Trex Privacy Policy
Introduction
Trex Company, Inc. (“Trex”) respects your privacy and strives to help you protect the information you share with us. This Privacy Policy describes Trex’s policies and practices regarding its collection and use of your personal information and provides information regarding your privacy rights. This Privacy Policy is intended to cover our activities in the United States and in Canada.
Personal Information We Collect
Trex collects the information you provide to us in order to respond to your questions regarding our products or to perform services you request. We may also collect your personal information for operational, legal, or compliance purposes.
The types of information we collect vary depending on the nature of our interaction with you. In most cases, we collect your personal information directly from you. You may sign up for a mailing list, for example, or submit payment information for a product. We also collect certain types of customer information automatically, such as your IP address when you visit our website. Finally, we may get information about you from third parties, such as an updated mailing address from a shipping vendor or your business contact information if your employer is a supplier or customer of Trex.
Trex collects the following categories of personal information:
| Category of Data | Source of Data | Business or Commercial Purpose of Processing |
|---|---|---|
| Name, contact information, and other identifiers | We usually collect this information directly from you. For example, you might give us your contact information so that we can respond to a question or request. You might participate in one of our surveys, contests, sweepstakes, or promotions, or may attend one of our events. In some cases, we might collect your information from someone else, such as our business partners or providers of employment background checks. | Communicate with you. Provide the products, services, or information you have requested or purchased. Manage warranties and product recalls. Manage our human resources and meet legal requirements. |
| Commercial information, including products or services purchased, obtained, or considered | We collect this information when you purchase our products. | Provide the products or services that you have requested or purchased, including warranties and similar products. Evaluate and improve the provision of our products or services. |
| Financial data such as bank account numbers, credit or debit card numbers, and similar information | We collect bank account information from employees, contractors, vendors, and related persons for payment purposes. Note that Trex does not collect or retain payment card information if used to purchase sample products from Trex. | Facilitate the purchase of products or services. Manage our human resources and meet legal requirements. |
| Internet and other electronic network activity | When you visit our website, our systems automatically collect information such as IP address, browser type and language, operating system, device type, and hardware attributes. We collect information such as browsing activity on our site, ads viewed or clicked, and search terms used. | Communicate with you directly. Evaluate and improve our systems and websites. Diagnose technical issues and ensure the security of our systems and data. |
| Geolocation | When you visit our website, you provide Trex with a general location associated with your IP address. | Provide location-specific notices and services. |
| Audio, electronic, visual, or similar information | Security cameras are located on the premises of our facilities. Also, you may choose to access our social media platforms, where you may choose to provide photos and other user-generated content. | Ensure the physical security of our facilities, assets, and personnel. Refine our services. Communicate with you. |
| Professional or employment-related information | We collect this information from job applicants, former employees, non-employees performing services for Trex, and related persons, as a normal part of our human resources processes. We may also collect this information from third-party networking sites, such as LinkedIn or service providers. Additionally, if your company has provided your name as a point of contact for us, then we will know the name of your employer and possibly information such as your title and general responsibilities. | Manage our human resources and meet legal requirements. Transact business with other companies through their employees. |
| Education Identifiers | We collect this information from job applicants, former employees, non-employees performing services for Trex, and related persons, as a normal part of our human resources processes. We may also collect information from third party verification service providers. | Manage our human resources and meet legal requirements. |
| Sensitive Personal Information | Under some circumstances, we may collect Social Security, driver’s license, state identification card, or passport numbers, racial or ethnic origin identifiers, and information about religious or philosophical beliefs from job applicants, non-employees performing services for Trex, and related persons, as part of our legally required human resources processes. Under some circumstances, we may collect health information. | Manage our human resources and meet legal requirements. Trex does not collect or process sensitive personal information for the purpose of inferring characteristics about any individual. In California, Trex only uses or discloses sensitive personal information as allowed under CCPA Regulations, Section 7027. |
| Protected classifications under California or federal law | We collect this information only as required by law, typically as part of the employment process. (For a list, see: https://www.senate.ca.gov/content/protected-classes) | Manage our human resources and meet legal requirements. |
| Inferences | At Trex, like many other companies, we use contextual customization of advertisements to enhance your visit to our website. We do not build a profile of your user experience but instead use this information to share advertisements with you after you have exited our website. | Refine our services. Communicate with you about Trex and Trex products. |
| Other | You may choose to provide additional personal information, such as your opinions, experiences, or suggestions, when communicating with us. | Communicate with you. |
Note that collection and processing of personal information in the employment context is covered by privacy law and regulations in California (and in countries outside the US) but not in other states. We do not collect biometric information.
