Privacy Policy

Privacy Policy

Last updated: April 30, 2026

CBX Solutions, LLC (“CBX,” the “ Company,” “we,” “ us,” or “our”) is committed to privacy and data protection. This Privacy Policy and Notice at Collection (“Notice”) describes the privacy practices that CBX follows when collecting and using personal information collected from you, through our interactions with you, through the websites under the control of CBX that link to this Notice, the Cook & Boardman mobile app, in email, in text, other electronic messages between you and the Services, and our services (collectively the “Services”), as well as how we use and protect your personal information. The Services is not directed to or meant for use by residents outside of the United States.

All references to CBX include CBX Solutions, LLC, located at 3064 Salem Industrial Drive, Winston Salem, NC 27127, and our wholly owned subsidiaries, unless expressly stated otherwise.

This Notice explains who we are; what personal information we collect about you; how we use it (including who we share that personal information with) and your rights and choices regarding your personal information.

NOTICE AT COLLECTION

1. WHAT INFORMATION DOES CBX COLLECT ABOUT ME AND WHY?

We collect information that identifies, describes, or is reasonably capable of being associated with you (“personal information”). The following discusses the categories of personal information we collect and have collected in the preceding 12 months, the sources we collect information from, and the business or commercial purposes use of your personal information.

We may collect the following categories of personal information:

Identifiers. Such as a real name, alias, postal address, telephone number, unique, Internet Protocol address, email address, account name, unique identifier of device, or other similar identifiers.

Customer records. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as name, signature, physical address, telephone number, driver’s license or state identification card number, education, employment history, bank account number, credit card number, debit card number, or any other financial information. Some personal information included in this category may overlap with other categories.

Commercial information. Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

Financial information. Such as your account number, payment card number, cvv, billing address, and related financial information. Under some jurisdictions, account log-in credentials, financial account numbers, debit card, or credit card numbers in combination with any required security or access code, password, or credentials allowing access to an account constitute sensitive personal information.

Your Opinions or Other Information. For example, if you review the products you have purchased from us or provide information about products, and the brands you use.

Sensitive personal information. Such as, social security, driver's license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; genetic data; or neural data.

Internet and Network Information. As described in more detail in our Cookie Policy, if you use our Services, we automatically collect information about your browsing and search history, interaction with the features of our Services, and responses to advertisements.

Geolocation Data. Such as physical location or movements. We collect your IP address and infer location such as city or postcode therefrom.

Professional or Employment-Related Information. Such as current or past job history or performance evaluations.

We may use these categories of personal information for the following purposes:

To provide you with the products and services that you have requested – This includes administering our relationship with you and to carry out our obligations arising from the relationship between you and us, including internal accounting and administration purposes, to process payment for purchases or other services and to create and manage your account.

To provide you with products and services we may collect the following categories of personal information: Identifiers; Your Opinions or Other Information; Protected Classification Characteristics and Sensitive Personal Information; Commercial Information.

To process your payments - After you place an order on our website you will need to make payment for the goods or services you have ordered. We use third party payment processors, currently Apple Pay, Authorize.net and PayPal (“Payment Processors”), to assist in securely processing your payment information. If you pay with a credit card, the payment information that you provide through the Services is encrypted and transmitted directly to Payment Processors.

We do not store your payment information and do not control and are not responsible for Payment Processors or its collection or use of your information. You may find out more about how Payment Processors stores and uses your payment information by accessing the privacy policy for Payment Processors’ services.

If you elect the PayPal service, PayPal collects, uses and processes your information, including payment information, in accordance with its privacy policies. You can access PayPal’s privacy policy via the following link: https://www.paypal.com/myaccount/privacy/privacyhub.

To process payments, we may collect and process: Identifiers; Financial Information; and/or Commercial Information.

For chat sessions - If you use the chat feature of the Services to chat with a customer service representative, we will have access to a transcript of the chat session. We use information provided though the chat feature to provide you with customer assistance.

We use third party vendor to provide the chat feature. The information you provide through the chat feature is collected by and stored on the third-party vendor’s systems. We do not control and are not responsible for our vendor or its collection or use of your information.

In connection with chat sessions, we may collect and process: Identifiers and/or Commercial Information.

For screen and video sharing - If you use Screen and Video Sharing Features (“Sharing Features”) in connection with the Services we may have access to the content of the computer screens you share (including all items on your computer desktop), videos transmissions of the rooms and objects you share (including all items within the rooms), and files or other documents you share.

