Privacy Policy

Pool Corporation, incorporated in the state of Delaware under the number 2366004 and whose headquarters is located at 109 Northpark Boulevard, Covington, Louisiana, 70433 United States (“PoolCorp”, “we”, “us”, or “our”) understands that you are concerned about privacy. We have therefore posted this Privacy and Cookies Policy (this “Privacy Policy”) to let you know what kind of personal information we collect, how it is handled, and with whom it may be shared.

This Privacy Policy applies to the online and offline practices regarding the processing of personal information of customers and visitors carried out by PoolCorp as the data controller, including on the www.poolcorp.com website and other related websites that we have linked to this Privacy Policy (collectively “Websites”). Processing by other affiliated entities or third parties may be governed by separate privacy policies, and we recommend that you review the privacy policies of those websites.

These Websites are intended for users in the United States and are not intended for users in other locations. If you are a user residing in the European Union, European Economic Area, the United Kingdom, or Switzerland, please visit our affiliates’ websites in your respective home country.

If you are located outside of the United States, please note that by using our services and Websites, you may be transferring your personal information to a country that does not have the same data protection laws as your home country.

I. Information We Collect and How We Use It

Personal Information

“Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to, directly or indirectly, a particular consumer or household. We collect various types of personal information depending on how you use our services and Websites. The following are categories (with non-exhaustive examples) of personal information we may collect about you and for each category the purpose for which it may be used:

Categories	Examples	Purpose of Processing
A. Individual Identifiers and Demographic Information.	A real name, company name alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, address, telephone number, account name, Social Security number, driver’s license number, passport number, credit card information, your areas of interest or other similar identifiers.	Processing orders (including collecting payment and sending invoices). Delivering products/services. Responding to inquiries. Management of customer purchases and accounts, compiling details of user engagement. Sending marketing materials (including offers and other information we feel may be of interest to you). Administration of contests and surveys. Processing job applications and Human Resources Data for purposes of administration and communication, and to comply with labor law requirements.
B. Commercial Information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	Processing orders (including collecting payment and sending invoices). Delivering products/services. Responding to inquiries. Management of customer purchases and accounts, compiling details of user engagement. Sending marketing materials (including offers and other information we feel may be of interest to you). Administration of contests and surveys.
C. Internet or Network Activity.	Browsing history, type of browser you are using, search history, terms you enter into the search functions of our Websites, information on a Consumer’s interaction with a website, application, or advertisement, and the websites you visit immediately before and immediately after you visit our Websites.	To evaluate consumer trends and usage related to our Websites and allows us to improve our Website content and offerings accordingly. Sending marketing materials (including offers and other information we feel may be of interest to you).
D. Professional or Employment-Related Information.	Employee names, addresses, phone numbers, and possible other contact details, current or past job history, performance evaluations, and other professional, economic, and employment details.	Processing job applications and employee data for purposes of administration and communication, and to comply with labor law requirements.
E. Education Information.	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	Processing job applications and employee data for purposes of administration and communication, and to comply with labor law requirements.

Personal information does not include:

Publicly available – Publicly available information from government records.
Deidentified or aggregate information – “Deidentified Information” means information that cannot reasonably identify, relate to, describe, be capable of beinge associated with, or be linked, directly or indirectly, to a particular individual, and for which PoolCorp has implemented technical safeguards and business processes that prohibit reidentification of the individual. “Aggregate Information” means information that relates to a group or category of individuals, from which individual identities have been removed, that is not linked or reasonably linkable to any individual or household, including via a device.
Excluded information – Certain laws require separate privacy notices or are exempt from general personal information privacy policy disclosure requirements. Such laws include health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or clinical trial data; and data covered under the Fair Credit Reporting Act (FCRA).

Sources of Personal Information

We obtain the categories of personal information listed above from the following categories of sources:

Personal information you provide – PoolCorp collects personal information when you voluntarily submit it to us. For example, we may collect or receive personal information from forms you complete or products and services you purchase, reviews you post, any requests you submit to our customer service team, any interactions you have with our social media pages, or otherwise from any interactions you have with us through the Websites.
Automatically collected personal information – PoolCorp indirectly collects other information from you automatically through the Websites. For example, we receive personal information from you when you visit and navigate our Websites on any device. PoolCorp collects some personal information automatically using cookies or other online tracking technologies as described below in this Privacy Policy.
Personal information obtained from third parties – PoolCorp may obtain or receive personal information about you from other third party sources. For example, we receive personal information from our business partners or other third party companies. We may merge or combine such personal information with the personal information we collect from you directly or automatically.

