We collect information that personally identifies, relates to, describes, or is capable of being associated with you ("Personal Information"), including:

• Identifiers (e.g., name, IP address, mailing address, billing address, email address, phone number, fax number, login credentials)
• Commercial Information (e.g., payment information, quotes, purchase and order history, marketing preferences)
• Internet or Other Electronic Network Activity (e.g., browsing history, search history, other information regarding your use of our Website(s) or Services that can be associated with you)
• Audio, Electronic, Visual or Similar Information (e.g., call recordings, chat transcripts, testimonials)
• Professional or Employment-Related Information (e.g., occupation, employer, employment status)
• Inferences drawn from the above categories of Personal Information that relate to your characteristics and preferences
• Personal Information as described in Cal. Civ. Code § 1798.80(e) to the extent collected under another category of Personal Information above

Some of the Personal Information listed above may be considered sensitive under relevant laws ("Sensitive Personal Information"). This includes login credentials for California residents. Each type of Sensitive Personal Information may overlap with a category of Personal Information listed above.

The type of Personal Information we collect about you may vary based on how you use the Website(s) and/or Services and your relationship with us.

We automatically collect anonymous or aggregated information in connection with the actions you take on the Website(s) and in connection with using the Services (“Usage Data”). Usage data may include information about your device, browser, operating system, internet service provider, and IP address. It may also include information about your interactions with the Website(s) such as the pages you view, the page and search terms used to reach our Website(s), and the date, time, and duration of your visits to the Website(s), and your clicks. If we can reasonably associate Usage Data with you, we treat it as Personal Information under the categories of Identifiers or Internet or other electronic network information, as appropriate. If we cannot reasonably associate Usage Data with you, we treat it as anonymous Usage Data, which we may use and disclose for any purpose without restriction.

We may record calls and retain the content of text messages, chat transcripts, or other written/electronic communications between you and us. By communicating with us, you consent to our recording and retention of communications.

We also collect information about businesses and their representatives that engage with us such as EIN, TIN, business address, and payment information (collectively, "Business Information"). Business Information is generally not considered Personal Information because it relates to a business. If such Business Information relates to a business contact person, we will treat it as Personal Information.

We use Hotjar in order to better understand our users' needs and to optimize our Website(s). Hotjar is a technology service that helps us better understand our users' experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don't like) and this enables us to build and maintain our Website(s) with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the 'about Hotjar' section of Hotjar's support site. We only deploy Hotjar on the portion of our Website(s) intended for users in the United States.

We may deidentify or aggregate personal information such that we can no longer reasonably associate it with an identifiable person. We may use and disclose deidentified and aggregate data for any business purpose permitted by applicable law.

We may ask you to provide Personal Information when you register with the Website(s), make a purchase, communicate with us by phone or email, and at other times. You are not required to provide us your Personal Information; however, if certain features of the Website(s) or Services may not be available or we may not be able to fulfill your purchase unless you provide the requested information.

From time to time we, or our service providers on our behalf, may request Personal Information from you via surveys. Participation in these surveys is completely voluntary and you have a choice whether to disclose Personal Information. The requested information typically includes contact information (such as name and address) and product usage and preferences.

We collect Personal Information from third-party data sources such as postal services and data brokerage companies. This Personal Information may be appended to Personal Information we have already collected from or about you.

We and third parties may use cookies and other automated data collection tools to collect Personal Information and Usage Data, to improve your experience on the Website(s) and Services, such as saving your preferences from visit to visit to present you with a customized version of the Website. Many web browsers are initially set up to accept cookies. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, certain features of the Website(s) or Services may not work if you delete or disable cookies. Cookies are set by us as well as by third parties. See table below for details. You may opt-out of all cookies except those with critical functionality by visiting our cookie preference center, accessible via the "Manage preferences" link in the cookie consent banner or the persistent cookie settings button located in the website footer. Through the preference center, you may accept or decline cookies by category, including Preference and Analytics cookies. Strictly necessary cookies, which are necessary for the Website(s) to function properly, cannot be disabled. You may update your preferences at any time by revisiting the cookie consent banner.