We use information provided though the Sharing Features to provide you with customer assistance. We do not store photographs or video transmissions that you provide through the Sharing Feature or share such information with third-parties other than described below. It is your responsibility to ensure that the rights of others are not infringed upon when using the Sharing Feature.

We may use a third-party service to provide the Sharing Features. To use the Sharing Features, you may be required to download the third-party software to your device (“Third-Party Software”). We do not control and are not responsible for the Third-Party Software, or its collection or use of your information. You may find out more about how the Third-Party Software stores and uses your information by accessing the Third-Party Software provider’s privacy policy. When you download the Third-Party Software, you may also be subject to the Third-Party Software provider’s terms and conditions.

When processing credit applications – CBX does not intentionally run credit checks on individuals. However, if you share your personal tax identifier and other personal information with credit application provider, Bectran Inc., your credit information will be processed by Bectran and shared with CBX.

If you elect to complete a credit application, Bectran collects, uses and processes your information, including credit, in accordance with its privacy policies. You can access Bectran’s privacy policy via the following link: www.bectran.com/privacy-policy.html.

To process credit applications, we may collect and process: Identifiers or Customer Records.

For analytics purposes - For example, we may analyze your personal information including your location, products and/or services requested, age, time zone, IP address and URL visited, against our wider customer base for internal business purposes, such as generating statistics and developing marketing plans, to improve our services and products and the website. We may also aggregate and de-identify your information to create customer segments and share with our affiliates and partners.

To perform analytics, we may collect and process: Internet and Network Information.

To provide you with marketing communications that you might be interested in - If you choose to receive marketing communications from us, we may use your personal information to keep you up to date with our latest products, services, surveys, announcements, upcoming events, sweepstakes, contests and other promotions via our newsletters, emails, or other communications. If you no longer wish to receive these marketing communications, details of how to opt out are described in the section below marked “How do I stop receiving marketing communications?”

To provide marketing communications we may collect and process: Identifiers or Commercial Information.

For tailored advertising - We, or with third party vendors, may use your personal information to provide you with tailored advertising on third party sites, including Social Sites (defined below in section 8) “What if I access or use a social network or public forum through the Services?”. These advertisements are either: (i) “contextual” (meaning they are presented due to the webpage that you are viewing); or (ii) “behavioral advertising” or “interest-based advertising” (i.e. where advertisements are shown to you based upon your interests which we have inferred from your information including demographic, geographic and interest-based data). We may use tailored advertising to specifically include or exclude individuals who have registered for our products to ensure that you are provided with information about those products that are most relevant to you. To do this, we may track your browsing activity across different websites, different Devices and/or different applications. We may match your browsing activity on one Device, such as your mobile phone, with your browsing activity on another Device, such as your tablet, to ensure our advertising is tailored to you. If you no longer wish to see tailored advertising, you can manage your cookie preferences and choose to opt out of those cookies by clicking, Cookies Settings. In addition, some third-party sites allow you to stop seeing advertisements from specific advertisers on that site, so you should also check your preferences on those websites. For more information on how CBX uses cookies please review our Cookie Policy.

To provide tailored advertising we may collect and process: Identifiers; Commercial Information; and/or Internet and Network Information.

You can also learn more about our current Advertisers and review your opt-out options on their websites:

Google: adssettings.google.com/authenticated?hl=en

LinkedIn: www.linkedin.com/help/linkedin/answer/a570330/opt-out-of-sponsored-messaging

If you would like more information about Advertisers’ practices, please see www.optout.aboutads.info. You can generally opt-out of receiving personalized ads from third-party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising (DAA) by visiting the opt-out pages on the NAI website (www.optout.networkadvertising.org) and DAA website (www.aboutads.info/choices/).

For SMS communications - When you sign up to receive text messages from us on our website or via text message or opt to receive news, offers, updates on out-of-stock items from us by entering your name and phone number and clicking subscribe or ticking a box at checkout indicating that you would like to receive text messages from us, we collect your phone number, information about your browser, information about the page you signed up on, and any other additional information you may provide to us. For more information on SMS messages, including instructions on how to opt-out, please read our Terms of Service.

To provide SMS communications we may collect and process: Identifiers and/or Commercial Information.

