Privacy Policy

Your privacy is important to us.

Gypsum Management & Supply, Inc. and its subsidiaries and affiliated companies (“Company” or “we”) aim to respect your privacy. This Privacy Policy sets forth how we collect, use, disclose, and retain personal information we collect, including when you when you visit our websites or otherwise interact with us.

Assistance For The Disabled

Alternative formats of this Privacy Policy are available to individuals with a disability.  Please contact privacyinquiries@gms.com for assistance.

Special Policy Regarding Information from Children Under Sixteen

This Web site is not targeted to children under the age of 16, and we do not knowingly request personally identifiable information from any child under the age of 16 without parental consent. When we do receive such information, we delete it as soon as we discover it and do not use it or share it with third parties.

This Privacy Policy explains:

  1. The categories of information we collect and the sources from which we collect this personal information
  2. The purposes for which we use your personal information
  3. How we may disclose your personal information
  4. Data Retention
  5. Information for California residents
  6. Notification of Changes

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

Other websites

The Site may contain links to other websites not operated or controlled by us (“Third party Sites”).  The policies and procedures we describe here do not apply to Third Party Sites.  The links from the Site do not imply that we endorse or have reviewed the Third Party Sites.  We suggest contacting those sites directly for information on their privacy policies.

1. Categories of Personal Information We May Collect And the Sources From Which We Collect This Personal Information

We collect the following categories of personal information about you. These also include the categories of information we have collected over the past 12 months. The sources of this information are directly from you or from others on your behalf , our service providers, affiliated companies with the GMS family of companies, government reporting agencies, automated technologies , for example, browsing activity collected by automated technologies on the Site, and third parties, for example, lawyers, auditors, and insurers who provide legal, insurance, and accounting services.  Note that the categories listed below are defined by state law, including the California Privacy Rights Act, Cal. Civ. Code §1798.100 et seq. We included all categories of personal information that we have collected, however, depending on the services and products we provide you, we may not collect all of the types of information within that category (e.g., we may collect your name, postal address, and email address for a particular purpose without collecting your social security number, driver’s license number, or other information within the “personal identifiers” category).

 

Categories of
Information we collect

Purposes for which
We use Information

Personal Identifiers:

your name, alias, postal address, email address, unique personal identifier, online identifier, account name, Internet Protocol address, signature, or other similar identifiers.

 

  • To provide you with products and services
  • To establish, manage, and administer your customer account and our business
  • To invoice and deliver orders
  • To enable business communication related to orders, such as communications about invoicing, delivery, and payments
  • To allow you to apply for and, if approved, obtain products and services on credit
  • To provide you with products and services
  • To establish, manage, and administer your customer account and our business
  • To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity
  • For auditing and compliance management, institutional risk management, data analytics and technological development of our systems
  • For research and development of our products
  • For quality assurance
  • In connection with a proposed sale or merger
  • To comply with legal requirements
  • To comply with legal investigations and subpoenas
  • To respond to judicial process or government authorities

Commercial information: records of your personal property, products or services you have purchased or considered, and other histories or tendencies to purchase or consume particular products and services

  • To provide you with products and services
  • To establish, manage, and administer your customer account and our business
  • To invoice and deliver orders
  • To allow you to apply for and, if approved, obtain products and services on credit
  • To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity
  • For auditing and compliance management, institutional risk management, data analytics and technological development of our systems
  • For research and development of our products
  • In connection with a proposed sale or merger
  • To comply with legal requirements
  • To comply with legal investigations and subpoenas
  • To respond to judicial process or government authorities

Internet or other electronic network activity information: browsing history, search history, and information about your interaction with a Web site, online application and advertisements

  • To provide you with products and services
  • To establish, manage, and administer your customer account and our business
  • To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity
  • For auditing and compliance management, institutional risk management, data analytics and technological development of our systems
  • For research and development of our products
  • For quality assurance
  • To comply with legal requirements
  • To comply with legal investigations and subpoenas
  • To respond to judicial process or government authorities

Geolocation data

  • To provide you with products and services
  • For auditing and compliance management, institutional risk management, data analytics and technological development of our systems
  • For research and development of our products
  • To comply with legal requirements
  • To comply with legal investigations and subpoenas
  • To respond to judicial process or government authorities

Sensory information: Audio, electronic, visual, and recorded calls

  • To provide you with products and services
  • For research and development of our products
  • To comply with legal requirements
  • To comply with legal investigations and subpoenas
  • To detect security incidents and protect against malicious, deceptive, fraudulent or illegal activity
  • To respond to judicial process or government authorities

Professional or employment-related information: such as your job title and employer

  • To allow you to apply for and, if approved, obtain products and services on credit

Financial information: such as payment card details, billing address, and shipping address

  • To allow you to order and purchase products

Communications data: such as during our communications with you, we collect the content of these communications as well as metadata about the communications, i.e., date and time of the call or text (SMS or MMS) message and phone numbers.

