Privacy Policy – Corrugated Supplies Company

Effective: November 1, 2024

For a printable version of this Privacy Policy, please click here.

This Privacy Policy (“Privacy Policy”) describes how your personal information is collected, used, and shared by Corrugated Supplies Company (“CSC,” “we,” “us,” and “our”) when you visit websites or services controlled by CSC where this Privacy Policy is posted (collectively, the “Websites”) or when we otherwise process personal information. We may update this Privacy Policy from time to time, as detailed below. You should not use the Websites if you have any objections to our Privacy Policy, which is binding upon all users of the Websites. If you have a question about how your personal information is being used, you can contact us through the methods provided in the “Contact Information” section at the end of this Privacy Policy.

What Do We Mean By “Personal Information” and “Personal Data”?

“Personal information” or “personal data” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. Personal information that is publicly available, aggregated (e.g., compiled to create statistics that cannot identify a particular individual) or de-identified (stripped of all unique identifiers such that it cannot be linked to a particular individual) is not considered “personal information” for the purposes of this Privacy Policy.

Notice at Collection

We may collect or process various categories of personal information. The section titled “Information We Collect and How We Use It” contains information on the categories of personal information collected. As an overview, depending on how you interact with us, we may collect identifiers, such as name, contact information, and IP address. We collect this information to provide, maintain, and improve our Websites, provide services to you, and for other reasons listed below. Your personal information may be disclosed to service providers or other third parties as outlined in “How and When We Share Information with Third Parties.” We will retain your personal information for as long as needed to fulfill the purposes for which it was collected and to comply with our legal obligations, resolve disputes, and enforce our agreements. We do not sell your personal information for monetary compensation, but we partner with third-party analytics partners, which may be considered a “sale” of personal information under applicable laws. We only collect sensitive personal information, such as a driver’s license or other state or government ID, to evaluate your job application, and we delete this information in accordance with our data retention practices. If you would like to exercise your rights under applicable law, please visit the “Your State Privacy Rights” section of this Privacy Policy.

Information We Collect and How We Use It

CSC collects personal information about you when you use our Websites. We may collect the below personal information from you when you interact with us:

Identifiers, such as names, personal contact information, and IP address. This information is collected only when you choose to provide this information to us (for example, through a general inquiry contact form).
Commercial information, such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other similar network activity, such as browsing history, search history, information regarding interaction with an internet website, application, or advertisement.
Inferences drawn from any personal information, such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

CSC may use personal information collected from you to provide features and services, to process your request, to contact you with information, for internal business purposes, for customer service purposes and as otherwise described in this Privacy Policy.

Job Applicant Information

When you apply for a job with us, we may collect identifiers, professional or employment-related information, and education information from you via our Website and otherwise, including:

• Information you provide in connection with your application; • Information about you that is publicly available;

• Health information, including disability information;

• Information that you authorize us to collect via third parties, including former employers or references;

• Any other information provided in connection with your application.

This information may include:

• Identifiers such as your name, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, telephone number, account name, Social Security number, driver’s license number, passport number; government-issued identification number, or other similar identifiers;

• Personal information categories listed in the California Customer Records Statute (California Civil Code 1798.80), including name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. (Some Personal Information included in this category may overlap with other categories.)

• Protected classification characteristics under California or federal law, including age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).

• Internet or other similar network activity, including browsing history, search history, information regarding interaction with an internet website, application, or advertisement.

• Geolocation data, including physical location or movements; coarse geolocation information, such as IP address, that describes your general location; precise geolocation information, such as GPS data.

• Professional or employment-related information, such as current or past job history or performance evaluations.

• Non-public education information (per the Family Educational Rights and Privacy Act), such as education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

• Inferences drawn from any personal information, such as a profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

• Sensitive Personal Information, such as (1) drivers’ license number, government-issued identification number, passport number; (2) precise geolocation information; (3) racial or ethnic origin, religious, or philosophical beliefs, or union membership; and (4) health information.