For non-marketing communications - We may use your personal information to communicate with you about important information in relation to your account, the service you have requested or other non-marketing communications. This includes: (i) to process and respond to your questions and/or inquiries; (ii) emailing you to verify your identity when you sign-up; (iii) emailing you where you have requested a password and/or username reset; (iv) notifying you that a particular service has been suspended for maintenance or terminated; (v) letting you know that we have updated this Notice or our Terms of Service; or (vi) letting you know about any products that you have requested or purchased. We will never contact you to ask for your password, please be careful if you receive any communications from people requesting this information.

To provide non-marketing communications we may collect and process: Identifiers.

For product development, business development, site optimization and management - For example we may use your personal information provided to us to:

to improve our products and develop new products;

administer the website;

ensure the security of our networks and of your information;

customize your future visits to the website based on your interests to ensure the most user-friendly online navigation experience;

improve the website and our other digital offerings (including to fix operational problems such as pages crashing and software bugs); and

provide services to our partners such as tools, analyses, data and insights to see how their website or mobile applications are used.

To support site optimization and management we may collect and process: Internet and Network Information.

For employment or internship application purposes - If you contact us in relation to your employment prospects, we will use your personal information to consider you for current and future employment opportunities and to contact you with respect to employment opportunities at CBX that you have expressed an interest in.

By selecting the Careers link you will be directed to a third-party recruitment services website, currently Jobvite.com (“Recruitment Provider”). Your use of the Recruitment Provider’s services is governed by the Recruitment Provider terms of service and privacy policy available through the Recruitment Provider’s website.

To employment consideration we may collect and process: Identifiers and/or Professional or Employment-Related Information.

For fraud prevention and detection purposes. We may use any information we collect to protect and defend the rights and property of CBX, our employees and business partners.

For site optimization and management - For example we may use your personal information provided to us to:

administer the website;

ensure the security of our networks and of your information;

customize your future visits to the website based on your interests to ensure the most user-friendly online navigation experience;

improve the website and our other digital offerings (including to fix operational problems such as pages crashing and software bugs); and

provide services to our partners such as tools, analyses, data and insights to see how their website or mobile applications are used.

To support site optimization and management we may collect and process: Internet and network information.

To verify your identity - For example we may process personal information to determine if you already have an account with us.

To verify your identity, we may collect and process: Identifiers; Customer records; Protected classification characteristics; Sensitive personal information; or Internet or other similar network activity.

Information that we collect automatically.

When you engage with our Services we may use automatic data collection technologies, such as cookies and similar tracking technology, to collect the following information about you automatically (for further information please see our Cookie Policy for more information):

Internet or Other Electronic Network Activity Information. Such as browsing history, search history, information on your interaction with a website, application, or advertisement.

For example, when you visit the website, engage with CBX content or with us digitally, we may collect certain information from your computer, tablet or mobile phone (“Device”) such as your IP address, Device type (i.e. make and model), unique device identification numbers, browser-type and time zone settings

We may also collect information about how your Device has interacted with us including: the pages accessed and links clicked; how you navigate to and from the website (such as how you scroll over the site, which parts you click and how long you spend on each page); your preferences, the products and/or services that you have viewed or searched for; and crashes, download errors and response times.

Geolocation Data. Such as physical location or movements. We collect your IP address and infer location such as city or postcode therefrom.

For example, when you visit the website, engage with CBX content or with us digitally, we may collect your broad geographic location (e.g. country or city-level location) from your Device.

Inferences Drawn from Other Personal Information. Such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

For example, when you visit the website, we may use the personal information indicated above to provide you with tailored advertising, content and products that we think you may like. This is described in further detail in the section below marked “How does CBX use my personal information?”.

CBX does not currently use automated decision-making technology ("ADMT") — meaning technology that uses computation to make or substantially replace human decision-making regarding individual consumers — in connection with the personal information of website users or consumers. We do not subject consumers to decisions based solely on automated processing that produce legal or similarly significant effects without human involvement.

If CBX introduces ADMT in the future, we will update this Notice to reflect that use, provide any required Pre-Use Notice to affected consumers before use begins, and make available the right to opt-out of and access information about that use, in accordance with applicable law. We will not begin using ADMT for purposes that trigger applicable disclosure and opt-out obligations without first updating this policy and any other required notices.

INFORMATION THAT WE OBTAIN FROM THIRD PARTY SOURCES.

From time to time, we may receive personal information about you from third party sources, but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. The types of personal information we collect from third parties includes:

Social Media Partners. For example, if you ‘log-in’ to the website using a social medial log in or use functionality such as “like” or “share” buttons, that social media site may pass information to us, including: the user ID for that third party site, the name, email address and location associated with the user ID and any other information permitted under the privacy policy for that website.

