Privacy Policy

 

Armstrong World Industries Privacy Policy

Last Revised: February 13, 2025

Introduction

Armstrong World Industries, Inc. and Armstrong World Industries Canada Ltd and Worthington Armstrong Venture (collectively, “Armstrong”, the “Company”, “we”, “us”, or “our”) respect your privacy. This Privacy Policy describes our privacy practices, how we collect, use, and share your “Personal Information” and other information as defined below in connection with our Services, our websites, https://datacenterstore.com; https://datacenterresources.com; https://cool-shield.com, and our mobile applications (collectively, the “Digital Platforms”), as well as our offline collection of Personal Information. It also explains your choices with respect to your Personal Information, and how you can contact us and exercise your legal rights. This Policy is incorporated by reference into our Terms and Conditions, which also applies when you access or use the Digital Platforms.

By using our Services and our Digital Platforms, you agree to let us collect and use your Personal Information as described in this Privacy Policy. Therefore, before you provide us with any Personal Information, you should review this Privacy Policy in its entirety and understand its terms.

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Privacy Policy on this page and change the date at the top of this Privacy Policy webpage. Please review the “Last Revised” legend at the top of this page to see when this Privacy Policy was last revised and any effective date. Any changes to this Policy will become effective when we post the revised Privacy Policy, unless otherwise specifically noted in the legend. We encourage you to look for updates and changes to this Privacy Policy by checking this date when you access the Digital Platforms. We will notify you by e-mail of any modifications to this Privacy Policy that might materially affect the way we collect, use or disclose your Personal Information prior to the change becoming effective. By using the Digital Platforms, you assent to this Privacy Policy. If you do not assent to this Privacy Policy, do not use our Services or the Digital Platforms and do not submit any Personal Information through the Digital Platforms.

This Policy describes:

1. Personal Information We Collect
2. How We Collect Your Personal Information
3. How We Use Your Personal Information
4. How We Disclose Your Personal Information
5. How We Protect Your Personal Information
6. Storage of Your Information Outside of The United States and Canada
7. Children’s Privacy
8. Your Choices Regarding Your Personal Information
9. Privacy Policy Changes
10. Questions About This Policy

 

PERSONAL INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to any individual or a household (“Personal Information”). We also collect non-Personal Information that cannot be linked or associated with any individual person or household. When non-Personal Information is combined with other information so that it does identify an individual person, we treat that combination as Personal Information. We may also collect, use, disclose, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your Personal Information but is not considered Personal Information as this data does not directly or indirectly reveal your identity.

We may collect, use, store, and transfer different kinds of Personal Information about you, which we have grouped together as follows:

Identifiers such as your first name, last name, company name, your role, company name, and online identifiers (e.g., username, password, cookies, mobile advertising IDs, and Device IDs).

Contact Information such as your mailing address, email address, and telephone numbers.

Financial Information such as financial account information and credit card information (card number, security code, expiration date).

Commercial Information, including records of purchasing information which may include information about your transactions on our websites, including what products you purchase, how frequently you purchase them, and your preferred location.

Audio Information such as your voice when we record telephone calls for training and quality assurance purposes.

Professional Information such as business name, your position, and your business contact information (email and phone number).

Technical Information such as your hardware model, your internet service provider, your domain name, internet protocol (IP) address, other unique identifiers, operating system version, browser type and settings, the settings of the device you use to access a Service, the locations of the web pages you view right before arriving at, while navigating, and immediately after leaving, the Digital Platforms, and how long you visit the web pages.

Usage Data such as information about the Digital Platform(s) you use, the date and time, the duration of your usage, the files downloaded or viewed, the subject of the ads you click or scroll over and other information about your interaction with content offered through our Digital Platforms.

Sensitive Personal Information such as, and your credit card information is collected but we do not use or disclose Sensitive Personal Information for any business purposes other than as permitted by law.

How Long We Will Use Your Personal Information

We will only retain your Personal Information for as long as reasonably necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

Collection of Information by Third Parties

We do not control or endorse the third-party websites or applications that may be accessible through the Digital Platforms.

Thus, this Policy does not apply to information provided to third-party websites or gathered by the third parties that operate them. Before visiting a third-party site or using a third-party application, whether by means of a link on the Digital Platforms or otherwise, and before providing any information to a third party, you should inform yourself of the privacy policies and practices (if any) of the third party responsible for that site or application, and you should take the steps you feel are needed to protect your privacy and security.

