Privacy Policies

Last Updated and Effective Date:  December 11, 2023

Page topics

Personal Information We Collect About You

How We Collect Your Personal Information

Why We Collect Your Personal Information

Information We Have Collected in the Past 12 Months, How and Why

Cookies and Tracking Technologies

Sale/Sharing of Personal Information

Disclosure to Our Service Providers and Contractors

Our Retention Policy

Public Forums, Reviews, and Testimonials

Our Websites and Apps Are Not Intended for Children

Email Communications

Text Messages and Alerts - Opting In and Out

Information Security

Your California Privacy Rights

Your Rights if You Are a Resident of Virginia

Nevada Privacy Notice

Changes to Our Privacy Policy

How to Contact Us

Thank you for taking the time to review our Privacy Policy.  American Woodmark Corporation and each of our subsidiaries and brands (“we,” “us” or “our”) care about the privacy and security of your Personal Information. This Privacy Policy describes how we collect, use, and share Personal Information collected via our websites and apps, through other digital and online services we provide, or offline. It applies to all of our websites and apps, including:

www.americanwoodmark.com

www.woodmarkcabinetry.com

www.shenandoahcabinetry.com

www.pcscabinetry.com

www.timberlake.com and the TimberlakeConnect App

www.villabathcabinets.com

www.waypointlivingspaces.com

www.allenandrothcabinetry.com

www.hamptonbaycabinets.com

www.hamptonbaykitchens.com

www.cabinetspecs.com

www.masterbath.com

www.orders.cabinetry.com

www.cabinettracker.com

www.estatebyrsi.com

www.sagehousecabinetry.com

By using any of our websites or apps, or otherwise submitting your Personal Information to us, you are accepting the terms of this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use our websites or apps, or otherwise submit your Personal Information to us. For additional rules applicable to your use of our websites and apps, please review our Terms of Use.

We reserve the right to change this Privacy Policy at any time.  If we change our Privacy Policy, we will post an updated version of it.  Please check back periodically to see if our Privacy Policy has been updated.  Updates to the Privacy Policy will be referenced by the "Last Updated and Effective Date" shown above.

1. Personal Information We Collect About You

Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal information” does not include: (i) publicly available information or lawfully obtained, truthful information that is a matter of public concern; or (ii) information that is deidentified or aggregate consumer information.

Sensitive Personal Information” means Personal Information that reveals information such as: (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) precise geolocation; (d) racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of a consumer’s mail, email, and text messages unless we are the intended recipient of the communication; and (f) genetic data.  Sensitive Personal Information includes the processing of biometric information for the purpose of uniquely identifying a consumer, Personal Information collected and analyzed concerning a consumer’s health and Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.  Sensitive Personal Information that is publicly available is not considered Sensitive Personal Information or Personal Information.

Please note that we may not collect all categories of Personal Information and Sensitive Personal Information that are referenced in the definitions.

The list below summarizes the categories of Personal Information we collect with examples:

A.  Personal Identifiers

Name, alias, postal address, phone number, username and password for our website, IP address, email address

B.  Payment Information

We use a third-party payment processor, and do not directly collect credit card information.  In certain instances, the payments we receive are from businesses.  In other instances (such as SageHouse Cabinetry), the payments that we receive can be directly from individuals.

C.  Commercial Information

Products or services purchased, obtained or considered, other purchasing or consuming histories or tendencies, information from surveys and promotions.

D.  Internet or Other Electronic Network Activity Information

Browser type and language, operating system, website access time, duration of visit, referring website address, browsing and search history on our website, webpages viewed immediately before and after our website, app usage data, electronic communications sent to us, information related to use of links contained in our emails and advertisements

E.  Geolocation Data

Your physical location based on information you provide directly or inferred from your IP address

F.  Inferences About You From Any Other Category of Information

Information reflecting your preferences, characteristics, trends, or attitudes

*** Contents of Written Communications

We offer features on our websites and apps that allow our customers to provide reviews and share information about their experiences with our products. Please be aware that any information you choose to submit in any review, testimonial, community, or forum can be read, collected or used by others, and could be used to send unsolicited messages to you.  In other words, this information is publicly available and does not constitute Personal Information.

2. How We Collect Your Personal Information

We collect your Personal Information in multiple ways, including:

A. Directly from you when you, or someone on your behalf, purchase products from us or our retail partners; register or maintain an account with us; enter search terms on our website; search for a dealer via our website; track an order; submit content through our websites, apps, or social media pages; obtain technical support; participate in a survey, testimonial, marketing promotion, sweepstakes, or contest; sign up for an event with us; contact us via phone, email, text, online chat, or postal mail; or connect with us via social media.