Retailers, Distributors and Third-Party Brand Partners. For example, where permitted by applicable data protection law and, if applicable, where you have specifically consented, our retailers, distributors and third party brand partners may pass information to us including your first name, last name, email address, postal address, telephone number, phone number, gender, browsing patterns, geo-location and device identifiers, click through and other cookie data, demographic information including information about your appearance and information in relation to products purchased at their stores (whether on the high-street or online through their own website or a dedicated microsite) and services requested using their websites and/or applications.

Technology Partners and Market Research Organizations. For example, where permitted by applicable data protection law and if applicable where you have specifically consented, our preferred technology partners may share information with us, including your browser patterns, geo-location and Device identifiers.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

CHANGE OF PURPOSE

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal information for an unrelated purpose, we will notify you and we will explain the business purpose which allows us to do so.

Please note that we may process your personal information without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

2. DO WE SELL OR SHARE PERSONAL INFORMATION?

We may disclose personal information about you to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the specific business purpose, prohibits the recipient from selling or sharing that personal information, and requires the recipient to comply with applicable law. Recipients engaged in cross-context behavioral advertising are not service providers or contractors for that advertising function and are disclosed as third parties in the sharing table below. . In the preceding twelve (12) months, we have disclosed we categories of third parties indicated in the chart below.

We may sell or share personal information about you to third parties, subject to your right to opt-out of those sales. For purposes of this Notice, 'sell' means the disclosure of personal information to a third party for monetary or other valuable consideration. 'Share' means disclosure to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration. We do not sell or share the personal information of consumers we actually know are under age 16. In the preceding twelve (12) months, CBX has sold the following categories of personal information to the categories of third parties indicated in the chart below. To opt-out of personal information sales or sharing, visit Do Not Sell or Share My Personal Information.

Categories of Third Parties

Personal Information Category	Business Purpose Disclosures	Third Party Sales	Third Party Sharing
Identifiers	Payment processing, marketing, delivery services, customer relationship management, web hosting, or data storage		Google, LinkedIn, Constant Contact
Communications	Customer relationship management, or data storage		Constant Contact, MailChimp, HubSpot
Internet or other similar network activity	Marketing, delivery services, customer relationship management, web hosting, or data storage	N/A — disclosed as sharing for cross-context behavioral advertising (see Third Party Sharing column)	Google Retargeting, LinkedIn Retargeting, Microsoft Ads
Geolocation information	Marketing, customer relationship management, web hosting, or data storage	N/A — disclosed as sharing for cross-context behavioral advertising (see Third Party Sharing column)	Google Retargeting, LinkedIn Retargeting, Microsoft Ads

We may also share your personal information to:

comply with any court order, law, or legal process, including to respond to any government or regulatory request or

a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of CBX’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by CBX about our Services users is among the assets transferred.

If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of CBX, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

enforce or apply our Terms of Service, Terms and Conditions of Online Sale, and other agreements, including for billing and collection purposes.

3. HOW LONG DOES CBX KEEP MY PERSONAL INFORMATION?

We retain personal information in identifiable form only for as long as necessary to fulfill the purposes for which the personal information was provided to us or, if longer, to comply with legal obligations, to resolve disputes, to enforce agreements and similar essential purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

As a general guide:

Identifiers and account information are retained for the duration of our business relationship and for a reasonable period thereafter, unless a longer retention period is required by applicable law.
Transactional and commercial information (such as order history and payment records) is retained for the duration of the business relationship and for a period thereafter consistent with applicable tax, accounting, and record-keeping requirements.
Browsing and usage data collected through cookies and analytics tools is retained for the period set by the applicable tool, typically 13 months or less for analytics cookies.
Information collected for fraud prevention and legal compliance may be retained for longer periods as required or permitted by applicable law.

4. FOR WHAT BUSINESS PURPOSE CAN CBX USE MY PERSONAL INFORMATION?

We are required to satisfy one or more of the reasons set out by applicable data privacy law before we can collect and use your personal information.

Generally, our business purpose for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally rely on the following reasons to collect and use your personal information:

Performance of a contract

Using your information may be necessary for us to perform our obligations under a contract with you or with a view to entering into such a contract. For example, where you have: (i) purchased services and/or products from us, we will need to use your information to provide those services and/or products; or (ii) approached us in relation to employment opportunities, the collection and use of your personal information is necessary to enable us to offer you the job role, process your acceptance of the offer, on-board you as an employee and fulfil our obligations as an employer.

