BuildDirect.com Technologies Inc. — Privacy Policy

Last updated May 5, 2026

1.Application of This Privacy Policy

BuildDirect.com Technologies Inc. (“BuildDirect,” “we,” “us,” or “our”) respects the privacy of its customers, suppliers, and visitors. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit www.builddirect.com (the “Site”), visit our Pro Center retail locations, interact with us through our marketplace channels, or otherwise provide personal information to us.

By using the Site, visiting our retail locations, and/or providing personal information to us, you agree to the terms of this Privacy Policy. This Privacy Policy does not apply to the practices of companies, other entities, or websites that BuildDirect does not manage or control. It applies to interactions you have with the Site, our retail locations, our marketplace channels, or with a member of the BuildDirect team.

2.Third-Party Websites

You can visit the Site and its sub-domains without registering for membership or subscribing to any communications. The Site contains links to third-party sites, which are not governed by this Privacy Policy. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Site. We encourage you to review third parties’ privacy and security policies before providing them with information.

3.Personal Information We Collect

Personal information means any information relating to an identified or identifiable natural person. We collect personal information as described below when you interact with us.

3.1Information You Provide Directly

There are many ways you provide information to us directly, including:

• Information you input into the Site in connection with purchasing products, requesting samples, or creating an account;
• Telephone conversations and online chat interactions;
• Email and other written communications;
• In-person interactions at our Pro Center retail locations;
• Social media interactions through platforms such as Facebook, Instagram, LinkedIn, and YouTube;
• Resumes, cover letters, and pre-screening information in connection with employment opportunities; and
• All other communications with members of the BuildDirect team.

3.2Categories of Personal Information Collected

The legal bases for our processing of personal information are primarily that the processing is necessary for providing the Site or services and that the processing is carried out in our legitimate interests, which are further explained below. We may also process personal information upon your consent, asking for such consent as appropriate.

Payment and Shipping Information. When you purchase a product, we collect financial information to process the order. We may also collect your billing and shipping addresses for the purposes of fulfilling your transaction, as well as your order history and feedback.

Contact Information. Your name, email address, phone number, mailing address, and other contact details you provide when creating an account, making a purchase, requesting information, or signing up for communications.

Demographic Information. We may collect information such as your age, gender, product preferences, and reviews or comments you post online.

Location Information. We may collect information from your IP address relating to your general geographic location. When you visit a Pro Center location, we may collect information about which location you visited. This data is used to best match our products to the areas of demand.

Browsing and Usage Information. We may track the pages you visit, the path you took to land on the Site, what website you visit when you leave us, and how you interact with our products and content. We collect this information using cookies and similar tracking technologies described in Section 5 below.

Employment-Related Information. We may collect information you provide to us in contemplation of an employment opportunity with BuildDirect.

4.How We Use Your Personal Information

We take steps designed to ensure that only those employees who need access to your personal information to fulfill their employment duties will have access to it. BuildDirect may collect and use your personal information for the following purposes:

• To process and fulfill orders, including shipping and delivery;
• To contact you regarding your online visit, telephone call, or Pro Center visit, and to follow up in relation to your order or inquiry;
• To match your location with products to ensure proper and expeditious delivery;
• To communicate with you about your account, shopping cart, or our relationship;
• To analyze website trends, customer interests, and improve our products and services;
• To administer and maintain your BuildDirect account;
• To market new services and products that we believe may interest you (including by email, SMS text message, and push notifications, with your consent where required);
• To collect debts owed to BuildDirect or to pay debts owed by BuildDirect;
• To help us make credit decisions and check the identity of new clients to prevent fraud;
• To evaluate employment applications;
• To create de-identified or aggregated data for analytics and commercial purposes as described in Section 7;
• As required or authorized by law; and
• For other uses we may disclose to you from time to time.

5.Cookies and Tracking Technologies

BuildDirect uses cookies, pixel tags, and similar technologies to collect information about your visits to and interactions with the Site. A cookie is a small amount of text that is sent to your browser from a web server and stored on your computer’s hard drive.

5.1How We Use Cookies

We use cookies and similar technologies to:

• Store information about your website visit, activities, and preferences;
• Monitor aggregate traffic patterns and site usage;
• Send you tailored browser notifications with news and offers (with your consent);
• Optimize the Site and monitor its performance; and
• Display relevant advertisements on third-party websites.

If you would prefer to prevent your computer from accepting cookies, you can disable cookies from your browser; however, you may not be able to access certain features of the Site.