Use of Personal Information

We process personal information for the following purposes:

Purpose of Processing	Legal Basis
Processing orders (including collecting payment and sending invoices)	Performance of our agreement with you
Delivering products/services	Performance of our agreement with you
Responding to inquiries	Our legitimate interest, which is the proper functioning of our commercial activity
Management of customer purchases and accounts, compiling details of user engagement	Our legitimate interest, which is the proper functioning of our commercial activity
To evaluate consumer trends and usage related to our Websites and allows us to improve our Website content and offerings accordingly	Your consent
Sending marketing materials (including offers and other information we feel may be of interest to you)	Your consent
Administration of contests and surveys	Your consent
Processing job applications and Human Resources Data for purposes of administration and communication, and to comply with labor law requirements	Our legitimate interest or legal obligation

If you are a past or present customer or Website user who is based in the European Union, European Economic Area, the United Kingdom, or Switzerland, Pool Corporation, the PoolCorp parent company located in the United States, may access your personal information that is stored on servers based in the European Union in order to support customer inquiries, manage centralized records of customer purchases and accounts, and provide maintenance or technical support for the servers which house such personal information.

We believe the risk to your data protection rights in connection with personal information that we process on the basis of our legitimate interests is not excessive or overly intrusive. We have also put in place protections for your rights by ensuring proper retention periods and security controls.

If you choose not to give us personal information, we may not be able to provide you with any services you may request or require, or enter into a contract with you.

II. How We Share Your Information

Related Companies

We may share your personal information with the companies of our group which are:

SCP Distributors LLC (United States)
Alliance Trading, Inc. (United States)
Cypress, Inc. (United States)
Superior Commerce LLC (United States)
Superior Pool Products LLC (United States)
Splash Holdings, Inc. (United States)
SCP International, Inc. (United States)
Pool Development LLC (United States)
Horizon Distributors, Inc. (United States)
Poolfx Supply LLC (United States)
SCP Mexico S.A. de C.V. (Mexico)
SCP Pool B.V. (Netherlands)
SCP Distributors Canada Inc. (Canada)
SCP Europe SAS (France)
SCP France SAS (France)
SCP Germany GmbH (Germany)
SCP Benelux NV (Belgium)
SCP Italy S.r.l. (Italy)
SCP (UK) Holdings Limited (United Kingdom)
SCP (UK) Limited (United Kingdom)
SCP Pool Distributors Spain S.L.U. (Spain)
SCP Pool Portugal LDA (Portugal)
Pool Systems Pty. Ltd (Australia)
New Star Holdings Pty Ltd (Australia)
Bundalo Pty. Ltd. (d/b/a Newline Pool Products) (Australia)
SCP Adriatica, d.o.o. (Croatia)

Third-Party Providers

We may share your personal information with outside companies that perform services for us. When we work with an outside party, we require that these parties agree to process your personal information based on our instructions and in compliance with this Privacy Policy and applicable laws. We will take appropriate steps designed to ensure your information will be used solely to provide the services requested by us, and not for other purposes.

Joint Promotions and Offers

We sometimes offer promotions (like sweepstakes) or other offers in conjunction with a third party. If you choose to participate in one of those promotions or offers, we may share your information with the third party as described in this Privacy Policy, and the third party may collect information from you independently as described in their privacy policies. We recommend that you review the third party’s privacy policy before choosing to participate in a promotion or offer.

Other Disclosures

We may disclose your personal information in response to subpoenas, court orders, or other lawful requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose personal information in order to enforce or apply our rights and agreements, or when we believe in good faith that disclosing this information is necessary or advisable, including, for example, to protect the rights, property, or safety of our businesses, our Websites, our customers, our users, or others, as permitted under the applicable laws, or as otherwise required by law or by government and regulatory entities. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction.

III. Retention Period

It is our policy to retain your personal information for the length of time required for the specific purpose or purposes for which it was collected as detailed below:

Purpose of Processing	Applicable maximum retention preiode
Process orders (including collecting payment and sending invoices)	10 years after completion of the order
Delivering products/services	5 years after completion of the order
Responding to inquiries	3 years after the inquiries is closed
Management of customer purchases and accounts	5 years after closure of the account
Sending marketing materials (including offers and other information we feel may be of interest to you)	3 years after the end of our commercial relationship
Administration of contests and surveys	5 years after the end of the contests or survey

While we continue to process your personal information, we will ensure that it is processed in accordance with this Privacy Policy. Otherwise, we securely erase or anonymize your personal information once it is no longer needed.

IV. Security of the Information We Collect

The security of your personal information is important to us. We maintain reasonable administrative, technical, and physical safeguards to secure the personal information we collect.

