PRIVACY POLICY

Effective February 28^th, 2021

1.OVERVIEW.

Hickman Edge Systems, LLC (“Hickman”, "we," "us," or "our") is produces roof edge and ventilation systems. This privacy policy is designed to assist you in understanding how we collect, use, retain, process, store, share and transfer information you provide to us when accessing and using our website, www.hickmanedgesystems.com as well as our mobile Metal-Era mobile application and any of our social media accounts (“Sites”), and the services provided through our Sites (the “Services”).
If you use our Sites and Services, we collect various types of data from you. In some instances, the data will be considered “Personally Identifiable Information” or “Personal Data” under applicable laws. Generally, this type of data is information that relates to an identified or identifiable individual. This Policy describes how and why we collect information, and provides an overview of your choices and privacy rights relating to our collection, use and sharing of your data.
From time to time, we may change this Privacy Policy. If we do, we will post an amended version on this webpage. Please review this Privacy Policy periodically. Your continued use of the Sites and Services after any amendment confirms that you accept the terms of this Privacy Policy and any amendments in effect at the time of your use of the Sites and/or Services.

2.CONTACT US.

If you have any questions regarding data protection or your rights, please contact us: Hickman Edge Systems, LLC
1600 Airport Road
Waukesha, WI 53188 [email protected]

3.INFORMATION WE COLLECT

Through your use of the Sites and Services, we may collect the following types of Personally Identifiable Information from you.

Information you provide:

Contact information (name, company name, customer number, job title, mailing address, telephone number, electronic mail address)
Shipping information
Order information
Quote information
Inquiry Information
Project pricing information and specifications
Payment information, including payment card information
Purchase order
Order history
Information on our sales representatives who are working with you or we refer to you
Employment application or inquiry information
Communications to and from you through the Sites and/or Services
Your login information (if applicable)
Any other information you provide to us.

Information we collect as you navigate our sites. We automatically collect certain Personally Identifiable Information through your use of the Sites and Services, such as the following:

Usage Information. We collect information such as which of the pages on the Sites you access, the frequency of access, and what you click on while on the Sites.
Technical Information. We collect technical information about your connection to our Sites, including the Internet protocol (IP) address, browser type and version, browser plug-in types and versions.
Device Information. We collect information about the device you are using, such as hardware model, operating system, application version number.
Mobile Device Information. In addition to the Device Information listed above, when you access our Sites via a browser on your mobile device, we collect and aggregate information about whether you are accessing the Sites via a mobile device or tablet, device type, and carrier.
Location Information. We collect location information from Site visitors on a city- regional basis.

We use cookies and other tracking technologies (such as pixels and web beacons)
(collectively, “Cookies”) to collect information as you navigate our Sites. “Cookies” are small files of information that are stored by your web browser software on your computer hard drive, mobile or other devices (e.g., smartphones or tablets).

We use Cookies to:

Estimate audience size and usage patterns;
Understand and save your preferences for future visits, allowing us to customize the Sites and Services to your individual needs;
Advertise new content, events and services that relate to your interests;
Keep track of advertisements and search engine results;
Compile aggregate data about site traffic and site interactions to resolve issues and offer better site experiences and tools in the future; and
Recognize when you return to the Sites.

We set some Cookies ourselves and others are set by service providers. We use Cookies set by service providers to provide us with useful information to help us improve our Sites and Services, to conduct advertising, and to analyze the effectiveness of advertising.

Cookies can be blocked by changing your Internet browser settings to refuse all or some Cookies. If you choose to block all Cookies (including essential Cookies) you may not be able to access all or parts of the Sites.

You can find out more about Cookies and how to manage them by visiting www.AboutCookies.org.

You can understand which third parties have currently enabled Cookies for your browser or mobile device and how to opt-out of some of those Cookies by accessing the Network Advertising Initiative’s website or the Digital Advertising Alliance’s website. For more information on mobile specific opt-out choices, visit the Network Advertising Initiative’s Mobile Choices website.

Third party information you provide. In some cases, we may receive certain Personally Identifiable Information from you about a third party. For example, you may purchase a product that is shipped to a third party. If you submit any Personally Identifiable Information about another individual to us, you are responsible for making sure that you have the authority to do so and to allow us to use their Personally Identifiable Information in accordance with this Privacy Policy.