HOW WE COLLECT YOUR PERSONAL INFORMATION

We may collect the following categories of Personal Information about you based on your specific transactions and interactions with the Company or its Digital Platforms. For each category of information, we identify examples of the category, the business purposes for which we use the information in that category, the categories of sources from which the information is collected, and the categories of third parties with whom we have shared the information, including in the last 12 months. We collect information from and about users of our Digital Platforms two ways (1) directly from you when you provide it to us; and (2) automatically when you use the Digital Platforms.

Information You Provide

The following explains the categories of Personal Information we collect from you and how we collect such data.

• Online Forms: When you complete an online form, we collect Identifiers and Contact Information. To validate your identity as the party submitting the form, we may also collect Technical Information, Professional Information, Sensitive Information, and a screenshot or screen recording of the form submission process.
• Communications with Us: When you contact us by telephone, e-mail or other electronic means, we collect Identifiers and any other Personal Information you choose to provide, as explained below.
  • Telephone: When you contact us by telephone, we will collect the Contact Information (telephone number) that you use to call us and Audio Information when we record telephone calls for training and quality assurance purposes. During a call, we may additionally collect Contact Information (e.g., name, address, e-mail address) and any other information you provide. If you are a business contact for a commercial client, vendor or prospect, we may also collect Professional Information.
  • E-mail and Electronic Means: When you communicate with us via e-mail, or other electronic means, including through a virtual assistant, we may collect your Contact Information (e.g., e-mail address, name), and any other Personal Information you voluntarily choose to include in the communication so that we can respond to your questions and provide you with quality service.
• Social Media: You may choose to interact with us via social media platforms, including, but not limited to Facebook, X, YouTube, Pinterest, Instagram, and/or LinkedIn, or through chat or messaging features available through the Digital Platforms. Relating to these interactions, we may collect Identifiers (e.g., screen name, real name) and any information that you choose to provide such as posts, comments or feedback that you post or leave on pages, feeds or inboxes belonging to us. There are areas of the Digital Platforms and social media platforms that are visible to other users or the general public. We recommend that you do not post personal details to these areas of the Digital Platforms. YOU ASSUME ALL RESPONSIBILITY FOR ANY LOSS OF PRIVACY OR HARM RESULTING FROM YOUR VOLUNTARY DISCLOSURE OF PERSONAL INFORMATION IN PUBLIC AREAS.
• Business Contacts: We collect the Professional Information you provide to allow us to contact you or to receive information about us, opportunities with us, or our products or Services.
• Online Account: If you sign up or use an account, we collect Personal Information you provide to create a profile, account, collect payment or to receive information about the performance of your system or our products. This may include your Contact, Financial, and Profile Information.
• Payments: If you purchase a product, we collect information necessary to process the transaction and validate your identity. This may include Identifiers and Contact Information, and depending on the payment methodology, Financial Information (e.g., payment card information or bank account information).

Information Automatically Collected

Some information is collected by us automatically when you access the Digital Platform. This information includes: Commercial Information, Technical Information, Usage Data. We may usea variety of technologies to collect information about your device and use of the Digital Platform.

Cookies – Cookies are small data files that are sent from a website’s server and are stored on your device’s hard drive either for only the duration of your visit (“session cookies”) or for a fixed period (“persistent cookies”). Cookies contain information that can later be read by a web server. We use first party cookies to understand user preferences, navigation and to provide you with information we think you may be interested in.

HOW WE USE YOUR PERSONAL INFORMATION

We use the Personal Information or non-identifiable information we collect to facilitate the business relationship we have with you, to comply with our legal and financial obligations, and to pursue our legitimate business interests, which include the business purposes set out below:

We also use the Personal Information we collect for commercial purposes. These include:

• • To provide a product or service that we recommend or you requested;
  • To process a payment for a service or product that you purchased;
  • To provide estimates that you requested or asked us to provide;
  • To communicate with you about our products and services via third party platforms;
  • To review customer feedback that you requested or asked us to review;
  • To send you communications about new product lines, product updates, details of current and future projects, and quality and technical issues;
  • To send you a newsletter;
  • To process an employment request you submitted;
  • For other purposes with your consent or as permitted or required by law;
  • Create and manage an account;
  • Facilitate communications with authorized third parties;
  • Analyze, tailor, or improve our products and Services, including the Digital Platforms and any content or advertising thereon;
  • Enforce our legal obligations and rights, including our Digital Platforms terms and conditions,
    to comply with applicable legal or regulatory requirements, and any contractual rights (e.g., the collection of debt);

• Improve our customer service experience, including for training and quality assurance purposes
• In the event of a merger, sale or other transfer event, in which Personal Information held by us about you is among the assets transferred; and
• We may combine any of the information we collect from or about you and use it in the manner described in this Policy.