We use your personal information to assess your skills in relation to the applicable job requirements. We may also use your personal information to contact you during the hiring process. In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.

Categories of Sources from Which Personal Information is Collected

We may collect Personal Information about you in a variety of different scenarios and using a variety of different methods and sources, including, but not limited to: through our website, through your mobile device, through email, in physical locations, through written or online applications, through the mail, over the telephone, from business partners, government sources, and/or third-party vendors.

CSC may share personal information and de-identified and aggregated user statistics with third parties in our discretion. We do not share personal information with third parties for those third parties’ own marketing purposes. We may share the personal information we have collected about you with third parties as disclosed at the time you provide your personal information, with your consent, as described in this Privacy Policy, and under the following circumstances:

with our vendors and third-party service providers to perform certain services on behalf of the Websites, such as hosting the Websites or Websites’ features, sending email or other communications, and providing marketing assistance and data analysis;
in response to lawful requests by public authorities, including to meet national security or law enforcement requirements;
to comply with legal process or a subpoena, or at the lawful request of a governmental entity or other public authority conducting an investigation, and to protect and defend the legal rights or property of CSC, our Websites or its users, or any other party; and
in connection with a business transition (such as a merger, acquisition by another company, in the unlikely event of a bankruptcy, or sale of all or a portion of assets), including during the course of any due diligence process.

Tracking Technologies

We, and our third-party service providers may use cookies, web beacons and other tracking technologies to collect personal information about visitors and how they use our Websites. We use this information to improve our Websites and for other business purposes.

“Cookies” and local storage are pieces of information (data files) transferred to a browser when the user visits a site. These technologies are able to store a unique identifier for a device to allow an online service provider to recognize the device whenever the device is used to visit the site. You can find more information about cookies and how they work at www.allaboutcookies.org.

Small graphic images or other web programming code called web beacons (also known as “pixel tags,” “1×1 GIFs,” or “clear GIFs”) may be included in our web pages and email messages. Web beacons may be invisible to you, but any electronic image or other web programming code inserted into a web page or email can act as a web beacon. Web beacons or similar technologies may be used for a number of purposes, including, to count visitors to the Websites, to monitor how users navigate the Websites, to count how many emails that were sent were actually opened or to count how many particular links were actually viewed.

Google Analytics. To help facilitate the delivery of relevant content, we utilize Google Analytics to identify how users engage with our Websites and to provide us with information regarding our users. For more information about Google Analytics, how it collects and processes information, and for instructions on opting out of Google Analytics using a specific plug-in please visit https://tools.google.com/dlpage/gaoptout. Note that Google’s opt-out mechanism is specific to Google activities.

Please click here to access our “Do Not Sell or Share My Personal Information” webform to submit your request to opt-out of our use of analytics cookies to collect your personal information.

How We Respond to “Do Not Track” Signals and the Global Privacy Control

Please note that your browser settings may allow you to automatically transmit a “Do Not Track” signal to websites and online services that you visit. There is no consensus among industry participants as to what “Do Not Track” means in this context. Like many websites and online services, CSC does not alter its practices when it receives a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com. We recognize the Global Privacy Control optout preference signal as a request to opt-out of the sale or sharing of your personal information and to limit the use and disclosure of your sensitive personal information.

Third-Party Links

The Websites may have links to third-party websites. If you click on social networking buttons or thirdparty links, you will be taken to those third parties’ websites, and your use of those third parties’ websites and platforms are subject to their privacy policies and practices. We are not responsible for the privacy or business practices of any third party.

Policy Regarding Children’s Personal Information

The Websites are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are under 18, please do not use the Websites and do not provide any personal information to us. If you become aware that a child under 18 has provided us with personal information without your consent, please contact us at HR@Vandraft.com. Visit www.OnGuardOnline.gov for tips from the Federal Trade Commission on protecting children’s privacy online.

