1.1 This Privacy Notice (“Notice”) describes the information that Rheem Manufacturing Company and its subsidiaries and affiliates (collectively, “Rheem”, or “we”) collects, uses, shares and stores about you, including personal data, and provides guidance and information regarding our processing of personal data. For purposes of this Notice, Data Protection Legislation generally defines “personal data” as any information about an identifiable individual, which includes information that can be used on its own or with other information to identify, contact, or locate a single person.

1.2 We are committed to protecting and respecting your privacy. This Notice sets out the legal bases we rely on when processing any personal data we collect from you that you provide to us, either directly or through our trusted partners, or that we obtain from others. Please read this Notice carefully to understand how we process personal data about you.

1.3 In this Notice, references to “you” means the person about whom we collect, use and process personal data.

1.4 We will use personal data about you only for the purposes and in the manner set forth below, which describes the steps we take to ensure that our processing of personal data complies with U.S. laws and regulations, including the California Privacy Rights Act (“CPRA”), Canadian Privacy laws and regulations, as well as with European Union Law, including Regulation (EU) 2016/679, known as the General Data Protection Regulation or GDPR, and any subsequent amendments or successor laws thereto (collectively referred to as “Data Protection Legislation”).

1.5 We seek to maintain the privacy, accuracy, and confidentiality of data (including personal data about you) that we collect and use.

2. WHEN DOES THIS PRIVACY NOTICE APPLY

2.1This Notice applies to personal data that we collect, use, disclose and otherwise process about you in connection with your relationship with us. This includes personal data we collect about you, or you provide to us, through our websites, mobile applications, or call centers; through product registrations; and through any other online or offline methods through which we communicate with you, as well as when we obtain personal data about you from a third party. While this Notice is designed to comply with privacy requirements across the United States, it is not meant to imply that all state privacy laws necessarily apply, or apply across all categories of personal data.

3. PROCESSING OF YOUR PERSONAL DATA

3.1The personal data we collect about you helps us provide the best possible support for your products, optimize your use of our websites and mobile applications, and show advertisements to you based on your interests. In addition, we are required to process certain personal data for legal, regulatory, tax and auditing purposes. The personal data we collect, the basis for our processing, and the purposes of our processing, are detailed below. Sometimes, these activities are carried out by third parties (see “Sharing of Personal Data” section below).

3.2You are not required to provide all the personal data described below to us; however, if you choose not to do so, we may not be able to offer you certain services and related features. You may provide personal data to us in various ways. The types of personal data we may obtain includes the following:

¹ Note: The collection, use and disclosure of personal data for individuals subject to Canada’s privacy legislation, the Personal Information Protection and Electronic Documents Act (PIPEDA), are based solely on the consent principal.

Personal data we process / Collect	Basis of processing	Purpose of processing / Collection
If your product is registered with us by you, or via contractors or plumbers, we will collect your name, postal address, email address, telephone number, or other identifiers by which we may contact you online or offline. We will also maintain this information with your purchase history.	It is necessary for the performance of our contract with you to provide warranty service (including any potential recalls) as necessary.	This is required to register your product or to provide you with service under the warranty, including any recalls.
If you purchase an extended warranty, or make a claim under any warranty, we will collect your name, postal address, email address, telephone number, or other identifiers by which we may contact you online or offline, purchase history, installation information, and credit card or other payment details.	It is necessary for the performance of our contract with you if you purchase an extended warranty or make a claim under any warranty.	This is required to provide extended warranties to your purchased products, and to process and fulfill claims in connection with our products and to inform you of the status of claims.
If you sign up for a contest or promotion, we will collect your name, email address, telephone number, product interest, and postal address.	Consent.	This is required to enter you into the contest or promotion you have chosen to participate in.
If you correspond with us, we will collect your name, contact details, and the details of your correspondence.	We collect this information because in some cases it is necessary for the performance of a contract with you, and in other cases when it is in our legitimate business interest to do so, depending on the nature of the correspondence.	We retain this information to keep track of our communications with you, to respond to your requests and inquiries, and to provide you with the best possible service
If you respond to any surveys, we will collect your name and your responses, some of which may include personal data.	We retain this information because it is in our legitimate business interest to do so.	We retain this information to understand how you use our products to improve our products and services, for developing new products and features, and to administer your participation in surveys and market research.
If you access our websites, we will collect non-persistent information about your computer equipment, device IP address, operating system, browser type, and browsing behavior including the details of your visits to our website, web traffic data, location data, and logs.	We process this information based on our legitimate business interests, or with your consent.	We process this information to enable and monitor your use of our websites and services, and to improve those services. We also collect this information so you will not have to re-enter it when you use our services, and also track and understand how you use and interact with our websites and applications, and also to tailor our services around your preferences and to enable us to manage and enhance our services.
If you access our websites, we will collect persistent information, including your device IP address, domain name, identifiers associated with your device, device and operating system type, and characteristics, web browser characteristics, language preferences, clickstream data, your interactions with our products and services, the pages that led or referred you to our websites or applications, dates and times of access, geolocation information, and other information about your use of our websites and applications.	We process this information based on your consent.	We use this information to provide you with interest-based (behavioral) advertising or other targeted content. For geolocation information, we use this information to understand where our products are used, and to respond to service requests or automatic service notifications.
Content you post in public areas of our websites, and 3rd party industry and social media sites.	We process this information based on our legitimate business interests. Please note that third party sites may have their own collection policies and processes, which we do not control.	We use this information to effectively communicate to you, respond to your requests or inquiries, and to better understand how our products are used.
If you apply for a job through our sites, we will collect name, address, social security number or other similar identifier, education information, employment history, and salary history.	We process this information on the basis of performance of an employment contract between you and us, and/or taking steps, at your request, to enter into such a contract.	We use this information to manage your application for, or interest in, career opportunities with us.
If you use any Rheem App, we will collect identifiers such as your name, geolocation information, telephone number, email, IP address and the name or designation you give to your account. The app would also collect certain additional information about your products, including usage history and functionality.	We process this information on the basis of the performance of a contract, for alerts, or on the basis of consent.	When you sign up for connected services, we use the information to administer your Rheem App account, manage its interaction with Smart Thermostats or Smart Water Heaters, and to send you fault alerts or status updates. We use geolocation information for various purposes including for you to be able to set your home location, and to determine the distance you are from your home location. This allows your equipment to save energy by only running when you are within a certain distance of your home location. This feature is completely optional and can be controlled from within your App.