There is always some risk in transmitting information electronically. As we deem appropriate, we use appropriate security measures related to transmission of information. However, we cannot guarantee the security of our databases, nor can we guarantee that information you supply won't be intercepted while being transmitted to us over the Internet. If we forward your personal information to any third party, we require that the third parties have appropriate technical and organizational measures in place to comply with this Privacy Policy and applicable laws.

V. Children’s Privacy

It is our policy not to knowingly collect personal information from children, and therefore we do not knowingly distribute such information to third parties or otherwise process such information. If you are a parent/guardian and you suspect that your child may have submitted personal information to us, please contact us as described below. If we become aware that a child has provided us with personal information, we will strive to delete such information from our files as soon as possible.

VI. California Privacy Rights

Disclosures for a Business Purpose or Valuable Consideration

In accordance with California law, PoolCorp must disclose whether the following categories of personal information are disclosed for a "business purpose" or “valuable consideration” as those terms are defined under California law. Note that while a category below may be marked, that does not necessarily mean that we have personal information in that category about you. In the proceeding twelve months, we have disclosed the following categories of personal information in the manner described.

Categories	Disclosure for Business Purpose	Disclosure for Valuable Consideration
A. Individual Identifiers and Demographic Information.	Yes	No
B. Commercial Information.	Yes	No
C. Internet or Network Activity.	Yes	No
D. Professional or Employment-Related Information.	No	No
E. Education Information.	No	No

Additional Rights

Under California Civil Code sections 1798.83-1798.84, California residents who have an established business relationship with PoolCorp are entitled to ask us for a notice describing what categories of personal information we share with third parties for their direct marketing purposes. This notice will identify the categories of information shared with and will include a list of the third parties with which it is shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to us at the contact information listed below.

VII. Your Rights

The following section explains your rights that you may exercise. The various rights are not absolute and each is subject to certain exceptions, or may be provided to you as required by applicable law.

The right of access – You may have the right to obtain from us confirmation as to whether or not your personal information is being processed by us, and about certain other information (similar to that provided in this Privacy Policy) about how it is used. You may also have the right to access your personal information, by requesting a copy of the personal information concerning you. This is so you are aware and can check that we are using your personal information in accordance with data protection law. We can refuse to provide information where to do so may reveal personal data about another person or would otherwise negatively impact another person's rights.
The right to rectification – You can ask us to take measures to correct your personal information if it is inaccurate or incomplete (e.g., if we have the wrong name or address for you).
The right to erasure – You may request the deletion or removal of your personal information where, for example, there is no compelling reason for us to keep using it or its use is unlawful. This is however not a general right to erasure and there are some exceptions, e.g., where we need to use the information to fulfil a request you have made, in defense of a legal claim, or to be able to comply with a legal obligation.
The right to restrict processing – You may have the right to ‘block’ or suppress the further use of your personal information when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your personal information, but may not use it further.
The right to data portability – You may have the right to obtain and reuse certain personal information for your own purposes across different organizations (being separate data controllers). This only applies to your personal information that you have provided to us that we are processing with your consent and for the purposes of contract fulfillment, which is being processed by automated means. In such a case we will provide you with a copy of your data in a structured, commonly used and machine-readable format or (where technically feasible) we may transmit your data directly to a separate data controller.
The right to object – You may have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that processing takes place for the purposes of our legitimate interests. We will be allowed to continue to process the personal information if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or we need this for the establishment, exercise, or defense of legal claims. If you object to the processing of your personal information for direct marketing purposes, we will no longer process your personal information for such purposes.
The right to withdraw consent – Where we process your personal information on the basis of your consent, you have the right to withdraw your consent at any time. However, such withdrawal does not affect the lawfulness of the processing that occurred prior to such withdrawal.
The right to provide us with directives regarding the use of your personal information after your death – In certain cases, you have the right to provide us with instructions on the management (e.g., retention, erasure, and disclosure) of your personal information after your death. You can change or revoke your instructions at any time.
The right to lodge a complaint – If you believe that we do not comply with applicable data protection laws, you have the right to lodge a complaint before any competent data protection authority or government agency.

You may contact us at any time as described below to exercise these rights.

VIII. Cookies

When you visit or interact with our Websites, we (or our third-party providers) may use "cookies" or other similar technologies to personalize and enhance your experience. A “cookie” is a small piece of information sent to a visitor’s computer or other Internet-connected devices to uniquely identify the visitor’s browser or to store information or settings in the browser. Cookies are used to make our Websites work, or work more efficiently, as well as to provide data to the Website owners. Our Websites use required cookies, functional cookies, and analytics and performance cookies.