  • To provide you with products and services
  • For research and development of our products
  • For quality assurance

 

 

Note on Sensitive Personal Information: Company does not infer characteristics from sensitive personal information.  Company only uses sensitive personal information as necessary to perform the services or provide the goods the average person would reasonably expect when requesting those goods or services, to ensure security and integrity, short term transient use, to maintain the quality of our products and services, or for other purposes permitted by the California Privacy Rights Act and implementing regulations (“CPRA”) without the right to opt out.

 

Cookies

What are cookies?

When you visit our website, we place a so-called “cookie” in a file on your browser so that our website is more user-friendly, effective, and secure. By using a cookie, your browser can remember specific information about you across several pages or between visits to our website. In addition to cookies, we use scripting, which is code run on the website to collect information such as actions you’ve completed on our website or items you click on. We also collect information through “referrers”, which are small pieces of data your web browser passes to us indicating which website linked you to our website. For example, if you click on a link on a Google search result page that takes you to our website, we will receive a referrer that tells us you were linked to our page from Google. For the purposes of this Policy, we refer to these technologies as “cookies.”

We do not store any sensitive personal information within the cookies we place on your device. Our website does not read any information stored in cookies placed on your browser by other websites.

Why do we use cookies?

We use cookies to offer you a better experience on our website. Most of the cookies we use are “session cookies” which are automatically deleted as soon as you leave our website. Other cookies, so-called “persistent cookies,” remain on your computer until you delete them. Using these cookies allow us to enhance your experience when you interact with our website, such as by helping recognize your browser the next time you visit.

The cookies we use fall into three different categories:

Strictly Necessary Cookies

These cookies are necessary for the website to function. They are usually only set in response to actions taken by you which amount to a request for services, such as logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not work if you do block these cookies. These cookies do not store any personally identifiable information.

Performance Cookies

These cookies collect browsing information in order to improve your overall experience. We use this information to track website usage and compile statistics. This helps us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous.

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalization.

Third-Party Cookies

We may allow third-party advertising cookies to be placed on your computer or mobile device when you visit our website. Third-party cookies, including social media plugins, belong to and are managed by other parties, such as Google or other online advertisers. These kinds of persistent cookies remember the websites you visit, and that information is shared with other parties, such as advertisers. We may use third-party advertising networks to help us deliver tailored online ads to you.

How can I control cookies?

You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it. Browsers may also be set up to display a warning when a cookie is used. You may even disable your browser from accepting cookies. Disabling cookies is unique to each browser and device you use. Disabling cookies on one device will restrict the ability to tie that device to other devices you use. Parts of our website may not function properly if you disable cookies. To provide you with the best possible experience while visiting our website, please enable cookies within your browser.

Separate from our website(s), some third-party websites may enable cookies to be placed or accessed on your device by third party advertising networks. These kinds of persistent cookies remember the websites you visit including ours, and that information is shared with other parties, such as advertisers. We do not enable third-party cookies to be placed or accessed on your device through our website. To learn more about opting-out of this type of interest-based advertising, please visit the Network Advertising Alliance (NAI) Consumer opt-out website.

Google Analytics

We use cookies provided by Google Analytics to collect information about use of our Site. These cookies collect data tied to a user’s IP address, such as the length of time a user spends on a page, the page a user visits, and the websites a user visits before and after visiting the Site.  Based on this information, Google Analytics compiles aggregate data about Site traffic and Site interactions, which we use to offer better website experiences and tools in the future. For more information on Google Analytics, visit https://support.google.com/analytics.You can opt out of Google Analytics without affecting your visit to our Site. For more information on opting out of Google Analytics tracking, visit this Google page.

Tracking Across Time and Different Sites

The Site does not track your online activities over time and across websites or online services on an individually identifiable basis.  We do not allow third parties to use our Site to track your activities over time or across other websites.

Do Not Track Signals

We have implemented a cookie “door” to ensure your cookie preferences are honored. We also have tools in place to better detect and honor requests made using the Global Privacy Control (“GPC”) signal as requests to opt-out of the sharing of personal information to the extent required by applicable law. We endeavor to honor these requests with respect to any personal information connected to the GPC opt-out request based on the information made available by GPC. Note that we may not be able to tie a GPC request to all personal information we have about you. If you wish to exercise your rights under applicable state privacy laws, we recommend submitting your preferences via our cookie “door”.