The personal information that we collect from you may include information within the below categories of data. These categories also represent the categories of personal data that we have collected over the past 12 months. Note that the “category of data” column listed below refers to the category of personal data as defined under the California Privacy Rights Act (“CPRA”). Inclusion of a category in the list below indicates only that we may collect some information within that category. It does not necessarily mean that we collect all information listed in a particular category for our corporate customers.

We disclose the below categories of information to our affiliates and service providers.

Category of Personal Data	Purpose of processing
Personal identifiers such as a real name, alias, postal address, unique personal identifier, online identifier Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.	This data is necessary to: Set up and administer your account Offer you products or services that may be of interest to you Register you under our warranty program and to make repairs under the warranty Assess the success of our marketing and advertising campaigns Respond to your queries Conduct employee recruitment and selection Prepare required documentation such as work permits and to establish state of residency for employment purposes
Additional personal identifiers, including: Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, your name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.	This data is necessary to: Set up and administer your account Offer you products or services that may be of interest to you Register you under our warranty program and to make repairs under the warranty Assess the success of our marketing and advertising campaigns Respond to your queries Conduct employee recruitment and selection Prepare required documentation such as work permits and to establish state of residency for employment purposes
Characteristics protected by federal or state law, including: familial status, disability, sex, national origin, religion, color, race, sexual orientation, gender identity and gender expression, marital status, veteran status, medical condition, ancestry, source of income, age, or genetic information.	A subset of this data is necessary to open and manage an application for employment. It may also be necessary to accommodate any accessibility needs you may have if you come in to our facilities.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.	This data is processed to detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and for data analytics.
Sensory Information: Audio, electronic, visual, thermal, olfactory, or similar information.	A subset of this data is processed in connection with our closed-circuit television footage and system and building login and access records. It is also used to record customer service calls.
Professional or employment-related information: such as your job title, job history, and income.	This data is necessary to open and manage an application for employment.
Geolocation data	This data is processed to determine where our products are used and to respond to service requests or automatic service notifications. Also, when you sign up for connected services, we use the information to administer your Rheem App account, manage its interaction with Smart Thermostats and Smart Water Meters, and to send you fault alerts or status updates. We use geolocation information for various purposes including for you to be able to set your home location, and to determine the distance you are from your home location. This allows your equipment to save energy by only running when you are within a certain distance of your home location. This feature is completely optional and can be controlled from within your App. We do not, however, collect “precise geolocation” data as defined under California law.

In addition to the information above, we also collect the following categories of sensitive personal information:

Category of Sensitive Personal Information	Purpose of processing
Social security, driver's license, state identification card, or passport number.	Necessary to open and manage an application for employment
Account log-In, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.	Necessary to open and maintain an account with us, as well as to pay for our goods and services
Racial or ethnic origin, religious or philosophical beliefs, or union membership.	For equal employment opportunity reporting purposes, as well as to promote diversity and inclusion, we may collect racial and ethnic origin.

3.3 Where does Rheem obtain personal data about me?

Information you provide:

We obtain personal data about you directly from you, or via contractors and plumbers who assist you, when you register a product, when you extend a warranty, and when you submit information to us via our websites or mobile applications. We may also collect personal data in the course of the performance of your contract with us or if you contact us via phone, email or direct messaging services provided by third-party social media platforms.

Information we collect automatically:

As discussed above, when you navigate through and interact with our websites or mobile applications or through email, we may use automatic data collection technologies to collect information about you. This includes browser cookies, Flash cookies, web beacons, device identifiers, server logs, and other technologies.

Some content or applications, including advertisements on our websites, are served by third parties, including advertisers, ad networks and servers, content providers and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our websites, but only with your consent. Third parties that collect such information may associate it with your personal data where permitted by law, or they may collect information, including personal data, about your online activities over time and across different websites and other online services. They or Rheem may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties’ tracking technologies or how they may be used outside of our services. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly and/or review that provider’s privacy policy.

We do not support the Do Not Track browser option.

Information we obtain about you from third parties:

We may receive personal data about you from contractors or plumbers who may assist you in registering your products and purchasing extended warranties.

We also send out mailings via the post office from public records.

4. SHARING OF PERSONAL DATA

4.1 We do not sell personal data for any commercial or marketing purposes, have not sold personal data in the preceding 12 months and will not sell personal data.

