California Privacy Policy

This Privacy Policy for California Residents (“California Privacy Policy”) supplements the information contained in Pella Corporation’s primary privacy policy. Pella Corporation as referenced herein (“Pella”), includes but is not limited to subsidiaries and other owned entities such as Bonelli Enterprises, LLC and PWD – HSC, LLC. We have adopted this California Privacy Policy in accordance with the notice requirements for consumers under the California Consumer Privacy Act of 2018, as amended (“CCPA”), and any terms defined in the CCPA have the same meaning when used in this California Privacy Policy.

This California Privacy Policy applies to information Pella collects through various means including websites, our mobile app(s) and information collected through other channels, such as over the phone or in person.

The CCPA includes definitions for terms specific to this California Privacy Policy that do not apply to Pella’s privacy policy, including the following terms:

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information does not include publicly available information obtained from government records; deidentified or aggregated consumer information that cannot be reconstructed to identify you; any information covered under the Gramm-Leach-Bliley Act or the California Financial Information Privacy Act, activities covered by the Fair Credit Reporting Act, or protected health information as defined under the Health Insurance Portability and Accountability Act.

“Sale” or “sell” means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to another business or a third party for monetary or other valuable consideration.

“Service Provider” means a sole proprietorship, partnership, limited liability company, corporation, association, or other legal entity that is organized or operated for the profit or financial benefit of its shareholders or other owners, that processes information on behalf of a business and to which the business discloses a consumer’s Personal Information for a business purpose pursuant to a written contract.

“Third Party” means a person or entity who is not a business that collects Personal Information from consumers, as defined in the CCPA, and to whom the business discloses a consumer’s Personal Information for a business purpose pursuant to a written contract.

The chart below shows the categories of Personal Information we may collect; examples of the type of Personal Information in each category; types of sources from which each category of Personal Information is collected; the business purpose(s) for which that category of Personal Information is collected; and types of third parties with whom that category of Personal Information is shared. As this chart shows, we disclose certain Personal Information to third parties for a business purpose. We sell, share and disclose certain Personal Information to third parties. This information covers the past 12 months.

Any or all of the data above may be shared with external legal counsel as deemed necessary in the event of litigation or other legal related matters.

We will not collect a category of Personal Information not listed above, or use any Personal Information collected in any of the above categories for a business purpose not listed above, without first providing you with notice.

You have the right to request certain information regarding the Personal Information we have collected about you in the preceding 12 months. You may make such a request up to twice in a 12-month span. Please note that there are circumstances in which we may not be able to comply with your request pursuant to the CCPA, including when we cannot verify your request and/or when there is a conflict with our own obligations to comply with other legal or regulatory requirements. We will notify you following submission of your request if this is the case.

• If you would like to request (1) the categories of Personal Information collected about you; (2) the categories of sources providing that Personal Information; (3) the categories of third parties with whom we have shared that Personal Information; and (4) the business purpose for collecting that Personal Information, click here or call 1-877-473-5527. The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.
  
• If you would like to request the specific pieces of Personal Information we collected about you, click here or call 877-473-5527. The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.
  
• If the business shared/sold or disclosed for a business purpose Personal Information: If you would like to request (1) the categories of Personal Information collected about you; (2) the categories of Personal Information sold; (3) the categories of third parties to whom the information was sold; and (4) the categories of Personal Information that were disclosed for a business purpose, click here or call 1-877-473-5527. The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.
  

In order to authenticate your identity for any data related request, at a minimum, three pieces of identifying information will be required to be provided such as name, address, email address and phone numbers. This information will be included with your request or we may contact you after we receive your request and ask for additional information. In the event that a Pella account has been previously created, your username and password may be utilized to authenticate your identity.

We will not discriminate against you if you exercise any of the rights provided by the CCPA set forth in this California Privacy Policy. Please note that a legitimate denial of a request for information, deletion, or to opt-out is not discriminatory, nor is charging a fee for excessive or repetitive consumer requests as permitted by the CCPA.

However, we may provide financial incentives to consumers who allow us to collect, retain and disclose their Personal Information through marketing lead generation activities such as sweepstakes. These incentives may include payments to consumers, a lower price for goods or services, and/or a higher level of goods or services.

We provide the following incentive program:

• Sweepstakes – which require participants to provide unique identifiers such as name and email address in exchange for the chance to win a specified prize, a lower price for goods or services, and/or higher level of goods or services.