4.HOW WE USE YOUR PERSONALLY IDENTIFIABLE INFORMATION

We use the Personally Identifiable Information we collect to provide the Services to you, to provide you with information and Services, to allow you to apply for career opportunities, to improve our Services and Sites, and to protect our legal rights. In addition, we may use the Personally Identifiable Information we collect to:

Allow you to participate in features we offer on the Sites and Services
Process your account registration (where applicable)
Review your job application
Provide quotes
Provide suggestions for architects, consultants and contractors who may be able to assist you
Email you information
Contact you regarding our products, services or promotions that we feel may be of interest to you
Communicate with you about our Sites or Services or to inform you of any changes to our Sites or Services
Provide support
Provide educational workshops, webinars and other materials
Tailor our content, advertisements and offers
Maintain and improve our Sites and Services
Defend our legal rights and the rights of others
Determine your location and manage digital content rights
Efficiently maintain our business
Comply with applicable law.

5.INFORMATION WE SHARE WITH THIRD PARTIES

We may share the information that we collect about you in the following ways:

With service providers. We may share information with service providers who:

perform data services on our behalf (e.g., email, hosting, maintenance, backup, analysis, etc.)
process payments on our behalf
process job applications on our behalf
to prepare, deploy and analyze advertising content on our behalf
provide other services on our behalf

To ensure that your Personally Identifiable Information receives an adequate level of protection, we have put in place appropriate procedures with the service providers we share your Personally Identifiable Information with to ensure that your Personally Identifiable Information is treated by those service providers in a way that is consistent with and which respects the applicable laws on data security and privacy. For example, we use cloud data storage; payroll processors; accounting software; payment processors; marketing service providers.
Other. We also may share information in the following instances:

We may share your information with one of our sales representatives if you have expressed interest in a particular product or service
We may share information with other person or entity if you have consented to the disclosure.

To meet our legal requirements or exercise our rights. We may share information with third parties in the following instances:

When we are required to do so by law
In connection with any legal proceedings or prospective legal proceedings
To establish, exercise, or defend our legal rights, including providing information to others for the purposes of fraud prevention
To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that Personally Identifiable Information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that Personal Information
We may share information with other persons or entities as part of our own corporate transactions, such as during financing of our business, or any business or asset sale or merger.

6.THIRD PARTY CONTENT AND ADVERTISING SERVICES Third-Party Links

Our Sites may contain links to websites, platforms, applications or services operated by third-parties. These third-parties may use their own cookies, web beacons and other tracking technology to collect information about you. They may also ask you to provide information. This Privacy Policy does not cover those practices and we encourage you to review the privacy policies and procedures of any third-party sites and services you use.

We may engage or work with other third-parties to serve advertisements or other analytics on our Sites or Services.

Google analytics

We use Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses Cookies or other tracking technologies to help us analyze how users interact with the Sites and Services, compile reports on their activity, and provide other services related to their activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a returning visitor, and any referring website. The technologies used by Google Analytics do not gather information that personally identifies you. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt-out of tracking of analytics by Google, click here.

Google AdWords

We use Google AdWords for targeting and remarketing. We collect data about your activities that does not personally or directly identify you when you visit our Sites, the website for which we serve advertisements, or the websites and online services where we display advertisements. We use the information we collect to serve you more relevant advertisements (referred to as “Remarketing”). We collect information about where you saw the ads we serve you and what ads you clicked on. Users may opt out of Google’s use of cookies by visiting the Google Advertising Opt- out Page.

Interest-based ads

We may use cookies and other technologies on our Sites to collect information about your online activities over time and across different websites you visit in order to provide you with interest-based advertising. You can generally opt-out of receiving interest-based advertisements from members of the Network Advertising Initiative or the Digital Advertising Alliance by visiting their opt-out pages: (http://www.networkadvertising.org/choices/) and (http://www.aboutads.info/choices/). When you opt-out using these links, please note that you may still receive advertisements. They just will not be personalized based on your interests.

“Do not track” signals

Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Sites do not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.

7.CHOICES ABOUT YOUR PERSONALLY IDENTIFIABLE INFORMATION

Review and request changes to your personally identifiable information

You may use your account to access, correct, or view certain Personally Identifiable Information we have collected and which is associated with your account. To review or request changes to any of your Personally Identifiable Information, please contact us at [email protected]

Marketing communications

To unsubscribe from emails from us, please click the unsubscribe link included in the footer of our emails. You also may submit a request to us at [email protected]

8.SECURITY

We maintain commercially reasonable security measures to protect the Personally Identifiable Information we collect and store from loss, misuse, destruction, or unauthorized access. However, no security measure or modality of data transmission over the Internet is 100% secure. Although we strive to use commercially acceptable means to protect your Personally Identifiable Information, we cannot guarantee absolute security.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Sites or Services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Unfortunately, however, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we

cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.