4.2 The following are limited circumstances where we may share your personal data with third parties:

4.2.1 External vendors, service providers, and technicians who help with our data processing and storage;

4.2.2 In connection with a merger or sale of the company and/or parts of its assets, your personal data may be transferred as part of the merger or sale;

4.2.3 Contractors or plumbers who may assist you in registering your products or purchasing extended warranties, or performing diagnostics or service;

4.2.4 Third parties who you have requested information from us for purposes of financing or rebate information;

4.2.5 Affiliates, subsidiaries, divisions, and service providers who provide services to us or on our behalf;

4.2.6 Third parties who assist us in providing our products and services and to help us understand your use of our products;

4.2.7 External professional advisors;

4.2.8 Select third party vendors, business partners, conference sponsors/exhibitors and other companies so that they can send promotional materials about products and services (including special offers or promotions);

4.2.9 For any other purpose disclosed by us when you provide the information; and

4.2.10 With your consent.

We require all service providers that we share personal data about you to provide assurances regarding the confidentiality and security of that information. These third parties agree to only use such information for the purpose for which it was provided and in accordance with this Notice.

Sharing of personal data excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4.3 We may also disclose your personal data:

4.3.1To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law.

4.3.2To enforce or apply our terms of use and other agreements (including warranties) and for billing and collection purposes.

4.3.3If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Rheem, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

4.3.4 To others, where it is permitted by law.

5. INTERNATIONAL DATA TRANSFERS

5.1 From time to time your personal data may be transferred, stored and processed in foreign countries, including the United States, with different privacy laws that may or may not be as comprehensive as the Data Protection Legislation in your home country or may not be subject to an adequacy decision (as applicable) by the European Commission or the United Kingdom. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of the that country may be able to obtain access to your personal data through the laws of the foreign country. For transfers of personal data to foreign countries, we take additional steps in line with all applicable laws, including European and Canadian Data Protection Legislation. We have put in place adequate safeguards with respect to the protection of your privacy, fundamental rights and freedoms, and the exercise of your rights. Whenever we engage a service provider in a foreign country, we require that its privacy and security standards adhere to this policy and applicable Data Protection Legislation.

6. HOW IS MY PERSONAL DATA SECURED

6.1We operate and use reasonable administrative, technical and physical security measures to protect your personal data.

6.2We have in particular taken security measures to protect personal data about you from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access, to personal data about you. Access is granted on a need-to-know basis to those employees and other people whose roles require them to process personal data about you.

7. RETENTION OF PERSONAL DATA

7.1We will keep personal data about you for as long as it is necessary to fulfill the purposes for which we process it as described above in Section 3, or if we have another lawful basis for retaining the data beyond the period for which it is necessary to serve the original purpose for collecting the data. This may mean that we will retain some information about you for longer than we retain other information. The criteria we use to determine data retention periods for personal data includes the following:

7.1.1 Retention in case of queries; we will retain it for a reasonable period after the relationship between us has ceased;

7.1.2 Retention in case of claims; we will retain it for the period in which it may be enforced; and

7.1.3 Retention in accordance with legal and regulatory requirements; we will consider whether we need to retain any additional period because of a legal or regulatory requirement.

7.2Under some circumstances we may anonymize your personal data so that it can no longer be associated with you. We reserve the right to use such anonymous and de-identified data for any legitimate business purpose, including sharing it with utility companies, without further notice to you or your consent.

7.3 If you would like further information about our data retention practices, please contact us.

8. ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS

8.1 This section describes additional practices regarding the collection, use, and disclosure of the personal data of California residents (“Consumers”), describes the rights of Consumers under the California Privacy Rights Act (“CPRA”), and explains how Consumers may contact Rheem to exercise those rights. This specific policy only applies to the personal data of “Consumers” (i.e., California residents).

8.1.1 CONSUMER RIGHTS
This section describes certain rights of Consumers under the CPRA. For information on how Consumers may contact Rheem to exercise these rights, please see the section below entitled, “How to Submit a Request.”

8.1.2 RIGHT TO KNOW
A Consumer has the right to request that a business disclose what personal data it collects, uses, discloses or sells. Specifically, a Consumer may request that a business that collects personal data about the Consumer disclose to the Consumer the following:

(1) The categories of personal data it has collected about that Consumer. (2) The categories of sources from which the personal data is collected. (3) The business or commercial purpose for collecting or selling personal information. (4) The categories of third parties with whom the business shares personal information. (5) The specific pieces of personal data it has collected about that Consumer.

8.2 A Consumer may request that a business that sells the Consumer’s personal information, or that discloses it for a business purpose, disclose to that Consumer:
(1) The categories of personal data that the business collected about the Consumer. (2) The categories of personal data that the business sold about the Consumer and the categories of third parties to whom the personal data was sold, by category or categories of personal data for each third party to whom the personal data was sold. (3) The categories of personal data that the business disclosed about the Consumer for a business purpose.

8.2.1 RIGHT TO REQUEST DELETION
A Consumer has the right to request that a business delete any personal data about the Consumer which the business has collected from the Consumer. If it is necessary for Rheem to maintain the personal data for certain purposes, Rheem is not required to comply with your deletion request. If we determine that we will not delete your personal data when you request us to do so, we will inform you and tell you why we are not deleting it.

8.3 RIGHT TO OPT-OUT OF SALE OF PERSONAL DATA
Rheem does not sell Consumers’ personal information.

8.4 NO DISCRIMINATION
A Consumer has the right not to be discriminated against because the Consumer exercised any of the Consumer’s rights under the CPRA.

8.5 HOW TO SUBMIT A REQUEST

To exercise the rights described above, you must submit a verifiable Consumer request to us by clicking here to submit a request via our web portal, or by contacting us directly at compliancemanager@rheem.com and providing the requested information.

You may submit a request as frequently as you would like, but we are not required to respond to requests to provide personal data to you more than twice in any 12-month period.

