Effective Date: January 31, 2022
SCOPE OF THIS POLICY
WHAT IS PERSONAL INFORMATION?
We collect and maintain different types of personal information in respect of individuals with whom we interact. We collect personal information that you provide to us or that we otherwise obtain through both online and offline interactions. For example: we collect personal information online when you request information about or purchase a product through one of our websites, create an account on one of our websites, apply for a job with a Hydrofarm Group company through one of our websites, or subscribe to email newsletters and content and we collect personal information when you call our customer service center, register warranty information by mail, or otherwise interact with us without using any of our websites.
We may collect personal information that you provide when you:
- purchase, order, return or exchange any of our products and services online, over the telephone or in person;
- request a copy of an invoice;
- request a quote, special order or information about any of our products and services;
- contact our customer service staff;
- apply for employment;
- provide us with comments or suggestions; or
- visit our websites or any of our physical locations.
The personal information we collect includes the following:
- contact and identification information, such as name, address, telephone number and e-mail address;
- information concerning the products and services we provide to or receive from, you, including with respect to the service, maintenance and repair history of such products;
- credit and financial information such as payment methods and preferences, and billing and credit history;
- business relationship information, including information related to your agreements, preferences, advisors and decision-makers; and
- customer relationship information such as customer service requests and feed-back and information requested or provided by or from you.
We may also collect market-related information, which may include personal information, concerning market trends and activities impacting our business. This information may include contract terms, financial information and other information for the purpose of market analysis and strategic planning. We may also collect information related to our media, investor and public relations activities and information related to our interactions with financial and other analysts and advisors.
As a general rule, we collect personal information directly from you. In most circumstances where the personal information that we collect about you is held by a third party, we will obtain your permission before we seek out this information from such sources (such permission may be given directly by you, or implied from your actions). The third parties that we may collect information from include credit reporting agencies (for the purpose of conducting a credit check where you wish to obtain credit from us).
From time to time, we may utilize the services of third parties (including other members of the Hydrofarm Group) in our business and may also receive personal information collected by those third parties in the course of the performance of their services for us or otherwise. Where this is the case, we will take reasonable steps to ensure that such third parties have represented to us that they have the right to disclose your personal information to us.
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the personal information we collect to enable us to manage and develop our business and operations, including for the following purposes:
- to establish, maintain and manage relations with our customers (for example, we will use personal information to establish a customer’s identity and location so that we may accurately deliver and bill for products and services);
- to establish, maintain and manage relations with our suppliers;
- to analyze customer requirements for our products and services so that we may work to improve our products and services;
- to communicate with suppliers in order to improve the products and services supplied to us;
- to be able to inform you of products and services that members of the Hydrofarm Group, or third parties that we have carefully selected as partners, may wish to offer you, including sending you information promoting the products and services of those members or partners;
- to be able to comply with your requests;
- to verify your identity (for example, name, address, telephone number and birth date, if applicable);
- to verify creditworthiness;
- to protect us against error, fraud, theft and damage to our goods and property;
- to enable us to undertake our environmental, health and safety activities, including incident planning, response and investigation;
- to enable us to comply with applicable legal, audit or regulatory requirements (for example, we may collect personal information to satisfy the obligations imposed on us by various regulatory boards or agencies to follow procedures mandated by such boards or agencies in respect of the provision of our products and services); and
- any other reasonable business purpose to which you consent.
WHEN DO WE DISCLOSE YOUR PERSONAL INFORMATION?
Further, your personal information may be disclosed:
- as permitted or required by applicable law or regulatory requirements. In such a case, we will endeavor to not disclose more personal information than is required under the circumstances;
- to comply with valid legal processes such as search warrants, subpoenas or court orders;
- as part of our regular reporting activities to other members of the Hydrofarm Group, including Hydrofarm subsidiaries outside the United States or Canada;
- to protect the rights and property of the Company (for example, to collect a debt or to protect ourselves from fraud);
- when we require professional advice from financial or legal advisors;
- in an emergency that threatens an individual’s life, health, or personal security;
- when the personal information is available from a public source (for example, the telephone book); or
- with your consent, where such consent is required by law.
If you provide us with your email address, we may send you email messages to keep you informed of our promotions and offers by using your first and last name, postal code and email address. In order for us to provide you with these email messages, we may need to pass your name and contact information to our service providers who assist with the delivery of this email service. We may also use third party companies to authenticate and validate your email address. You may discontinue your receipt of future email communications by accessing the “manage your preferences or unsubscribe” link at the end of the email communication received and changing the preferences for the applicable content and/or email communication.