9.CHILDREN'S PRIVACY

The Sites and Services are not intended for or directed to children under 16 years of age. We do not knowingly collect, use or disclose personal information from children under 13. We do not intend to collect personal information as defined by the U.S. Children’s Privacy Protection Act (“COPPA”) (“Children’s Personal
Information”) in a manner that is not permitted by COPPA. If we obtain knowledge that we have collected Children’s Personal Information in a manner not permitted by COPPA, we will remove such data to the extent required by COPPA.

10.DATA RETENTION

We will store your information for as long as you are a customer, our performance of the Services require, and as long as our ethical or legal obligations require. We may keep records of transactions with you for a period of up to seven (7) years to comply with the IRS requirements.

11.NOTICE TO NEVADA RESIDENTS

Nevada law allows Nevada residents to opt-out of the sale of certain types of personal information. Subject to a number of exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to a person for the person to license or sell the information to additional persons. We do not currently sell personal information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt-out of sales and we will record your instructions and incorporate them in the future if our policy changes. Opt-out requests may be sent to [email protected]

12.NOTICE TO CALIFORNIA RESIDENTS

DISCLAIMER: This notice reflects our good faith understanding of the California Consumer Privacy Act (“CCPA”) and our current data practices. However, the CCPA implementing regulations are not yet final and there are varying interpretations of the law’s requirements. We may update our practices and this notice as the CCPA continues to develop and we continue to develop our compliance program.
This Notice to California Residents (“Notice”) applies to “Consumers” as defined by the CCPA and is a supplement to our Privacy Policy. This Notice covers our collection, use, disclosure, and sale of California Consumers’ “Personal Information” (“PI”) as defined by the CCPA, except to the extent such PI is exempt from the notice obligations of the CCPA for the twelve months preceding the Effective Date. The majority of the data we collect and process is not subject to CCPA Consumer rights. For example, we

collect and process the following types of information that is currently exempted to some degree from the CCPA:

Business-to-business information
Employee or personnel information
Publicly available information (as defined by the CCPA).

A. COLLECTION AND USE OF PERSONAL INFORMATION

To provide our Sites and Services, and to provide products and services to others, we process Personal Information about consumers, including California Consumers. We have defined the types of information we collect, our purposes for collection, and how we disclose information above in Sections 3-6.
During the 2019 calendar year, we collected the following types of PI from California Customers for the following purposes and disclosed data to the following categories of recipients:

Category of Personal Information	Sources of PI	Purposes for PI Collection	Categories of Recipients
Identifiers Name, company name, title, shipping address, email address	From customers, prospective customers, Site users, service providers, third-party companies	Processing transactions, responding to inquiries, performing services, research and development, quality assurance, customer support and security For example, these purposes include to contact you, to process your orders, to respond to your inquiries, to verify your identity, to provide services, and to comply with our legal obligations.	Service providers, law enforcement / legal requests, data analytics providers
Commercial Information / Account Details Purchase history or tendencies, customer number, shipping information, order information	From customers, government entities, service providers	Processing transactions, responding to inquiries, performing services, research and development, quality assurance, customer support and security For example, these purposes include to contact you, to process your orders, to send you information and other offers, to respond to your inquiries, to verify your identity, to provide services, and to comply with our legal obligations.	Service providers, law enforcement / legal requests, data analytics providers
Internet Usage Information	From the customers, prospective customers Site	Processing communications and transactions, performing services, detecting security incidents, internal research and development, commercial purposes, debugging.	Service providers

Category of Personal Information	Sources of PI	Purposes for PI Collection	Categories of Recipients
Information regarding interactions with our website, computer systems, and/or devices	users, service providers	For example, these purposes include to improve our services, including providing users more relevant content, and to secure our network and protect our personnel.
Professional or Employment Information Job title, employer, practice area or industry focus	From the consumer, government entities, and third parties	Processing and managing communications and transactions, performing services, research and development, quality assurance, security. For example, these purposes include to provide benefits to our partners and to market them to clients and prospective clients.	Government entities, law enforcement, service providers.
Inferences from PI Collected Customer profiles reflecting preferences	From the consumer, Site users, service providers and third parties	Processing communications and transactions, performing services, detecting security incidents, internal research and development, commercial purposes, debugging. For example, these purposes include to improve our services, including providing users more relevant content, and to secure our network and protect our personnel.	Service providers

