifiers and Information.

Sensitive Personal Information

We may collect limited Sensitive Personal Information and limits the use of that information to those uses which are necessary for us to perform the services and provide the goods consumers have requested and for other uses as authorized by applicable California privacy laws and regulations. We may collect the following sensitive personal information:

Categories of Sensitive Personal Information Collected	Whether Sold or Shared	Business or Commercial Purposes for Collection and Use of Sensitive Personal Information
Account Information. May include account log-in, financial account, debit card or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.	Sold – no. Shared – yes. Categories of third parties to whom we may share personal information: our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers.	To perform the services and provide the goods requested by the consumer, including to help us operate, provide, customize, bill and support our products and services. To verify consumer’s age. To ensure the security and integrity of our customers’ personal information, including to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information. For short-term, transient use, including but not limited to non-personalized advertising shown as part of a consumer’s current interaction with us. To perform services on our behalf, including to maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide financing, provide analytic services, provide storage, or provide similar services on behalf of our business. To maintain the quality and safety of our products and services, including to improve, upgrade, and enhance our products and services. To resist malicious, deceptive, fraudulent, or illegal actions directed at our business and to prosecute those responsible for those actions. To ensure the physical safety of natural persons.
Social Security Number.	Sold – no. Shared – yes. Categories of third parties to whom we may share personal information: our service providers and vendors to the extent reasonably necessary for them to perform work on our and your behalf (e.g., credit card processors); ad networks; data analytics providers.

Categories of Sensitive Personal Information Collected

Whether Sold or Shared

Business or Commercial Purposes for Collection and Use of Sensitive Personal Information

Account Information.

May include account log-in, financial account, debit card or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

Sold – no.

To perform the services and provide the goods requested by the consumer, including to help us operate, provide, customize, bill and support our products and services.

To verify consumer’s age.

To ensure the security and integrity of our customers’ personal information, including to prevent, detect, and investigate security incidents that compromise the availability, authenticity, integrity, and confidentiality of stored or transmitted personal information.

For short-term, transient use, including but not limited to non-personalized advertising shown as part of a consumer’s current interaction with us.

To perform services on our behalf, including to maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide financing, provide analytic services, provide storage, or provide similar services on behalf of our business.

To maintain the quality and safety of our products and services, including to improve, upgrade, and enhance our products and services.

To resist malicious, deceptive, fraudulent, or illegal actions directed at our business and to prosecute those responsible for those actions.

To ensure the physical safety of natural persons.

Social Security Number.

Sold – no.

Sale of Personal Information

We sell certain Personal Information to our non-corporate-owned retail affiliates and dealers so that such non-corporate-owned retail affiliates and dealers can set up appointments and market to you. Such Personal Information includes your name, phone number, email address, mailing or street address, and other contact information. As a California resident, you have the right to opt out of the sale of your Personal Information, as detailed below.

Children's Privacy Rights

Our Sites are neither structured nor intended for users who are minors. We do not target, promote, or market products or services to minors. We do not knowingly collect Personal Information from minors, as defined by law. If we discover we have received Personal Information from a person under the age of 18 years, which has not been properly authorized, we will take reasonable steps to delete that data as quickly as possible. If you are age 13 through 17, you may contact us to specifically authorize the sale of your information. If you are under the age of 13, a parent or guardian must explicitly provide such consent on your behalf.

Your Privacy Rights

As a California resident, you have certain additional rights regarding your personal information under the CCPA.

Right to Know Personal Information Collected, Sold, Shared, or Disclosed. You have the right to request that we provide certain information about how we have handled your Personal Information, including:
- Categories of Personal Information collected;
- Categories of sources of Personal Information;
- Business or commercial purpose for collecting;
- Categories of Personal Information sold or shared with a third party;
- Categories of third parties to whom we have sold or shared Personal Information;
- Categories of Personal Information disclosed to third parties for a business purpose;
- Categories of third parties with whom we have disclosed Personal Information for a business purpose.
Right to Access Personal Information Collected. You have the right to request the specific pieces of Personal Information that we have collected about you in a format that is easily understandable to the average consumer, and to the extent technically feasible, in a structured, commonly used, machine-readable format that may also be transmitted to another entity at the consumer's request without hindrance.
Right of No Retaliation. We do not discriminate against any California consumer who exercises any of the consumer's rights under the CCPA. Pursuant to the CCPA, we are permitted to (a) charge a consumer a different price or rate and/or provide a different level of service to the consumer if that difference is reasonably related to the value provided to the consumer by the consumer's data; (b) offer loyalty, rewards, premium features, discounts, or club card programs to its customers; and (c) offer financial incentives, including payments, as compensation for the collection, sale, sharing or retention of Personal Information. We may, on occasion, offer financial incentives, including payments as compensation, for the collection of Personal Information, the sale of Personal Information, or the deletion of information. Other financial incentives may include offering a different price, rate, level, or quality of goods or services to you if that price or difference is directly related to the value provided to you by the Personal Information. We will notify you of incentives when offered. We will only enter you into a financial incentive program if you give us prior opt-in consent that clearly describes the material terms of the financial incentive program. Your opt-in consent may be revoked at any time.
Right to Delete. You have the right to request that we delete any personal information that we have collected about you, subject to certain exceptions. If your Personal Information is deleted, you may not be able to purchase or use our products and services. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. We may deny your deletion request if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which the information was collected, provide a good/service requested by you (or reasonably anticipated within the context of an ongoing business relationship with you), or otherwise perform a contract between the Company and you.
- Detect security incidents or otherwise protect against malicious, deceptive, fraudulent, or illegal activity, up to and including pursuing prosecution of those responsible for the illegal activity.
- Debug the information to identify and repair errors impacting functionality.
- Exercise free speech, ensure the right of another consumer to exercise their right of free speech, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act.
- Engage in public or peer-received scientific, historical, or statistical research in the public interest.
- Enable internal uses that are reasonably aligned with expectations based on your relationship with the business.
- Fulfill the terms of a written warranty or product recall.
- Comply with a legal obligation.
- Otherwise use your Personal Information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Right to Correct Inaccurate Personal Information. You have the right to request that we correct any inaccurate personal information that we maintain about you.
Right to Opt Out of Sale or Sharing of Personal Information. We may sell or share certain pieces of your Personal Information. You have the right to request that we not sell or share your Personal Information to third parties. With this, a third party is prohibited from any further sale of your information purchased from us unless you receive explicit notice from that third party and are provided a separate opportunity to opt out.
Right to Out-Out and Opt-In for Minors. We do not sell the Personal Information of consumers we actually know are less 16 years of age, unless we receive affirmative authorization from either the consumer who is at least 13 but not yet 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to Personal Information sales may opt-out of future sales at any time. If you are under 18 years of age and have a registered account with the Sites, you have the right to request removal of unwanted data that you publicly post on the Sites. We will make sure the data is not publicly displayed on the Sites, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.).
Right to Limit Use and Disclosure of Sensitive Personal Information. We do not use your Sensitive Personal Information for purposes other than as set forth in the CCPA. Nonetheless, you have the right to direct us to limit our use of your Sensitive Personal Information to that use which is necessary for us to perform the services and provide the goods you requested from us, to ensure the security and integrity of your Personal Information, to perform services on your behalf, including to maintain or service accounts, provide customer service, process or fulfill orders and transactions, verify customer information, process payments, provide analytic services, to maintain the quality of our products and services, and as otherwise provided in the CCPA. Please note that Sensitive Personal Information that is collected or processed by us without the purpose of inferring characteristics about a consumer, is not subject to this section, and shall be treated as personal information.