Our policies prohibit our service providers from using your information for any purpose other than how we instruct them. Therefore, if you sign up for our email newsletters or other email communications, you should not receive unsolicited emails from other companies. Please notify us at the address below if you believe this has occurred.
YOUR CONSENT IS IMPORTANT TO US
It is important to us that where we collect, use or disclose your personal information we have your consent to do so. Depending on the sensitivity of the personal information, your consent may be implied, deemed (using an opt-out mechanism) or express. Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from your action or inaction. For example, when you accept our products or services, we will assume your consent to the collection, use and disclosure of your personal information for purposes related to your acceptance and use of those products or services, or for other purposes identified to you at the relevant time.
As we have described above, we may collect, use or disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law or regulatory requirements.
CHOICE / OPT-OUT
We may participate in interest-based and behavioral advertising. We allow third-party companies, such as ad networks, to collect certain information when you visit our websites. This information is used to serve ads for our products, or for the products or services of other companies when you visit our websites or other third-party websites. These third-party companies use non-personally identifiable information (e.g., click stream information, browser type, time and date, subject of advertisements clicked or scrolled over, cookie and session ID) and personally identifiable information (e.g., static IP address) when you access websites in order to provide advertisements about products and services likely to be of greater interest to you, or advertising-related services, such as ad delivery, reporting, attribution, analytics, and market research. These third-party companies typically use a cookie, web beacon, or other similar tracking technologies to collect this information.
To learn more about interest based advertising or the available opt-out for this type of advertising, visit the Network Advertising Initiative website and the Digital Advertising Alliance website. Options you select are browser and device specific. To learn about opting out of Google Analytics, visit the Google Analytics website.
We endeavor to maintain physical, technical and procedural safeguards that are appropriate to the sensitivity of the personal information in question. These safeguards are designed to prevent your personal information from loss and unauthorized access, copying, use, modification or disclosure. We will also use appropriate security measures when destroying personal information, and instead of destroying or erasing your personal information, may make it anonymous such that it cannot be associated with or tracked back to you.
FOR RESIDENTS OF CALIFORNIA
THIS SECTION APPLIES TO RESIDENTS OF CALIFORNIA
The Hydrofarm Group collects information only from any individual acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit institution, or government agency in the context of providing or receiving a product or service from the Hydrofarm Group.
The California Consumer Privacy Act of 2018 (“CCPA”) requires that certain information be provided to you as a California resident relating to certain rights that you have under the CCPA.
RIGHT TO OPT-OUT
We do not sell your personal information; however, we are required to let you know that you have the right to opt-out of the sale of your personal information if we ever engage in such activity.
RIGHT TO NONDISCRIMINATION
We will not discriminate against you for exercising your rights under the CCPA, such as denying you products and services, charging you different rates or prices including use of discounts or penalties, or suggesting or providing a different level of service or quality of products to you. However, we may charge a different price or provide a different level or quality of products and services only if the price or difference is directly related to the value provided to you by your personal information.
To submit a request to exercise any of your rights, please contact us at firstname.lastname@example.org and add “CCPA REQUEST” in the subject line. We will evaluate the request and take action where required to do so.
We will endeavor to respond to your request as soon as we can. If we are not able to respond to your request within 45 days, we will let you know that we may require additional time (up to 90 total days).
FOR CANADIAN RESIDENTS
THIS SECTION APPLIES TO RESIDENTS OF CANADA
For Canadian residents, you can ask to see the personal information that we hold about you. If you want to review, verify or correct your personal information, please contact us using the contact information set out below.
When requesting access to your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you. We will make the requested information available within 30 business days, or provide written notice of an extension where additional time is required to fulfill the request. We may charge you a minimal fee to access your personal information, however, we will advise you of any fee in advance.
Your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, the personal information may have been destroyed, erased or made anonymous in accordance with our record retention obligations and practices. In the event that we cannot provide you with access to your personal information, we will endeavor to inform you of the reasons why, subject to any legal or regulatory restrictions.
We do not knowingly collect or solicit any information from anyone under the age of 18. In the event that we learn that we have inadvertently collected personal information from an individual under the age of 18, we will delete that information. If you believe that we might have any information from an individual under 18, please contact us at email@example.com