HOW WE DISCLOSE YOUR PERSONAL INFORMATION

We may disclose your Personal Information with your consent. We may also share your Personal Information with trusted third parties or in other instances, including where required by law. We will use contractual or other means to protect Personal Information disclosed to third parties where required to ensure that the recipient keeps the Personal Information confidential and does not use it for any other purpose except as directed by us.

We may disclose your Personal Information to the following categories of third parties:

Service Providers: We share your Personal Information with service providers that: (1) process Personal Information on our behalf; (2) provide infrastructure, products or Services to us or on our behalf or help us operate or improve our business; (3) participate with us in the provision, maintenance, or operation of the Digital Platforms; and (4) provide you with information, products and/or Services or when it is necessary to provide information, products or Services to you.

By Law, to Protect Rights and to Comply with Our Policies: We disclose your Personal Information if: (1) required to do so by law, or in response to a subpoena or court order, regulatory inquiries, audits, or other legal requirements; (2) we believe, in our sole discretion, that disclosure is reasonably necessary to protect against fraud, to protect the property or other rights of us or other users, third parties, or the public at large; xor (3) we believe that you have abused the Digital Platform by using it to attack other systems or to gain unauthorized

access to any other system or otherwise to violate applicable laws.

Corporate Transactions: In the event we enter into or intend to enter into a transaction that alters our business structure, such as a sale, reorganization, merger, joint venture, change of control or other disposition of all or any portion of our business, assets or stock, we may share Personal Information with third parties to facilitate and/or complete the transaction.

HOW WE PROTECT YOUR PERSONAL INFORMATION

We take reasonable technical, administrative, and physical safeguards to protect the security of your Personal Information. Despite these measures, no system is impenetrable. We cannot guarantee the security of electronic data nor can we guarantee that the information, including Personal Information, you supply will not be intercepted. Where we have given you (or where you have chosen) a password which enables you to

access certain parts of the Digital Platforms, you are responsible for keeping this password confidential and for complying with any other security procedures that we notify you of or you believe are reasonable. We ask you not to share a password with anyone.  Any unauthorized access to or use of our Digital Platforms or information collected and maintained by our Digital Platforms should be immediately brought to our attention by contacting us at privacy@armstrongceilings.com.

STORAGE OF YOUR INFORMATION OUTSIDE OF THE UNITED STATES AND CANADA

Your information may be transferred to or stored on servers where we conduct business, which includes but is not limited to the United States and Canada. As such your Personal Information may be accessed and stored outside your country of residence.  By using our Digital Platforms, products, and/or Services, or otherwise providing Personal Information to us, you understand that Personal Information, from or about you or your use of our products or Services may be transferred to and/or stored in countries outside of your country of residence, including the United States.

CHILDREN’S PRIVACY

Our Digital Platforms and Services are designed and intended for adults.

By accessing and/or using the Digital Platforms or Services, you represent that you are at least eighteen (18) years old. If we obtain actual knowledge that a user is not at least eighteen (18) years of age, we will promptly delete information associated with that user.  If you are a parent or guardian and believe that your child has disclosed Personal Information to us, please contact us as described in the “Contact Us” section below. You may review and request the deletion of your child’s Personal Information or prohibit the further use of such information.

YOUR CHOICES REGARDING YOUR PERSONAL INFORMATION

Registering with the Digital Platform is voluntary. You may view most of the Digital Platform without registering or submitting your Personal Information through the Digital Platform. Some portions of the Digital Platform may only be available to users who have registered.

We provide you with specific rights regarding your Personal Information. These include:

Right to Know/Access: Upon verification of your identity you may exercise, no more than twice in any 12-month period, the right to know what Personal Information we collected about you in the immediately preceding 12-month period, including the categories of Personal Information, the categories of sources from which the Personal Information was collected, the business or commercial purposes for which the Personal Information was collected, sold, shared, the categories of third parties with whom we share the Personal Information, and the specific pieces of Personal Information we collected about you.  To the extent technically feasible, you have the right to obtain specific pieces of Personal Information in a readily usable format that allows you to transmit the data to another entity without hindrance.

Right to Correct: You have the right to correct inaccurate Personal Information that we maintain about you.

Right to Delete: You have the right to request that we delete Personal Information that we collected from you and retained, subject to certain exceptions.

Right to Opt-Out:  You have the right to opt out of processing Personal Information for the purposes of: (i) the sale or sharing of Personal Information, (ii) targeted advertising, or (iii) profiling in furtherance of automated decisions that produce legal or similarly significant effects. We do not use your Personal Information to engage in targeted advertising, profiling or automated decision making.