How to Exercise Your CCPA Rights

To exercise your rights, you may submit any requests by emailing us at support@qualitywindowsdirect.com or using our privacy rights web form. You do not need to create an account with us to submit a request. However, we do consider requests made through your password-protected account sufficiently verified when the request relates to Personal Information associated with that specific account. Your authorized agent can make these requests on your behalf using the same links and methods.

Verification of Consumer Requests

To comply process a consumer request, we must reasonably verify the requestor. Each request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative. We will use all reasonable measures to verify the identity of the individual making the request. We will utilize the requested data to ensure that we can verify the requestor's identity and where we are unable to do so, we may contact you for further information, or ask you to provide evidence of your identity prior to responding to your request. This is to protect your data and rights. If a third party, relative, or representative is requesting the data on your behalf, we will verify their authority to act for you and may contact you and them to confirm you and their identity and gain your authorization prior to responding to the request. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Responding to Consumer Requests

A record of each request is made as soon as it is received by our data protection team. We will attempt to confirm receipt of each request by contacting the requestor either at the email or telephone number submitted, through the consumer's account, or by other electronic means. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to ninety (90) days), we will inform you of the reason and extension period in writing.

All our responses shall be in writing and cover the previous 12-month period unless the consumer requests information beyond the 12-month period (only applies to Personal Information collected on or after January 1, 2022). If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will explain the reasons we cannot comply with a request, if applicable.

For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

How Long We Will Retain Your Personal Information

We retain your Personal Information for only as long as is necessary to carry out the purposes described above in this Notice and our Privacy Policy, and we have strict review and retention policies in place to meet these obligations. This time period may vary depending on the type of information and the services used, as detailed below, and applicable law, which may require us to maintain information for a set amount of time. After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information and isolate it from any further use until deletion is possible. We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from anonymized information retained or used for these purposes.

Customer Account Information. We store your account information for as long as your account is active and a reasonable period thereafter in case you decide to re-activate your service. We also retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our services.
Communications Usage Information. While you are an active customer, we retain the communications usage information generated by your use of our services until the information is no longer necessary to provide our services, and for a reasonable time thereafter as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations, and to continue to develop and improve our services.
Marketing Information, Cookies and Web Beacons. Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.
Device Information. We collect device-specific information from you. If you do not revoke our access to this information via the privacy settings on your device, we will retain this information for as long as your account is active.

CCPA Requests in Calendar Year 2023

The chart below provides information about the total number of CCPA requests we received from individuals determined to be California residents in 2023 and our responses to them. Requests may not be fulfilled for various reasons, including: requests to access, delete or correct do not pass our identity verification process; individuals requesting access, deletion or correction do not confirm their email addresses within the requisite time; individuals submit requests while requests of the same type are being processed; and requests are subject to exemptions established by law.

	Access	Delete	Opt-out	Correct	Limit Use of Sensitive PI
Received	0	2	0	0	0
Fulfilled	0	1	0	0	0
Unable to be Fulfilled	0	1	0	0	0

Average Number of Days to Complete CCPA Requests

The chart below provides information about the average number of days it took us to process CCPA requests in 2023. RSC considers a requestor's request fulfilled when we inform them that we have completed the access, delete, opt-out, correct or limit use of sensitive personal information in whole or in part.

Access	Delete	Opt-out	Correct	Limit Use of Sensitive PI
0	2 Days	0	0	0

California’s “Shine the Light” Law

California’s “Shine the Light” Law (Civil Code Section § 1798.83) permits you to request certain information regarding our disclosure of your Personal Information to third parties for marketing purposes. To make such a request, please send an email to support@qualitywindowsdirect.com.

Changes to Our Privacy Notice

We reserve the right to amend this Notice at our discretion and at any time. When we make changes to this Notice, we will post the updated notice on the Sites and update the Notice’s effective date. Your continued use of our Sites following the posting of changes constitutes your acceptance of such changes.