To submit a verifiable Consumer request, you will be asked to provide certain information to help us verify your identity. The information we ask you to provide to initiate a request may differ depending upon the type of request, the type, sensitivity, and value of the personal data that is the subject of the request, and the risk of harm to you that may occur as a result of unauthorized access or deletion, among other factors. We may also require you to provide a written declaration that you are who you say you are.

You may designate an authorized agent to make a request to know or delete on your behalf by submitting a signed declaration of representation. For requests to opt-out, you must provide the authorized agent signed written permission.

If we cannot verify your identity or authority to make the request, we will not be able to comply with your request. We will inform you if we cannot verify your identity or authority. We will only use personal data provided in a verifiable Consumer request to verify the requestor’s identity or authority to make the request.

There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain personal information to comply with our legal obligations or other permitted purposes. We will notify you if we are unable to honor your request. Based on your residency, you may have the right to appeal our decision with regard to your request by contacting us directly at compliancemanager@rheem.com or by using the “Contact Us” details provided at the end of this Notice.

8.6 HOW WE COLLECT, USE AND SHARE PERSONAL DATA OF CONSUMERS

8.6.1 Categories of Personal Data and Business Purposes for Collection

The categories of personal data we have collected from Consumers in the past twelve (12) months and the business purpose(s) for collecting the information are listed above in Section 3.2.

8.6.2 The Sources of Collection

The sources from which we might collect personal data about you are listed above in Section 3.3.

8.6.3 Who We May Share Your Personal Data

The categories of third parties we may share your personal data with are listed above in Section 4.2

8.7 PERSONAL DATA OF MINORS

Rheem does not sell personal data about minors under the age of 16.

9. SHINE THE LIGHT LAW

9.1

Annually California residents may be able to request and obtain information that Rheem shared with other businesses for their own direct marketing use within the prior calendar year (as defined by “California’s Shine the Light Law”). If applicable, the information would include a list of categories of Personal Data that was shared with the names and addresses of all third parties that Rheem shared this information in the immediately preceding calendar year. To obtain this information under the Shine the Light Law, please send an email to compliancemanager@rheem.com with “California Shine the Light Privacy Request” in the subject line.

CONTACT FOR MORE INFORMATION

If you have any questions or concerns about Rheem’s Privacy Notice and practices, please contact our Chief Privacy Officer at Rheem Manufacturing Company, Attn: Chief Privacy Officer, 1100 Abernathy Road, Suite 1700, Atlanta, GA 30328 or call 770-351-3000.

10. ADDITIONAL RIGHTS FOR NON-U.S. RESIDENTS

10.1 You may have various rights under data protection legislation in your state or country (where applicable).

To the extent permitted by applicable law and subject to certain conditions, you may (1) seek confirmation regarding whether Rheem is processing personal data about you; (2) request access to the personal data that we maintain about you; (3) request that we update, correct, amend or erase or restrict information about you; or (4) exercise your right to data portability, by clicking here to submit a request via our web portal, or by contacting us directly at compliancemanager@rheem.com. In addition, you may object to Rheem’s processing of your personal data at any time; however, doing so may impact your use of the services that we provide. To protect your privacy, Rheem will take commercially reasonable steps to verify your identity before granting access to or making any changes to your personal data. We may ask that you provide us with your name, postal address, email address, telephone number, and/or equipment serial number.

These may include (as relevant):

Your right	What does it mean?	How do I execute this right?	Conditions to exercise?
Right of access	Subject to certain conditions, you may have a right to access personal data about you which we hold.	You may make a request for access to personal data via our web form by clicking here, or in writing to compliancemanager@rheem.com. Please specify the type of personal data you would like to access.	1. We must be able to verify your identity. 2. Your request may not affect the rights and freedoms of others. 3.We generally do not provide access to data we keep solely for data backup purposes. 4. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you, or we may have destroyed, erased, or made your personal data anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data, we will inform you of the reasons why, subject to any legal or regulatory restrictions.
Right of data portability	Subject to certain conditions and limitations, you may have the right to receive from us personal data which you have provided to us.	You may make a request for data portability via our web form by clicking here, or in writing to compliancemanager@rheem.com. Please specify the type of information you would like to receive.	Your right to data portability is limited. It applies only when: 1. our processing is based on your consent or on our contract with you; and 2. when our processing is done through automated means (e.g. not paper records); and 3. You provided us with the personal data at issue.
Rights in relation to inaccurate personal or incomplete data	You may challenge the accuracy or completeness of personal data about you. If the personal data is inaccurate, you may be entitled to have the inaccurate data removed, corrected or completed, as appropriate.	Please notify us of any changes regarding personal data about you as soon as they occur. You may make a request via our web form by clicking here, or in writing to compliancemanager@rheem.com.	This right applies only if our processing of personal data about you is based on our legitimate interests (see Section 3 above). Any objections must be based on your particular situation and must contain specific reasons.
Right to object to or restrict our data processing	Subject to certain conditions, you may have the right to object to or ask us to restrict the processing of personal data about you.	You may make a request via our web form by clicking here, or in writing to compliancemanager@rheem.com.	This right applies only if our processing of personal data about you is based on our legitimate interests (see Section 3 above). Any objections must be based on your particular situation and must contain specific reasons.
Right to have personal data erased	Subject to certain conditions, you may have a right to have your personal data erased e.g., where you think that the information we are processing is inaccurate, or the processing is unlawful.	You may make a request via our web form byclicking here, or in writing to compliancemanager@rheem.com .	We may not be in a position to erase personal data about you, for example when: 1. where we have to comply with a legal obligation; 2. in case of exercising or defending legal claims; or 3. where retention periods apply by law or regulations.
Right to withdrawal	You may have the right to withdraw your consent to any processing for which you have previously given that consent.	You may make a request via our web form by clicking here, or in writing to compliancemanager@rheem.com .	If you withdraw your consent, this will only take effect for the future.

