We collect Personal Information from California residents and comply with the California Consumer Privacy Act and related laws (“California privacy laws”). In addition to our general Privacy Notice available at spi-ind.com/PrivacyPolicy, this California Privacy Notice applies to California residents (“users,” “you,” or “your”).

For the purposes of this California Privacy Notice, “Personal Information” means information that is linked or reasonably linkable to a particular individual or household. However, the following categories of information are not Personal Information:

• Publicly available information;
• Deidentified or aggregated data; or
• Information otherwise excluded from the scope of California privacy laws.

This Privacy Notice provides the following information to California residents:

• Categories of Personal Information we collect;
• Purposes for which we use Personal Information;
• Categories of Personal Information we disclose to third parties;
• Categories of third parties to which we disclose Personal Information; and
• How California residents can exercise their rights under California privacy laws:
  • The rights to access, correct, or delete Personal Information;
  • The right to obtain a portable copy of Personal Information;
  • The right to limit the use of Sensitive Personal Information in certain circumstances; and
  • The rights to opt out of the sharing of Personal Information for targeted advertising, sales of Personal Information, or certain profiling activities.
• Risk Assessments & Safeguards

Categories of Non-Sensitive Personal Information

We collect Non-Sensitive Personal Information from the following sources:

• Directly from our users

Category of personal information we may collect: Identifiers
Examples	Identifiers may contain the following: Name, Address, Phone Number, Email Address
Purpose(s)	Information shared with vendors for selling, installing, and delivering product
Targeted Advertising	We do not engage in targeted advertising or disclose Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Other Disclosing	This information may be disclosed to Processors and Business Partners
Retention Period	10 years; or longer if required for warranty purposes

Category of Personal Information: Commercial Information
Examples	Commercial Information may contain the following: order history, payment information
Purpose(s)	Payments and customer service
Targeted Advertising	We do not engage in targeted advertising or disclose Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Other Disclosing	This information may be disclosed to Processors
Retention Period	10 years; or longer if required for warranty purposes

Category of Personal Information: Internet/Electronic Activity
Examples	Internet/Electronic Activity may contain the following: session browsing information, IP address
Purpose(s)	For store locator app and website deployment
Targeted Advertising	We do not engage in targeted advertising or disclose Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Other Disclosing	This information may be disclosed to Processors
Retention Period	10 years; or longer if required for warranty purposes

Categories of Sensitive Personal Information

The table below outlines the categories of Sensitive Personal Information Sierra Pacific Industries collects about California residents and whether they are disclosed to third parties.

We collect Sensitive Personal Information from the following sources:

• Directly from our users

Category of Sensitive Personal Information: Precise Geolocation Data
Examples	Precise Geolocation Data may contain the following: when clicking on "use current location", a banner will be displayed requesting to allow that use
Purpose(s)	We only collect information on the website store locater app for the purpose of displaying the closest store locations
Targeted Advertising	We do not engage in targeted advertising or disclose Personal Information for targeted advertising purposes
Sale	We do not sell Personal Information to anyone
Other Disclosures	This information is not otherwise disclosed to third parties
Retention Period	The session cookie is removed when navigating away from the current web page

Use of Personal Information

We use Personal Information for the purposes described in our general Privacy Notice (see https://spi-ind.com/Legal/PrivacyPolicy). Personal Information may also be used or disclosed as otherwise permitted or required by applicable law.

Disclosing Personal Information

We disclose Personal Information to the following categories of third parties:

• Processors: We use processors to securely handle Personal Information on our behalf for our business purposes and only on our instructions. California privacy laws and our contracts with these companies prevent them from using your Personal Information for their own purposes.

See the tables above for more details about how different categories of Personal Information are disclosed.

We do not sell Personal Information to anyone.

Exercising your Personal Information Rights

California residents have the following rights under California privacy laws:

• The rights to access, correct, or delete Personal Information;
• The right to obtain a portable copy of Personal Information;
• The right to limit the use of Sensitive Personal Information in certain circumstances; and
• The rights to opt out of the sharing of Personal Information for targeted advertising, sales of Personal Information, or certain profiling (see the “Targeted Advertising” section below for a definition of what qualifies as targeted advertising).

If you are a California resident, you can submit a request to exercise your personal data rights under California privacy laws by sending an email to privacy@spi-ind.com with the subject line ‘Privacy Rights Request' or by visiting our online portal at https://www.requesteasy.com/656f-3056. To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will use commercially reasonable efforts to verify your identity for this purpose. Any information you provide to authenticate your identity will only be used to process your rights request. Please be aware that we do not accept or process rights requests through other means (e.g., via fax or social media).

After submitting your request, you will receive a follow-up email, which may include a link you must click on in order to verify your identity. If you do not click on that link, we may be unable to complete your request due to lack of verification. It is important that you provide a valid email address in order for us to be able to process your request.

We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions.

We reserve the right to decline to process, or charge a reasonable fee for, requests from a California resident that are manifestly unfounded, excessive, or repetitive.

Limiting the Use of Sensitive Personal Information

California privacy laws provides a right to limit some uses of Sensitive Personal Information. In particular, you may direct companies not to use Sensitive Personal Information except as necessary to provide goods or services you have requested. You may submit a request to limit the use of your Sensitive Personal Information by submitting a rights request as described in the section titled Exercising Your Personal Information Rights above.

Authorized Agent Requests

California privacy laws allows you to designate an authorized agent to make a rights request on your behalf. Your authorized agent may submit such a request by following the same method described above. We may require verification of your authorized agent’s authority in addition to the information we require for verification of your identity.

Risk Assessments and Safeguards

We take your privacy seriously and regularly evaluate how our practices may affect your rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). To ensure transparency and accountability, we conduct risk assessments and implement safeguards across the following areas:

Risk Assessments

• Personal Information Processing: We assess the potential risks associated with collecting, using, and sharing personal information, including sensitive categories such as precise geolocation, financial account details, and health-related data.
• Automated Decision-Making: We do not use automated decision-making technologies (such as algorithms or artificial intelligence tools) to make decisions that could significantly affect you, including eligibility for offers, pricing, employment, or other important outcomes. All decisions involving your personal information are made with human oversight.
• Third-Party Sharing: Before sharing personal information with service providers or partners, we assess the risks associated with that transfer and require contractual safeguards to protect your data.

Safeguards

• Data Minimization: We limit the collection and use of personal information to what is necessary and proportionate for the services we provide.
• Sensitive Data Controls: We provide you with the option to limit the use and disclosure of sensitive personal information.
• Cybersecurity Audits: We conduct annual cybersecurity audits to evaluate the effectiveness of our security measures and strengthen protections against unauthorized access, breaches, or misuse.
• Access & Correction Rights: We provide tools that allow you to access, correct, or delete your personal information.
• Vendor Oversight: We require service providers and contractors to meet strict contractual and security obligations, including compliance with CCPA/CPRA requirements.

Opt-Out

Contact Us

If you have any questions or concerns regarding this California Privacy Notice, contact us at privacy@spi-ind.com.