B. When you provide one of our service providers with your Personal Information in connection with their provision of services to us and they provide us your information

C. Automatically when you use our website through the use of cookies and other technologies by us or our service providers when you browse or search our website; download materials from our website, such as brochures, product literature, or catalogs; open an email or text message from us or click on a link contained in our emails or texts; click on an online advertisement for our products; view our social media profiles and sites; or post or share information about us or our products.

3. Why We Collect Your Personal Information

We use your Personal Information for the following purposes:

A.  Personal Identifiers

  • To communicate with you
  • To help you find a dealer or retailer that sells our products
  • To fulfill orders and deliver our products
  • To handle returns
  • To detect and prevent fraud against you and/or us
  • To show you relevant ads, including while you are browsing the web or using social media
  • To contact you in order to obtain information about your product preferences and how we can improve our business
  • For security and fraud prevention purposes

B.  Payment Information

  • To process payment

C.  Commercial Information

  • To provide you with appropriate products, recommendations, and updates
  • To help you find relevant products
  • To provide customer service and support
  • To handle returns

D.  Internet or Other Electronic Network Activity information (including Geolocation Data, and information collected via website analytics or through cookies and other tracking technologies)

  • To make it easier for you to use our websites and apps
  • To provide you with appropriate products, recommendations, and updates
  • To help you find relevant products
  • To help you find a dealer or retailer that sells our products
  • To show you relevant ads, including while you are browsing the web or using social media
  • To improve our websites and apps, set default options, and provide you with a better experience
  • For security and fraud prevention purposes

E.  Professional or Employment-Related Information

For those who apply for employment with us. More information for California job applicants can be found here.

F.  Inferences From Other Categories of Personal Information We Collect

  • To provide you with appropriate products, recommendations, and updates
  • To help you find relevant products
  • To provide customer service and support
  • To improve our websites and apps, set default options, and provide you with a better experience
  • For security and fraud prevention purposes

G.  Contents of Written Communications:

  • To facilitate sharing of information and reviews of our products by our customers

H.  Publicly Available Information

  • Any purpose

I.  Aggregated/De-Identified Information

  • We may aggregate and/or de-identify your Personal Information so that it can no longer be linked to you. We may use and share aggregated/de-identified information for any purpose.

4. Information We Have Collected in the Past 12 Months, How and Why

Subject to the disclosures made above, set forth below in chart format are the categories of Personal Information we have collected in the preceding 12 months, the categories of sources from which the Personal Information was collected and the purpose for the collection.

Category of Personal InformationCategories of Sources from which Personal Information CollectedBusiness or Commercial Purpose for the Collection
PERSONAL INFORMATION
IdentifiersSee Sections 2.A to 2.C, above.See Section 3.A, above.
Payment InformationSee Section 1.B, above.See Section 3.B, above.
Commercial InformationSee Sections 2.A and 2.B, above.See Section 3.C, above.
Internet InformationSee Section 2.C, above.See Section 3.D, above.
Geolocation DataSee Section 2.C., above.See Section 3.D, above.
Professional or Employment-Related InformationSee Section 2.A, above.See Section 3.E, above.
InferencesSee Sections 2.A and 2.B, above.See Section 3.F, above.

5. Cookies and Tracking Technologies

We and our service providers use cookies and other tracking technologies (such as web beacons, tracking pixels, and HTTP referrers) to collect and store information about your interactions with our websites. Cookies are small files that are transferred to a computer’s hard drive through a web browser that enable the site’s or service provider’s systems to recognize the user’s browser and capture and remember certain information. In general, we and our service providers use cookies and other tracking technologies to optimize the functionality of our websites (including by storing your browsing preferences for future visits), to help us understand how visitors interact with our websites, and to provide users with content or advertising based on their browsing activities.

If you do not want to have cookies placed on your device, you should set your browser to refuse cookies before accessing our websites. Please see your browser’s Help menu for instructions, or visit www.allaboutcookies.org for more information on disabling and deleting cookies. Please note that, if you turn cookies off, some features of our websites may not function properly. Emails that we and our marketing service providers send may include tracking tools that provide us with information related to whether you’ve opened an email or clicked on a link contained in an email. More information on how to unsubscribe from our marketing emails is found in the following section.

6. Sale/Sharing of Personal Information

We do not sell (as that term is generally understood) or share for cross-context behavioral advertising your Personal Information. 

We do, however, provide Personal Information to our advertising and third-party analytics partners, as described below. This may be considered a sale or sharing of Personal Information under California law.

Website Analytics Information

We use website analytics to better understand how users interact with our websites and apps, and to provide you with more relevant advertising within our websites, apps, emails, text messages, direct mail offers, and other marketing communications. This software may be provided by service providers, and may collect information such as your IP address, location, age and gender, browser type and language, operating system, access time, duration of visit, pages you view within our website, search terms you enter and other actions you take while visiting us, the pages you view immediately before and after you access our website, how often you use our website, aggregated usage and performance data, application errors, and debugging information.