2. Purposes For Which We Use Your Personal Information

We may use information about you for the following business or commercial purposes:

  • To provide you with products and services
  • To establish, manage, and administer your customer account and our business
  • To invoice and deliver orders
  • To enable business communication related to orders, such as communications about invoicing, delivery, and payments
  • To allow you to apply for and, if approved, obtain products and services on credit
  • To detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity
  • For auditing and compliance management, institutional risk management, data analytics and technological development of our systems
  • For research and development of our products
  • For quality assurance
  • In connection with a proposed sale or merger
  • To comply with legal requirements
  • To comply with legal investigations and subpoenas
  • To respond to judicial process or government authorities
  • For customer support
  • To respond to any requests, queries, suggestions, feedback, or comments you may have
  • To inform you of any changes to the services, your account (if applicable), this Privacy Policy, or any other policies or terms in relation thereto
  • To store, host, or backup (whether for disaster recovery or otherwise) our services or any data contained therein
  • To protect the rights, property, or safety of Company, you, or others
  • To administer and protect our business and our Site (including troubleshooting, analysis, testing, system maintenance, support, reporting and hosting of data, and preventing fraud and abuse).
  • In connection with a corporate transaction, sale, or assignment of assets, merger, divestiture, or other changes of control or financial status of Company and any of its subsidiaries or affiliates.
  • To exercise Company’s rights under applicable law and to support any claim, defense, or declaration in a case or before a jurisdictional and/or administrative authority, arbitration, or mediation panel.
  • To ensure compliance with applicable laws and regulatory obligations.
  • Any incidental purposes related to, or in connection with, the above

3. How We May Disclose Your Personal Information

  1. Disclosures Generally

Company discloses personal information as necessary for the purposes described in Section 2 above to the following categories of external recipients:

  • Service providers and contractors: Company discloses your personal information to service providers and contractors for the purposes above to assist us in meeting our business needs and contractual and legal obligations.
  • Affiliated companies: Other companies within the GMS family of companies, for example, to provide you with our products and services.
  • Public: Company may disclose personal information to the public as part of a press release, for example, to announce the winner of a sweepstakes if required by state law.
  • Required Disclosures: We may be required to disclose personal information in a court proceeding, in response to a court order, subpoena, civil discovery request, other legal process, or as otherwise required by law.
  • Legal Compliance and Protections: We may disclose personal information when we believe disclosure is necessary to comply with the law or to protect the rights, property, or safety of Company, our users, or others.
  • Corporate Transactions: We reserve the right to disclose and transfer your personal information, including your personal information to a subsequent owner or co-owner, or in connection with a merger, consolidation, bankruptcy, the sale of substantially all of our membership interests and/or assets or other corporate change, including to any prospective purchasers.

 

  1. Disclosures for Business Purposes

Company has disclosed each of the categories of personal information listed in Section 1, above, for the following “business purposes”, as that term is defined under the CPRA, in the last 12 months:

Company has disclosed each of the categories of personal information listed in Section 1, above, for the following “business purposes”, as that term is defined under the CPRA, in the last 12 months:

  • Service providers:  For the business purpose of performing services on Company’s behalf and, in particular, for the specific purposes described in Section 2, above.
  • Auditors, lawyers, consultants, and accountants engaged by Company:  For the business purpose of auditing compliance with policies and applicable laws, in addition to performing services on Company’s behalf.
  • Affiliated companies:  To other companies within the GMS family of companies for the business purposes of (1) auditing compliance with policies and applicable laws, (2) helping to ensure security and integrity, (3) debugging, (4) short-term transient use, (5) performing services on behalf of Company, (6) internal research, and (7) activities to maintain or improve the quality or safety of a service or device.

 

  1. Sales and Sharing

We do not sell consumer personal information or share it for cross context behavioral advertising purposes. Without limiting the foregoing, we have not, and have no actual knowledge that we have sold or “shared” the personal information of individuals of any age, including the personal information of children under 16, in the last 12 months.

4. Data Retention

We retain your personal information for the duration of the customer relationship, if any. We also retain your personal information for 12 months after our last interaction with you.  We will retain personal information longer as necessary to comply with legal, administrative, or procedural requirements, for example, a litigation hold.

In some circumstances, we will anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely.