We may use the following types of cookies:

• Strictly Necessary Cookies: Strictly necessary cookies enable site functionalities and keep track of you or your information as you move from page to page within the Website(s). For example, session cookies stored on your browser allow your online shopping cart to function properly and resumes your session when you return to the website.
• Preference Cookies: Preference cookies reside on your system and allow us, and our Service Providers, to customize your experience if you leave and later return to the Website(s). For example, attribution cookies may allow us to remember your demographic information & preferences.
• Analytics Cookies: Analytics cookies help us understand how our Website(s) is working and who is visiting our Website(s).

Specifically, we use the following cookies:

If you want to reduce the overall volume of targeted advertising you receive, you can visit the Digital Advertising Alliance (DAA) Consumer Choice Page and/or the Network Advertising Initiative Consumer Opt-Out Page. These websites allow you to opt-out of targeted advertising from member networks.

The Website(s) includes simple social media links (such as icons or text links) that direct users to our official social media pages on third-party platforms. These links operate solely as outbound hyperlinks. Your interactions with social media features are governed by the privacy policies of the companies that provide them and you should review the relevant privacy policies before interacting with these features.

We use Personal Information for our business purposes as described below:

We may also use Personal Information and/or Sensitive Personal Information as described to you at the point of collection, with your consent, or as otherwise required or permitted by applicable laws. We use Sensitive Personal Information related to California residents solely for purposes permitted by California law.

If you are located in the European Economic Area, Switzerland, or the United Kingdom, please see the Additional Information for Individuals in the European Economic Area, Switzerland, or the United Kingdom section below for important information about our lawful bases for processing your Personal Information.

To the extent permitted by law, we may use your Personal Information to market products or services likely to be of interest to you, or to provide you with special offers and opportunities, via email. With respect to commercial email communications from us, you may opt out of these emails via a link in the footer of all commercial email messages.

If you provide a review or testimonial, we may post it publicly on the Website(s) or in other advertising material without notice to you. By providing a review or testimonial, you give us permission to use it in any manner and for any purpose, including in marketing and advertising communications. We will anonymize the review or testimonial if we deem it necessary to comply with applicable law.

Large language models are a type of artificial intelligence that can create human-like text and perform other language-like tasks. These models are often trained on vast amounts of written text. We do not collect and use Personal Information to train large language models.

From time to time, we may establish a relationship with other businesses who provide services to us which could include our corporate affiliates ("Service Providers"). We contract with Service Providers to provide certain services to us, including:

• Online hosting and maintenance;
• Marketing and promotion design and management;
• Payment processing;
• Management of access to services;
• Order fulfillment;
• Data storage and management;
• General business operations support

We may disclose each category of Personal Information to Service Providers. We only provide Service Providers with the information necessary for them to perform these services on our behalf. Each Service Provider is expected to use reasonable security measures appropriate to the nature of the information involved to protect your Personal Information from unauthorized access, use or disclosure. Service Providers are prohibited from using Personal Information other than as specified by us. We may share your Personal Information with Service Providers that are located or process information in jurisdictions outside of your country of residence.

We do not sell your Personal Information to third-party companies who do not provide services to us ("Third Parties").

We may share your Personal Information with Third Parties who assist us in using cross-context behavioral advertising or targeted to advertising in connection with our marketing efforts. In the past twelve months, we have not shared Personal Information for this purpose, but may in the future share identifiers, commercial information, Internet and other electronic network information, and Personal Information as described in Cal. Civ. Code § 1798.80(e) with such Third Parties.

We may occasionally disclose your Personal Information to Third Parties, for purposes such as:

• To comply with the law;
• To respond to legal requests (including court orders, investigative demands and subpoenas) if, in our discretion, we believe it is necessary or appropriate;
• To prevent or stop any illegal, unethical, or legally actionable activity;
• To protect the safety, property, or rights of ourselves, consumers, or any other third party;
• If we are merged, acquired, or sold, or in the event of a divestiture, restructuring, reorganization, or transfer of some or all of our assets and the disclosure is necessary to complete the transaction, or in connection with the evaluation of a potential transaction;
• To businesses controlling, controlled by, or under common control with us;
• For additional purposes with your consent where such consent is required by law;

In the past twelve months we have not disclosed Personal Information to Third Parties for purposes other than as explained in this Privacy Policy.

We recognize the importance of safeguarding the confidentiality of your Personal Information. Accordingly, we employ reasonable administrative, technical, and physical safeguards to protect such Personal Information from unauthorized access, disclosure, and use. Even with these safeguards, no data transmission over the Internet or other network can be guaranteed 100% secure. As a result, while we strive to protect information transmitted on or through our Website(s) we cannot, and do not, guarantee the security of any information you transmit on our Website(s), and you do so at your own risk.