Google Analytics is owned and controlled by Google LLC. Data collected by Google is subject to its privacy policy. To learn how Google uses data related to website analytics, please click here. You may opt-out of having your activity on our websites made available to Google Analytics by installing the Google Analytics browser add-on, available here.

We use ContentSquare to learn how users interact with our websites and apps, and to identify areas where we can improve the user experience. The data analyzed by the ContentSquare platform includes: unique identification information (e.g., IP addresses, cookie IDs and other identifiers); website and mobile app technical information (e.g., pages of a website or app a visitor visited, visitor’s type of computer operating system and web browser, etc.); and behavioral Information (e.g., your interactions with our websites or apps, mouse or touch movements, scrolls, mouse clicks, screen taps or zoom information, time of engagement, etc.). To opt-out of the processing of your Personal Information, click here.

Adobe Experience Cloud. Adobe Experience Cloud is owned and controlled by Adobe Inc., and data collected by Adobe is subject to its privacy policy. If you want to know more about how data is collected, used and shared by Adobe through the Adobe Experience Cloud service, please review the Adobe Experience Cloud Privacy Page. You may opt-out of having your activity on our websites and apps collected through the Adobe Experience Cloud by following the instructions on the Adobe Experience Cloud Privacy Page.

7. Disclosure to Our Service Providers and Contractors

We may also disclose your Personal Information with our contractors and service providers, in connection with their delivery of services to us. For example, to process or deliver your orders, provide customer service, operate our websites and apps, improve our products and services, and for the purpose of ad targeting, remarketing, and customized advertising content. Our service providers are contractually prohibited from using your Personal Information except as necessary to perform services on our behalf.

The business purposes for which we disclose Personal Information include:

  • Services on Our Behalf.  Including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on our behalf.  We may need to provide your name and delivery address to third parties that we use for delivering specific products or services to you (such as support services, shipping, direct mail organizations, research, or analytics).  This includes disclosing your Personal Information to fulfill any purpose for which you provide it.
  • Quality Control & Improvement of Products and Services.  Verifying or maintaining the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and improving, upgrading, or enhancing the service or device that is owned, manufactured, manufactured for, or controlled by us.

In the past 12 months, we have disclosed the following categories of Personal Information to our service providers and contractors for the following reasons:

Categories of Personal Information that We Disclose

Business Purposes for the Disclosure of Personal Information

PERSONAL INFORMATION

 

Identifiers

Services on Our Behalf

Quality Control & Improvement of Products and Services

Payment Information

Services on Our Behalf

Commercial Information

Services on Our Behalf

Quality Control & Improvement of Products and Services

Internet Information

Services on Our Behalf

Quality Control & Improvement of Products and Services

Geolocation Data

Services on Our Behalf

Quality Control & Improvement of Products and Services

Inferences

Services on Our Behalf

Quality Control & Improvement of Products and Services

We may also disclose your Personal Information:

  • As necessary, for the following purposes: (a) to comply with any legal process; (b) to respond to requests from public and government authorities; (c) to enforce our terms and conditions or this privacy policy; (d) to protect our operations and protect our rights, privacy, safety or property, and/or that of you or others; and (e) to allow us to pursue available remedies or limit the damages that we may sustain.
  • To our insurers and professional advisers for the purposes of managing risks, obtaining professional advice, exercising or defending against legal claims, etc.

In connection with or during negotiation of any reorganization, acquisition, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

8. Our Retention Policy

We will retain each category of your Personal Information identified above for an amount of time that is reasonably necessary for us to use the information for the purposes disclosed herein and for any other permitted purposes, including retention of Personal Information pursuant to any applicable contract, law or regulation.  To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

9. Public Forums, Reviews, and Testimonials

We offer features on our websites and apps that allow our customers to provide reviews, and share information about their experiences with our products. You do not have to use these features, but if you do, please use common sense and good judgment when posting in these communities or sharing your information, photos, or videos. Please be aware that any Personal Information you choose to submit in any review, testimonial, community, or forum can be read, collected or used by others, and could be used to send unsolicited messages to you. Despite our safety and privacy controls, we cannot guarantee that you will not encounter inappropriate or illegal conduct from third parties. You can help us to make our websites and apps (including public forums) welcoming for all users by reporting any offensive or unwelcome conduct to us.

10. Our Websites and Apps Are Not Intended for Children

Our websites and apps are not intended for children nor targeted to individuals under the age of eighteen (18). We do not knowingly collect Personal Information from children. If we learn that we possess the Personal Information of a child, we will delete such information in accordance with the Children’s Online Privacy Protection Act or other applicable laws. If you are a parent or guardian and you believe that your child under the age of 18 has provided us with Personal Information without your consent, please contact us at privacy@woodmark.com.

