Privacy Policy
Sepulveda Building Materials, Inc.
Privacy Policy
Notice of Collection, Disclosure & Privacy Policy. How we collect, use, share and protect your personal information, and the choices you have.
1. Notice at Collection and Privacy Policy
This Notice at Collection, Disclosure and Privacy Policy (“Privacy Disclosure”) explains how Sepulveda Building Materials, Inc. and its subsidiaries and affiliates (“Sepulveda,” “we,” “us,” or “our”) collect, use, disclose, sell, share, and/or retain personal information (“Information Practices”) when you visit our website at sepulveda.com (the “Site”), create an account, make a purchase, request a quote, sign up for our communications, or otherwise interact with us.
We respect your privacy and we are committed to handling personal information responsibly and in accordance with applicable law. We designed our privacy practices to align with applicable federal and California laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act, (“CCPA”); the California Invasion of Privacy Act (“CIPA”); the California Online Privacy Protection Act (“CalOPPA”); California’s “Shine the Light” law; the federal CAN-SPAM Act; the Children’s Online Privacy Protection Act (“COPPA”); and, with respect to the accessibility of our Site, the Americans with Disabilities Act (“ADA”) and the California Unruh Civil Rights Act.
This Privacy Policy also serves as our Notice at Collection under the CCPA. If you are a California resident, please review Section 11, “Your California Privacy Rights.” By using the Site, you acknowledge this Privacy Policy. Where required by law, we will obtain your consent before deploying certain cookies and tracking technologies, as described in Sections 5 and 6.
2. Notice at Collection
The following notice identifies the categories of personal information or personal data (collectively, “personal information”) to be collected from you and the purposes for which the personal information will be used, including whether that information is sold to anyone or shared with third parties who are not our vendors or service providers. We collect personal information in three ways: (a) information you provide directly; (b) information collected automatically when you use the Site; and (c) information from third parties such as our payment and shipping partners.
2.1 Information You Provide
- Account information: name, email address, phone number, username, and password when you create a customer account.
- Order and checkout information: billing and shipping name, address, phone number, email, and payment information. Payments are processed by our payment processor (Stripe); we do not store your full card number.
- Form submissions: information you submit through our contact forms, quote requests, and other web forms, including your name, contact information, and the content of your message.
- Marketing sign-ups: your email address and any preferences you provide when subscribing to our newsletter or promotional communications.
- Store locator queries: a ZIP code, city, or location you enter to find a nearby store.
- Customer service communications: records of your correspondence with us.
2.2 Information Collected Automatically
When you visit the Site, we and our service providers automatically collect certain information using cookies, pixels, and similar technologies (“Tracking Technologies”). This includes your IP address, browser type, device type and identifiers, operating system, referring URLs, pages viewed, links clicked, search terms used on the Site, and the dates and times of your visits. See Sections 5 and 6 for details on the specific technologies we use, the consent we obtain, and how you can control them.
2.3 Categories of Personal Information (CCPA)
In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:
Identifiers
Name, postal address, email address, phone number, account username, IP address, online identifiers, device identifiers
Directly from you; automatically via cookies and tracking technologies
Customer Records (Cal. Civ. Code § 1798.80(e))
Name, address, telephone number, payment card information (processed by our payment processor; we do not store full card numbers)
Directly from you at checkout or account creation
Commercial Information
Products purchased or considered, order history, wish list items, quotes requested, purchasing preferences
Directly from you; from your activity on our Site
Internet or Network Activity
Browsing history on our Site, search terms, pages viewed, clicks, referring URLs, interactions with advertisements
Automatically via cookies, pixels, analytics, and advertising technologies
Geolocation Data
Approximate location derived from IP address; location or ZIP code you enter into our store locator
Automatically; directly from you
Inferences
Preferences and characteristics inferred from your purchases and browsing activity, used for marketing and advertising
Derived from the information above
We do not knowingly collect biometric information, precise geolocation, protected classification characteristics, education information, or sensitive personal information such as social security numbers or driver’s license numbers. We do not knowingly collect personal information from anyone under 16 years of age.
3. How We Use Personal Information
- Processing and fulfilling orders, including payment processing, shipping, delivery, and local pickup coordination.
- Creating and maintaining your customer account, wish lists, and order history.
- Responding to inquiries, quote requests, and customer service needs.
- Sending transactional communications such as order confirmations and shipping updates.
- Sending marketing and promotional communications where permitted, with the ability to opt out at any time (see Section 7).