Right to Limit the Use or Disclosure of Sensitive Personal Information: You have the right to request that we limit the use and disclosure of your Sensitive Personal Information to specific business and legal purposes. Our use of Sensitive Personal Information is already limited to the approved business purposes identified above.

Non-Discrimination: Unless permitted by applicable law, we will not discriminate against you for exercising any of your privacy rights under applicable law, including by, but not limited to:

• Denying you goods or services;
• Charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Providing you a different level of quality of goods or services; or
• Suggesting that you will receive a different price or rate for goods or services or a different level of quality of goods or services.

Right to Appeal:  You have the right to appeal any decision that includes a refusal to take action on a request.  Appeals must be filed within 45 days of receipt of the decision.  Any such decisions will be transmitted by email and will contain a link for submitting your appeal through our online form.  You may also submit your request by calling us at 1-877-276-7876 or by emailing us at privacy@armstrongceilings.com.

Exercising Your Rights – Only you or an authorized agent may make a verifiable consumer request related to your Personal Information. To exercise your rights, fill out this online form .  You may also submit your request by calling us at 1-877-276-7876 or by emailing us at privacy@armstrongceilings.com.

Designating a Third-Party to Act on Your Behalf – Except where you have provided an agent with a Power of Attorney pursuant to Sections 4000 – 4465 of the California Probate Code, when using an authorized agent you must: (1) provide the agent with signed permission clearly describing their authority to make a request on your behalf; (ii) verify your own identity; and (iii) directly confirm that you have provided the authorized agent permission to submit the request. We may deny a request from an authorized agent if the agent does not provide us with the signed written permission demonstrating that they have been authorized to act on your behalf.

Verifying Your Requests – The verifiable consumer request initiated by you or your authorized agent must:

• Include your full legal name, email, and phone number, which we will need to contact you in order to verify that you are the person about whom we collected Personal Information or an authorized representative.
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us. Upon receiving your request, we may also contact you via email and/or other secure communication channels to verify your identity. In certain instances, e.g., a mismatch against known information or where you are seeking information on behalf of another person with authorization, we may seek additional verification from you, which may be in the form of you providing a copy of a valid, government issued identification or a notarized attestation. We will only use this information to verify the requestor’s identity or authority to make the request.

Exceptions – These rights are not absolute and are subject to certain exceptions. For example, we cannot disclose or permit access to specific pieces of Personal Information if granting your request would present a certain level of risk to the security of the Personal Information at issue, your account with us or the security of our Services. We may deny your deletion request if retaining the information is necessary for us or our service providers and/or contractors to:

• Complete the transaction for which we collected the Personal Information, provide a product or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
• Debug products to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
• Comply with a legal obligation.
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

Other California Privacy Rights – California’s “Shine the Light” law (Civil Code § 1798.83) permits California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please fill out this online form . You may also submit your request by calling us at 1-877-276-7876 or by emailing us at privacy@armstrongceilings.com.

Email Communications

If you submit your Personal Information through the Digital Platform, we may send you commercial or marketing emails. Such communications may include information in relation to new product lines, product updates, details of current and future projects, quality and technical issues and a newsletter. If you receive an email from us that you did not want to receive or if you want us to stop sending you emails after you receive one from us or if you want to withdraw your consent and opt-out of email marketing, follow the instructions contained in any of the written communications. You may unsubscribe at any time. We will use reasonable and appropriate measures to honor your request within ten (10) days.  Please note that even if you unsubscribe from these commercial communications, we may still send you non-commercial (transactional) e-mails.

Access and Connections to Social Media. If you connected, linked, or shared your use of our Digital Platforms via your social media profile, you can manage the permissions granted to such third-party social media services by accessing youruser settings under your account. You also can remove our access to your social media account or control what information these third-party social media services share with us at any

time by accessing the privacy settings in your social media account.

Consumers with Disabilities

This policy is in a form that is accessible to consumers with disabilities.

PRIVACY POLICY CHANGES

We may change this Privacy Policy. If we make such a change, we will revise the Privacy Policy’s effective date. If we change the Privacy Policy in a way that materially changes the way your Personal Information is processed, we will either send a notice email to you at the email address you provided or the email address we have on file for you, or we will publish a notice on the Digital Platform, or use other reasonable and appropriate measures to notify you of the change.

CONTACT US

Questions, comments, and requests about this Privacy Policy or the information we collect about you while you use the Digital Platform may be sent to privacy@armstrongceilings.com or mailed to Armstrong World Industries, 2500 Columbia Avenue, Lancaster, PA 17603.