11. Email Communications

You may unsubscribe from our marketing email communications by clicking the “unsubscribe” link found in every commercial email we send, or by sending us a request to unsubscribe at privacy@woodmark.com. If you opt-out of receiving marketing email communications, we may still send you email messages related to your account or specific transactions with us. Unsubscribing yourself from our marketing communications will not affect our service to you.

12. Text Messages and Alerts - Opting In and Out

Some of our websites and brands may support text messaging.  If so, you have the choice to opt-in to receiving text/SMS messages and alerts on the mobile phone number(s) you provide to us. Once you have opted-in, we may send you text messages (i) regarding your account; (ii) to offer or recommend products to you; (iii) to investigate or prevent fraud; and (iv) to alert you in the event of an emergency.  We will not contact you via text messages or alerts for marketing purposes without your prior express written consent.  You do not have to opt-in to text messages and alerts to use and enjoy our websites, apps, or products.  If you opt-in, standard text messaging charges may apply.  For more information regarding our text messaging and alerts, please contact us at privacy@woodmark.com, 1-844-885-0940.

You may choose to opt-out from our text messages and alerts at any time using any reasonable means.  To directly opt-out, send us a text message from your mobile phone with the word STOP and we will unsubscribe you from text communications.  Once you opt-out, you will not receive any additional text messages via your mobile phone.  Please keep in mind that if you opt-out of receiving text messages and alerts we may not be able to contact you with important messages regarding your account.  However, if there is an emergency or account question, we will make every attempt to contact you in other ways, such as by email or on a landline phone.

13. Information Security

We have implemented appropriate and reasonable physical, technical, and administrative safeguards to help prevent unauthorized access to, use of, and disclosure of, your Personal Information. However, there is no perfect security, and we cannot guarantee the security of your Personal Information. Please do your part to help keep your Personal Information secure by maintaining the secrecy of any credentials used to access your account and reporting suspected unauthorized activity to us immediately.

14. Your California Privacy Rights

California residents may exercise certain privacy rights pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 and related regulations.  Your right to submit certain requests as a California resident are described below. Please note that these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms.

Right to Know Personal Information Collected About You: You have the right to know: (1) the categories of Personal Information we have collected about you; (2) the categories of sources from which the Personal Information is collected; (3) the business or commercial purpose for collecting, selling, or sharing Personal Information; (4) the categories of third parties to whom we disclose Personal Information; and (5) the specific pieces of Personal Information we have collected about you.  You also have the right to know the list of all third parties to whom we have disclosed personal information, as defined under California Civil Code Section 1798.83(e) (a/k/a the “Shine the Light Law”), during the preceding year for third party direct marketing purposes.  You may submit a request by calling us at 1-844-885-0940 or emailing us at privacy@woodmark.com

Right to Know Personal Information Disclosed, Sold or Shared and to Whom:  Since we sell, share and/or disclose your Personal Information, as described above, you have the right to request that we disclose to you: (1) the categories of Personal Information that we collected about you; (2) the categories of Personal Information that we sold or shared about you and the categories of third parties to whom the Personal Information was sold or shared, by category or categories of Personal Information for each category of third parties to whom the Personal Information was sold or shared; and (3) the categories of Personal Information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose. You may submit a request by calling us at 1-844-885-0940 or emailing us at privacy@woodmark.com.

Right to Request Deletion of Your Personal Information:  You have the right to request that we delete your Personal Information.  Following receipt of a request, we will let you know what, if any, Personal Information we can delete from our records.  If we cannot delete all of your Personal Information, we will let you know the reason. You may submit a request by calling us at 1-844-885-0940 or emailing us at privacy@woodmark.com.

Right to Correct Inaccurate Information:  If you believe that any of the Personal Information we maintain about you is inaccurate, you have the right to submit a request for us to correct that information.  Upon receipt of a request, we will use commercially reasonable efforts to correct the information as you direct.  You may submit a request by calling us at 1-844-885-0940 or emailing us at privacy@woodmark.com.

Right to Opt-Out of the Sale of Your Personal Information:  You may opt-out of the sale of your Personal Information by clicking here: [Do Not Sell My Personal Information Hyperlink].

Right to Limit the Use of Your Sensitive Personal Information.  Since we do not collect Sensitive Personal Information, this right does not apply to you. 

Right to Non-Discrimination for Exercising Your Rights: If you choose to exercise any of your rights, you have the right to not receive discriminatory treatment by us. 

When you make a request to know, delete and/or correct, to help protect your privacy and maintain security, we will take steps to verify your identity.  Our verification procedure may differ depending on whether you have an account with us or not and the request you are making.  The following generally describes the verification processes we use: 

Password Protected Accounts.  If you have a password-protected account with us, we may use existing authentication practices to verify your identity but will require re-authentication before disclosing, correcting or deleting data.  If we suspect fraudulent or malicious activity relating to your account, we will require further verification (as described below) before complying with a request to know or delete.