You may choose not to participate in the incentive program. If you have previously opted-in to the incentive program above and wish to opt-out, please click here or call 1-877-473-5527.

Our incentive program is permissible under the CCPA because the value of the incentive program is directly related to the value provided to the business by lead generation. We estimate the value of the aggregated pool of participant’s personal information provided as part of the incentive program to be on average at least $10,000, and we arrived at that figure by averaging the estimated value of the typical sweepstakes prize.

You have the right to request that we delete certain Personal Information that we have collected. Please note that there are circumstances in which we may not be able to comply with your request pursuant to the CCPA, including when we cannot verify your request and/or when there is a conflict with our own obligations to comply with other legal or regulatory requirements. We will notify you following submission of your request if this is the case.

• If you would like to request that we delete your Personal Information pursuant to the requirements of the CCPA, click here or call 1-877-473-5527. The link will take you to an interactive webform that you can complete and submit to make a request for deletion that we will then verify; if you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request.

You may designate an authorized agent to exercise your rights under the CCPA on your behalf.

Pursuant to the CCPA:

• Only a business entity or natural person registered with the California Secretary of State may act as an authorized agent.
• You must provide the authorized agent written permission to exercise your rights under the CCPA on your behalf.
• We may deny a request from an authorized agent on your behalf if the authorized agent does not submit proof that he, she, or it has been authorized by you to act on your behalf if we request such proof, as permitted by the CCPA.
• Even if you use an authorized agent to exercise your rights under the CCPA on your behalf, pursuant to the CCPA we may still require that you verify your own identity directly to us. This provision does not apply if you have provided with a power of attorney under California Probate Code sections 4000 to 4465.

We are proud of our websites and mobile applications and we strive to ensure that they don’t offend people of any age. However, our websites and mobile applications are not intended for children or minors under the age of sixteen years. Accordingly, we do not store information from minors under the age of sixteen years. If you believe that a child has submitted personal information to us, please contact us at pellawebsupport@pella.com.

You have the right to request that we do not sell Personal Information that we have collected. If you exercise that right, please note that pursuant to the CCPA we may have to subsequently inform you that you need to opt-in if the sale of your Personal Information is required to complete a transaction you have initiated. If opting-in is required, we will provide you with the necessary instructions.

• If you would like to request that we do not sell your Personal Information pursuant to the requirements of the CCPA, click here or call 1-877-473-5527. The link will take you to an interactive webform that you can complete and submit to make a request for deletion; if you use the telephone number, you will be guided through a process that will allow you to submit a request.
• If you use an authorized agent to submit your request to opt-out, we will request that the agent provide us with proof that he, she, or it has been authorized by you to act on your behalf. The CCPA requires you to provide the authorized agent written permission to exercise your rights under the CCPA.

If you opt-out of the sale of your Personal Information, we will wait at least 12 months before asking you if we may sell your Personal Information.

You have the right to opt-in to the sale of your Personal Information after you have opted out. If you would like to opt-in to the sale of your Personal Information, click here or call 1-877-473-5527. Opting-in is a two-step process in which you will first clearly request to opt-in, and then separately confirm that choice.

If you would like additional information regarding our California Privacy Policy, please call 1-877-473-5527.

California Civil Code Section § 1798.83 permits users of our web site that are California residents to request certain information regarding our disclosure of personal information to other parties for their direct marketing purposes. To make such a request, please send an email to pellawebsupport@pella.com with the subject “Shine the Light Request.”

You may view our main privacy policy here or contact us at pellawebsupport@pella.com or 1-877-473-5527 with any questions.

Pella Corporation reserves the right to amend this California Privacy Policy at our discretion and at any time. When we make changes to this California Privacy Policy, we will post an updated notice on our website with the effective date.

This Supplemental Privacy Policy and Notice (“Supplemental Policy”) applies only to information collected about consumers residing in California, Colorado, Virginia, Utah, or Connecticut (“consumer(s),” “Consumer(s),” “you,” “your”) and supplements the information contained our primary Privacy Policy. It provides information required under the California Consumer Privacy Act of 2018 and as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), the Colorado Privacy Act of 2021 (the “CPA”), the Virginia Consumer Data Protection Act of 2021 (the “VCDPA”), the Utah Consumer Privacy Act of 2022 (the “UCPA”), and the Connecticut Data Privacy Act of 2022 (“CDPA”) and any and all regulations arising therefrom.