Retaining Your Personal Information
We retain personal information only as long as necessary for the purposes provided in this notice or to meet other legal, regulatory, tax, or accounting requirements. When establishing retention periods, we consider factors such as the sensitivity of the information, existence of automatic controls to delete the data, and legal, contractual, or similar obligations to retain your information. Because these factors can vary based on the information collected and your interaction with us, actual retention periods can vary significantly.
We may keep an anonymized form of your personal data, which will no longer refer to you or have personally identifying information, without time limits, to the extent that we have a legitimate and lawful purpose in doing so.
If there is personal information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.
Sharing and Selling Your Personal Information
Trex does not sell your personal information for monetary consideration. However, our use of cookies and other tracking technologies, as well as the collection of personal information on our sites and applications by third parties, may be considered “sharing” under California law and “targeted advertising” in other states. The following table represents the categories of personal information we have “shared” or made available in the last twelve months, the categories of recipients of that data, and the business purpose sharing of information.
| Category of Data | Category of Third-Party Recipients | Business Purpose for Sharing |
|---|---|---|
| Name, contact information and other identifiers | Advertisers and marketing partners, providers of data analytics, and social media networks | Make the online advertisements you see more relevant to your interests, including advertisements for Trex products and services. We may also share this information with data analytics service providers to improve our understanding of our relevant markets. |
| Commercial information including products or services purchased, obtained, or considered | Advertisers and marketing partners, providers of data analytics, and social media networks | Make the online advertisements you see more relevant to your interests, including advertisements for Trex products and services. We may also share this information with data analytics service providers to improve our understanding of our relevant markets. |
| Internet and other electronic network activity | Advertisers and marketing partners, providers of data analytics, and social media networks | Make the online advertisements you see more relevant to your interests, including advertisements for Trex products and services. We may also share this information with data analytics service providers to improve our understanding of our relevant markets. |
Disclosing Your Personal Information
Trex does not sell your personal information to any third party. However, we do disclose your personal information to certain vendors and third parties for our business and operational purposes. These vendors maintain our service accounts, provide customer service, provide advertisements and contextual customization of advertisements, process or fulfill orders and transactions, process payments, provide marketing services, provide HR administration services, provide IT services, and provide accounting, analytic, insurance, or legal services.
The table below lists the categories of personal information that Trex has disclosed to third parties for a business purpose in the preceding 12 months:
| Category of Data | Category of Recipients | Business or Commercial Purpose of Disclosure |
|---|---|---|
| Name, contact information, and other identifiers | Service providers | Respond to your questions and requests. Conduct business with you. Ensure the security and integrity of our network, systems, and data. Track website usage. Short-term, transient use. |
| Commercial information, including products or services purchased, obtained, or considered | Service providers | Respond to your questions and requests. Conduct business with you, your employer, or a similar relevant entity. Short-term transient use. |
| Financial data such as bank account numbers, credit or debit card numbers, and similar information | Service providers | Conduct business with you, your employer, or a similar relevant entity. Pay employees. Process employment-related information. Administer employee benefits. Short-term transient use. |
| Internet and other electronic network activity | Service providers | Communicate with you about Trex and Trex products. Evaluate and improve our systems and websites. Diagnose technical issues and ensure the security of our systems and data. |
| Geolocation | Service providers | Provide location-specific notices and services. |
| Professional or employment-related information | Service providers | Process employment-related information. Administer employee benefits or provide similar services. |
| Education Identifiers | Service providers | Process employment-related information to manage our human resources and administer employee benefits |
| Sensitive personal information, including the protected classifications listed above, your Social Security, driver’s license, state identification card, or passport number; your racial or ethnic origin, religious or philosophical beliefs; the contents of your mail, email, and text messages (unless Trex is the intended recipient of the communication); and personal information collected and analyzed concerning your health, sex life, or sexual orientation | Service providers Government entities | Process employment-related information to manage our human resources and administer employee benefits. Comply with legal requirements; (as allowed under California privacy law (CCPA Regulations, Section 7027)). Trex does not collect or process sensitive personal information for the purpose of inferring characteristics about any individual. Trex does not use or disclose sensitive information for purposes other than those business purposes specified in this Notice. |
| Protected classifications under California or federal law. (for a list, see: https://www.senate.ca.gov/content/protected-classes) | Service providers Government entities | Process employment-related information to manage our human resources and administer employee benefits |
Your Privacy Rights
Trex strives to honor your privacy rights, based on your state or country of residence and strives to answer your questions regarding how we may process your information. Based on your state or country of residence, your rights may include the following:
Right to know and access personal information: You have the right to request that we disclose: (1) the categories of personal information we have collected about you; (2) the sources from which we collected the personal information; (3) the business or commercial purpose for the collection, selling or sharing of personal information; (4) the categories of third parties to whom we disclose personal information; (5) the categories of personal information that we sold or disclosed for a business purpose; and (6) the specific pieces of personal information we have collected about you.