- Operating, maintaining, securing, and improving the Site, including analytics and troubleshooting.
- Advertising our products and services, including through interest-based advertising as described in Section 5.
- Detecting, investigating, and preventing fraud and unauthorized activity.
- Complying with legal obligations, including tax, accounting, and record-keeping requirements.
4. How We Disclose Personal Information
We do not sell personal information for money. However, our use of third-party advertising and analytics technologies may constitute a “sale” or “sharing” of personal information under the CCPA, as explained below. We disclose personal information to the following categories of recipients:
- Service providers: companies that perform services on our behalf under contract, including payment processing (Stripe), shipping and logistics (FedEx), website hosting and development, email delivery, forms processing, and IT support.
- Advertising and analytics partners: Google (Google Analytics, Google Ads) and Meta Platforms (Meta Pixel), which collect identifiers and internet activity information through Tracking Technologies to measure Site usage and deliver interest-based advertising. Disclosures to these partners for cross-context behavioral advertising constitute “sharing” (and may constitute a “sale”) under the CCPA. You may opt out as described in Section 11.
- Legal and safety: government authorities, courts, or other parties where required by law, subpoena, or legal process, or to protect our rights, property, or safety or that of others.
- Business transfers: a successor entity in connection with a merger, acquisition, financing, or sale of all or part of our business.
5. Cookies and Tracking Technologies
We use the following categories of Tracking Technologies on the Site:
- Strictly necessary: cookies required for the Site to function, such as maintaining your shopping cart, keeping you logged in, and processing checkout. These cannot be disabled.
- Analytics: Google Analytics, which collects information about how visitors use the Site so we can improve it.
- Advertising: Google Ads tags and the Meta Pixel, which collect identifiers and browsing activity to measure ad performance and show you relevant advertising on other websites and platforms.
Consent. Where required by law, analytics and advertising Tracking Technologies are not activated until you provide consent through our cookie consent banner. You may change or withdraw your consent at any time through the cookie settings link in the Site footer.
Your choices. You can also control Tracking Technologies by adjusting your browser settings; using Google’s Ads Settings and the Google Analytics Opt-out Browser Add-on; adjusting ad preferences in your Meta account; and using industry opt-out tools at optout.aboutads.info and optout.networkadvertising.org. We honor Global Privacy Control (GPC) signals as an opt-out of sale/sharing for the browser or device from which the signal is sent.
6. Consent to Tracking Technologies and Electronic Communications (CIPA)
The California Invasion of Privacy Act (CIPA) governs the interception, recording, and use of electronic communications. We aim to be transparent about the technologies we use on the Site and to obtain your consent where required.
- Disclosure. As described in Section 5, our Site uses analytics and advertising technologies, including Google Analytics, Google Ads, and the Meta Pixel, that may collect online identifiers such as your IP address and device identifiers, along with information about your interactions with the Site. These technologies are provided by third parties that act as our service providers or advertising partners.
- Consent before activation. Where required by law, these analytics and advertising technologies are not activated until you provide consent through our cookie consent banner. Strictly necessary technologies essential to operate the Site function without the need for consent. By clicking “Accept” (or by adjusting your preferences to enable a category), you consent to the corresponding Tracking Technologies.
- No session recording or call/chat monitoring. We do not use session-replay tools that record your keystrokes or mouse movements, and we do not operate a live-chat feature that records your conversations on the Site.
- Withdrawing consent. You may decline or withdraw consent at any time through the cookie settings link in the Site footer, and we honor Global Privacy Control signals sent by your browser or device.
7. Marketing Communications (CAN-SPAM and TCPA)
If you subscribe to our marketing emails, we send promotional messages consistent with the federal CAN-SPAM Act. Every marketing email identifies us as the sender and includes an unsubscribe link, and we honor opt-out requests promptly. Transactional messages, such as order confirmations and shipping updates, are not marketing and may still be sent to you.
If we contact you by text message or telephone for marketing purposes, we do so consistent with the Telephone Consumer Protection Act (TCPA) and only where you have provided any legally required consent. You may opt out of marketing calls or texts by following the instructions provided in those communications or by contacting us at information@sepulveda.com.
8. How Long We Keep Personal Information
We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to maintain your account, complete transactions, satisfy tax and accounting requirements (generally seven years for transaction records), resolve disputes, enforce agreements, and comply with legal obligations. When personal information is no longer needed, we delete or de-identify it.