Compliance with our legal obligations

The collection and use of your personal information may be necessary to enable us to meet our legal obligations. For example, to verify your identity and undertake necessary due diligence checks.

Pursuing our legitimate interests

Where such processing is not overridden by your interests or fundamental rights, we are permitted to use your personal information where it is necessary in order to pursue our legitimate interests, for example to operate the website and our other digital offerings, to improve our products and services, content and our other digital offerings or to undertake marketing. We may have other legitimate interests and if appropriate we will make this clear to you at the relevant time.

Consent

In some limited circumstances, we may rely on your consent to collect and use your personal information. For example, we may rely on consent: (i) where you have approached us in relation to employment opportunities and have provided us with sensitive personal information, such as information in relation to your racial and ethnic origin, sexual orientation, religion, physical and mental health, disabilities or trade union membership; or (ii) in relation to the sending of e-marketing or communications.

If we rely on consent, this will be made clear to you at the time we request your information. You can withdraw your consent at any point by using the mechanism provided at the time, or by contacting us using the contact details provided in the section “How do I contact CBX?” of this Notice.

Vital interests

In some instances, we may need to use your personal information to protect your vital interests or those of another person.

You may not always be required to provide the personal information that we have requested. However, if you choose not to provide certain information, you may not be able to take advantage of some of our Services. Any information that is so required is clearly marked as mandatory. If you would prefer that we not collect certain personal information from you, please do not provide us with any such information, or opt out of providing this information where applicable.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), these interests will normally be as set out in this Notice; however, if this changes we will make clear to you at the relevant time what those legitimate interests are.

If you have any questions or need further information concerning the business purpose on which we collect and use your personal information, please contact us using the contact details provided in the section below marked “How do I contact CBX?”

5. DOES CBX SHARE MY PERSONAL INFORMATION WITH ANYONE?

In addition to the third parties identified under the “Do we Sell or Share Personal Information” section, during the past 12 months, we may have disclosed the categories of personal information listed in the section marked “what categories of personal information does CBX collect about me?” to the following categories of recipients:

With our affiliates – We may make your personal information available to CBX affiliated companies to allow us to provide our products and services to you, for the purposes described in this Notice, or as notified to you when we collect your personal information.

With third parties for marketing purposes - Certain promotions and events may offer you the opportunity to consent to receive marketing communications from our business. If you have given your consent, your personal information may be used by such third party for the purposes stated at the point you enter the event and/or sign-up to receive the promotional updates.

With our service providers and business partners- We engage third party service providers and business partners to perform functions on our behalf (for example, to support the delivery of our products, or the website). This includes but is not limited to sharing information with the following types of service providers or business partners:

advertising providers - including companies that provide: (i) advertising space for CBX; (ii) the provision of advertising related services, including agencies instructed to make advertising purchases on our behalf, providers of ad-exchanges (a digital marketplace to buy and sell advertising space) and providers of a demand-side platform (software used to purchase advertising in an automated fashion), such as Message Media from Google;

providers of marketing and customer relationship management databases and data management platforms – that enable CBX to manage your information in a safe and efficient manner;

data analysis firms –that provide insights and help us to analyze trends using the data that we and they hold;

customer support specialists –that provide customer support services on our behalf for CBX products and services;

fulfilment companies –this includes companies that manage your orders and ship your products, coordinate email campaigns, sweepstakes, contests or promotions on our behalf;

application development and web-hosting companies – to enable us to manage and improve the website;

information technology and related infrastructure providers;

email delivery providers; and

audit and professional service providers.

Where a third party provides cross-context behavioral advertising services — including retargeting and advertising through platforms such as Google, LinkedIn, and Microsoft Ads — that third party acts as a third party recipient, not a service provider or contractor, for those advertising functions. Disclosure of personal information to such third parties for cross-context behavioral advertising constitutes sharing as described in Section 2 of this Notice.

As part of a business transfer – CBX may disclose your personal information to an actual or potential buyer (and its agents and advisers) in relation to any actual or proposed divestiture, merger, acquisition, joint venture, bankruptcy, dissolution, reorganization, or any other similar transaction or proceeding.

To comply with laws – CBX may disclose your personal information to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person; and

To any other person with your consent to the disclosure.

6. WHAT ARE MY DATA PROTECTION CHOICES AND RIGHTS?

State consumer privacy laws may provide their residents with additional rights regarding our use of personal information. The following Section applies to individuals who reside in specific jurisdictions that provide additional privacy rights, including California, Colorado, Connecticut, Montana, Oregon, Texas, Utah, and Virgina.