C.SOURCES OF PERSONAL INFORMATION

We receive Personal Information from the information that you and others provide, your device(s), and from our partners. The categories of sources from which we’ve collected or received Personal Information include:

You: We collect the content, communications, and other information you provide when you use our Sites and Services, including when you sign up for an account, make a purchase, create or share content, and message or communicate with us. We collect information about how you interact with our Sites and Services, and the time, frequency, and duration of your activities.
Other people: We may also receive and analyze content, communications, and information about you that other people provide when they use our Sites and Services, such as when an order is made and shipped to you.
Your device(s) and technology: We collect information from and about the computers, phones, connected TVs, and other web-connected devices you use that integrate with our Sites and Services, and we may combine this information across different devices you use.
Metal-Era Companies: We may receive information from other Metal-Era companies for business purposes that help us provide you with better products, services and online experiences. We may also process information about you across the Metal-Era Companies for these purposes, as permitted by applicable law, and in accordance with their terms and policies.
Partners & Service Providers: We may receive information about you from our sales representatives, distributors or others who assist us in providing information and fulfilling orders. We may also share information with our service providers, such as payment processers, advertising providers, data analytics providers, and others identified above.

D.YOUR RIGHTS

Under the CCPA, you have the following rights:

Number	Description of your right
Right 1	The right to know what personal information we collect about you.
Right 2	The right to know whether we sell or disclose your personal information, and if so, to whom.
Right 3	The right to say no to the sale of personal information.
Right 4	The right to access your personal information.
Right 5	The right to receive equal service and pricing from us, even if you exercise your privacy rights.

Right to Know: You have the right to request that we disclose to you the Personal Information we collected about you in the 12 month period preceding your request. This right includes the right to request: (1) specific pieces of PI we have collected about you; (2) categories of PI we have collected about you; (3) categories of sources from which the PI was collected; (4) categories of PI that we sold or disclosed for a business purpose about you; (5) categories of third parties to whom your PI was sold or disclosed for a business purpose; and (6)

the business or commercial purpose for collecting or, if applicable, selling your PI;

Right to Request Deletion: You have the right to request that we delete your Personal Information that we have collected from you;
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise your “right to know” or your “right to request deletion,” email us at [email protected] , or call 1-800-558-2162. Please note that to protect your information and the integrity of our Sites and Services, we may need to verify your identity before processing your request. In some cases, we may need to collect additional information to verify your identity, such as a government issued ID.

Under the CCPA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. We may request that your authorized agent have written permission from you to make requests on your behalf and may need to verify your authorized agent’s identity.

E.SALE OF PI

We do not sell your PI to others.

F.SHINE THE LIGHT LAW

We do not disclose personal information obtained through our Sites or Services to third- parties for their direct marketing purposes. Accordingly, we have no obligations under California Civil Code § 1798.83.

NOTICE TO RESIDENTS OF THE EUROPEAN ECONOMIC AREA. The General Data Protection Regulation (“GDPR”) allows us to collect and use personal information from residents within the European Economic Area only for one or more of the following reasons:

To fulfill a contract we have with you;
When we have a legal duty;
When it is in our legitimate interest; or
When you provide consent.

If you reside in the European Economic Area and we have a business or commercial reason to use your personal information, this is considered a legitimate interest. We will tell you what that interest is in this Privacy Policy or any privacy notice provided to you at the time of the collection of the information. We will not use your personal information if such use is against your own interest.

The GDPR and other regulations treat some types of sensitive personal information as particularly sensitive, including information about racial or ethnic origin, sexual orientation, religious beliefs, trade union membership, health data and criminal records. We will not collect or use these types of data without your consent unless the law allows us to do so. If

we do, it will only be when necessary for reasons of substantial public interest or to establish, exercise or defend legal claims.

If you reside in the European Economic Area, you have a number of rights under data protection laws in relation to the way we process your personal data. These are set out below. You may contact us directly to exercise any of these rights, and we will respond to any request received from you within one month from the date of the request. In very exceptional circumstances we may need to extend this timescale, but we will always tell you in advance if we do, and our reasons why.

Number	Description of your right
Right 1	A right to access personal data held by us about you, as well as information about how we are using your data.
Right 2	A right to require us to rectify any inaccurate personal data held by us about you.
Right 3	A right to require us to erase personal data held by us about you, and where the personal data has been made public, for other controllers processing the personal data to also erase links to, or copy or replication of, such personal data. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below).
Right 4	A right to restrict our processing of personal data held by us about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you require the data for the purposes of dealing with legal claims.
Right 5	A right to receive personal data, which you have provided to us, in a structured, commonly used and machine readable format. You also have the right to require us to transfer this personal data to another organisation, at your request.
Right 6	A right to object to our processing of personal data held by us about you (including for the purposes of sending marketing materials to you).
Right 7	A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or products).

