Privacy Policy | Allied Plumbing & Fire Supply

1. Introduction and Scope

This Privacy Policy ("Policy") describes how PLUMBINGANDFIRE, INC., doing business as Allied Plumbing & Fire Supply, together with its affiliates ("Allied," "we," "us," or "our"), collect, use, disclose, retain, and protect information in connection with:

the website located at www.apfs.com and any related subdomains, online stores, and ordering portals;
our mobile applications, if any;
our physical store, counter, will-call, delivery, and customer-service operations; and
our email, text message, telephone, chat, and other electronic or in-person communications with you.

We refer to all of the above collectively as the "Services."

This Policy does not apply to information collected by any third party, including through any third-party website, application, advertising network, social-media platform, or content that may link to or be accessible from the Services. We are not responsible for the privacy practices of those third parties.

By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, your choice is to not use the Services. We may revise this Policy at any time as described in the "Changes to This Policy" section below, and your continued use of the Services after we post changes constitutes your acceptance of the revised Policy to the fullest extent permitted by law.

2. Information We Collect

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("Personal Information"). Personal Information does not include publicly available information, lawfully obtained government records, or information that has been de-identified or aggregated.

2.1 Information You Provide to Us

Depending on how you interact with the Services, we may collect:

Identifiers and contact information — name, billing and shipping address, email address, telephone number, account username, and password.
Commercial and transaction information — products and services purchased, quoted, returned, or considered; order history; payment card information (processed by our payment processors), billing address, and related billing details; and purchasing preferences.
Business and professional information — company name, business address, job title, contractor or trade license number, tax-exemption or resale-certificate status, number of employees, business references, and credit-application information when you apply for trade or business terms.
Account and program information — registration details, AlliedAdvantage+ or other loyalty/pro-program enrollment data, and preferences.
Customer-service and communications content — the contents of emails, chats, text messages, web forms, surveys, reviews, feedback, and recordings or transcripts of telephone or chat communications, including associated metadata.
User-generated content — product reviews, ratings, questions, photos, videos, and other materials you choose to submit or post.
Employment and applicant information — if you apply for a job, the contents of your application, résumé, and related materials.

2.2 Information We Collect Automatically

When you use the Services, we and our service providers may automatically collect:

Device and connection data — IP address, device identifiers, browser type and version, operating system, language settings, and mobile network or carrier information.
Usage and activity data — pages, products, and content viewed; links and buttons clicked; search terms entered; mouse movement, clicks, and scrolling; dates and times of access; referring and exit URLs; and the resources you use on the Services.
Approximate location data — non-precise geolocation derived from your IP address or postal/ZIP code.
Cookies and similar technologies — as described in the "Cookies and Tracking Technologies" section below.

2.3 Information We Collect From Other Sources

We may receive information about you from third parties, including:

payment processors, banks, and credit-reporting or fraud-prevention services;
shipping, logistics, and address-verification providers;
marketing, advertising, and analytics partners and data providers;
our affiliates, suppliers, manufacturers, and business partners; and
publicly available sources and social-media platforms.

2.4 Sensitive Personal Information

We do not seek to collect "sensitive personal information" as defined under California law beyond what may be necessary to provide the Services (for example, account log-in credentials such as a username in combination with a password). We do not use or disclose any sensitive personal information for purposes other than those permitted under applicable law and described in this Policy.

2.5 Categories of Personal Information Under California Law

In the preceding twelve (12) months, we may have collected the following statutory categories of Personal Information (Cal. Civ. Code § 1798.140):

Statutory Category	Collected	Examples
Identifiers	Yes	Name, address, email, phone, account ID, IP address
Customer records (Cal. Civ. Code § 1798.80(e))	Yes	Name, address, phone, payment card and billing information
Characteristics of protected classifications	No*	—
Commercial information	Yes	Purchase, return, and quote history; preferences
Internet/network activity	Yes	Browsing and search history, interactions with the Services
Geolocation data	Yes	Non-precise location from IP/ZIP code
Audio/visual information	Yes	Call/chat recordings, review photos and videos
Professional/employment information	Yes	Company, title, license number; job-applicant data
Education information	No	—
Inferences	Yes	Preferences and characteristics drawn from the above
Sensitive Personal Information	Limited	Account log-in credentials

*We do not intentionally collect this category.

