California Privacy Rights

Effective date: October 1, 2025

This page supplements the Privacy Statement and applies solely to California residents under the California Consumer Privacy Act and the California Privacy Rights Act (CCPA/CPRA).

Our commitment

Cardinal Home Center does not sell personal information for money. We may share limited personal information with service providers and contractors to operate our website, process orders and payments, deliver products, provide support, and perform analytics. We may also share personal information for cross-context behavioral advertising. You can opt out of sale or sharing as described below.

Your rights under CCPA/CPRA

• Right to know - request the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection or disclosure, and the categories of third parties with whom we share it.
• Right to delete - request that we delete personal information we collected from you, subject to legal exceptions.
• Right to correct - request correction of inaccurate personal information.
• Right to opt out of sale or sharing - direct us to stop selling or sharing your personal information for cross-context behavioral advertising.
• Right to limit use of sensitive personal information - request that we limit use and disclosure of sensitive personal information to what is necessary to provide requested services.
• Right to non-discrimination - we will not discriminate against you for exercising your privacy rights.

How to submit a request

California residents can exercise their rights by emailing ecommerce@cardinalhomecenter.com. You may also write to: 322 Washington St, Madison, VA 22727. If your request relates to account or order data stored in our ECI Spruce system, note that in your email so we can include that data in our response.

Verification

For your security, we will verify your identity before fulfilling requests. Verification steps may include confirming account details or recent order information. Authorized agents must provide proof of authorization and we may still require direct verification from the consumer.

Opt out of sale or sharing

To opt out of sale or sharing of personal information used for cross-context behavioral advertising, use our Do Not Sell/Share My Information page or email ecommerce@cardinalhomecenter.com.

Limit use of sensitive personal information

If we collect any sensitive personal information, we will use it only as necessary to provide requested services, prevent fraud, ensure security, or comply with law. You may request that we limit additional uses by contacting ecommerce@cardinalhomecenter.com.

Categories of personal information

Depending on how you interact with us, we may collect these categories defined by CCPA/CPRA:

• Identifiers - name, email address, phone number, IP address, device identifiers.
• Customer records - billing and shipping addresses, account details.
• Commercial information - products viewed or purchased, order history.
• Internet or network activity - browsing history on our site, interactions with pages or ads.
• Geolocation data - general location inferred from IP address.
• Inferences - preferences or interests derived from site interactions.
• Sensitive personal information - only if supplied by you and only as necessary for the transaction or to comply with law. We do not use sensitive personal information to infer characteristics.

Sources and purposes

We collect personal information directly from you, automatically from your use of our website, and from our operational systems such as ECI Spruce. We use the information to operate our website, process transactions, provide support, secure our services, and for analytics as described in our Privacy Statement.

Disclosures to third parties

We disclose personal information to service providers and contractors who assist with website operation, payment processing, order fulfillment and delivery, customer support, security, and analytics. We require such parties to use the information only to perform services for us and to protect it appropriately.

Retention

We retain personal information for as long as reasonably necessary for the purposes described, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by category and purpose.

Children

We do not knowingly sell or share personal information of consumers under 16 years of age. Parents or guardians may contact us to exercise rights on behalf of a minor.

Updates

We may update this California Privacy Rights notice periodically. Changes will be posted here with an updated effective date.

Contact