Public Posting Areas

Please note that any information you post to any public posting area, such as the comment section of our social media sites, or when you provide reviews, is available to anyone with Internet access worldwide. If you don’t want people to know your email address, for example, don’t include it in any message you post publicly. PLEASE BE EXTREMELY CAREFUL WHEN DISCLOSING ANY INFORMATION IN PUBLIC POSTING AREAS. WE ARE NOT RESPONSIBLE FOR THE USE OR DISCLOSURE BY OTHERS OF THE INFORMATION THAT YOU DISCLOSE IN PUBLIC POSTING AREAS.

Disclaimer Regarding Video Content

The Websites may contain video content, audiovisual content, or content of a like nature (collectively, “Video Content”). In connection with our provision of Video Content, the Websites may utilize online tracking technologies and code-based tools, including, but not limited to, Software Development Kits (“SDKs”), pixels, and cookies (i.e., advertising or analytics cookies) that track information about your activity and webpage-viewing history on the Websites (collectively, “Tracking Tools”). Tracking Tools on the Websites may result in information about your activity on the Websites being transmitted from your browser to CSC and third parties, which, in turn, may result in the display of targeted advertisements on third-party websites, platforms and services, including advertisements for CSC content. In addition, whether Tracking Tools on the Websites result in your browser’s transmission of information to third parties depends on a number of factors that may be outside of CSC’s knowledge or control, including what third-party websites you use, what information you have provided to such third parties, and whether (and the extent to which) you have limited the use of cookies by the operators of those thirdparty websites, platforms, and services.

Data Security

The security of your personal information is important to us. We implement reasonable technical and organizational security measures to protect the personal information submitted to us, both during transmission and once it is received. CSC takes steps to ensure that such data remains private and confidential. We restrict access to personal information to CSC employees, contractors, and agents who need to know that information in order to operate, develop, or improve our Websites. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

Please understand, however, that no data transmissions over the Internet can be guaranteed to be 100% secure due to the inherent risks of data transmission over the Internet. Consequently, we cannot ensure or warrant the security of any information you transmit to us, and you understand that any information that you transfer to us is done at your own risk. If we learn of a security system breach, we may attempt to notify you, including electronically, so that you can take appropriate protective steps. By using the Websites or providing personal information to us, you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of the Websites. We may post a notice via our Websites if a security breach occurs. We may also send an email to you at the email address you have provided to us or send you postal mail in these circumstances. If you have any questions about the security of your personal information, you can contact us via the contact information below.

Data Retention

We may retain your information only for as long as needed to provide you with the Websites, comply with our legal obligations, resolve disputes, and enforce our agreements. In certain circumstances, we may be required by law to retain your personal information, or may need to retain your personal information in order to continue providing access to the Websites. Even if you delete your account, keep in mind that the deletion by our third-party providers may not be immediate, and that the deleted information may persist in backup copies for a reasonable period of time.

International Data Transfers

CSC is a U.S. company, and the Websites are hosted in the United States. In order to communicate with you about content, the information that we collect from you may be transferred to, stored, used, and processed by CSC in the United States or by one of our service providers based in the United States or outside of the United States.

If you are visiting from the European Union or other regions with laws governing information collection and use that may differ from United States law, please note that you are transferring your personal information to the United States. The laws of some countries may not provide the same levels of protection of personal information as your home country, particularly if you are resident in the European Union. By using the Websites, you agree to the collection, transfer, storage, use and processing of information about you for the purposes described in this Privacy Policy. When you provide personal information to us or our service providers or vendors, you consent to the processing of your information in the United States. We will take reasonable steps to ensure that information about you is treated securely in accordance with this Privacy Policy, and that all information you provide to us is stored on our secure servers or those of our service providers.

YOU ACKNOWLEDGE THAT THE LAWS OF THE UNITED STATES TREAT YOUR INFORMATION IN A MANNER THAT MAY BE SUBSTANTIALLY DIFFERENT FROM, AND LESS PROTECTIVE THAN, THE TREATMENT REQUIRED UNDER THE LAWS OF OTHER COUNTRIES AND JURISDICTIONS. IF YOU DO NOT WANT YOUR INFORMATION TRANSFERRED TO THE UNITED STATES, YOU SHOULD NOT SHARE YOUR PERSONAL INFORMATION WITH US, OR MAKE USE OF THE WEBSITES.