6.1 Your Rights and Choices

Right to Access Specific Information and Data Portability Right. You have the right to request that we disclose certain information to you about our collection and use of personal information over the past twelve (12) months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

The categories of personal information we collected about you.

The categories of sources for the personal information we collected about you.

Our business or commercial purpose for collecting or selling that personal information.

The categories of third parties with whom we share that personal information.

The specific pieces of personal information we collected about you (also called a data portability request).

If we disclosed personal information for a business purpose, the business purpose for which personal information was disclosed, and the personal information categories that each category of recipient obtained.

Right to Correct Information. You have the right to request we update personal information about you that is incorrect in our systems. You can also review and change your personal information by logging into the Services and visiting your account profile page.

Right to Delete. You have the right to request that we delete any personal information about you that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) the personal information from our records, unless an exception applies.

Right to Opt-out of the sale or sharing of Personal Information for Cross-Contextual Behavioral Advertising. To opt-out of personal information sales or sharing, visit Do Not Sell or Share My Personal Information.

Right to Limit Use or Disclosure of Sensitive Personal Information Use. If we use or disclose your sensitive personal information for purposes other than those necessary to provide our products and services, you have the right to direct us to limit such use or disclosure to only those permitted purposes. To submit a request to limit, please use one of the designated methods described in Section 6.2 below. Note: a cookie banner or cookie controls alone are not an accepted method for submitting a request to limit the use of sensitive personal information.

ADMT. Under California law, consumers have the right to direct businesses not to use ADMT with respect to the consumer, and the right to request access to meaningful information about the logic involved in any ADMT process, including a description of the likely outcome of that process as it relates to the consumer.

CBX does not currently use ADMT within the meaning of applicable California regulations. Accordingly, these rights are not presently triggered with respect to our data practices. If CBX begins using ADMT in the future, we will notify affected consumers by updating this Notice and providing any required Pre-Use Notice before ADMT use commences. At that time, consumers will be able to exercise their opt-out and access rights using the same designated request methods described in Section 6.2.

Identity verification is not required to submit a request to opt-out of ADMT. For requests to access information about ADMT, verification will be required in accordance with Section 6.2.

Non-Discrimination. We will not discriminate against you for exercising any of your rights.

Right to Opt-Out. You have the right to opt-out of personal data processing for targeted advertising, sales, or either limit (opt-out of) or require consent to process sensitive personal data.

6.2 How to Exercise these Rights

The exact scope of these rights may vary by state. To submit a request to exercise these rights you may use one of these three methods:

Email: privacy@cookandboardman.com

Phone: (855) 209-8615

Submit a Request

For all requests, please clearly state that the request is related to “Your Privacy Rights,” indicate which type of request you are making, and provide your name, street address, city, state, zip code and an e-mail address or phone number where we may contact you. We are not responsible for notices that are not labeled or sent properly or that do not include complete information.

To appeal a decision regarding a consumer rights request, please submit your appeal using one of the three methods above. Your appeal should include an explanation of the reason you disagree with our decision. Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.

Only you, or a person you have authorized to act on your behalf (an 'authorized agent'), may make a verifiable consumer request related to your personal information. You may also make a request on behalf of your minor child. An authorized agent may submit a request on your behalf if you provide the authorized agent with written permission to do so. We may require verification of the authorized agent's authority before processing a request submitted through an agent. Note: consumers may also designate an opt-out preference signal, including Global Privacy Control, as an authorized mechanism to submit requests to opt-out of sale or sharing on their behalf.

The frequency limit and identity verification requirements described in this section apply to requests to know, access, correct, and delete personal information. Identity verification is not required to submit a request to opt-out of the sale or sharing of personal information, a request to limit the use or disclosure of sensitive personal information, or a request to opt-out of automated decision-making technology. For those requests, we may ask for information reasonably necessary to process your request, but we will not use it as an identity verification requirement.