Please be aware that third-party websites accessible through the Website(s), including websites/webpages of affiliated companies that are not domiciled in the United States, may have their own privacy and data collection policies and practices. We are not responsible for any actions, content of websites, or privacy policies of such third parties. You should check the applicable privacy policies of those third parties when providing information through linked websites.

We retain your Personal Information for as long as we have a relationship with you. We also retain your Personal Information for a period of time after our relationship with you has ended where there is an ongoing business need to retain it. This includes retention to comply with our legal, regulatory, tax and/or accounting obligations. We do so in accordance with our data retention policies and applicable law.

The Website(s) are not intended for children under the age of 18 and we do not knowingly collect Personal Information from children under the age of 18. If we become aware that we have inadvertently received Personal Information from a child under the age of 18, we will delete such information from our records.

If you would like to receive access to your transaction information and/or request the correction of inaccurate information, you may do so by calling us at 800-553-9646, sending an email to sales@simplygoldstar.com or sending a written request to the following postal address:

National Design, LLC (dba Goldstar)
Attn: Legal Department
P.O. Box 847641
Dallas, Texas 75284

If you are a resident of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have additional rights to access and control your Personal Information. Subject to applicable exemptions, consumer privacy rights for residents of these states include:

• Right to Know and Access. You may request what Personal Information we collected about you (including the categories or specific pieces of Personal Information), the categories of sources from which we collected your Personal Information, the business or commercial purpose(s) for collecting it, and the categories and names of third parties to whom we sold or disclosed Personal Information (if any). We will provide a copy of the specific Personal Information we maintain about you in a portable and, if technically feasible, readily-usable format.
• Right to Delete. You may request that we delete Personal Information we collected about you.
• Right to correct. You may request that we correct inaccurate Personal Information we maintain about you. If you only wish to update your contact information or other Personal Information rather than disputing its accuracy, please make the changes directly in your account or contact us using the information below.
• Right to appeal. You may appeal our decision with respect to a previously-submitted privacy request.

The Right to Non-Discrimination

You have the right not to receive discriminatory treatment because of your exercise of privacy rights conferred by applicable state law.

Exercising your Rights

You may exercise your privacy rights by calling us at 800-553-9646, by sending an email to sales@simplygoldstar.com, or sending a written request to the following postal address:

National Design, LLC (dba Goldstar)
Attn: Legal Department
P.O. Box 847641
Dallas, Texas 75284

Please be specific in your request and provide sufficient information to allow us to locate your Personal Information in our systems based on your request. We may request additional information from you to verify your identity or locate your Personal Information. We will acknowledge receipt of your request within 10 days. We will respond to verified access, correction, and/or deletion requests within 45 days, but we may extend the time for response by an additional 45 days if an extension is reasonably necessary and we inform you of the extension.

Authorized Agent

If you are an authorized agent submitting a request for another person, you must provide a copy of a lawful power of attorney or written authorization from the person (along with proof of your identity). You will be provided options on how to provide this documentation after submitting the request. We may contact you or the person on whose behalf you claim to act to verify your authorization.

Do Not Track is a web browser privacy preference that causes the web browser to broadcast a signal to websites requesting that a user's activity not be tracked. Currently, our Website(s) and Services do not respond to "do not track" signals.

If you are a resident of Canada, you may have additional rights to access and control your Personal Information. Exemptions may apply. Consumer privacy rights for Canadian residents include:

Right to Access

You have the right to request access to the Personal Information we collected about you as well as information about our use of your Personal Information and an accounting of the Third Parties, or, if that is not available, the types of Third Parties to whom we disclosed your Personal Information. We may withhold Personal Information or other information that is prohibitively costly to provide, contains information about other individuals, cannot be disclosed for legal, security, or trade secret reasons, is subject to attorney-client privilege, or is otherwise exempt from disclosure under applicable law.