3. How We Use Your Information

We use the information we collect for the following business and commercial purposes, and we may combine information from different sources for these purposes:

to provide, operate, and maintain the Services, including processing, fulfilling, shipping, and tracking orders, quotes, returns, and warranty claims;
to create and manage your account and the AlliedAdvantage+ or other programs;
to process payments, extend or evaluate credit and business terms, and verify tax-exemption status;
to respond to your inquiries, provide customer and technical support, and communicate with you about your orders, accounts, and requests;
to send you transactional, administrative, marketing, promotional, and other communications (subject to your choices described below);
to personalize and improve the Services, products, content, and your experience, including product recommendations;
to conduct analytics, research, and product development, and to understand usage and trends;
to operate, evaluate, and improve our business, including network and IT operations, troubleshooting, testing, and internal record-keeping;
to advertise and market our products and services, including interest-based and cross-context behavioral advertising and measuring advertising effectiveness;
to detect, investigate, prevent, and address fraud, security incidents, unauthorized access, and other unlawful or harmful activity, and to protect the rights, property, and safety of Allied, our customers, and others;
to enforce our terms, agreements, and policies and to establish, exercise, or defend legal claims;
to comply with applicable laws, regulations, legal process, and governmental requests; and
for any other purpose disclosed to you at the time of collection or to which you consent.

We may de-identify or aggregate Personal Information and use, disclose, and retain it for any lawful purpose. Where we combine de-identified information with information that identifies you, we will treat the combined information as Personal Information under this Policy.

4. How We Disclose Your Information

We may disclose your Personal Information in the following circumstances:

Service providers and contractors. We disclose Personal Information to vendors who perform services on our behalf — such as hosting, payment processing, shipping and logistics, email and SMS delivery, analytics, advertising and marketing support, customer service and chat, fraud prevention, applicant tracking, and website testing — under contracts that limit their use of the information to performing services for us.
Affiliates. We may share information with our corporate affiliates, who will use it consistent with this Policy.
Advertising and analytics partners. We may disclose certain information to advertising networks, ad-tech providers, and analytics providers, including for cross-context behavioral advertising, as described in the "Cookies and Tracking Technologies" and "Your California Privacy Rights" sections.
Business partners and suppliers. Where you request financing, fabrication, or other services involving a third party, or where a manufacturer or supplier requires information to fulfill or support a product or warranty, we may share information as needed for that purpose.
Legal, safety, and compliance. We may disclose information to comply with the law, regulations, subpoenas, court orders, or government requests; to enforce our agreements and policies; and to protect the rights, property, or safety of Allied, our customers, or others, including for fraud prevention and risk management.
Business transfers. In connection with, or during negotiations for, any merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other corporate transaction, we may disclose or transfer your information to the relevant parties and their advisors, and the acquirer may continue to use your information consistent with this Policy. You acknowledge and agree that such transfers may occur.
With your direction or consent. We may disclose information for any other purpose with your consent or at your direction, including content you choose to post publicly.

Information you post in public-facing areas of the Services (such as reviews) is public, and we are not responsible for information you choose to make public. Please do not include information you wish to keep private.

5. Sale and Sharing of Personal Information

California law defines "sell" and "share" broadly. "Sharing" includes disclosing Personal Information to a third party for cross-context behavioral advertising, whether or not for money.

We do not sell your Personal Information in exchange for money. However, our use of certain advertising and analytics cookies and similar technologies may be considered a "sale" or "share" under California law because those partners may use the information for cross-context behavioral advertising.

You have the right to opt out of this sale or sharing at any time. To exercise this right, see the "Do Not Sell or Share My Personal Information" link in the footer of our website or follow the instructions in the "Your California Privacy Rights" section below. We also honor opt-out preference signals such as the Global Privacy Control (GPC) where required.

We do not knowingly sell or share the Personal Information of consumers under 16 years of age without affirmative authorization as required by law.

6. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, clear GIFs, software development kits, server logs, and similar technologies to operate and secure the Services, remember your preferences, analyze usage, and deliver and measure advertising.

Essential cookies are necessary for the Services to function, including maintaining your shopping cart and enabling checkout. The Services may not function properly without them.
Analytics and performance cookies help us understand how the Services are used.
Advertising cookies are used by us and third parties to deliver interest-based advertising and measure its effectiveness.

Your choices. Most browsers let you refuse or delete cookies through their settings; however, disabling certain cookies may prevent parts of the Services (including checkout) from working. You can manage advertising cookies on this website at any time using the "Cookie Preferences" link in the footer. You can also opt out of certain interest-based advertising through industry tools such as the Network Advertising Initiative (optout.networkadvertising.org), the Digital Advertising Alliance (optout.aboutads.info), and your device's advertising-identifier settings.

Do Not Track / Global Privacy Control. Some browsers offer a "Do Not Track" (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. We do, however, treat recognized opt-out preference signals such as the Global Privacy Control (GPC) as a valid request to opt out of the sale or sharing of Personal Information for the browser or device from which the signal is sent, as required by California law.

7. Data Retention

We retain each category of Personal Information for as long as reasonably necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. To determine the appropriate retention period, we consider:

the length and nature of our relationship with you and your continued use of the Services;
our legal, accounting, tax, warranty, and recordkeeping obligations;
the existence of any actual, threatened, or anticipated dispute or legal claim; and
whether retention is necessary for fraud prevention, security, or to enforce our agreements.

When Personal Information is no longer needed, we will delete, de-identify, or anonymize it in accordance with our data-retention practices.

8. How We Protect Your Information

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, alteration, disclosure, and loss, including encryption of payment information in transit. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot and do not guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account. Any transmission of information is at your own risk.

9. Your California Privacy Rights

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides California residents with the following rights, subject to certain exceptions. These rights apply to all California residents whose information we process, including individuals acting in a business or employment capacity (for example, contractor and business contacts).

Right to know / access. You may request that we disclose the categories and specific pieces of Personal Information we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it.
Right to delete. You may request that we delete Personal Information we collected from you, subject to legal exceptions.
Right to correct. You may request that we correct inaccurate Personal Information we maintain about you.
Right to opt out of sale/sharing. You may opt out of the sale or sharing of your Personal Information, including for cross-context behavioral advertising.
Right to limit use of sensitive personal information. Where applicable, you may direct us to limit the use and disclosure of sensitive personal information to what is necessary to provide the Services. (We do not currently use sensitive personal information for purposes that would trigger this right.)
Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

9.1 How to Submit a Request

You may submit a request to know, delete, or correct by:

emailing us at info@apfs.com;
calling or texting us at (818) 764-9800; or
writing to us at the postal address in the "How to Contact Us" section below.

To opt out of the sale or sharing of your Personal Information, use the "Do Not Sell or Share My Personal Information" link on our website or enable the Global Privacy Control in a supported browser.

9.2 Verification and Authorized Agents

For your protection, we will need to verify your identity before responding to a request to know, delete, or correct, generally by matching information you provide with information in our records. We may decline a request where we cannot verify your identity. You may use an authorized agent to submit a request on your behalf; we may require written permission and verification of the agent's authority and your identity.

9.3 Our Response

We will confirm receipt of your request within ten (10) business days and respond to verifiable requests within forty-five (45) days, with one further extension of up to forty-five (45) days where reasonably necessary and permitted by law. There is no charge to exercise your rights unless your requests are excessive, repetitive, or manifestly unfounded.

9.4 Additional California Disclosures

"Shine the Light." California Civil Code § 1798.83 permits California residents to request information about our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, contact us at the information below.
Minors. If you are a California resident under 18 and a registered user, California Business and Professions Code § 22581 allows you to request removal of content you have publicly posted. Removal may not be complete or comprehensive, and exceptions apply.

