Privacy Policy — Stone’s Home Centers

Policy effective: June 29, 2023

1. Collection of Personal Information

Do it Best Corp. and its affiliates, including Do it Best Commerce Company, LLC (“Do it Best,” “we,” or “us”), explain how they collect, use, protect, and share personal information relating to:

• Users of their websites, mobile apps, online services, and Best Rewards\u2120 programme.

• Customers purchasing products through those services or participating independently owned member stores.

• Other individuals whose personal information is collected through business activities.

The policy does not apply to Do it Best employees.

Personal information may be collected:

• Directly through website forms, account registration, surveys, enquiries, contracts, calls, emails, chats, texts, social-media posts, events, promotions, and Best Rewards.

• During orders, including contact, shipping, email, and payment details.

• From member stores, public sources, marketing partners, data brokers, third-party services, authorised representatives, affiliates, or service providers.

• In connection with transactions or interactions with Do it Best, its members, affiliates, chat providers, and other service providers.

They may combine account information with data received from third parties or public sources.

Types of information may include:

• Personal identifiers and characteristics, such as name, age, and gender.

• Contact details, such as shipping address, email address, and telephone number.

• Financial information, such as billing and payment details.

• Transaction data, including products/services used, ordered, or preferred.

• Demographic information and preferences.

• Location data, potentially including precise location when enabled on a device.

You may decline to provide requested information, but this can restrict access to certain services, content, or options.

2. Passive Collection of Tracking and Usage Information

The policy says that Do it Best may collect usage information related to devices, websites, apps, and services. This can include:

• Domain and host used to access the internet.

• IP address.

• Browser and operating system.

• Device type, identifiers, settings, and operating system.

• Country, general location, and potentially precise location.

• Referring website.

• Dates/times of access, time spent, pages and products viewed, videos watched, links clicked, cart activity, and visit frequency.

It may link usage information to personal information. Its stated purposes include system administration, service improvement, marketing measurement and targeting, personalisation, preference storage, advertising effectiveness, security, and fraud prevention.

Cookies

The site may use session and persistent cookies, including:

• Necessary cookies required for the services to work.

• First-party cookies set by Do it Best.

• Third-party cookies set by service providers or other third parties, including for analytics and advertising.

Cookies may remember preferences, recognise account holders, retain cart selections, and target content based on prior browsing or shopping interests. Users can configure browsers to reject cookies or request confirmation before accepting them, but rejecting necessary cookies can restrict functionality.

Tags / Web Beacons

Do it Best and service providers may use web beacons, pixel tags, tracking pixels, or clear GIFs to monitor page, advertising, and message activity; assess content effectiveness; conduct analytics; support processing; and detect security or fraud issues. Tracking technology may also be included in email communications to monitor responses and interests.

Location Data

Certain features—such as store locators—may process general location information, including IP address or postcode, and more precise geolocation where enabled on the device.

3. Use and Processing of Personal Information

Do it Best states it uses personal information for legitimate business purposes, contractual performance, and legal compliance, including to:

• Process payments, orders, shipping, and order-status notifications.

• Provide products and services.

• Maintain customer relationships and support.

• Market products, services, promotions, and member/affiliate offerings.

• Administer Best Rewards.

• Respond to questions and feedback.

• Assign a home member store and tailor local product availability, prices, advertising, and store locator results.

• Contact users about opportunities and changes.

• Improve and personalise services and customer experience.

• Protect systems and networks.

• Develop and improve products and services.

• Plan and administer events.

• Understand website and service use.

• Measure marketing and serve customised advertising.

• Protect rights, property, safety, users, and customers.

• Meet legal, regulatory, contractual, and internal-policy obligations.

• Respond to legal process, including disclosures to customs or government authorities.

• Carry out purposes stated when information is collected.

It says it does not use personal information without a lawful basis or contrary to the policy without consent.

4. Promotional Messages

When customers buy products, use services, ask for information, or provide personal information, Do it Best and/or an interacting member store may automatically add them to promotional mailing or email lists.

Users can unsubscribe or opt out using the method in a message or by contacting Customer Care. Opting out does not stop transactional or administrative communications, such as order, reward, or account messages. Customers may need to opt out separately from promotional communications sent by individual member stores.

5. Members and Member Websites

Member stores are independently owned and operated. Information provided directly to a member store is governed by that store’s own privacy policy, which may permit its independent marketing and business use.

Where Do it Best hosts or operates an ecommerce site for a member:

• Do it Best receives order information and applies this policy to it.

• The relevant member store also receives the information.

• The member’s own privacy policy governs the member’s use, including its own marketing and business purposes.

For Ship-to-Store orders, the receiving member store receives customer personal information, and its separate privacy policy applies. Do it Best disclaims responsibility for member privacy practices.

Using hosted member services or Ship-to-Store constitutes consent to relevant member stores processing personal and usage information for their own purposes.

6. Best Rewards\u2120 Programme

For Best Rewards participants, Do it Best may exchange data with member stores about participation and purchases made using a Best Rewards number, including purchase and point-of-sale details.