This Supplemental Policy describes the practices of Pella Corporation and its subsidiaries’ (“Pella,” “we,” “us,” or “our”) regarding the collection, use, and disclosure of personal information and provides instructions for submitting data subject requests. Some portions of this Supplemental Policy apply only to consumers of particular states, and we have indicated where those portions are state-specific.

If you are unable to review or access this Supplemental Policy due to a disability, you may contact Pella at privacy@pella.com or (800)728-1017 to access this Supplemental Policy in an alternative format.

“Consumer” means a natural person who resides in California, Colorado, Virginia, Utah and Connecticut and to whom we offer information, goods, or services. For purposes of this Supplemental Policy, this term includes natural persons who reside in California and engage with us as part of business-to-business transactions.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or household. Personal Information includes “personal data” as that term is defined in the CPA, VCDPA, UCPA, and CDPA. Personal Information also includes “Sensitive Personal Information,” as defined below.

“Sensitive Personal Information” means Personal Information that reveals a Consumer’s: 1) Social security, driver’s license, state identification card, or passport number; 2) Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to the individual’s account; 3) Precise geolocation; 4) Racial or ethnic origin; 5) Religious beliefs; 6) Union membership; 7) Contents of email or text messages, unless we are the intended recipient; 8) Genetic data; 9) Biometric information used to uniquely identify the Consumer, and 10) Health, sex life, or sexual orientation. Sensitive Personal Information includes “sensitive data” as that term is defined in the CPA, VCDPA, UCPA, and CDPA.

“Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s Personal Information to a Third Party for money or other valuable consideration.

“Share,” “Shared,” or “Sharing” means transferring an individual’s Personal Information to a Third Party for behavioral advertising purposes, whether or not for money or other valuable consideration.

“Third Party” means a person or organization which is not a Consumer, Vendor, or an entity owned or controlled by us and as defined by the CCPA, CPA, VCDPA, UCPA, and CDPA.

“Vendor” means a “service provider,” “contractor,” or “processor” which collects, stores, or otherwise handles data for us, as those terms are defined in the CCPA, CPA, VCDPA, UCPA, and CDPA.

These definitions apply, whether terms are capitalized or not. Other terms used in this Supplemental Policy may be defined under the CCPA, CPA, VCDPA, UCPA, or CDPA, and they shall have the meanings described in those statutes. If there are variations between such definitions in different laws, you will be covered by the definition that applies in your state. For example, if you are a Virginia consumer, terms defined in the VCDPA shall apply to you if they are used in this Supplemental Policy.

The chart below shows the categories of personal information we may collect; examples of personal information in each category; types of sources from which each category of personal information is collected; the business purposes for which each category of personal information is collected; and the types of Vendors or Third parties with whom that category of personal information is shared. As this chart shows, we may [share personal information to Third Parties or] disclose certain personal information to Vendors for business purposes.

Sensitive Personal Information We Collect and Disclose

We intend to retain each category of personal information described above only for as long as necessary to fulfill the purpose for which it was collected, or a related and compatible purpose consistent with the average consumer’s expectation, and to comply with applicable laws and regulations. We consider the following criteria when determining how long to retain personal information: why we collected the personal information; the nature of the personal information; the sensitivity of the personal information; our legal obligations related to the personal information, and risks associated with retaining the personal information.

California, Colorado, Virginia, Utah, and Connecticut consumers have certain rights with respect to the collection and use of their personal information. Those rights vary by state. As required by the CCPA, we provide detailed information below regarding the data subject rights available to California consumers. Consumers in Colorado, Virginia, Utah, and Connecticut have similar rights and can find more detail by referencing the CPA, VCDPA, UCPA, or CDPA, as applicable.

You have the right to submit requests related to the personal information we have collected about you. You may make such a request twice in a 12-month span. Please note, there are circumstances when we may not be able to comply with your request. For example, we may not be able to verify your request, or we may find that providing a full response conflict with other legal obligations or regulatory requirements. We will notify you if this is the case.

Right to Receive Information on Privacy Practices.

You have the right to receive the following information at or before the point of collection:

• The categories of personal information to be collected;
• The purposes for which the categories of personal information are collected or used;
• Whether or not that personal information is sold or shared with Third Parties or disclosed to Vendors;
• If the business collects Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is sold or shared; and
• The length of time the business intends to retain each category of personal information, or if that is not possible, the criteria used to determine that period.