5.2Analytics and Advertising Partners

We work with third-party analytics and advertising partners to understand site usage and to display relevant advertisements. These partners may collect information about your visits to the Site and your interactions with our products and services through the use of cookies and pixel tags. Our current partners include, but are not limited to:

• Google Analytics — for website analytics and advertising. You can opt out at https://support.google.com/ads/answer/2662922.
• Facebook/Meta — for advertising and audience targeting. You can manage your preferences at https://www.facebook.com/ads/preferences/.
• Shopify — our ecommerce platform provider. See Shopify’s Privacy Policy at https://www.shopify.com/legal/privacy.

We may update these partners from time to time. You can manage your cookie preferences through your browser settings or through the cookie preference tools on our Site.

5.3Do Not Track Signals

The Site honors the Global Privacy Control (GPC) signal as an opt-out of sale/sharing of personal information for California residents, as required by the California Consumer Privacy Act. For other “Do Not Track” browser signals, you can manage tracking preferences through your browser settings or by installing browser plugins to block tracking technologies.

6.How We Contact You

By submitting your information or using the Site, you expressly consent and agree that BuildDirect, its affiliates, and assigns (collectively, “Represented Entities”) may send emails, or place calls and send text messages to any telephone number provided to BuildDirect for any purpose related to your use of the Site, including: as part of creating a BuildDirect account; in conjunction with a request made through a website form or chat; in response to requests for information, goods, or services; and Site or product improvement surveys.

If you elect to provide consent to receive telemarketing messages, such consent grants BuildDirect and the Represented Entities the right to make or deliver advertising/telemarketing text messages and calls, including through the use of an automatic telephone dialing system or an artificial or prerecorded voice. Telemarketing consent is not a condition for use of the Site and may be withdrawn at any time.

You promise that you are the owner and/or primary user of all telephone numbers you provide to us. If your phone number changes, you will immediately notify us. BuildDirect and the Represented Entities are not responsible for any fees assessed by your telephone provider for receipt of text messages or calls.

7.De-Identified and Aggregated Data

BuildDirect may create de-identified and aggregated datasets derived from user activity on the Site, in our Pro Center locations, and through our marketplace channels. De-identification is the process of removing or transforming personal identifiers so that information can no longer reasonably be used to identify a specific individual, household, or device.

7.1How We De-Identify Data

When we create de-identified data, we employ the following safeguards:

• We remove or irreversibly hash all direct personal identifiers, including names, email addresses, phone numbers, physical addresses, account numbers, and payment information;
• We aggregate data so that it reflects trends and patterns across groups of users rather than individual behavior;
• We apply minimum threshold requirements so that no data set reflects the activity of fewer than a minimum number of users sufficient to prevent re-identification;
• We do not attempt to re-identify any de-identified data, and we contractually prohibit recipients from doing so; and
• We maintain technical and organizational measures designed to prevent re-identification.

7.2How We Use De-Identified Data

We may use de-identified and aggregated data for our own internal analytics, product improvement, market research, and business intelligence purposes. Because this data does not identify and cannot reasonably be linked to any individual, it is not subject to the rights and restrictions that apply to personal information under this Privacy Policy.

7.3Commercial Data Partnerships

We may share de-identified and aggregated data with third-party commercial data partners, including data analytics platforms, data exchanges, market research firms, and companies that provide artificial intelligence and machine learning services. These partners may use the data for purposes including market research, competitive intelligence, trend analysis, and the development of data-driven insights and products.

When we share de-identified data with commercial partners, we require by contract that they:

• Not attempt to re-identify any individuals from the data;
• Use the data only for the purposes specified in our agreement; and
• Maintain appropriate security measures to protect the data.

BuildDirect does not sell your identifiable personal information. The de-identified and aggregated data we share with commercial partners cannot reasonably be used to identify you. For information about your right to opt out of the sale or sharing of personal information under California law, please see Section 12 below.

8.Disclosure of Personal Information

Information about our customers is an important aspect of our business. BuildDirect treats this information with integrity and does not sell identifiable personal information. We may disclose your personal information in the following circumstances:

• When the services we are providing to you require us to share information with third parties — for example, providing identification numbers to customs brokers for processing customs clearance for shipments;
• If we engage a third party to provide services to us (such as payment processing, order fulfillment, shipping and delivery, computer back-up services, customer relationship management, advertising, or marketing) and the third party is bound by confidentiality and data protection obligations;
• With vendors and manufacturers to respond to your feedback, comments, reviews, and/or claims;
• Where it is necessary to collect a debt owed to BuildDirect or to pay a debt owed by BuildDirect;
• As part of an investigation to protect us if we suspect fraud;
• To respond to an emergency where the health or safety of any individual is reasonably believed to be threatened;
• If the information is already publicly known;
• In connection with a merger, acquisition, bankruptcy, or sale of all or substantially all of our assets, in which case your information may be transferred as a business asset, subject to applicable law;
• When we are required or authorized by law to do so; and
• In other circumstances where you have consented to the disclosure.