For requests to know, access, or receive a copy of specific pieces of personal information, you may make such a request up to twice within a 12-month period. Your request must provide sufficient information to allow us to reasonably verify your identity and describe the specific information you are requesting with enough detail for us to properly evaluate and respond. We will only use personal information provided for verification purposes to verify your identity and will delete such information promptly after processing your request. You are not required to create an account to submit a request.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response electronically. Any disclosures we provide will only cover the 12-month period preceding the receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide the personal information that is readily usable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

6.3 Opt-out Preference Signals

Through your browser configuration, our website honors your opt-out preference signal. You can get further help in configuring your browser by visiting: https://globalprivacycontrol.org/

6.4 Personal Information Sales Opt-Out

If you are age 16 or older, you have the right to direct us to not sell personal information about you at any time (the “right to opt-out”). We do not sell the personal information of consumers we actually know are less than 16 years old, unless we receive affirmative authorization (the “right to opt-in”) from either the consumer who is between 13 and 15 years old, or the parent or guardian of a consumer less than 13 years old. Consumers who opt-in to personal information sales may opt-out of future sales at any time.

To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following Internet Web page link: Do Not Sell or Share My Personal Information

Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorize personal information sales.

6.5 California Shine the Light Law

California Civil Code Section 1798.83 permits users who are California residents to obtain from us once a year, free of charge, a list of third parties to whom we have disclosed personal information (if any) for direct marketing purposes in the preceding calendar year. If you are a California resident and you wish to make such a request, please send an e-mail with “California Privacy Rights” in the subject line to privacy@cookandboardman.com or write us at: CBX Solutions, LLC, Attn: Privacy Inquiries, 3064 Salem Industrial Drive, Winston Salem, NC 27127.

7. WHAT IF I ACCESS A THIRD PARTY SITE THROUGH THE WEBSITE?

The website may contain links to or from third party sites. Please be aware that we are not responsible for the privacy practices of such third parties. This Notice applies only to the personal information we collect as described above. We encourage you to read the privacy policies of third party sites you access from links on the website or otherwise visit.

8. WHAT IF I ACCESS OR USE A SOCIAL NETWORK OR PUBLIC FORUM THROUGH THE SERVICES?

Our website may facilitate easy access to certain social networking sites and other websites or services with user-generated content features, such as Facebook, Instagram and X (“Social Sites”). You understand that we do not control such services and are not liable for the manner in which they operate. Please review the Social Sites’ privacy policies if you would like more information about how they collect, use and share your personal information, your privacy rights and how to change your privacy settings.

Our website may enable you to:

Access Social Sites: This may include: access to websites such as a YouTube video; or activation of third party websites when you make a ‘comment’, ‘share’ or ‘like’ something on the Social Site using a third party social network plug-in. In each instance, such third party’s privacy policy will apply to your interaction with that website or service;

Submit content to Social Sites: For reviews, discussion forums, message boards, photographs and other public features (“Public Forums”). We do not restrict the distribution of personal information that you voluntarily disclose in these Public Forums, so please be aware that any information you disclose there may be collected and used by us and others. For this reason, we encourage you to refrain from providing or sharing personal information about yourself in the Public Forums. We cannot prevent third parties from using such information in a way that may violate this Notice or applicable law;

Accept certain cookies from the Site (for example, tracking pixels placed by Social Sites). These cookies may collect information about your activity on our website and share it with the applicable Social Site, which may use that information to deliver advertising to you on that platform. This type of disclosure may constitute 'sharing' of personal information for cross-context behavioral advertising under California law, subject to your opt-out rights described in Section 6 of this Notice

Sign-in to the Site using a Social Site: For example, for a harmonized user experience.

Signing-in using a Social Site or other third-party account may allow us to access information that you have given the Social Site permission to share. The sign-in feature may also transfer information to the Social Site or third party, such as your username or social media handle, to authenticate you. The Social Site or third party may also automatically collect information such as your IP address, information about your browser and device, and the web page address of the Site. The sign-in feature may also place and read cookies from that third party that may contain a unique identifier the Social Site or other third party assigns to you. The functionality of and your use of the sign-in is governed by the privacy policy and terms of the Social Site.

We may use your personal information to identify you on Social Sites and to show you ads that are more relevant for you. The Social Sites will not share your personal information with other parties and will delete the information promptly after the matching process is complete.

Our use of your personal information in relation to the Social Sites will be as set out in this Notice or as otherwise notified to you. Again, please note that third party sites (including the Social Sites) may be under the control of a third party and we encourage you to familiarize yourself with the privacy policies and terms of use of each third party site.

9. HOW DO I STOP RECEIVING MARKETING COMMUNICATIONS?

We will only send you marketing communications if you have agreed to this, or if we are otherwise permitted by law. If at any time you decide that you no longer wish to receive marketing communications from us, you may opt out by clicking on the relevant ‘unsubscribe’ link in the emails you receive, by texting STOP in response to any text message or by contacting us using the details found in the section “How do I contact CBX”.