We have provided such information in this Supplemental Policy, and you may request further information about our privacy practices by using the contact information provided below.

Right Know and Right to Access

You have the right to request certain information we have collected about you. You have the right to request:

• Specific pieces and categories of personal information we collected about you;
• The categories of sources from which personal information was collected;
• The purposes for which personal information was collected, shared, sold, or processed;
• The categories of personal information we shared, sold or disclosed; and
• The categories of Vendors or Third Parties with whom we shared, sold or disclosed personal information.

Right to Delete.

You have the right to request that we delete certain personal information that we have collected.

Right to Correct

You have a right to request that we correct any inaccurate personal information we may retain about you.

Right to Opt-Out of the Sale and Sharing of Your Personal Information

You have the right to opt-out of the sale and sharing of your personal information with Third Parties, and the right to opt out of the processing of personal information for targeted advertising purposes, as defined in the CCPA, CPA, VCDPA, UCPA, and CDPA.

SELL/SHARE/PROCESS PERSONAL INFORMATION

We sell and share personal information, or process personal information for targeted advertising purposes. In the past 12 months, we have sold or shared the categories of consumer personal information as listed in this Supplemental Policy. As a consumer, you have the right to opt-out of the sale and/or sharing of your personal information and of the processing of personal information for the purpose of targeted advertising. To submit an opt-out request, please access the below link or follow the “Instructions to Exercise Your Rights,” below. We do not knowingly sell or share personal information of consumers under 16 years of age.

Update Contact Preferences: “Do Not Sell or Share My Personal Information”

If you opt-out of the sale of your personal information, we will wait at least 12 months before asking you if we may sell or share your personal information.

You have the right to opt-in to the sale of your personal information after you have opted out. If you would like to opt-in to the sale or sharing of your personal information, please email us at privacy@pella.com or call us at 1-800-728-1017. Opting-in is a two-step process in which you will first clearly request to opt-in, and then separately confirm that choice.

Right to Consent to or Limit the Use of Your Sensitive Personal Information.

You have the right to consent to the use of your Sensitive Personal information in CO, CT, VA and UT. Separately, you have the right in CA to instruct us to limit the use and disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods reasonably expected by an average consumer or for specific business purposes defined by law.

USE SENSITIVE PERSONAL INFORMATION OTHER THAN AS LISTED IN THE CCPA:

We use Sensitive Personal Information with your consent, and for the purposes listed in Section D. In CA, you have the right to further limit the use of your Sensitive Personal Information to the purposes authorized by the CCPA. To submit a request to limit the use of your Sensitive Personal Information, please access the below link.

Right to Non-discrimination.

You have a right to exercise the above rights, and we will not discriminate against you for exercising these rights. Please note that a legitimate denial of a request to access, delete, or opt-out is not discriminatory, nor is charging a fee for excessive or repetitive requests.

Instructions to Exercise your Rights.

If you would like to make any of the data requests listed above, please click Update Contact Preferences or call us at 1-800-728-1017. The link will take you to an interactive webform that you can complete and submit to make a request for information that we will then verify. If you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request, and the level of verification will depend on the request being submitted. You may also submit a request by emailing us at privacy@pella.com.

You may designate an authorized agent to exercise your rights under the CCPA on your behalf. Such individual must have power of attorney, or be an authorized agent registered with the relevant Secretary of State.

Right to Appeal for California, Virginia, Colorado, and Connecticut Consumers.

You have the right to appeal our decisions about your data subject requests. If you choose to appeal, your request will move from Operations to our Legal Department for review. If you would like to appeal a decision regarding your data request, please click Update Contact Preferences or call 1-800-728-1017. Please state that your request is an “Appeal,” and describe the date and nature of your original request.

Verification Process

When you submit a request to exercise your data subject rights, we may ask you to provide information that will enable us to verify your identity.

If you designate an authorized agent to exercise your rights on your behalf, we may require that you or the authorized agent do the following:

• Verify your identity with us directly.
• Provide proof of your signed written permission for the authorized agent to submit a request on your behalf.

We may deny a request from an agent purportedly acting on your behalf if we request, and the agent does not submit, proof that he, she, or it has been authorized by you to act on your behalf.

