Your privacy is important to Specialty Building Products.  This notice describes our privacy policy. 

 

“Specialty Building Products,” “we,” “us” or “ours” refers to Specialty Building Products, Inc., and its affiliates and subsidiaries. 

 

This Privacy Policy lets you know how your personal data may be used by us.  The term "personal data" refers to any information relating to an identified or identifiable individual, or as otherwise defined under applicable data privacy laws and regulations.

 

Please read this Privacy Policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your  personal data in connection with our website located at www.specialtybuildingproducts.com and any websites of our affiliates or subsidiaries, including, but not limited to, www.uslumber.com, www.alexandriamoulding.com, www.reeb.com, www.amerhart.com, www.dwdistribution.com, www.millworksales.com, and www.mySBP.com (collectively, the “Websites”).

 

By using any of our Websites, you consent to the collection and use of your personal data as described in this Privacy Policy. You may withdraw consent at any time, as described in this Privacy Policy.

 

What Personal Data We Collect

 

Information You Give Us: We may receive and store any information you enter on or through the Websites, or information you may give to us in any other way. This information will normally include, for example:

• Information you submit when creating an account and/or profile with us, such as your name, address, email address, phone number, credit card information, names and contact information of people to whom your purchases have been shipped (including addresses and phone numbers and other contact information).

• Information you generate or submit when you search on the Websites, order through the Websites, or communicate or make inquiries via the Websites, to the extent such services are available.

• Any other information you generate or submit in the course of using any available services provided on or through the Websites (“the Services”).

 

Please note that if you choose not to provide us with personal data, we may not be able to provide you with product, service or information you requested.  When you provide us with your contact information in connection with an activity, product or service, you expressly consent to our communicating with you about our products or services.

 

Automatic Information: We may receive and store certain types of information automatically whenever you interact with us.  For example, like many websites, we may use “cookies.”  Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow) that enable the site's or service provider's systems to recognize your browser and capture and remember certain information. Examples of the information we might collect and analyze include:

 

• The Internet protocol (IP) address used to connect your computer to the Internet.

• Computer and connection information, such as browser type, version, and time zone setting.

• Browser plug-in types and versions, operating system, and platform.

• Purchase history.

• The full Uniform Resource Locator (URL) clickstream to, through, and from the Websites, including date and time and cookie number.

• Products and services you viewed or searched for.

• Browser data such as cookies or similar data on certain parts of our Websites for fraud prevention and other purposes.

• Session information, including page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), using software tools such as JavaScript and similar tools.

• We may also collect technical information to help us identify your device for fraud prevention and diagnostic purposes.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings.

 

If you turn cookies off, some features and functionality of the Websites may be limited or disabled.

 

Information from Other Sources: We might receive information about you from other sources and add it to our account information. Some examples of the information we might receive include:

• Updated delivery and address information from our carriers or other third parties, which we use to correct our records and deliver your next purchase or communication more easily.

• Credit history information from credit bureaus, which we use to help prevent and detect fraud and to offer certain credit or financial services to some customers.

 

How We May Use Personal Data

 

How We Use Your Information: We may use the information we collect from you in the following ways:

• To allow us to better service you in responding to your customer service requests.

• To take, verify, process and deliver your order and process and obtain payment. 

• To ask for ratings and reviews of services or products.

• To send you notices from time to time relating to your account, your purchases and orders.

• To determine your geographical location for compliance, security, and fraud prevention purposes.

• To provide you, to the extent permitted by applicable law, with a personalized shopping experience.

• For warranty, technical support or similar purposes.

• To follow up with you after correspondence (live chat, email or phone inquiries).

 

Sharing Information with Third Parties: Information about our customers is an important part of our business, and we are not in the business of selling it to others. We do not sell, trade, or otherwise transfer to outside parties your personal data to unrelated outside third parties, except as otherwise disclosed in this Privacy Policy.  

 

• Third-Party Service Providers: From time to time we may hire other companies and individuals to perform functions on our behalf. Examples include fulfilling orders, delivering items, analyzing data, hosting websites, providing marketing assistance, providing search results and links, and processing credit card payments. They may have access to personal information needed to perform their functions, but no right to use it for other purposes. SMS consent is not shared with 3rd parties/affiliates for marketing purposes.

• Business Transfers: As we continue to develop our business, we might sell or buy other businesses, subsidiaries, or business units. In such transactions, customer information generally is one of the transferred business assets but remains subject to our express obligations in any pre‑existing Privacy Policy (unless you consent otherwise). Also, in the event we or substantially all of our assets are acquired, customer information will be one of the transferred assets.