We may also disclose de-identified and aggregated data to commercial data partners as described in Section 7 above. Because this data cannot reasonably identify any individual, this disclosure is not a “sale” of personal information for purposes of applicable privacy law. However, out of an abundance of caution, we provide California residents with the right to opt out as described in Section 12.

We implement appropriate technical and organizational measures, including contractual arrangements, to protect information disclosed to third parties who perform services on our behalf.

Your personal information may be stored and processed in any country where we have facilities or in which we engage third-party service providers. By using the Site and/or providing personal information to us, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules. Our practices regarding your personal information will at all times be governed by this Privacy Policy and applicable law.

9.Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes set out in this Privacy Policy and to comply with our legal and regulatory obligations. Specific retention periods include:

Data Category	Retention Period	Reason
Account information	Duration of account plus 3 years	Account maintenance and legal obligations
Transaction records	7 years from transaction date	Tax, accounting, and legal compliance
Browsing and usage data	24 months from collection	Analytics and site optimization
Marketing preferences	Until consent is withdrawn	Marketing communications
Employment application data	2 years from application date	Recruitment and legal compliance
De-identified and aggregated data	Indefinite	No longer personal information; used for analytics and commercial purposes

De-Identified Data: Once your data has been de-identified and aggregated in accordance with Section 7, so that it cannot reasonably be used to identify you, it is not subject to subsequent deletion, correction, or access requests because it cannot be associated with you as an individual. De-identified data that has been shared with commercial partners pursuant to Section 7 is not subject to individual deletion, correction, or access requests because it cannot be associated with any individual. This includes data that has been licensed to third-party data platforms under commercial agreements.

10.How We Secure Your Information

BuildDirect takes reasonable steps to protect your information from loss, unauthorized access, modification, or disclosure.

The steps we take to protect your information include:

• Premises security at our offices and Pro Center locations;
• Restricted access to your information on a need-to-know basis;
• Deploying technological safeguards including encryption, access controls, and firewalls;
• Use of secure socket layer (SSL) technology to encrypt credit card transactions;
• Use of authentication to access your account; and
• Periodic review of security measures and practices.

Beyond these measures, you should be aware that Internet communications are not absolutely private or confidential. You are responsible for maintaining the secrecy of your passwords and personal information. If you believe your personal information has been compromised, please contact us as set forth in the “Contact Us” section below. If we learn of a security systems breach, we will inform you and the authorities in accordance with applicable law.

11.Your Privacy Rights

11.1Withdrawing Consent

You have the right to withdraw your consent to the collection, use, or disclosure of your personal information at any time, except where that withdrawal would frustrate the performance of a legal obligation by BuildDirect.

11.2Accessing or Correcting Your Information

You have the right to know what personal information BuildDirect has collected about you, how that information is being used, and to whom it has been disclosed. You also have the right to request correction of any inaccurate personal information.

11.3Requesting Deletion

Subject to applicable laws and exceptions, you may request that we delete the personal information we have collected about you. Upon receiving a verified deletion request, we will delete your personal information from our records and direct our service providers to do the same, unless an exception applies.

11.4Unsubscribing from Marketing

You may opt out of receiving marketing and promotional material by selecting the opt-out or unsubscribe feature in our communications. You can stop receiving browser push notifications at any time by changing your browser settings.

11.5GDPR Rights (European Economic Area)

If you are located in the European Economic Area, you may be entitled to additional rights under the General Data Protection Regulation (GDPR), including:

• The right to object to unlawful data processing;
• The right to request restriction of processing;
• The right to data portability in a structured, commonly used, and machine-readable format;
• The right to object to decisions made solely by automated means; and
• The right to lodge a complaint with your local data protection authority.

For more information about your rights under the GDPR, visit the European Commission’s page on Data Protection at http://ec.europa.eu/justice/data-protection/index_en.htm.

12.Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”). This section describes your rights and how to exercise them.

12.1Your Rights

As a California resident, you have the right to:

• Know: Request that we disclose what personal information we have collected, used, disclosed, sold, or shared about you in the preceding 12 months;
• Delete: Request that we delete personal information we have collected from you, subject to certain exceptions;
• Correct: Request that we correct inaccurate personal information we maintain about you;
• Opt-Out of Sale/Sharing: Direct us to stop selling or sharing your personal information;
• Limit Use of Sensitive Personal Information: Direct us to limit our use and disclosure of your sensitive personal information to what is necessary to perform the services or provide the goods you expect; and
• Non-Discrimination: Not be discriminated against for exercising any of your CCPA rights.