Personal Information of Minors

Our online content is not intended for children or minors under the age of sixteen years. Accordingly, we do not knowingly store information from minors under the age of sixteen years, except as required by applicable law. If you believe that a child has submitted personal information to us, please contact us at privacy@pella.com and we will delete the information.

Additional California Privacy Rights

Shine the Light Request. California Civil Code Section § 1798.83 permits users of our website who are California residents to request information about our disclosure of personal information to other parties for their direct marketing purposes. To make such a request, please send an email to privacy@pella.com
with the subject “Shine the Light Request.”

Financial Incentives for California Consumers/Contractors Under California law, we may provide financial incentives to California Business to Business contractors (defined as Product Dealers, Installers, and Service Professionals) who allow us to collect, retain, or share personal information collected from Consumers on Pella’s behalf. These contractors may receive incentives that may include monetary payments, program rewards, and/or a higher level of goods or services.

Changes to Our Supplemental Policy

Pella reserves the right to amend this Supplemental Policy at our discretion and at any time. When we make changes to this Supplemental Policy, we will post an updated policy on our website with the effective date.

Additional Information

If you would like additional information regarding our Supplemental Policy, please contact us at privacy@pella.com or 1-800-728-1017.

Pella Corporation

102 Main Street

Pella, IA 50219

Return to the start of our Supplemental Policy.

This California Employee Privacy Policy and Notice (“this Policy”) applies only to information collected about applicants, current employees, and past employees residing in California (“employee(s),” “you,” “your”) and supplements the information contained in our primary Privacy Policy, and your employee handbook. It provides information required under the California Consumer Privacy Act of 2018 and as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), and related regulations.

This Policy describes the practices of Pella and its subsidiaries’ (“Pella,” “we,” “us,” or “our”) regarding the collection, use, and disclosure of personal information and provides instructions for submitting data subject requests.

If you are unable to review or access this Policy due to a disability, you may contact Pella at hrservice@pella.com or call 1-877-444-6947 to access this Policy in an alternative format.

"Personal Information" means information that identifies, relates to describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal Information also includes "Sensitive Personal Information", as defined below.

"Sensitive Personal Information" means Personal Information that reveals an individual's: 1) Social security, driver's license, state identification card, or passport number; 2) Account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to the individual's account; 3) Precise geolocation; 4) Racial or ethnic origin; 5) Religious beliefs; 6) Union membership; 7) Contents of email or text messages, unless we are the intended recipient; 8) Genetic data; 9) Biometric information used to uniquely identify the individual, and 10) Health, sex life, or sexual orientation.

“Sell,” “Sale,” or “Sold” means renting, releasing, or transferring an individual’s Personal Information to a Third Party for money or other valuable consideration.

“Share,” “Shared,” or “Sharing” means transferring an individual’s Personal Information to a Third Party for behavioral advertising purposes, whether or not for money or other valuable consideration.

"Third Party" means a person or organization which is not a consumer applicant, employee, former employee, Vendor, or an entity owned or controlled by us and as defined by the CCPA.

"Vendor" means a "service provider", or "contractor", which collects, stores, or otherwise handles data for us, as those terms are defined in the CCPA.

These definitions apply, whether terms are capitalized or not. Other terms used in this Policy may be defined under the CCPA, and they shall have the meanings described therein.

The chart below shows the categories of personal information we may collect; examples of personal information in each category; types of sources from which each category of personal information is collected; the business purposes for which each category of personal information is collected; and the types of Vendors or Third parties with whom that category of personal information is shared. As this chart shows, we may share or sell personal information to Third Parties or disclose certain personal information to Vendors for business purposes.

Sensitive Personal Information We Collect and Disclose

We intend to retain each category of personal information described above only for as long as necessary to fulfill the purpose for which it was collected, or a related and compatible purpose consistent with the average person’s expectation, and to comply with applicable laws and regulations. We consider the following criteria when determining how long to retain personal information: why we collected the personal information; the nature of the personal information; the sensitivity of the personal information; our legal obligations related to the personal information, and risks associated with retaining the personal information.

Subject to certain limitations, if you are a California resident, you have the right to submit requests related to the personal information we have collected about you. You may make such a request twice in a 12- month span. Please note, there are circumstances when we may not be able to comply with your request. For example, we may not be able to verify your request, or we may find that providing a full response conflicts with other legal obligations or regulatory requirements. We will notify you if this is the case.

Right to Receive Information on Privacy Practices.