5. Information For California Residents

Notice at Collection

We collect the personal information identified in Section 1 for the purposes identified in Section 2 and retain it for the period described in Section 4. We do not sell your personal information or disclose it for cross-context behavioral advertising (“sharing”).  We also do not collect or process sensitive personal information for the purpose of inferring characteristics about you.  To the extent you provide Company with personal information about other California residents, you are responsible for providing this notice to them.

Your California Privacy Rights

Subject to applicable law, California residents have the following rights:

  • Right to Know: You have the right to submit a verifiable request for to know the specific pieces of your personal information obtained from you and for information about Company’s collection, use, and disclosure of your personal information.  Please note that the CPRA’s right to obtain copies does not grant a right to the whole of any document that contains personal information, but only to copies of “specific pieces” of personal information.  Moreover, California residents generally just have a right to know categories, for example, categories of third parties to which personal information is disclosed, but not the individual third parties. 
  • Right to Delete: You have the right to submit a verifiable request for the deletion of personal information that you have provided to Company.
  • Right to Correct: You have the right to submit a verifiable request for the correction of inaccurate personal information maintained by Company, taking into account the nature of the personal information and the purposes of processing the personal information.

How To Exercise Your Rights

Company will respond to request to know, delete, and correct in accordance with applicable law if it can verify the identity of the individual submitting the request.  You can exercise these rights in the following ways:

  • Call 1-855-275-5787
  • Submit a request through our webform.

How We Will Verify Your Request

We will ask you to confirm information we already have on file, or provide other information sufficient for us to determine and confirm your identity before responding to your request. We request this information as a security measure to ensure that your personal information is not disclosed to someone who is not authorized to receive it. For example, we may verify the email address we have on file with the email address from which you are sending a request. We may also ask you to verify certain past orders, or to confirm your last four digits on a card you recently used to place an order. If you have an account with us, we may ask you to verify yourself by logging in. We may also contact you to ask you for further information in relation to your request, in order to speed up our response.

The more risk entailed by the request (e.g., a request for specific pieces of personal information), the more items of personal information we may request to verify your identity.  If we cannot verify your identity to a sufficient level of certainty to respond securely to your request, we will let you know promptly and explain why we cannot verify your identity.

Authorized Agent

You may also authorize someone to make a request on your behalf. To do so, you must provide the agent with written, signed permission to submit privacy right requests on your behalf, or provide a letter from your attorney. The agent or attorney must provide this authorization at the time of request. Note that we may require you to verify your identity with us directly before we provide any requested information to your approved agent.

In the alternative, you can provide a power of attorney compliant with the California Probate Code.

Company’s Non-Discrimination Policy

Company will not unlawfully discriminate against you for exercising your privacy rights under the California Privacy Rights Act.

6. YOUR CHOICES

We provide the following choices to all our customers regarding our use of information about you.

  • You may set your browser to reject cookies and to erase cookies that have already been placed on your hard drive. However, if you do so, your ability to navigate this site will be limited.
  • You may choose not to provide us with any contact information.
  • If you would like us to manage your contact status or be removed from any of our on-line mailing lists, click on the unsubscribe link contained in every email. This allows you to unsubscribe from emails.

7. SECURITY

We strive to have reasonable security procedures in place to protect against the loss, misuse or alteration of information under our control. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure.  If you have any questions about the security at our Website, or you have any reason to believe that the security of our Website or your information has been compromised, please contact us at the email address or phone number below.

Notification of Changes

If we change our privacy policy, we will post those changes on our Homepage so you will always be aware of what information we collect, how we use it, and under what circumstances we disclose it. We will use information in accordance with the privacy policy under which the information was collected.

CONTACT US

If you have any questions about this privacy policy or our privacy practices, please call us toll free at 1-855-275-5787 or email us at privacyinquiries@gms.com. You can also contact us at: https://www.gms.com/contact-us.

If you are contacting us to complain about an alleged breach of this privacy policy or our privacy obligations at law, please provide us with as much detail as possible in relation to your complaint. We will take any privacy complaint seriously and any complaint will be assessed with the aim of resolving it in a timely and efficient manner. We request that you cooperate with us during this process and provide us with any information that we may need.

Without prejudice to any other administrative or judicial remedy you might have, you may have the right to lodge a complaint with local state regulators/data protection authorities if you believe that we have infringed applicable privacy or data protection requirements when processing personal data about you.

For most states in the United States, you may contact your state Attorney General to file a complaint. To the extent Colorado, Connecticut, or Virginia law applies, the Attorneys General have provided the following online submission methods for filing a complaint or registering any other concern about the result of your appeal.  

Colorado Attorney General: Submit a complaint online

Connecticut Attorney General: Submit a complaint online

Virginia Attorney General: Submit a complaint online