10. Notice of Financial Incentive (AlliedAdvantage+ and Similar Programs)

We may offer programs, discounts, free shipping, promotions, or other benefits in connection with the collection of Personal Information (for example, our AlliedAdvantage+ pro program). To the extent these constitute a "financial incentive" under California law:

the categories of Personal Information involved generally include identifiers, commercial information, and business/professional information;
you may opt in by enrolling and may withdraw at any time by contacting us or following the program's cancellation instructions;
the value of your Personal Information to us is reasonably related to the value of the offer or benefit, which we calculate in good faith based on the expense of providing the program; and
participation is voluntary, and any price or service difference is reasonably related to the value provided to us by your participation.

11. Children's Privacy

The Services are intended for businesses and adults and are not directed to children. We do not knowingly collect Personal Information from children under 13 (or, for purposes of the sale/sharing opt-in, under 16). If you believe a child has provided us Personal Information, please contact us and we will take reasonable steps to delete it. If you are under 18, you should use the Services only with the involvement of a parent or guardian.

12. Communications and Your Choices

Email. You may opt out of marketing emails by clicking "unsubscribe" in any such email. We may still send you transactional or service-related messages.
Text messages (SMS/MMS). Where you provide your mobile number and opt in, we may send you text messages, which may include transactional or account messages (such as order, delivery, and account notifications) and, where you have consented, marketing and promotional messages. By opting in, you consent to receive these messages, which may be sent using automated technology, at the mobile number you provide. Consent to receive marketing texts is not a condition of any purchase. Message frequency varies. Message and data rates may apply. You can cancel at any time by replying STOP to any message, and you can get help by replying HELP or contacting us at info@apfs.com or (818) 764-9800. After you reply STOP, we may send you one final message confirming your opt-out. We and the mobile carriers are not liable for delayed or undelivered messages. Attempting to opt out by any method other than the designated commands may not be effective.

No sharing of mobile information. No mobile information, including your phone number and opt-in consent, will be sold or shared with third parties or affiliates for their own marketing or promotional purposes. We may share mobile information with service providers and vendors who help us operate the text-messaging program (for example, message-delivery platforms) solely to provide the program on our behalf, and as otherwise required by law.

Telephone and mail. You may contact us to update your preferences for telephone or postal communications.
Account information. You may review and update certain account information by logging into your account or contacting us.

13. Third-Party Links and Services

The Services may contain links to, or integrations with, third-party websites, platforms, and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third party before providing your information.

14. Visitors From Outside the United States

We are located in the United States and operate the Services from the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your location. By using the Services, you consent to this transfer and processing to the extent permitted by law.

15. Changes to This Policy

We may update this Policy from time to time. When we make changes, we will revise the "Last Updated" date above and, where required by law, provide additional notice. Changes are effective when posted unless otherwise stated. Your continued use of the Services after we post changes constitutes your acceptance of the revised Policy to the fullest extent permitted by law. We encourage you to review this Policy periodically.

16. Governing Law

To the fullest extent permitted by applicable law, this Policy and any dispute arising out of or relating to it or the Services are governed by the laws of the State of California, without regard to its conflict-of-laws principles. Nothing in this Policy limits any non-waivable rights you have under the CCPA or other applicable law.

17. Accessibility

We are committed to making this Policy and our privacy disclosures reasonably accessible to all consumers, including individuals with disabilities. For the online version of this Policy, we aim to follow generally recognized industry standards for digital accessibility, such as the Web Content Accessibility Guidelines (WCAG) version 2.1.

If you use assistive technology, such as a screen reader, and have difficulty accessing this Policy, or if you would like to receive this Policy or any of our privacy notices in an alternative format, please contact us using the information in the "How to Contact Us" section below, and we will work with you to provide the information in a format that reasonably meets your needs.

You do not need to use the telephone to exercise your privacy rights. You may submit any privacy request by email or by mail as described in this Policy. If you are deaf, hard of hearing, or have a speech disability, you may also reach us through your telecommunications relay service by dialing 711.

18. How to Contact Us

If you have questions about this Policy or our privacy practices, or to exercise your rights, contact us at:

PLUMBINGANDFIRE, INC. d/b/a Allied Plumbing & Fire Supply
11120 Sherman Way
Sun Valley, CA 91352
Phone: (818) 764-9800
Text: (818) 764-9800
Email: info@apfs.com