• Protection Purposes: To the extent permitted by applicable law, we may disclose information when we, in good faith, believe disclosure is appropriate to comply with the law or a regulatory requirement; to comply with governmental, administrative or judicial process, requirement or order, such as a subpoena or court order; to cooperate with law enforcement or other governmental investigations (without necessarily requiring the law enforcement or government agency requesting the information to formally serve us with a subpoena); to prevent or investigate a possible crime, such as fraud or identity theft; to enforce a contract; to protect the legal rights, property, or our safety and the safety of our employees, clients, partners and agents, other users or the public in general; or to protect your vital interests if determined necessary by us.

• With Your Consent: We may disclose your personal data with your permission or at your request.

 

 

How We Protect Your Information: We may scan the Websites on a regular basis for security holes, malware and known vulnerabilities in order to make your visit to our Websites as safe as possible.  Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

 

We have implemented safeguards reasonably designed to protect your personal data from unauthorized access and disclosure. It is important that you understand, however, that these safeguards are not a guarantee of protection from unauthorized access, use or disclosure, that no solution, tool, website, application, database or system is completely secure or "hacker proof," and that we cannot anticipate all potential misuse or access of your information. Please note that we cannot guarantee the security of any information you transmit to us, and your use of the Websites indicates that you are willing to assume this risk.

 

Google: We, along with third-party vendors such as Google, may use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our Websites.  Users can set preferences for how Google advertises to you using Google Analytics Opt Out Browser add on by visiting http://tools.google.com/dlpage/gaoptout. 

 

COPPA (Children Online Privacy Protection Act): When it comes to the collection of personal information from children under the age of 13 years old, the Children's Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the United States' consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children's privacy and safety online.

 

We do not market to children under the age of 13 years old.

 

CAN SPAM Act: The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.

 

We may collect your email address in order to:

• Send information, respond to inquiries, and/or other requests or questions

• Process orders and send information and updates pertaining to orders

• Market to our mailing list or continue to send emails to our customers after the original transaction has occurred

 

To be in accordance with CANSPAM, we will:

• Not use false or misleading subjects or email addresses.

• Identify the message as an advertisement in some reasonable way.

• Include the physical address of our business or site headquarters.

• Monitor third-party email marketing services for compliance, if one is used.

• Honor opt-out/unsubscribe requests quickly.

• Allow users to unsubscribe by using the link at the bottom of each email.

 

If at any time you would like to unsubscribe from receiving future emails, you can click on the “unsubscribe” link found in each email.  We will promptly remove you from all non-transactional correspondence. Transactional correspondence, such as order and shipment confirmations, will always be sent.

 

Links to Third-Party Internet Sites and Plugins: The Websites may contain links to websites or mobile apps that are not operated by us. In addition, the Websites may include or incorporate plugins, widgets, buttons or similar features which are operated by third-party social media platforms and other third-party networks. We provide these links and plugins as a service solely for your convenience and information. We have no responsibility or liability for, nor any control over, those websites, apps, or social media platforms or their operators’ processing of personal data. We encourage you to review the privacy policies for the websites, apps, and social media platforms you visit before using them or providing your personal data.

 

Reviewing and Updating your Personal Data: If you would like to review, correct or challenge your personal data, please contact us at the contact information provided below.  If you contact us, we may, for your protection, ask you for additional information to verify your identity. In most cases, we will provide the access you request and correct or delete any inaccurate personal information you discover. We reserve the right, however, to limit or deny your request to the extent permitted by applicable law if the disclosure could lead to a breach of applicable law and regulation, such as in case of any legal obligation to retain certain data, or if you have failed to verify your identity to our satisfaction.

 

Changes to the Privacy Policy: This Privacy Policy will be updated from time to time to reflect, among other things, changes in applicable laws, rules or regulations, changes in our data collection practices, and/or changes to our business or services. Changes to our Policy will become effective when posted and will only apply to information collected on and after the effective date of the revised Privacy Policy. We will make an updated version of this Privacy Policy accessible through the Website(s) with a revised effective date, to let you know that we updated the Privacy Policy.

 

If you access the Websites from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

 

Contacting Us: If there are any questions regarding this Privacy Policy, you may contact us at privacynotices@sbp.com

 

Last updated: January 12, 2026

 

Your State Privacy Rights

Depending on your state of residence, you may have certain privacy rights under applicable laws, such as the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Virginia Consumer Data Protection Act (VCDPA), Utah Consumer Privacy Act (UCPA).

 

Your Rights May Include:

• Right to Know the categories of personal information we collect, use, and disclose.

• Right to Access the personal information we hold about you.