Right to opt-out: You have the right to opt-out of the sale or sharing of your personal information, the use of your personal information for targeted advertising, and the use of your personal information for profiling. If you use an opt-out preference signal following the Global Privacy Control (GPC) specification, we will process your opt-out preference in a frictionless manner at the device level using our cookie compliance tool. You can set your browser to send these signals, but the specific settings that need to be configured depend on the specific browser you use. Some browsers may require a browser extension. To learn more about the GPC and browsers which support it, visit the Global Privacy Control website. If you have questions about opting out or need a different way to opt-out, please submit a request via email to privacy@trex.com or toll free at 866-681-4858.
Right to correct: If you find that we have inaccurate personal information about you, you have the right to request that we correct that inaccurate personal information, taking into account the nature of the personal information and the purposes of processing the personal information.
Right to delete: You have the right to request that we delete your personal information. There are some exceptions to this right.
Right of data portability: You have the right to obtain a copy of your personal data in a portable and readily usable format that allows you to transmit the data to another controller without impediment. There are some limits to this right.
Right to Non-discrimination or Retaliation: We will not discriminate or retaliate against you for exercising your privacy rights.
Right to withdraw consent for any activities you have previously consented to: If you have previously provided us consent, you may withdraw that consent.
Methods for exercising your rights: If you wish to exercise your privacy rights or have any questions or concerns about Trex’s privacy policies and information practices, please submit a request via email at privacy@trex.com or toll free at 866-681-4858. To verify your request, you may need to provide proof of identity, such as non-personal information about your Trex account. You may also designate an authorized agent to make a request. The agent will follow the same procedures described above. If you use an authorized agent, we may require proof that the agent acts on your behalf.
If we decline your request, partially or fully, you may appeal the decision to our senior management. Simply follow the same process for submitting a request and include “Appeal” in the title or other part of the request. If that Appeal is denied, you may be able to contact your Attorney General’s office, depending on the state in which you reside, to submit a complaint.
Trex does not use or disclose sensitive personal information for any purposes that would require a user to exercise a right to limit according to California law.
Children's Privacy
We do not knowingly collect any information from children under the age of 18. If we learn that a child under the age of 18 has provided us with personal information, we will delete it in accordance with applicable law. If you are a parent or guardian and believe we have inadvertently collected information from your child in a manner not permitted by law, please contact us via email at privacy@trex.com or toll free at 866-681-4858.
Privacy Policy Updates
We may update this Policy from time to time. If we make changes to this Policy, we will post an updated version with a revised “Last Updated” date at the top.
How to Contact Us
Trex Company, Inc. is the company responsible for your information under this Privacy Policy. If you have any questions about this Policy, or about Trex’s data privacy practices, please contact our privacy program via email at privacy@trex.com or toll free at 866-681-4858. Trex may also be contacted via mail at 2500 Trex Way, Winchester, Virginia 22601. Please address your mail to “Trex Privacy Program.”