Please note, while we will honor your request to stop receiving marketing communications, we will continue to send you service-related communications such as emails confirming purchases through the website.

10. DOES CBX TRANSFER MY PERSONAL INFORMATION TO OTHER COUNTRIES?

To provide our services, we may need to transfer and process your personal information internationally (including to destinations outside the country in which you are located).

As a result, your information may be transferred to and/or processed in countries which may not guarantee the same level of protection for personal information as the country in which you reside. However, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Notice.

We do not transfer sensitive personal information to foreign adversary countries or to entities controlled by foreign adversaries, as those terms are defined under applicable federal law.

Further information can be provided on request: please contact us using the details found in the section “How do I contact CBX?” We have also implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

11.IS MY PERSONAL INFORMATION SECURE?

We understand that you care how your personal information is used and/or shared with others, and we value your trust and seek to safeguard your personal information.

We implement appropriate technical and organizational security measures, including physical, administrative and technical safeguards to protect your personal information from unauthorized access, use and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Services like message boards.

The measures we use to protect your personal information are designed to provide a level of security appropriate to the risk of processing your personal information. However, please be aware that no electronic transmission of information can be entirely secure. We cannot guarantee that the security measures that we have in place to safeguard personal information will never be defeated or fail, or that those measures will always be sufficient or effective. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

12. HOW OLD DO I HAVE TO BE TO USE THE CBX SITES OR OTHER DIGITAL OFFERINGS?

You must be aged 13 or over to use the CBX sites and our other digital offerings as our Services is not intended for children under 13 years of age. No one under age 13 may provide any personal information to or on the Services. We do not knowingly collect personal information from children under 13. Residents of certain states under 13, 16, or 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.

We take your privacy very seriously and we understand the importance of taking extra precautions to protect the privacy and safety of children who use our products and services. We do not solicit or knowingly collect personal information from children aged 13 and under. If you are under 13, do not use or provide any information on the Services or through any of its features, register on the Services, make any purchases through the Services, use any of the interactive or public comment features of the Services, or provide any information about yourself to us, including your name, address, telephone number, or email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at privacy@cookandboardman.com . If we are made aware that we have received such information, or any information in violation of our policy, from a child under 13 without verification of parental consent, we will delete that information from our records.

California Minors: If you are a California resident who is under age 18 and you are unable to remove publicly available content that you have submitted to us, you may request removal by contacting us at: privacy@cookandboardman.com . When requesting removal, you must be specific about the information you want removed and provide us with specific information, such as the URL for each page where the information was entered, so that we can find it. We are not required to remove any content or information that: (1) federal or state law requires us or a third party to maintain; (2) was not posted by you; (3) is anonymized so that you cannot be identified; (4) you don’t follow our instructions for removing or requesting removal; or (5) you received compensation or other consideration for providing the content or information. Removal of your personal information from the Services does not ensure complete or comprehensive removal of that content or information from our systems or the systems of our service providers. We are not required to delete the content or information posted by you; our obligations under California law are satisfied so long as we anonymize the content or information or render it invisible to other users and the public.

13. DOES THIS NOTICE EVER CHANGE?

We may update or modify this Notice from time to time in response to changing legal, technical or business developments. We will obtain your consent to any material Notice changes if and where this is required by applicable data protection laws. The date of the most recent version of this Notice will appear at the top of the page.

When we update our Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. For example, we will notify you of by posting a revised Notice and updating the “last updated” date at the top of this page, or by sending the new Notice to you via email, where appropriate. We update this Notice at least annually as required by California law.

14. HOW DO I CONTACT CBX?

We have taken great measures to ensure that your visit to the website is an excellent one and that your privacy is respected. If you have any questions, comments, or concerns about our privacy practices and/or would like to submit a privacy request, please contact us either:

Via email at privacy@cookandboardman.com and/or

Via toll free telephone at (855) 209-8615 and/or

Via postal mail at: CBX Solutions, LLC, Attn: Privacy Inquiries, 3064 Salem Industrial Drive, Winston Salem, NC 27127.

Contact Information

If you have any questions or comments about this notice, the ways in which we collect and use your information described in this Notice, or your choices and rights regarding such use please do not hesitate to contact us at

Phone:(855) 209-8615

E-mail: privacy@cookandboardman.com

Postal Address: CBX Solutions, LLC Attention: Legal Department 3064 Salem Industrial Drive Winston Salem, NC 27127