Verification for Non-Accountholders.  If you do not have, or cannot access, a password-protected account with us, we will generally verify your identity as follows:

  •  For requests to know categories of Personal Information, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you with reliable data points maintained by us.
  • For requests to know specific pieces of Personal Information, we will verify your identity to a reasonably high degree of certainty by matching at least three data points provided by you with reliable data points maintained by us.  We will also require a declaration, signed under penalty of perjury, that the person requesting the information is the person whose information is the subject of the request or that person’s authorized representative.  We will maintain all signed declarations as part of our records.
  • For requests to correct or delete Personal Information, we will verify your identity to a reasonable degree or a reasonably high degree of certainty depending on the sensitivity of the Personal Information and the risk of harm posed by unauthorized deletion.  We will act in good faith when determining the appropriate standard to apply.

If there is no reasonable method by which we can verify your identity, we will state so in response to a request to know or delete Personal Information, including an explanation of why we have no reasonable method to verify your identity.

If you use an authorized agent to submit a request to know, delete or correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; or (b) directly confirm with us that you provided the authorized agent permission to submit the request.  This requirement does not apply if you have provided the authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130.

We will respond to requests to know, requests to delete and / or delete no later than 45 calendar days.  If we cannot verify your request within 45 days, we may deny your request.  If necessary, we may take up to an additional 45 days to respond to your request but in such an event will provide you a notice and an explanation of the reason that we will take more than 45 days to respond to your request.

15. Your Rights if Your Are a Resident of Virginia

If you are a resident of Virginia, you have certain additional rights set forth below (except as noted).  Please note that these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms.

The Right to Know:  You have the right to know whether we are processing your Personal Information.

The Right of Access: You have the right to access your Personal Information, and to obtain a copy of it in a readily usable format, if feasible.

The Right to Correct Inaccuracies: You may request that inaccuracies in your Personal Information be corrected. 

The Right to Data Portability: You have the right to obtain a copy of your data in a portable and, if feasible, readily usable format.

The Right to Opt-Out: You may elect to prevent your Personal Information from being:

  •     Used in targeted advertising;
  •     Sold; or

*Used for profiling purposes that may produce legal or similarly significant effects.

Furthermore, in connection with your sensitive personal data if you are a resident of Virginia, we will not process sensitive personal data without obtaining your consent.

You may submit a request by calling us at 1-844-885-0940 or emailing us at privacy@woodmark.com.  Information requests under “Right of Access” will be transmitted securely. If we cannot fulfill your request, we will notify you of that decision and the reasons why within 45 days. At that point if you believe our decision was in error, you can submit an appeal using the method(s) above. If the result is the same, you can also seek assistance and/or redress from your state attorney general.

16. Nevada Privacy Notice

Nevada law provides that Nevada residents may opt-out of the “sale” of “covered information” to third parties, including but not limited to name, address, social security number, and online service activity.  You may submit a request to opt-out by calling us at 1-844-885-0940 or emailing us at privacy@woodmark.com.  We will respond to your request within 60 days.

17. Changes to Our Privacy Policy

We may change this Privacy Policy from time to time. It is your responsibility to review the Privacy Policy before using our websites or apps, or otherwise submitting Personal Information to us in order to understand the terms that apply at the time your Personal Information is collected.

18. How to Contact Us

If you have any questions or comments about how we collect or use your Personal Information, please feel free to contact us at the postal address below, via email to privacy@woodmark.com or by calling us at 1-844-885-0940.

American Woodmark Corporation
561 Shady Elm Road
Winchester, VA 22602

Last Updated:  May 17, 2023

Page topics

Personal Information We Collect About You

How We Collect Your Personal Information

Why We Collect Your Personal Information

Personal Information We Have Collected in the Past 12 Months, How and Why

Sale/Sharing of Personal Information

Disclosure to Our Service Providers

Our Retention Policy

Your California Privacy Rights

How to Contact Us

This Privacy Policy for California Employees and Job Applicants (“Privacy Policy”) of American Woodmark Corporation (“we”, “us” or “our”) describes our privacy practices regarding information we collect from our current employees and job applicants (“you” or “your”).  This includes the type of information that we gather, the way we use information and our policy regarding disclosing information to others. We reserve the right to change this Privacy Policy at any time.  If we change our Privacy Policy, we will post an updated version of it.  Please check back periodically to see if our Privacy Policy has been updated.  Updates to the Privacy Policy will be referenced by the "Last Updated" shown above.

1. Personal Information We Collect About You

Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. “Personal Information” does not include: (i) publicly available information or lawfully obtained, truthful information that is a matter of public concern; or (ii) information that is deidentified or aggregated consumer information. 