Your Privacy Rights

California residents may have the right to object to our collection and use of your personal information at any time, or to require us to review, transmit, change, or delete your information that we have collected and retained about you. We will fulfill your request to exercise any of these rights within the applicable time period prescribed by law. You can exercise these rights, express concerns, or obtain additional information about the use of your personal information by contacting us as outlined below. Residents of California may have the following rights:

You have the right to know and right to access information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties with whom we share such information. You also have the right to know if we have sold or disclosed your personal information. You may also request a copy of the personal information we have collected, and upon request, we will provide this information to you in electronic form.
You have the right to request the deletion of your personal information, subject to certain legal exceptions.
You have the right to opt out of the sale or sharing of your personal information to third parties.
You have the right to correct your personal information if inaccurate.
You have the right to limit the use and disclosure of your sensitive personal information if we use such information to infer characteristics about you. Note that for precise geolocation information collected through a mobile device, you will need to update your settings. To do this on an iPhone, (1) go to Settings > Privacy > Location Services > and choose an app; (2) Select the app > tap on “location;” (3) Scroll down and slide the “Precise Location” toggle to Off. To do this on an Android, (1) go to Location Services > Google Location Accuracy; and (2) Toggle Improve Location Accuracy to Off.
You have the right to opt out of decision based solely on profiling or automated decision making, except under certain exceptions under local law.
You have the right to not be discriminated against for exercising any of these rights.

Separate from the CCPA, California’s Shine the Light law gives California residents the right to ask companies what personal information they share with third parties for those third parties’ direct marketing purposes. We do not disclose your personal information to third parties for their purpose of directly marketing their goods or services to you. If you have any questions regarding this policy, or would like to change your preferences, you may contact us using the information below.

Submitting a Rights Requests: You may send your request by email to PrivacyRequest@vancraft.com or by toll-free phone to 1-888-VANCRFT (1-888-826-2738). An authorized agent, such as another individual or business, may submit a request on your behalf. We will not discriminate against you for exercising your rights under applicable law. Once you have submitted your request, we will respond within the time frame permitted by applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

Our Verification Process

Upon receipt of your request, we will provide directions on identity verification requirements which will include submission of pieces of Personal Information that we can match to our records. Once you provide such information and assuming we are able to verify your identity by matching the information you provided to our records, we will begin to gather information to respond to your request. For requests to correct, we may require you to provide additional documentation to rebut any of our own documentation that the Personal Information that you are requesting to correct is accurate.

Once you have submitted your request, we will respond within the time frame permitted by applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.

Appeals. Residents of California have the right to appeal a denial of their request by contacting us as described in the notice of denial.

Nevada Disclosure: Residents of Nevada have the right to opt-out of the sale of certain pieces of their information sold to third parties. Currently, we do not engage in such sales. If you are a Nevada resident and would like more information about our data sharing practices, please contact us by sending your request via email to PrivacyRequest@vancraft.com.

Privacy Policy Changes

We may need to update this policy from time to time, and we reserve the right to do so as we deem necessary. If we change this Privacy Policy, we will notify you of such changes by revising the “Effective Date” provided herein, and/or by any other legal means, and your use of the Websites after any such changes shall constitute your consent to such changes. We encourage you to periodically review this page for the latest information on our privacy practices.

Contact Information

If you have any questions or concerns about this Privacy Policy or your choices and rights under the CCPA, or if you wish to exercise your rights under the CCPA, please contact us via one of the methods provided below: Mail: 5043 W 67th St. Bedford Park, IL 60638 Email: PrivacyRequest@vancraft.com Phone: 1-888-VANCRFT (1-888-826-2738)