• Right to Correct inaccurate personal information.

• Right to Delete your personal information.

• Right to Data Portability – to receive your data in a readily usable format.

• Right to Opt-Out of:

  • Sale of personal information

  • Targeted advertising

  • Profiling in furtherance of decisions that produce legal or similarly significant effects

• Right to Limit Use of sensitive personal information (California only).

• Right to Appeal if we deny your privacy rights request (Virginia, Connecticut, and others).

 

How to Exercise Your Rights

You may submit a request to exercise any applicable rights by emailing us at privacynotices@sbp.com. 

We will respond to your request within the timeframe required by law (generally 45 days) and may request additional information to verify your identity.

 

Opt-Out of Targeted Advertising or Sale of Personal Information

We do not sell your personal information for monetary compensation. However, certain data practices (e.g., use of cookies or third-party analytics tools) may be considered a “sale” or “sharing” under some laws. You can opt out by adjusting your cookie settings through our cookie banner or settings tool.

 

Use and Disclosure of Sensitive Personal Information

If we collect sensitive personal information (such as precise geolocation, race/ethnic data, or health information), we use it only for permitted business purposes and do not use or disclose it to infer characteristics or for targeted advertising. You may limit such use in California by exercising your rights above.

 

Authorized Agent and Minors

Authorized Agents may submit requests on your behalf by providing written permission and proof of identity.  We do not knowingly sell or share the personal information of minors under 16 years of age.

 

Appeals Process

If we deny your request, you may appeal by contacting us at privacynotices@sbp.com. We will provide a written explanation within the time required by law.
Last updated: January 12, 2026

 

 

Your California Privacy Rights Under the CCPA/CPRA

 

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information. This section outlines those rights and explains how to exercise them.

 

1. Categories of Personal Information We Collect (see above sections What Personal Data We Collect and How We May Use Personal Data)

 

We may collect the following categories of personal information, as defined by the CCPA/CPRA:

• Identifiers (e.g., name, email address, IP address, mailing address, phone number)

• Commercial Information (e.g., purchase history, payment information)

• Internet or Other Electronic Network Activity (e.g., browsing history, cookies, interactions with our website)

• Geolocation Data (e.g., general location based on IP address)

• Inferences Drawn (e.g., preferences, interests)

• Customer Records (e.g., billing address, account information) - We collect this information for the purposes outlined in the “How do we use your information?” section of this policy.

• We do not collect Sensitive Personal Information as defined by California law. If we collect SPI, we use it only for purposes permitted under Cal. Civ. Code § 1798.121 and you may have the right to limit that use.

 

2.  Disclosure, Sale, and Sharing of Personal Information
 

In the past 12 months, we may have disclosed personal information to:

• Service providers

• Analytics and advertising partners

• Payment processors

• Security/fraud prevention vendors

• Government entities (when legally required)

 

We do not have actual knowledge of selling or sharing personal information of consumers under 16.

 

3. Your Rights Under California Law

As a California resident, you have the following rights:

• Right to Know: Request details about the personal information we collect, use, disclose, sell, or share.

• Right to Access: Request a copy of your personal information.

• Right to Delete: Request deletion of personal information, subject to legal exceptions.

• Right to Correct: Request that we correct inaccurate personal information.

• Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information.

• Right to Limit Use of Sensitive Personal Information: If applicable, limit our use of Sensitive Personal Information to what is necessary to provide requested services.

• Right to Non-Discrimination: You will not be treated differently for exercising your privacy rights.

• Right to Appeal: If we deny your request, you may appeal our decision (see below).

  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights, including by denying goods or services, charging different prices or rates, or providing a different level or quality of goods or services.

 

4. How to Exercise Your Rights

To submit a request under your California privacy rights, email us at privacynotices@sbp.com.  We will verify your request using the information associated with your account or provided in your request. You may need to provide additional information to help us verify your identity.

 

You may designate an authorized agent to make a request on your behalf. To do so, the agent must provide proof of your written permission or power of attorney, and we may also require you to verify your identity directly with us.

 

If we deny your request, you may appeal by emailing us.  We will review and respond within 45 days.

 

5. Sale or Sharing of Personal Information

We do not "sell" your personal information in exchange for money. However, under California law, some of our use of cookies and third-party analytics and advertising tools may be considered a “sale” or “sharing” of personal information. You can opt out of these by adjusting your cookie preferences in our cookie banner or settings. 

 

6. Retention of Personal Information

We retain each category of personal information for the duration needed to fulfill the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
Retention periods typically range from 1–7 years depending on record type.

​

Last updated: January 12, 2026