Sensitive Personal Information” means Personal Information that reveals information such as: (a) social security, driver’s license, state identification card, or passport number; (b) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) precise geolocation (within 1,850 feet); (d) racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of a consumer’s mail, email, and text messages unless we are the intended recipient of the communication; and (f) genetic data.  Sensitive Personal Information includes (x) biometric information processed for the purpose of uniquely identifying a consumer, (y) Personal Information collected and analyzed concerning a consumer’s mental or physical health and (z) Personal Information collected and analyzed concerning a consumer’s sex life or sexual orientation.  Sensitive Personal Information that is publicly available is not considered Sensitive Personal Information or Personal Information.

Please note that we may not collect all categories of Personal Information and Sensitive Personal Information that are referenced in the definitions, above.

As part of your employment at or job application with American Woodmark Corporation, we may collect the following categories of Personal Information about you:

A.  Personal Identifiers:

  • Name, alias, postal address, phone number, username and password for our website, IP address, email address;
  • Emergency contacts/next of kin information (such as name, relationship, telephone numbers, and email or mailing addresses);
  • Social Security Number; and
  • Signature.

B.  Protected Characteristics:

  • Nationality and immigration information (including information from related documents, such as your passport, driver’s license, or other identification);
  • Marital status and details of your spouse/partner, any dependents, and any beneficiaries.
  • Protected classifications under CA or federal law (such as ethnic origin, sexual orientation, age, health, and religious preferences);
  • Age (if over 40) and date of birth;
  • Information in your sickness and absence records (including sensitive personal data regarding your physical and/or mental health); and
  • Annual leave and other leave records, including details of the types of and reasons for leave being taken and related correspondence.

C.  Commercial Information:

  • Credit and other financial history obtained via background check; and
  • Health insurance information.

D.  Biometric Information:

  • Photographs;
  • CCTV footage; and

E.  Internet or Other Electronic Network Activity Information:

  • Information about your use of our information and communications systems.

F.  Geolocation Data.

  • CCTV footage location.

G.  Audiovisual information:

  • CCTV footage; and
  • Photographs.

H.  Education Information:

  • Recruitment information (such as skills, education, qualifications, references and other information included in a CV, application form, or cover letter).

I.  Professional, Employment-Related Information.

  • Recruitment information (such as skills, education, qualifications, references and other information included in a CV, application form, or cover letter);
  • Criminal records information including results of background checks obtained through government agencies such as the US Federal Bureau of Investigations;
  • Employment records (including engagement documents, employment contracts, start date, job positions/titles, department, employee ID, usernames and passwords used to access our systems, work history, working hours/time sheets, training records, and professional memberships);
  • Details of salary, bonus, benefits, payroll records, bank account details, and tax information;
  • Retirement and pension information (including details of your retirement accounts);
  • Annual leave and other leave records, including details of the types of and reasons for leave being taken and related correspondence;
  • Performance and appraisal information, including performance improvement plans, targets, and objectives;
  • Disciplinary and grievance information;
  • Training records;
  • Details from references or letters of support;
  • Any termination of employment documentation, including resignation letters, dismissal letters, redundancy letters, minutes of meetings, settlement agreements and related correspondence; and
  • Information about your use of our information and communications systems.

J.  Sensitive Personal Identifiers:

  • Social Security Number.

K.  Financial/Account Information:

  • Details of salary, bonus, benefits, payroll records, bank account details, and tax information;
  • Retirement and pension information (including details of your retirement accounts).

L.  Precise Geolocation:

  • CCTV footage.
  • Information about your use of our information and communications systems.

M.  Racial or Ethnic Origin, Religious/Philosophical Beliefs, or Union Membership:

  • Protected classifications under CA or federal law (such as ethnic origin, sexual orientation, age, health, and religious preferences).

N.  Contents of Written Communications:

  • Information about your use of our information and communications systems.

O.  Health Information:

  • Health insurance information;
  • Information in your sickness and absence records (including sensitive personal data regarding your physical and/or mental health); and
  • Protected classifications under CA or federal law (such as ethnic origin, sexual orientation, age, health, and religious preferences).

P.  Information Regarding Sex Life or Sexual Orientation:

  • Protected classifications under CA or federal law (such as ethnic origin, sexual orientation, age, health, and religious preferences).

2. How We Collect Your Personal Information

We collect your Personal Information in multiple ways, including:

A.  Directly from you;

B.  Automatically, such as when you visit our website or use our information and communications system in the course of your employment duties (e.g., cookies* on our websites), or through the use of CCTV and other security technologies; and

C.  When you provide one of our service providers with your Personal Information in the course of your employment.

3. Why We Collect Your Personal Information

We collect this information for a number of reasons, including:

A.  To process payroll;

B.  To address grievances;

C.  To provide you with employee benefits;

D.  For tax purposes;

E.  To comply with legal or regulatory requirements as required;

F.  To enhance workplace security and workforce efficacy; and

G.  For recruitment purposes.

4. Information We Have Collected in the Past 12 Months, How and Why

Subject to the disclosures made above, set forth below in chart format are the categories of Personal Information we have collected in the preceding 12 months, the categories of sources from which the Personal Information was collected and the purpose for the collection.