11. IDENTITY OF THE CONTROLLER OF PERSONAL DATA

For the purposes of Data Protection Legislation, the Data Controller is Rheem Manufacturing Company, a U.S. organization with its principal place of business at 1100 Abernathy Road, Suite 1700, Atlanta, GA 30328.

12. YOUR RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY

Without prejudice to any other administrative or judicial remedy you might have, you may have the right under data protection legislation in your country (where applicable) to lodge a complaint with the relevant data protection supervisory authority in your country if you consider that we have infringed applicable data protection legislation when processing personal data about you. This means the country where you are habitually resident, where you work or where the alleged infringement took place.

13. CHILDREN’S PERSONAL DATA

The products and services that we offer are designed for a general audience and are not intended for children under the age of 16. We do not knowingly collect personal data from children under 16. If we learn we have collected or received personal data form a child under the age of 16, we will promptly delete the information.

14. UPDATES TO PRIVACY NOTICE

We reserve the right to change this Notice at any time in our sole discretion without prior notice to you to reflect changes. You are responsible for ensuring we have an up-to-date, active, and deliverable email address for you, and for periodically visiting our website and this Notice to check for any changes. We will indicate at the top of the Notice when it was most recently updated. Accordingly, please refer back to this Privacy Notice frequently as it may change.

15. CONTACT US

For further information or if you have any questions or queries about this Privacy Notice, please contact the Chief Privacy Officer, Law Department, Rheem Manufacturing Company, 1100 Abernathy Road, Suite 1700, Atlanta, GA 30328, or call (770) 351-3000. We have procedures in place to receive and respond to complaints or inquiries about our handling of personal data, our compliance with this Notice and with applicable privacy laws.

Website Terms

General Terms and Conditions

General.

Rheem Manufacturing Company and its affiliates (“Rheem”) provide this website and/or application as a service to its customers, prospective customers, distributors, dealers, and others. Except as otherwise set forth herein, these general terms and conditions of use (“Terms and Conditions”) govern your use of this website and/or application (the “Site,” “website” or “Application”) and any products purchased from Rheem from the Site (the “Products”).

Rheem reserves the right to change or delete the contents of this Application or website, including, but not limited to specifications or designs of its products at any time without notice. The “Application” shall mean the software provided by Rheem to offer services related to Rheem, Rheem’s services and its partners’ services, to be used on Apple® iOS and Android® OS and web accessible devices and any upgrades from time to time and any other software or documentation which enables the use of the application.

You acknowledge that the terms of agreement with your respective mobile network provider (“Mobile Provider”) or web access provider (“Web Provider”) will continue to apply when using the Site or Application. As a result, you may be charged by the Mobile Provider or Web Provider for access to network connection services for the duration of the connection while accessing the Site or Application or any such third-party charges as may arise. You accept responsibility for any such charges that arise. If you are not the bill payer for the mobile telephone, computer or handheld device being used to access the Site or Application, you will be assumed to have received permission from the bill payer for using the Site or Application.

Acceptance of Terms and Conditions of Use. By accessing and using the Site or installing the Application, you acknowledge that you have read and agree to these Terms and Conditions. If you place an order for any Products with Rheem, you must indicate your consent to these Terms and Conditions prior to placing your order. If you do not agree to be bound by these Terms and Conditions, then you are requested to immediately exit the Site or remove the Application from your device. Rheem may take any actions it deems appropriate, including, but not limited to, restricting your access to the Site, Application or Products if Rheem determines in its sole discretion that you have violated these Terms and Conditions.

Revisions to Terms and Conditions. Please refer to these Terms and Conditions regularly. Rheem reserves the right to modify these Terms and Conditions at any time in its sole discretion and without notice. Any such modifications shall be effective immediately upon posting of the modified Terms and Conditions. Your continued access or use of this Site or Application constitutes acceptance of the Terms and Conditions stated at the time of access or use. Rheem may at any time and without prior notice revise these Terms and Conditions by updating this posting.

Purchase of Products.

a. Payment and Delivery. Prices for all Products are in [United States dollars] and exclude any and all applicable taxes and shipping and handling charges, unless expressly stated otherwise. To the extent permissible under law, you are responsible for any applicable taxes, whether or not they are listed on your receipt or statement. If you purchase Products, you agree to pay, using a valid credit card (or other form of payment that Rheem may accept from time to time), the applicable fees and taxes (if any) set forth in the offer that you accepted. Rheem reserves the right, upon prior notice to you, to change the amount of any fees and to institute new fees. All authorized charges will be billed to your designated credit card account (or other payment method) on the terms described in the specific offer. If payment cannot be charged to your credit card or your payment is returned to Rheem for any reason, Rheem reserves the right to either suspend or cancel your order. It is your responsibility to ensure that sufficient funds are available to cover the charges for Products, and Rheem has no liability for any overdraft or other fees that you may incur as a result of Rheem processing your payment.

b. Order Acceptance and Confirmation. Your receipt of an electronic or other form of order confirmation does not signify our acceptance of your order, nor does it constitute confirmation of our offer to sell. Rheem reserves the right at any time after receipt of your order to accept or decline your order for any reason. Any and all orders accepted by Rheem are governed exclusively by the Rheem terms of sale applicable to the specific Product and these Terms and Conditions.

c. Sales Tax. Prices do not include, and you shall be responsible for, all applicable sales taxes for any Products you purchase.