9. How We Protect Personal Information
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of payment transactions, access controls, and use of established payment processors so that full payment card numbers are not stored on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children’s Privacy (COPPA)
The Site is intended for general audiences and is not directed to children. Consistent with the Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13, and we do not knowingly collect, sell, or share the personal information of consumers we know to be under 16. If we discover that we have inadvertently collected personal information from a child under 13 without parental consent, we will delete that information immediately.
If you are a parent or guardian of a child under 13, you have the right to review, update, or request the deletion of your child’s personal data. To make a privacy request regarding your child’s information, please email us at information@sepulveda.com.
11. Your California Privacy Rights (CCPA)
If you are a California resident, the CCPA gives you the following rights, subject to certain exceptions:
- Right to Know / Access: to request the categories and specific pieces of personal information we have collected, the categories of sources, our purposes, and the categories of third parties to whom we disclose it.
- Right to Delete: to request deletion of personal information we collected from you, subject to legal exceptions.
- Right to Correct: to request correction of inaccurate personal information.
- Right to opt Out of Sale or Sharing: to direct us not to sell or share your personal information, including sharing for cross-context behavioral advertising, through the “Do Not Sell or Share My Personal Information” link in the Site footer, our cookie settings, or a Global Privacy Control signal.
- Right to Limit Use of Sensitive Personal Information: we do not use or disclose sensitive personal information for purposes that would require a right to limit.
- Right to non-discrimination: we will not discriminate against you for exercising your rights.
11.1 How to Submit a Request
You may submit a request to know, delete, or correct by:
- Email: information@sepulveda.com (please include “Privacy Request” in the subject line)
- Toll-free phone: 800-966-4726
- Mail: Sepulveda Building Materials, Attn: Privacy, 28092 Forbes Rd, Laguna Niguel, CA 92677
11.2 Verification and Authorized Agents
We must verify your identity before responding to requests to know, delete, or correct, and will ask you to provide information sufficient to match against our records, such as the name, email, and recent order details associated with your account. You may designate an authorized agent to submit a request on your behalf; we will require proof of your written authorization and may require you to verify your identity directly. We will respond to verifiable requests within 45 days, with a possible 45-day extension where reasonably necessary (we will notify you of any extension).
11.3 Opt-Out Preference Signals
We process opt-out preference signals such as Global Privacy Control (GPC) in a frictionless manner. When we detect a GPC signal from your browser, we treat it as a request to opt out of the sale and sharing of personal information linked to that browser and, if you are logged in, to your account.
12. California “Shine the Light”
California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) permits California residents to request certain information about a business’s disclosure of personal information to third parties for those third parties’ own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes. California residents may request confirmation of this by contacting us at information@sepulveda.com with “Shine the Light” in the subject line.
13. Other State Privacy Rights
Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Texas, Oregon, and Virginia) may have similar rights of access, correction, deletion, and opt-out of targeted advertising. You may exercise these rights using the contact methods in Section 11.1. If we decline to act on your request, you may appeal by replying to our decision, and we will respond as required by applicable law.
14. Do Not Track (CalOPPA)
Consistent with the California Online Privacy Protection Act (CalOPPA), we disclose how we respond to “Do Not Track” (DNT) signals. Because there is no common industry standard for DNT, we do not respond to DNT signals; however, we do honor Global Privacy Control signals as described in Sections 5 and 11. This Policy is made conspicuously available through a link in the footer of every page of the Site.
15. Website Accessibility (ADA and Unruh Civil Rights Act)
Sepulveda Building Materials is committed to making our Site accessible to people with disabilities, consistent with the Americans with Disabilities Act (ADA) and the California Unruh Civil Rights Act. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA as our accessibility standard, and we treat accessibility as an ongoing effort that we work to improve over time.
If you have difficulty accessing any part of the Site, or if you need assistance, information, or an accommodation to complete a transaction, please contact us at information@sepulveda.com or (949) 347-2100. We will work to provide the information, product, or service you seek through an accessible communication method or alternative means. We welcome your feedback on how we can improve the accessibility of our Site.
16. Third-Party Links
The Site may contain links to third-party websites, including social media pages, review platforms, and mapping services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.
17. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and post the updated Policy on the Site. Material changes will be communicated by a prominent notice on the Site or, where appropriate, by email.
18. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
- Email: information@sepulveda.com
- Phone: 800-966-4726
- Mail: Sepulveda Building Materials, 28092 Forbes Rd, Laguna Niguel, CA 92677