Category of Personal Information

Categories of Sources from which Personal Information Collected

Business or Commercial Purpose for the Collection

PERSONAL INFORMATION

Identifiers

See Sections 2.A to 2.C, above.

See Section 3.A to 3.G, above.

Protected Characteristics

See Sections 2.A, above.

See Section 3.C and 3.G, above

Commercial Information

See Sections 2.A and 2.B, above.

See Section 3.A, 3.C, and 3.G, above.

Biometric Information

See Sections 2.A and 2.B, above.

See Section 3.F, above.

Internet Information

See Sections 2.A to 2.C, above.

See Section 3.F, above.

Geolocation Data

See Sections 2.A to 2.C, above.

See Section 3.F, above.

Audiovisual information

See Sections 2.A and 2.B, above.

See Section 3.A and 3.F, above.

Professional or Employment-Related Information

See Sections 2.A and 2.C, above.

See Section 3.A to 3.G, above.

Education Information

See Sections 2.A and 2.C, above.

See Section 3.G, above.

SENSITIVE PERSONAL INFORMATION

Sensitive Personal Identifiers

See Sections 2.A and 2.C, above.

See Section 3.A, 3.C, 3.D, 3.E, and 3.G, above.

Financial/Account Information.

See Sections 2.A and 2.C, above.

See Section 3.A and 3.C, above.

Precise Geolocation

See Sections 2.A to 2.C, above.

See Section 3.F, above.

Racial or Ethnic Origin, Religious or Philosophical Beliefs, or Union Membership.

See Section 2.A, above.

See Section 3.E, 3.F, and 3.G, above.

Contents of Written communications

See Sections 2.A to 2.C, above.

See Section 3.B and 3.F, above.

Health Information

See Section 2.A, above.

See Section 3.C and 3.D, above.

Information Regarding Sex Life or Sexual Orientation

See Section 2.A, above.

See Section 3.E, 3.F, and 3.G, above.

* Information about cookies is located in our general privacy policy, available here.

5. Sale/Sharing of Personal Information

We do not sell or share for cross-context behavioral advertising your Personal Information.

6. Disclosure to Our Service Providers

We may also disclose your Personal Information with our contractors and service providers, in connection with their delivery of services to us.  For example, to process or deliver your orders, provide customer service, operate our websites and apps, improve our products and services, and for the purpose of ad targeting, remarketing, and customized advertising content. Our service providers are contractually prohibited from using your Personal Information except as necessary to perform services on our behalf.

The business purposes for which we disclose Personal Information include: 

  • Services on Our Behalf.  Including maintaining or servicing your employment with us.  We may disclose Personal Information in order to receive services performed on our behalf, including providing service for employees, processing or fulfilling requests and transactions, verifying employee information, processing payroll, expenses and payments, providing storage, or providing similar services on our behalf.

In the past 12 months, we have disclosed the following categories of Personal Information to our service providers and contractors for the following reasons:

Categories of Personal Information that We Disclose

Business Purposes for the Disclosure of Personal Information

PERSONAL INFORMATION

 

Identifiers

Services on Our Behalf

Protected Characteristics

Services on Our Behalf

Commercial Information

Services on Our Behalf

Biometric Information

Services on Our Behalf

Internet Information

Services on Our Behalf

Geolocation Data

Services on Our Behalf

Audiovisual Information

Services on Our Behalf

Professional or Employment-Related Information

Services on Our Behalf

Education Information

Services on Our Behalf

SENSITIVE PERSONAL INFORMATION

 

Sensitive Personal Identifiers

Services on Our Behalf

Financial/Account Information.

Services on Our Behalf

Precise Geolocation

Services on Our Behalf

Racial or Ethnic Origin, Religious or Philosophical Beliefs, or Union Membership.

Services on Our Behalf

Contents of Written communications

Services on Our Behalf

Health Information

Services on Our Behalf

Information Regarding Sex Life or Sexual Orientation

Services on Our Behalf

We may also disclose your Personal Information:

  • As necessary, for the following purposes: (a) to comply with any legal process; (b) to respond to requests from public and government authorities; (c) to enforce our terms and conditions or this privacy policy; (d) to protect our operations and protect our rights, privacy, safety or property, and/or that of you or others; and (e) to allow us to pursue available remedies or limit the damages that we may sustain.
  • To our insurers and professional advisers for the purposes of managing risks, obtaining professional advice, exercising or defending against legal claims, etc.
  • In connection with or during negotiation of any reorganization, acquisition, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

7. Our Retention Policy

We will retain each category of your Personal Information identified above for an amount of time that is reasonably necessary for us to use the information for the purposes disclosed herein and for any other permitted purposes, including retention of Personal Information pursuant to any applicable contract, law or regulation.  To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.