Right to Correction

You have the right to request that we correct inaccurate Personal Information that we maintain about you. After you request to correct inaccurate Personal Information, we will provide instructions for you to submit optional documentation to support your request and we will consider it. We may decline to correct your Personal Information if a legal exemption applies such as if we determine, based on the totality of the circumstances, that the information you seek to correct is most likely accurate. If we deny your correction request and you disagree with our finding, you may inform us of your disagreement and we will note that the information is disputed and also inform any Service Providers or Third Parties who may be in possession of the disputed information of the dispute. We may also decide to delete your allegedly inaccurate Personal Information at the means of correcting it.

Right to Withdraw Consent for Processing

You have the right to request that we stop processing your Personal Information for all purposes or only some purposes. For example, you may request that we stop using your Personal Information to send you commercial email messages. If you request that we stop processing your Personal Information, we will evaluate your request and determine the extent to which we can honor it in accordance with applicable law and will advise you of the consequences of the request. For example, if honoring the request will result in termination of Services to you, we will let you know.

International Transfers

Quebec residents: Your Personal Information may be disclosed outside Quebec. In such cases, we undertake to conduct a privacy impact assessment and to make the disclosure only if the Personal Information disclosed is adequately protected. In such cases, the disclosure of the Personal Information will be subject to a written agreement that considers the results of such assessment and any terms and conditions agreed to in order to mitigate the risks identified in such assessment.

Exercising Your Rights

You may exercise your privacy rights, or request information about our policies for complying with Canadian privacy laws, by calling us at 1-800-553-9646, by sending an email to sales@simplygoldstar.com, or sending a written request to the following postal address:

National Design, LLC (dba Goldstar)
Attn: Legal Department
P.O. Box 847641
Dallas, Texas 75284

Please be specific in your request and provide sufficient information to allow us to locate your Personal Information in our systems based on your request. We may request additional information from you to verify your identity or locate your Personal Information. We will process your request within 30 days subject to possible extensions allowed by law. If we want to exercise a right to an extension, we will inform you.

Responsible Person

The person responsible for our compliance with Canadian federal and provincial privacy laws is our Director Information Security, Data Privacy, Compliance who may be reached using the contact information in the "Exercising Your Rights" section above.

If you are located in the European Economic Area, Switzerland, or the United Kingdom (collectively, "EEA"), this section provides important additional information.

Data Controller

Our business that acts as the controller of Personal Information of individuals located in the EEA is Goldstar Europe, a company organized under the laws of Ireland with a registration number of 492613 and located at Building D, Xerox Technology Park, Dundalk, A91 H9n9, Co. Louth, Ireland.

Additional Information About Lawful Bases for Processing

When we use the phrase "Legitimate Interest" for processing of Personal Information of individuals located in the EEA, we mean the interests of our business in conducting and managing our business to enable us to give you the best Website(s) and Services possible and protect our reasonable business concerns. We make sure to consider and balance any potential impact on you (positive and negative) and your rights under applicable law before we process Personal Information of individuals located in the EEA for our Legitimate Interest. We do not process the Personal Information of individuals located in the EEA for our Legitimate Interests if we determine that our interests are overridden by the impact on your rights (unless we have consent or the processing is otherwise permitted by law). If you would like more information about how we assess our Legitimate Interests, you may contact us.

If the lawful basis for processing your Personal Information is consent, we will obtain consent from you prior to processing your Personal Information for the purpose for which consent is required and you may revoke your consent at any time by contacting us using the contact information below.

International Transfers

Your Personal Information may be processed in the EEA, Jamaica, Tunisia, and the United States of America.

Whenever we transfer your Personal Information out of the EEA we ensure that we have your consent or adequate safeguards are in place as required by applicable law by either (i) transferring your Personal Information to countries that have been deemed to provide an adequate level of protection for Personal Information by the European Commission or other applicable supervisory authority or (ii) using standard contractual clauses approved by the European Commission or other applicable supervisory authority which give Personal Information a similar amount of protection as it has in Europe, including additional safeguards as needed. Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of the EEA.

Your Rights

You have rights under data protection laws in relation to your Personal Information, subject to any exceptions provided by law. You have the right to:

No fee usually required

You will not have to pay a fee to access your Personal Information or to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within 30 days. Occasionally it could take us longer than 30 days if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our compliance with legal requirements related to privacy of Personal Information of individuals located in the EEA. You may contact our Data Protection Officer by sending an email to sales@simplygoldstar.com.

Complaints or Concerns

You have the right to make a complaint at any time to the supervisory authority for data protection issues in the country in which you reside. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.