d. Returns and Exchanges. Unless otherwise specified by Rheem on this website or Application or on the terms of sale for a Product, Rheem has a 60-day return policy. In order to qualify for a return or exchange, Rheem must be notified within 60 days, and have possession of the Product within the 60th day (from the date of receipt) of the Product purchase. After 60 days from the date of receipt, Rheem is not obligated by any means to replace the Product or refund any money paid for the Product for any reason. To return your Products, you must contact customer service at the number provide on the Site for further instructions. If the Products are successfully returned to Rheem in accordance with the terms herein, your account will be credited in approximately one to two billing cycles from the date Rheem receives the Products from you.

e. Installation and Repair Information. Many Products sold through this website or Application should be installed and repaired by qualified service professionals. Rheem strongly encourages you to refer to the use & care manual or installation manual of the Product for more information. This website or Application may contain general information to aid qualified service professionals in the repair of certain products and parts. The complete model number and serial number of the unit under repair should be specified when selecting and ordering replacement parts. Specifications and illustrations are subject to change without notice. Rheem assumes no responsibility or liability for acts or omissions, errors, mistakes, or negligence of the purchaser or any other person or entity. The purchaser is responsible for choosing the appropriate products and parts and must verify the proper and safe operation of equipment after the replacement of any original components.

Site Content.

a. Corporate Identification and Trademarks. All registered or unregistered corporate names, trademarks, service marks, logos, and other source-identifying designations (collectively “Marks”) used or referred to on this website or Application are the property of Rheem unless otherwise noted. Unauthorized use of the Marks is prohibited.

b. Proprietary Rights to Content. All content, including but not limited to information, all written materials, catalogs, photographs, computer programs, applications, computer code (including source code and object code), illustrations, artwork, designs, graphics, layout, data, logos, messages, the HTML code that Rheem creates to generate the Site, or other materials (collectively, “Content”) included on the Site or Application is the property of Rheem or content providers of Rheem and are protected by copyright, trademark, service mark, trade dress, patent, trade secret, or other intellectual property rights and laws. No license to or right in any such trademarks, patents, copyrighted materials, trade secrets, technologies, products, processes, and other proprietary rights of Rheem and content providers of Rheem is granted to or conferred upon you. The downloading, reproduction, printing, copying, storage, or distribution of any Content, other than for non-commercial individual use, is strictly prohibited. The use of any Content for a commercial purpose, without the express written consent of Rheem, violates Rheem copyrights, trademark rights, and other intellectual property rights and may be a violation of federal law subject to criminal and civil penalties.

c. Third party content. Rheem claims no proprietary rights to, or affiliation with, any third-party trademarks or logos referenced or appearing on the Site or Application. You should not infer any affiliation, sponsorship or endorsement from the use of third-party marks on the Site or Application as such marks are used solely to designate certain products or services as belonging to their respective owners.

d. Disclaimer. THE SITE/APPLICATION INCLUDES CONTENT AND INFORMATION THAT IS SUBJECT TO CHANGE WITHOUT NOTICE. WHILE RHEEM DESIRES THAT THE CONTENT AND INFORMATION ON THE SITE BE UP-TO-DATE AND ACCURATE, IT IS YOUR SOLE RESPONSIBILITY TO CONFIRM THE ACCURACY, COMPLETENESS OR RELIABILITY OF SUCH CONTENT AND INFORMATION. RHEEM DOES NOT WARRANT OR MAKE ANY REPRESENTATION REGARDING THE USE OF THE CONTENT OR INFORMATION ON THE SITE OR THE ACCURACY OR RELIABILITY OF SUCH CONTENT OR INFORMATION.

Information Privacy and Security. Except as otherwise provided in these Terms and Conditions, Rheem seeks to protect the privacy of personal information you submit over the Site or Application. The information we obtain through your use on this Site or Application, including setting up your account, is subject to Rheem’s Privacy Notice. Please review the Privacy Notice for more information about how Rheem handles personal information, which may be accessed at https://www.rheem.com/legal. However, the security of the Internet cannot be guaranteed and therefore Rheem cannot assure your privacy. Rheem is not responsible for any unauthorized access to communications that you submit over the Internet.

Any communication or material you transmit to the Site or Application by electronic mail or otherwise, will be treated in accordance with our Privacy Notice. By transmitting or posting any communications or materials to this site or Application, you agree that Rheem or any of its affiliates may use your communications or materials for any purpose, including reproduction, transmission, publication, broadcast and posting. Rheem and its affiliates are free to use any ideas, concepts or know-how contained in such communications or materials for any purpose whatsoever including, but not limited to developing, manufacturing, distributing and marketing products using such information.

Links. Rheem may, from time to time, provide links to third-party websites not associated with Rheem. These third-party websites contain information created, published, maintained, or otherwise posted by companies, organizations, or others independent of Rheem. Rheem makes no representations whatsoever about any third-party website to which you may have access through the Rheem website. Rheem has not reviewed and is not responsible for such linked websites or the content of any of the linked websites. When you access such a third-party website, you do so at your own risk and acknowledge that Rheem is not responsible or liable for any content, advertising, products, or other materials available from such websites. You also agree that Rheem shall not be liable for any loss or damage of any sort incurred as a result of your use of any third-party website.

Mention on the Rheem website or Application of any third-party company or website, or to any specific commercial product, process, or service by trade name, trademark, service mark, manufacturer, or otherwise, is for informational purposes only and does not constitute an endorsement, recommendation, approval, or certification by Rheem.