8. Your California Privacy Rights

California residents may exercise certain privacy rights pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 and related regulations.  Your right to submit certain requests as a California resident are described below. Please note that these rights are subject to certain exceptions and certain of these rights are subject to verification mechanisms.

Right to Know Personal Information Collected About You: You have the right to know: (1) the categories of Personal Information we have collected about you; (2) the categories of sources from which the Personal Information is collected; (3) the purpose for collecting Personal Information; (4) the categories of parties to whom we disclose Personal Information; and (5)  the specific pieces of Personal Information we have collected about you.  You may submit a request by calling us at 1-844-885-0940 or emailing us at hr@woodmark.com .

Right to Know Personal Information Disclosed and to Whom.  Since we disclose your Personal Information to our service providers, as described above, you have the right to request that we disclose to you: (1) the categories of Personal Information that we collected about you; and (2) the categories of Personal Information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose. You may submit a request by calling us at 1-844-885-0940 or emailing us at hr@woodmark.com.

Right to Request Deletion of Your Personal Information:  You have the right to request that we delete your Personal Information.  Following receipt of a request, we will let you know what, if any, Personal Information we can delete from our records.  If we cannot delete all of your Personal Information, we will let you know the reason. You may submit a request by calling us at 1-844-885-0940 or emailing us at hr@woodmark.com..

Right to Correct Inaccurate Information:  If you believe that any of the Personal Information we maintain about you is inaccurate, you have the right to submit a request for us to correct that information.  Upon receipt of a request, we will use commercially reasonable efforts to correct the information as you direct.  You may submit a request by calling us at 1-844-885-0940 or emailing us at hr@woodmark.com..

Right to Opt-Out of the Sale and Sharing of Your Personal Information:  Since we do not sell or share your Personal Information, this right does not apply to you.

Right to Limit the Use of Your Sensitive Personal Information:  California law authorizes California consumers (which includes employees) to limit the use of Sensitive Personal Information in certain context.  However, given our use of your Sensitive Personal Information, this right does not apply to you.

Right to Non-Discrimination for Exercising Your Rights: If you choose to exercise any of your rights, you have the right to not receive discriminatory treatment by us.  This includes the right not to be retaliated against for the exercise of your rights.

When you make a request to know, delete and/or correct, to help protect your privacy and maintain security, we will take steps to verify your identity.  Our verification procedure may differ depending on whether you have an account with us or not and the request you are making.  The following generally describes the verification processes we use: 

Password Protected Accounts.  If you have a password-protected account with us, we may use existing authentication practices to verify your identity but will require re-authentication before disclosing, correcting or deleting data.  If we suspect fraudulent or malicious activity relating to your account, we will require further verification (as described below) before complying with a request to know or delete.

Verification for Non-Accountholders.  If you do not have, or cannot access, a password-protected account with us, we will generally verify your identity as follows: 

  • For requests to know categories of Personal Information, we will verify your identity to a reasonable degree of certainty by matching at least two data points provided by you with reliable data points maintained by us.
  • For requests to know specific pieces of Personal Information, we will verify your identity to a reasonably high degree of certainty by matching at least three data points provided by you with reliable data points maintained by us.  We will also require a declaration, signed under penalty of perjury, that the person requesting the information is the person whose information is the subject of the request or that person’s authorized representative.  We will maintain all signed declarations as part of our records.
  • For requests to correct or delete Personal Information, we will verify your identity to a reasonable degree or a reasonably high degree of certainty depending on the sensitivity of the Personal Information and the risk of harm posed by unauthorized deletion.  We will act in good faith when determining the appropriate standard to apply.

If there is no reasonable method by which we can verify your identity, we will state so in response to a request to know or delete Personal Information, including an explanation of why we have no reasonable method to verify your identity.

If you use an authorized agent to submit a request to know, delete or correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; or (b) directly confirm with us that you provided the authorized agent permission to submit the request.  This requirement does not apply if you have provided the authorized agent with power of attorney pursuant to Probate Code sections 4121 to 4130.

We will respond to requests to know, requests to delete and / or delete no later than 45 calendar days.  If we cannot verify your request within 45 days, we may deny your request.  If necessary, we may take up to an additional 45 days to respond to your request but in such an event will provide you a notice and an explanation of the reason that we will take more than 45 days to respond to your request.

9. How to Contact Us

If you have any questions or comments about how we collect or use your Personal Information, please feel free to contact us at the postal address below, via email to hr@woodmark.com or by calling us at 1-844-885-0940.

American Woodmark Corporation
561 Shady Elm Road
Winchester, VA 22602