You have the right to receive the following information at or before the point of collection:

• The categories of personal information to be collected;
• The purposes for which the categories of personal information are collected or used;
• Whether or not that personal information is sold or shared with Third Parties or disclosed to Vendors;
• If the business collects Sensitive Personal Information, the categories of Sensitive Personal Information to be collected, the purposes for which it is collected or used, and whether that information is Sold or Shared; and
• The length of time the business intends to retain each category of personal information, or if that is not possible, the criteria used to determine that period.

We have provided such information in this Policy, and you may request further information about our privacy practices by using the contact information provided below.

Right to Know and Right to Access.

You have the right to request certain information we have collected about you. You have the right to request:

• Specific pieces and categories of personal information we collected about you;
• The categories of sources from which personal information was collected;
• The purposes for which personal information was collected, shared, sold, or processed;
• The categories of personal information we shared, sold or disclosed; and
• The categories of Vendors or Third Parties with whom we shared, sold or disclosed personal information.

Right to Delete.

You have the right to request that we delete certain personal information that we have collected.

Right to Correct.

You have a right to request that we correct any inaccurate personal information we may retain about you.

Right to Opt-Out of the Sale and Sharing of Your Personal Information.

You have the right to opt-out of the sale and sharing of your personal information with Third Parties. However, we do not sell or share person information about applicants, employees or former employees with Third Parties. We also do not knowingly sell or share personal information of any individuals under 16 years of age.

Right to Limit the Use of Your Sensitive Personal Information.

You have the right to instruct us to limit the use and disclosure of your Sensitive Personal Information. As shown in the grid above, however, we only use Sensitive Personal Information of applicants, employees, and former employees to comply with employment law and perform normal business functions reasonably expected by average employees, or for specific business purposes defined by applicable law.

Right to Non-discrimination.

You have a right to exercise the above rights and we will not discriminate against you for exercising these rights. Please note that a legitimate denial of a request to access, delete, correct or opt-out is not discriminatory, nor is charging a fee for excessive or repetitive requests.

Instructions to Exercise your Rights.

If you would like to make any of the data requests listed above, please email us at hrservice@pella.com or call us at 1-877-444-6947. If you use the telephone number, you will be guided through a process that will allow you to submit a verifiable request, and the level of verification will depend on the request being submitted. You may also submit a request by emailing us at hrservice@pella.com or calling 1-877-444-6947.

You may designate an authorized agent to exercise your rights under the CCPA on your behalf. Such individual must have power of attorney, or be an authorized agent registered with the relevant Secretary of State.

Right to Appeal.

If you submit a request under this Policy and it is denied, you have the right to appeal that decision. If you choose to appeal, your request will move from Human Resources to our Legal Department for review.If you would like to appeal a decision regarding your data request, please email us at hrservice@pella.com or call 1-877-444-6947. Please state that your request is an “Appeal,” and describe the date and nature of your original request.

Verification Process

When you submit a request to exercise your data subject rights, we may ask you to provide information that will enable us to verify your identity.

If you designate an authorized agent to exercise your rights on your behalf, we may require that you or the authorized agent do the following:

• Verify your identity with us directly.
• Provide proof of your signed written permission for the authorized agent to submit a request on your behalf.

We may deny a request from an agent purportedly acting on your behalf if we request, and the agent does not submit, proof that he, she, or it has been authorized by you to act on your behalf.

Personal Information of Minors

We may store information from minors under the age of sixteen years only as required by applicable law for beneficiary reasons. If you believe that a child has submitted personal information to us outside of this narrow use, please contact us at hrservice@pella.com or 1-877-444-6947 and we will delete the information.

Additional California Privacy Rights

Shine the Light Request. California Civil Code Section § 1798.83 permits users of our website who are California residents to request certain information regarding our disclosure of personal information to other parties for their direct marketing purposes. To make such a request, please email us at hrservice@pella.com with the subject “Shine the Light Request” or call us at1-877-444-6947.

Changes to Our California Employee Privacy Policy

Pella reserves the right to amend this Policy at our discretion and at any time. When we make changes to the Policy, we will post an updated policy at Home - Human Resources (sharepoint.com) with the effective date.

Additional Information

If you would like additional information regarding this Policy, please contact us at hrservice@pella.com, 1-877-444-6947, or

Attn: HR Service Center

Pella Corporation

102 Main Street

Pella, IA 50219

Return to the start of this policy.