If you have consented to receive communications from us, you can contact us at any time to have your details removed from lists used by us or to update your marketing preferences. Please [email protected] and provide your name, email/telephone number/account number in the body of the email, telling us what you would like us to do. You can also click
"unsubscribe" on any of our emails, and we will ensure we don't send you any communications of this nature in future.

If you have any concerns regarding our processing of your personal data, or are not satisfied with our handling of any request by you in relation to your rights, please get in touch with our team through the contact information provided in Section 2 of this Privacy Policy.

You may also reach out to your applicable Data Protection Authority (“DPA”) for more
information. There is a DPA located in each EU Member State.
online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested.

What Information is Collected

We collect information from you when you register on our website, use our online quoting system or fill out a form either electronically or physically.

When registering, creating a quote or filling out a form on our site, you may be asked to enter your: name, e-mail address, mailing address, phone number, fax number or other information related to your business or project. You may visit our site anonymously, however, you may not have full access to all portions of our site.

How Your Information is Used

Any of the information we collect from you may be used in one of the following ways:

To improve our website: We continually strive to improve our website offerings based on the information and feedback we receive from you.

To improve customer service: Your information helps us to more effectively respond to your customer service requests and support needs.

To process transactions: Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested.

To send periodic communications: The contact information you provide may be used to send you information and updates pertaining to your request, in addition to receiving occasional company news, updates, related product or service information, etc.

Security

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect. Any information you provide us with, including project and order information, will be handled in confidential manner.

Cookie Usage

We use cookies, which are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the sites or service providers systems to recognize your browser and capture and remember certain information.

We use cookies to help us remember and process the items in your submittal builder and compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

If you prefer, you can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies via your browser settings. Like most websites, if you turn your cookies off, some of our services may not function properly. However, you can still reach us over the telephone or by contacting customer service.

Disclosure of Information to Outside Parties

We do not sell, trade or otherwise transfer your personally identifiable information to outside parties. This does not include trusted third parties who assist us in operating our website, conducting our business or servicing you, so long as those parties agree to keep this information confidential. These trusted third parties may include, but are not limited to, independent sales representatives for Metal-Era, private label partners and other industry partners. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses. Your information may also be made available to a successor entity in connection with a corporate merger, consolidation, sale of assets or other corporate change respecting the website.

Third Party Links

Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

Ad Servers

We do not partner with or have special relationships with any ad server companies.

California Online Privacy Protection Act Compliance

Because we value your privacy we have taken the necessary precautions to be in compliance with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent.

Children’s Online Privacy Protection Act Compliance

We are in compliance with the requirements of COPPA (Children’s Online Privacy Protection Act), we do not knowingly collect any information from anyone under 13 years of age. Our website, products and services are all directed to people who are at least 13 years old or older.

Your Consent

By using our site, you consent to our privacy policy.

Limitations

This privacy policy is applicable to US residents only.

Changes to our Privacy Policy

If we change our privacy policy, we will post those changes on this page and update the privacy policy modification date below.

This policy was last modified on September 1, 2009

Accessing Your Information

Upon request we provide consumers with access to all information and a description of information that we maintain about them.

Consumers can access or request that this information be corrected by using the below contact information.

Removal Procedures

If you supply us with your contact information you may receive periodic communications from us with information on new products and services or upcoming events. If you do not wish to receive such communications, please let us know by calling, e-mailing or writing to us using the below contact information. Please provide us with your exact name and contact information you would like removed. We will be sure it is removed from our contact list in a timely manner.

All broadcast faxes we send include this information: To remove your number from our fax list, please fax this back to 800-373-9156 with the phone number to be removed and the word “Remove” clearly written on the fax or call 800-558-2162. Failure by us to comply with this removal provision in the shortest reasonable time is unlawful.

We comply with the ‘‘Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003’’, or the ‘‘CANSPAM Act of 2003” (click here for details). To remove your e-mail address from our commercial fax list, you may reach us using the below contact information or send an e-mail to [email protected].

Contacting Us

If there are any questions regarding this privacy policy you may contact us using the information below.

Hickman Edge Systems Inc.
4 Commerce Way
Arden, NC 28704
[email protected]
p: 828-676-1700
www.hickmanedgesystems.com

Hickman Privacy Policy