User Conduct. You will not make any unauthorized use of this website or Application, or any content or features available on this website or Application. You are responsible for all use of your account (including username and password, if any) and shall be solely responsible for maintaining the security of your passwords. You shall not share your account information with any third party, let anyone else access or use your account, or do anything else that might jeopardize the security of your account. In the event you become aware of or reasonably suspect any breach of security, including without limitation any loss, theft, or unauthorized disclosure of the account, you must immediately notify cybersecurity@Rheem.com and modify your username and password. You agree that all the information and content posted or accessed in restricted password protected areas of the website is confidential to Rheem and will be used only for your personal and internal purposes. You may not engage in any conduct or action that is prohibited by law or violates any country, federal, state, or local laws.

You will not, nor allow third parties on your behalf to (i) make and distribute copies of the website or Application (ii) attempt to copy, reproduce, alter, modify, reverse engineer, disassemble, decompile, transfer, exchange or translate the website or Application; or (iii) create derivative works of the website or Application of any kind whatsoever.

WARRANTY DISCLAIMER. THE SITE, INCLUDING, WITHOUT LIMITATION, ALL PRODUCTS, INFORMATION, CONTENT AND SERVICES MADE AVAILABLE ON OR THROUGH THE SITE, ARE PROVIDED “AS IS.” RHEEM AND ITS AFFILIATES AND THEIR EMPLOYEES AND AGENTS MAKE NO REPRESENTATIONS OR WARRANTIES OF ANY KIND OR NATURE WHATSOEVER REGARDING THE CONTENT OR SERVICES OF THE SITE, ANY PRODUCTS, OR HYPERTEXT LINKS TO OTHER OUTSIDE WEBSITES. RHEEM AND ITS AFFILIATES AND THEIR EMPLOYEES AND AGENTS DISCLAIM ANY EXPRESS OR IMPLIED WARRANTIES OF ANY KIND OR NATURE WHATSOEVER, INCLUDING, WITHOUT LIMITATION, WARRANTIES RELATED TO ANY COURSE OF DEALING, USAGE OR TRADE PRACTICE, AND IMPLIED WARRANTIES OF NONINFRINGEMENT, MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. MOREOVER, RHEEM DOES NOT REPRESENT OR WARRANT THAT YOUR ACCESS TO THE SITE WILL BE UNINTERRUPTED OR ERROR-FREE, THAT DEFECTS WILL BE CORRECTED, OR THAT THE SITE AND MATERIAL ACCESSIBLE TO YOU ARE FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

LIMITATION OF LIABILITY. RHEEM AND ITS AFFILIATES WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT RESULT FROM THE USE OR PERFORMANCE OF, OR THE INABILITY TO USE, THE SITE, THE PRODUCTS, OR INFORMATION OR FUNCTIONS ON SUCH SITE, EVEN IF RHEEM HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. IN NO EVENT WILL RHEEM AND ITS AFFILIATES’ TOTAL LIABILITY TO YOU FOR ALL DAMAGES, LOSSES, AND CAUSES OF ACTION, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EXCEED THE AMOUNT PAID BY YOU, IF ANY, FOR ACCESSING THE SITE OR PURCHASING PRODUCTS.

Indemnification. You agree, at your expense, to indemnify, defend, and hold harmless Rheem, its officers, directors, employees, agents, affiliates, distributors, dealers, and licensees from and against any judgment, losses, deficiencies, damages, liabilities, costs and expenses (including reasonable attorneys’ fees and expenses) incurred in connection with or arising from any claim, demand, suit, action, or proceeding arising out of your breach of these Terms and Conditions or in connection with your use of this website, Application or any product, including the Products, or service related thereto.

General. These Terms and Conditions and all information on the Site or Application are governed by and will be construed in accordance with the laws of the State of Georgia and of the United States of America, without regard to conflict of law principles. Although users outside of the United States may have access to the Site or Products, the information contained herein is intended only for use by residents of the United States. Rheem specifically reserves all rights to limit provision of our Products to select persons, countries or geographic regions. The venue for any matter relating to or arising from this site will be in the state or federal court of competent jurisdiction in the State of Georgia.

Waiver/Severability. The waiver by either party of a breach or right under these Terms and Conditions will not constitute a waiver of any subsequent breach or right. If any provision of these Terms and Conditions is found to be invalid or unenforceable by a court of competent jurisdiction, such provision shall be severed from the remainder of these Terms and conditions, which will otherwise remain in full force and effect.

Entire Agreement. These Terms and Conditions constitute the entire agreement between you and Rheem concerning the use or access of this website or Application.

Reservation of Rights. Any rights not expressly granted herein are reserved.

Availability. This Application is available to handheld mobile devices running Apple® iOS and Android® OS operating systems and web accessible devices. Rheem will use reasonable efforts to make the Application available at all times. However, you acknowledge the Application is provided over the internet and mobile networks and so the quality and availability of the Application may be affected by factors outside Rheem’s reasonable control. Rheem does not accept any responsibility whatsoever for unavailability of the Application, or any difficulty or inability to download or access content or any other communication system failure which may result in the Application being unavailable.

System Requirements. In order to use the Application, you are required to have a compatible mobile telephone or handheld device, internet access, and the necessary minimum specifications (“Software Requirements”). The Software Requirements are as follows: Apple iOS or Android OS; Language: English. As the Application is updated, the System Requirements may also be updated. You are responsible for downloading or acquiring the appropriate updates to your mobile or web accessible device to continue use of the Application. The Application software may be upgraded from time to time, without notice to you, to add support for new functions and services.

Contact Us. For further information or to contact us with questions, concerns, or comments, please contact us at https://www.rheem.com/contact. Although Rheem will, in most circumstances, be able to receive your email or other information provided through the Site, Rheem does not guarantee that it will receive all such email or other information timely and accurately. Rheem shall not be legally obligated to read, act on, or respond to any such email or other information.

Use of this site or Application signifies your agreement to these Terms and Condition.

California Transparency in Supply Chains Act Disclosure

Transparency in Supply Chains

Rheem will not tolerate human trafficking or slavery in its operations or its suppliers’ operations. Rheem encourages all of its procurement employees to be vigilant regarding human trafficking and slavery in Rheem’s supply chain and to report any suspected human trafficking or slavery to the General Counsel. The company will not retaliate against employees who report suspected human trafficking or slavery in the Rheem supply chain.

The following disclosures are made pursuant to the California Transparency in Supply Chains Act of 2010 (Section 1714.43 of the California Civil Code) (referred to in this disclosure as the “Act”).

To what extent, if any, does Rheem:

(1) Engage in verification of product supply chains to evaluate and address risks of human trafficking and slavery? Rheem does not at this time engage in verification of product supply chains to evaluate and address risks of human trafficking and slavery.

(2) Conduct audits of suppliers to evaluate supplier compliance with company standards for trafficking and slavery in supply chains.While Rheem employees conduct periodic site visits and audits of certain of our suppliers, Rheem does not specifically audit suppliers for compliance with company standards for human trafficking and slavery. If there is any reason to suspect that a supplier is not complying with human trafficking and slavery standards, then Rheem will address the matter with the supplier.

(3) Require direct suppliers to certify that materials incorporated into the product comply with the laws regarding slavery and human trafficking of the country or countries in which they are doing business. Rheem generally requires suppliers to be in compliance with all applicable laws and regulations and has requested certification from suppliers that they comply with applicable laws regarding slavery and human trafficking.

(4) Maintains internal accountability standards and procedures for employees or contractors failing to meet company standards regarding slavery and trafficking. Rheem employees are required to acknowledge and adhere to its Code of Business Conduct and Ethics (the "Code of Conduct"). While the Code of Conduct does not specifically address human trafficking and slavery, it does require that employees abide by the applicable laws and regulations in each country in which Rheem does business and report any suspected violations.

(5) Provides company employees and management, who have direct responsibility for supply chain management, training on human trafficking and slavery, particularly with respect to mitigating risks within the supply chains of products. Rheem is working to develop and implement training for members of its supply chain workforce to recognize and mitigate human trafficking and slavery risks in the supply chain.

Rheem Manufacturing Company (including its affiliates) (“Rheem”) is committed to providing quality products and conducting business honestly, fairly and with integrity. This Supplier Code of Conduct ("Code") applies to all suppliers who are part of Rheem’s supply chain and sets forth Rheem’s standards and expectations with respect to key areas of corporate responsibility.

COMPLIANCE WITH LAWS AND REGULATIONS Rheem suppliers must comply with all relevant and applicable laws and regulations, including those concerning employees, their welfare and safety and the working environment in order to do business with Rheem.

EMPLOYMENT PRACTICES Rheem expects suppliers to respect its workers and to be in compliance with the specific requirements relating to employment and working conditions contained herein.

Supplier will fairly compensate its workers, complying with all applicable laws and regulations governing wages and overtime payment for workers.
Supplier will comply with all applicable legal limits for working hours and days of service and will not exceed the maximum set by applicable laws and regulations.
Supplier will comply with all laws and regulations regarding the fair and humane treatment of its workers.
Supplier will be committed to a workforce free of harassment and unlawful discrimination.
Supplier must provide their workers with a safe and healthy working environment.
Supplier will not use, directly or indirectly, forced, slave or child labor.

ENVIRONMENTAL

Suppliers shall comply with all applicable laws, regulations and international standards regarding environmental protection, including the safety and health of the employees.

PRIVACY AND SECURITY

Supplier will commit to protecting the reasonable privacy expectations of personal information of everyone with whom it does business, including suppliers, customers and employees.

ANTI-CORRUPTION AND BRIBERY

Supplier shall abide by all applicable anti-corruption regulations and laws of the countries in which it operates, including, without limitation, the U.S. Foreign Corrupt Practices Act (“FCPA”) and the UK Bribery Act and applicable international anti-corruption laws, rules and conventions. Supplier shall not engage in any form of corruption, extortion, embezzlement, or bribery, including any payment or other form of benefit conferred on any government official for the purpose of influencing decision making in violation of law.

GIFT & GRATUITY POLICY; CONFLICT OF INTEREST

Rheem employees are prohibited from soliciting or accepting any gifts, gratuities or other monetary incentives that are designed to improperly influence business decisions or as a condition of doing business, and we expect our suppliers to adhere to these rules. Gifts should never be offered, given, or accepted by any Rheem employee if it:

Is a cash gift or cash equivalent (such as gift certificates or gift cards);
Exceeds $250.00 (USD) or local currency equivalent in value in the U.S., Canada, U.K., Netherlands, Australia, and New Zealand or $100 (USD) or local currency equivalent in all other locations (unless approved in advance by authorized management);
It can be construed as a bribe, kickback or payoff;
Is not reasonable and appropriate in the context of the business occasion; and
Violates any laws or regulations.

Supplier will not put any Rheem employee in positions that test their loyalty to Rheem or cause violations of Rheem’s Code of Business Conduct & Ethics or the law.

CONFLICT MINERALS

Supplier will comply with all applicable laws and regulation, as well as applicable requirements, intended to address the humanitarian and commercial concerns, specifically as it relates to Conflict Minerals, including regulations passed by the Securities and Exchange Commission.

Rheem reserves the right, in its sole discretion, to change the requirements of this Code from time to time.

Last Updated: November 6, 2019