12.2Categories of Personal Information

The following table describes the categories of personal information we have collected, sold, and shared for a business purpose in the preceding 12 months:

Category	Collected?	Business Purpose	Sold?	Shared?
Identifiers (name, email, phone, address)	Yes	Order fulfillment, account management, communications	No	Service providers only
Commercial information (purchase history, products)	Yes	Order fulfillment, analytics, product recommendations	No (identifiable); Yes (de-identified/aggregated)	Service providers; data analytics partners (de-identified only)
Internet/network activity (browsing, search history, interactions)	Yes	Site optimization, analytics, advertising	No (identifiable); Yes (de-identified/aggregated)	Advertising partners; data analytics partners (de-identified only)
Geolocation data (general location from IP)	Yes	Delivery, regional product matching	No	Service providers only
Financial information (payment details)	Yes	Payment processing	No	Payment processors only
Professional / employment information	Yes (applicants)	Recruitment	No	No
Inferences drawn from above categories	Yes	Personalization, marketing, product recommendations	No (identifiable); Yes (de-identified/aggregated)	Advertising partners; data analytics partners (de-identified only)

Important Note on “Sale”: BuildDirect does not sell identifiable personal information for monetary consideration. We may share de-identified and aggregated data with commercial data partners for monetary consideration, which may be considered a “sale” under the CCPA’s broad definition. We provide you with the right to opt out of this activity as described below, even though the data shared cannot reasonably identify you.

12.3Do Not Sell or Share My Personal Information

You have the right to opt out of the sale or sharing of your personal information. To exercise this right:

• Click the “Do Not Sell or Share My Personal Information” link on our homepage or at the bottom of any page on our Site;
• Submit a request to privacy@builddirect.com with the subject line “Opt-Out of Sale/Sharing”; or
• Call us toll-free at 1-877-631-2845.

We also honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we will treat it as a valid opt-out request for the sale and sharing of personal information associated with that browser.

We will process your opt-out request within 15 business days. We will not ask you to re-authorize the sale or sharing of your personal information for at least 12 months after you opt out.

12.4How to Submit a Request

To exercise your right to know, delete, or correct your personal information, you may:

• Email us at privacy@builddirect.com; or
• Call us toll-free at 1-877-631-2845.

We will verify your identity before processing your request. We may ask you to provide information that matches information we have on file. You may also designate an authorized agent to make a request on your behalf by providing a signed written authorization.

We will respond to your request within 45 days. If we need more time, we will inform you of the reason and may extend the response period by up to an additional 45 days.

12.5Financial Incentive Programs

We may from time to time offer financial incentive programs (such as our Pro Rewards program) in exchange for the collection or retention of personal information. Participation in these programs is voluntary and you may opt out at any time. We will provide specific details about the material terms of any financial incentive program at the time of enrollment.

13.Canadian Privacy Rights (PIPEDA)

BuildDirect is incorporated under the laws of British Columbia, Canada, and is subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Canadian residents have the right to:

• Access their personal information held by BuildDirect;
• Request correction of any inaccurate personal information;
• Withdraw consent to the collection, use, or disclosure of personal information, subject to legal or contractual restrictions; and
• File a complaint with the Office of the Privacy Commissioner of Canada.

Where BuildDirect uses de-identified and aggregated data for commercial purposes as described in Section 7, this activity is conducted under BuildDirect’s legitimate business interests and in compliance with PIPEDA’s requirements for data use and disclosure. The data cannot be used to identify any individual.

14.Children

We do not knowingly collect personal information from children under the age of 16 without obtaining parental consent. If you are under 16 years of age, please do not use the Site or provide personal information at any time or in any manner. If we learn that personal information has been collected from persons under 16 years of age without verifiable parental consent, we will take appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 16 years of age has provided personal information, you may alert us as set forth in the “Contact Us” section below.

15.Changes to This Privacy Policy

We may update this Privacy Policy from time to time in accordance with applicable laws. Any changes or modifications will be effective upon posting of the revised Privacy Policy to the Site. If we make material changes, we will notify you by posting a prominent notice on the Site and, where required by law, by sending you direct notification. Your continued use of the Site and/or BuildDirect’s services following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically.

16.Contact Us

This Privacy Policy is governed by the laws of the Province of British Columbia and the laws of Canada applicable therein. If you have any questions or comments about this Privacy Policy or your personal information, or if you wish to (a) make an access or correction request, (b) exercise any applicable privacy rights, (c) make a complaint, or (d) obtain information about our policies and practices with respect to any service providers outside Canada, our Privacy Officer can be reached at: