Introduction

This Privacy Policy describes how Shaw Industries, Inc., and its affiliates (“Shaw Industries,” “us,” “our,” or “we”) collect, use, and disclose personal information (defined below) through your interactions with our website (“Site”) and use of our product and service offerings (“Services”).  It also describes the cookies we may use and send to your computer or mobile device.  

If you are a current or former employee or worker of Shaw Industries, the information about how we handle your personal information as an employee is located on the Shaw Industries intranet or  you can request a copy of the information from your HR representative.

If you are a prospective employee or job applicant of Shaw Industries, please reference our Shaw Industries Applicant Policy for information on how we handle your personal information for recruitment and pre-employment purposes.

For the purposes of this Privacy Policy, Shaw Industries is a controller (i.e., responsible party) of your personal information when we administer the Services directly on our own behalf. In certain situations, we also administer the Services on behalf of customers or other third parties.  In those instances, Shaw Industries may act as a processor or service provider to such organizations, and you should review the privacy policy of such third parties with whom you are dealing with directly, as they will be responsible for the handling of your personal information.

California Consumer Notice of Collection

This Notice of Collection is provided to all California consumers subject to this Privacy Policy.  You can access specific topics within this Privacy Policy by clicking on the relevant links in the menu.

Types Of Personal Information We Collect.

The types of personal information we collect about you depends on how you interact with us.  “Personal information,” used interchangeably with “personal data,” means information that identifies, relates to, describes, or can be associated with you.  Depending on the Services you use, the table below sets out the categories and specific types of personal information that we may collect, or have collected, from you in the preceding twelve (12) months and how we collect it.

Sources of Personal Information.

We collect your personal information in the following ways, pursuant to applicable law:

• Directly From You, when you use our Site or Services, sign-up for an account, contact us, sign up to receive emails, text messages, and/or postal mailings. 
• Through Our Use of Cookies and Other Web Devices, when you visit our Site, open or click on emails we send you, or interact with our advertisements. We or third parties we work with automatically collect certain information using technologies such as cookies, web beacons, clear GIF, pixels, internet tags, web server logs, and other data collection tools. For more information, please see the “Cookies and Other Web Devices” section below.
• From Our Third Party Partners, including from third parties that we have partnered with to provide you the Services that you have requested from us.  
• Other Sources, including publicly available sources.  

Use and Processing of Your Personal Information.

We will only use your personal information when the law allows us to. In addition to the uses described above, most commonly, we will use your personal information, and may disclose your personal information with other parties acting on our behalf, for one or more of the following purposes:

• To identify you when you visit our Site.
• To manage your account.
• To provide the products, information, and Services you request or that we think you may be interested in.
• To respond to your inquiries related to support or other requests.
• If you are a customer, to carry out our contract with you.
• To improve and personalize your experience with us.
• For order processing and to streamline your checkout and service process.
• To conduct analytics and solve problems.
• For internal administrative purposes, as well as to manage our relationship with you.
• To assess and respond to a complaint you might make to us or feedback you might give us.
• For market research purposes.
• To conduct investigations of suspicious or harmful activity and to protect the security of our Site and Services.
• To comply with our legal obligations, to establish and exercise our rights, and to defend against a legal claim.

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. As a result, our collection and processing of your personal information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our general interest in conducting our business.

Information for Marketing Purposes.

Where you have consented to us using your personal information for marketing purposes, we may use your information to conduct marketing and data analysis or to send you updates and news concerning Shaw Industries and its business partners.

If at any time after you have consented to us using your information for marketing purposes and you wish us to stop using your information for these purposes, please email us at DataPrivacy@Shawinc.com.

Disclosure of Personal Information.

In addition to the specific situations discussed elsewhere in this Privacy Policy, we may disclose the personal information listed above in the following situations set out below. This will only take place in accordance with applicable law.

• Shaw Industries Affiliates and Acquisitions - We may disclose your personal information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control). If another company acquires our company, business, or our assets, we will also disclose your personal information with that company.
• Other Disclosures with Your Consent - We may ask if you would like us to disclose your information with other unaffiliated third parties who are not described elsewhere in this policy.
• Other Disclosures without Your Consent - We may disclose personal information in response to subpoenas, warrants, or court orders, in connection with any legal or regulatory process, or to comply with relevant laws. We may also disclose your personal information in order to establish or exercise our rights, to defend against a legal claim, to investigate, prevent, or take action regarding possible illegal activities, suspected fraud, safety of person or property, for audit purposes, or a violation of our policies.
• Service Providers - We may disclose your personal information with service providers. Among other things service providers may help us to administer our website, conduct surveys, mail communications, or provide technical support, data centre services or legal advice. These service providers may collect, store, analyze, or otherwise process information on our behalf.
• Government agencies, regulators, and professional advisors. Where permitted or required by applicable law, we may disclose personal information to government agencies and regulators (e.g., tax authorities, courts, and government authorities) to comply with our legal obligations, and to external professional advisors as necessary to defend our legal interests. 
• Social Media Platforms and Networks.  Our Site may have features such as plugins, widgets, or and other tools made available by third parties that may result in information being collected or disclosed between us and the third party. The third party’s use of your information is not governed by this Privacy Policy. You may have the right to opt out of our use of these technologies, as further described in this Privacy Policy. 
• De-identified or Aggregate Information.  We may aggregate and anonymize information you provide to us in such a way as to ensure it will no longer be identifiable to you. This data may be used for statistical, analytic, and administrative purposes, including analyzing our website traffic and trends, tailoring our Services, or conducting product analysis. We may disclose anonymized or aggregated data at our discretion, in accordance with applicable laws.

Your Rights and Choices.

You may have certain rights and choices regarding your personal information. Your rights and choices will vary depending on where you are located. Specifically, you may have the following rights and choices:

• Changes to Your Personal Information. You have the right to request correction of inaccurate personal information we have about you. Depending on the purposes of the processing, you may have the right to have incomplete personal information completed, including by means of providing a supplementary statement. As noted above, you may also be able to correct your information in your account or profile. .
• Deletion of Your Personal Information.  You have the right to request that we delete your personal information. If required by law, we will grant your request to delete information.  However, when we delete personal information it will be removed from our active database, but it may remain in archives where it is not practical or possible to delete it. In addition, we may keep your personal information as needed to comply with our legal obligations, resolve disputes, and/or enforce any of our agreements.
• Revocation of Consent.  If you revoke your consent for the processing of personal information then we may no longer be able to provide you certain services. In some cases we may limit or deny your request to revoke consent if the law permits or requires us to do so, if we are unable to adequately verify your identity, or if our processing is not based on your consent. Revocation of your consent will not affect the lawfulness of processing based on your previous consent.
• Access to Your Personal information.  You have the right to request access to the personal information we hold about you, along with other information such as the purposes of the processing, the recipients or categories of recipients to whom the personal information has been or will be disclosed, the sources of the personal information, retention, and transfers of personal information.
• Data Portability: Under certain circumstances, you have the right to receive the personal information about you that you have provided to us, in a structured, commonly used, and machine-readable format.
• Object to Processing. You may, as permitted by law, request that we stop processing your personal information. 
• Non-Discrimination. We do not discriminate against individuals who exercise any of their rights described in this Privacy Policy, nor do we retaliate against individuals who exercise these rights.   
• Opt-Out of the “Sale” and “Sharing” of Personal Information. Subject to certain exceptions, California residents have the right to opt-out of the "sale"/”sharing” of their personal information.  Making personal information (such as online/device identifiers, browsing activity, or geolocation) available to social media platforms and ad networks to deliver interest-based ads to you may be a “sharing” under California law (in this context “sharing” means cross contextual behavioral advertising).  To opt-out of the “sharing” of your personal information as just described, please use the “Do Not Sell or Share My Personal Information” button at the bottom of our Sites, or click here .

Processes for Exercising Your Rights

Please note that many of the above rights are subject to exceptions and limitations. Your rights and our responses will vary based on the circumstances of the request.  If you choose to assert any of these rights under applicable law, we will respond within the time period prescribed by such law.  In some cases, we may limit or deny your requests to access or delete your information. This may occur because the law permits or requires us to do so, or if we are unable to adequately verify your identity. 

If you are located in the State of California in the United States, a person authorized to act on your behalf may make a verifiable request related to your personal information. If you designate an authorized person to submit requests to exercise certain privacy rights on your behalf, we will require verification that you provided the authorized agent permission to make a request on your behalf. 

In any circumstances, your request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information or an authorized representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. 

To submit a request to exercise any such rights and choices (if they apply to you), please use the contact information provided for in the “Contact Information” section of this Privacy Policy.  

How We Protect Personal Information

Shaw Industries is committed to:

• Seeking to safeguard all personal information that you provide to us;
• Seeking to ensure that it remains confidential and secure; and
• Taking reasonable steps to ensure that personal privacy is respected.

All our data is stored in written or electronic form on our servers and computers and in various physical locations. We maintain physical, electronic and procedural safeguards to protect your personal information from misuse, unauthorized access or disclosure and loss or corruption by computer viruses and other sources of harm. We restrict access to personal information to those staff members, joint venture partners, subsidiary companies and third parties who need to know that information for the purposes set out in this Privacy Policy.

However, no method of transmission over the Internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Our Site permits you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

Retention of Personal Information

Your personal information will be retained for as long as it is necessary to carry out the purposes set out in this Privacy Policy (unless longer retention is required by the applicable law). However, we will not retain any of your personal information beyond this period and the retention of your personal information will be subject to periodic review. We may keep an anonymized form of your personal information, which will no longer refer to you, for statistical purposes without time limits, to the extent that we have a legitimate and lawful interest in doing so.

EU Considerations

As required by applicable law, we rely on several different legal bases to collect, use, and disclose your personal information:

• Necessity to Perform Contract with You - We need to process your personal information to provide our Services, ensure Services are working as they should, answer questions and requests from you, manage our business relationship with you, and provide customer support.
• Compliance with Legal Obligations - We need to process your personal information to comply with relevant laws, regulatory requirements and to respond to lawful requests, court orders, and legal process.
• Consent for Direct Marketing Communications - We rely on your consent to send you direct marketing, which you can unsubscribe from at any time by clicking the unsubscribe link in the relevant communications or contact us as detailed below in the “Contact Information” section.
• Based on Legitimate Interests - We process your personal information to protect your security and the security of the Site, to detect and prevent fraud, to protect and defend the rights or property of others, or our own rights and interests.

We may also use Adobe Flash technology (including Flash Local Stored Objects “Flash LSOs”) that allow us to, among other things, serve you with more tailored information, facilitate your ongoing access to and use of the Site, and collect and store information about your use of the Site. Our Site or emails may also use pixel tags, web beacons, clear GIFs, or other similar technologies to measure the success of marketing campaigns, and compile statistics about usage and response rates, and other purposes.

Commercially Recognized Opt-Out Signal

Shaw generally recognizes commercially recognized opt-out preference signals (e.g., Global Privacy Controls, Do Not Track).  Recognition of this signal applies only to the specific device and/or browser that communicates the signal and does not apply to other devices/browsers you use to access our Site.

Miscellaneous

The following additional information relates to our privacy practices:

• Minors - Our Site and Services are not intended for persons under 18 years of age.  Shaw Industries does not knowingly collect or sell personal information from children under the age of 13.
• Transmission of Data to Other Countries - Your personal information is processed in the United States and may be transferred to other countries where we do business, where privacy laws may be less stringent than the laws in your country and where the government, courts, or law enforcement may be able to access your information. In particular, your personal information may be transferred throughout the Shaw Industries group and to our outsourced service providers located in the United States or abroad. By submitting your personal information to us you agree to the transfer, storage and processing of your personal information in the United States and other countries as may be necessary. We will, as required by applicable law, ensure that your privacy rights are adequately protected by appropriate technical, organisation, contractual or other lawful means. With respect to transfers from the European Economic Area ("EEA") or the United Kingdom (“UK”) to the United States and other non-EEA jurisdictions, we may rely on the European Union (“EU”) Standard Contractual Clauses (“EU SCCs”), and the United Kingdom (“UK”) Addendum to the EU SCCs. Please contact us using the information in the “Contact Information” section below for a copy of the safeguards which we have put in place to protect your personal data and privacy rights.
• Third Party Applications and Websites - From time to time, the Site may contain links to other websites not belonging to or under the control of Shaw Industries. We explicitly disclaim responsibility or liability for the privacy practices or the content of websites that do not belong to or are not under our control. 
• Third Party Personal Information - Where you submit information on behalf of another person, you confirm that you have made that person aware of how we may collect, use and disclose their information, the reason you have provided it, how they can contact us, the terms of this Privacy Policy and that they have consented to such collection, use and disclosure.
• Changes To This Privacy Policy - We may change our Privacy Policy and practices over time or as required by law.  We encourage you to visit our Site periodically to stay informed about our privacy practices. We will post the updated version of the Privacy Policy on our Site, and ask for your consent to the changes if legally required to do so.

Contact Information

If you have any questions, comments, or complaints concerning our privacy practices please contact us at the appropriate address below. We will attempt, where practical, to respond to your requests and to provide you with additional privacy-related information.

• Shaw Industries Group, Inc.
• 616 E. Walnut Avenue
• P.O. Drawer 2128, Mail Drop 061-28
• Dalton, GA 30722
• Attn: Corporate Compliance
• 1-800-720-7429
• dataprivacy@shawinc.com

If you are in the European Union, or the United Kingdom, you may also have a right to lodge a complaint with a supervisory authority.

This Privacy Policy includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.

Effective Date: May 2023

Last Update Date: May 2023