It may provide a participant’s personal and usage information, as well as purchase information, to the primary member store where they shop. Member stores may use such information according to their own privacy policies, including for marketing and business activities.

Enrolling in or using Best Rewards signifies acknowledgement and consent to this sharing and member-store processing.

7. Sharing of Personal Information

Do it Best may share personal information with:

• Corporate affiliates.

• Member stores with which the customer interacts.

• Member stores in connection with Ship-to-Store, hosted member sites, and Best Rewards.

• Member stores to support shipping, delivery, repair, returns, services, and marketing.

• Service providers, including delivery/logistics companies, marketing companies, payment processors, chat providers, hosting providers, IT infrastructure providers, and fraud/security providers.

• Third-party services described in Section 8.

• Authorised third parties connected with products or services.

• Law enforcement or other parties where required or allowed by law, including emergencies or subpoenas.

• Parties where disclosure is believed necessary to protect rights, property, or individuals.

• Acquirers or parties involved in a sale, merger, asset transfer, or other corporate transaction.

The policy says Do it Best otherwise does not share or sell personal information to third parties unless a user requests it or consents, including through hosted member services, Ship-to-Store, or Best Rewards.

8. Interaction With Third-Party Platforms

Some features may be operated or supported by third-party services. These services may collect usage data, provide analytics, create performance metrics, or deliver advertising.

Third-Party Analytics

Third-party analytics providers may collect usage information using cookies, tags, beacons, or similar technology. The policy says this information does not include names or contact information, but can include IP addresses and activity on the services.

Conversion Tracking

Do it Best may use search-engine or social-media conversion tracking to assess the effectiveness of links or search results. This may gather data such as time of day, browser type/language, IP address, and interactions resulting from searches or targeted links.

Do it Best disclaims responsibility for third-party services’ privacy practices and tracking. Using the sites and services is treated as consent to third-party processing of relevant usage data.

9. Non-Personally Identifying Information

Do it Best may anonymise, pseudonymise, aggregate, or de-identify personal and usage information. It may freely use and disclose this anonymised data for:

• Industry analysis.

• Statistics.

• Demographic profiling.

• Marketing and advertising.

• Other business purposes.

It may share anonymised information with members, service providers, vendors, advertisers, business partners, sponsors, and other third parties.

10. Payment Processing

Payment card details, including cardholder name, card number, CVV, and expiry date, are collected during transactions but are provided directly to an external payment processor—not Do it Best.

The policy says that:

• Do it Best does not receive or store card data for site-authorised payments.

• The payment processor uses industry-standard encryption.

• Payment information is governed by the payment processor’s and card issuer’s privacy policies.

• Do it Best is not responsible for payment processor mistakes or security breaches.

• Do it Best may obtain limited transaction details from the payment processor and use them under this policy.

11. California Privacy Rights

California residents may have rights under the California Consumer Privacy Protection Act, as amended by the California Privacy Rights Act, and related regulations. The policy refers users to a separate California Privacy Statement.

12. Do Not Track

Do it Best does not currently respond to browser, mobile-device, or other “Do Not Track” signals.

13. Security

The company states it uses security measures consistent with industry practice to protect information under its control. However, it cannot guarantee complete security due to transmission errors, external events, third-party hacking, or other causes.

It says it will comply with applicable privacy laws and legally required breach-disclosure obligations, subject to being able to determine the scope of a breach and law-enforcement requirements.

14. Transfer of Personal Information

Do it Best is a US company. Personal information provided through its sites or services is processed and maintained on US servers and may be transferred to service providers in the US or elsewhere. Using the websites or services constitutes consent to these transfers.

15. Disclaimer Regarding Video Content

The services may use pixels to analyse how users interact with video, audiovisual, or similar content. The policy states that continuing to interact with this content indicates understanding that personal data, including video viewing history, may be processed under the policy.

16. Changes to the Policy

The privacy policy and linked statements may be updated. For material changes, Do it Best may notify users using their provided contact details, their account, or by posting an updated version online.

Changes become effective upon posting or notification. Continued use of websites, services, products, or continued provision of personal information indicates acceptance. Users who do not agree must terminate their account and stop using the websites and services.

Specific websites or services may have separate privacy notices; those specific terms control if they conflict with this policy.

17. Access to Personal Information

Users may review, update, correct, or delete certain account-related information through their online account or by contacting Customer Care. Do it Best states it will respond in accordance with applicable law.

18. Children

Do it Best states that it:

• Does not directly sell products through its services to people it knows are under 18.

• Does not permit people under 18 to register accounts.

• Does not knowingly collect or use personal information from children under 13.

• Prohibits anyone under 13 from submitting information through the website or services.

19. Linked Sites

The websites and services may link to third-party sites, including member-operated sites. Do it Best says it does not control and is not responsible for the content or privacy practices of these external sites. Users should check each third party’s privacy policy and terms.

20. Customer Care Contact Information

Do it Best Corp.
1626 Broadway, Suite 100
Fort Wayne, IN 46802

Privacy Administrator – Ecommerce
Phone: 833.800.5906
Email: privacypolicy@doitbest.com