Except for technical cookies, in some cases the storing of cookies on the device of a visitor requires consent. By continuing browsing the Website after having seen the cookies banner displayed on the home page of the Website, the visitor consents to the storing of cookies on his/her device. Where such consent is required, this consent is valid for a period of 13 months.

Required cookies enable you to move from page to page and to use features on our Websites while your browser remains open. For example, required cookies allow you to add products to your shopping cart and carry the contents of your cart to checkout.

Functional cookies last from visit to visit. For example, functional cookies may be used to recognize you as a previous user to provide a more personalized experience. They are stored in your computer, device, or browser until you choose to delete them.

Analytics and performance cookies allow us to collect data concerning the Websites, including the number of visitors, where the visitors have come from, and the length of time visitors spend on the Websites, which allows us or third-party providers to analyze how our Websites are used and how our Websites are performing. We use the following third-party providers for analytics and performance tracking, and you can learn more about their privacy policies and how to opt-out of their cookies by clicking on the appropriate link below:

Google Analytics:
To opt out: https://tools.google.com/dlpage/gaoptout
To learn more: https://policies.google.com/technologies/partner-sites

Our Websites also use “social buttons” to enable users to share or bookmark web pages to third-party social media sites. You can learn more about the privacy policies of these third-party sites and how to opt-out of their cookies by clicking on the appropriate link below:

Facebook.com:	https://www.facebook.com/policies/cookies/
Linkedin.com:	https://privacy.linkedin.com/
Twitter:	https://twitter.com/en/privacy
Glassdoor:	https://www.glassdoor.com/about/privacy.htm
Career Builder:	https://hiring.careerbuilder.com/company/privacy-policy

The majority of web browsers accept cookies and similar files, but you can usually change your browser settings to prevent this. If for any reason you decide that you do not like our use of certain cookies, you can simply change your settings. However, if you do so, some functionality of our Websites may be lost. The setting of each browser is different. It is described in the browser's help menu.

» Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

✓ Click the access Menu button and then choose "Options"
✓ Choose "Privacy & Security"
✓ Set the History Section on "Use custom settings for History"
✓ Uncheck the box "Accept cookies from websites".
✓ All changes you have made will be automatically saved.

» Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

✓ Select the Tool button, then Internet Options.
✓ Select Privacy Tab, and then under Settings, move the cursor to the top to block all cookies or to the bottom to allow cookies, then click on OK.

» Google Chrome: https://support.google.com/chrome/answer/95647?hl=en

✓ Select the Chrome menu icon.
✓ Click on "Settings".
✓ At the bottom, click on "Advanced".
✓ Under "Privacy and security," click on "Content settings".
✓ Click on "Cookies".
✓ Turn "Allow sites to save and read cookie data" on or off.

» Safari: https://www.apple.com/legal/privacy/en-ww/cookies/

✓ Click on "Settings" > "Safari" > "Privacy" > "Cookies and website data"
✓ Then select "always block cookies".

» For Opera: https://help.opera.com/en/latest/web-preferences/#cookies

To change your cookie preferences, .

If you have any specific questions about the use of cookies on our Websites, please feel free to contact us at any time as described below, with a subject line “Cookie Request.”

IX. Privacy Shield

PoolCorp and its affiliates are committed to handling personal information in accordance with this Privacy Policy and the EU-U.S. Privacy Shield Framework (or the Swiss-U.S. Privacy Shield Framework, as the case may be), as administered by the U.S. Department of Commerce. If there is any conflict between the terms of this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, and to view PoolCorp’s certification, please visit https://www.privacyshield.gov/list.

PoolCorp’s accountability for personal information that it receives under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, PoolCorp remains responsible and liable under the Privacy Shield Principles if third parties engaged by PoolCorp process the personal information in a manner inconsistent with the Privacy Shield Principles, unless PoolCorp proves that it is not responsible for the event giving rise to any damage.

As further explained in the “Dispute Resolution” section below, PoolCorp encourages any individual to contact us should they have a Privacy Shield-related (or general privacy-related) complaint. Any right of access, rectification, erasure, restriction of the processing as well as the right to data portability of individuals domiciled in the European Economic Area, the United Kingdom, or Switzerland may be exercised under the conditions set forth in the EU General Data Protection Regulation (“GDPR”) by contacting us as described below. Furthermore, these individuals will have the right to lodge a complaint with a competent supervisory authority at any time.

X. Dispute Resolution

PoolCorp welcomes feedback and questions on this Privacy Policy. If you have any complaints about this Privacy Policy or PoolCorp’s management of personal information, please contact us first as described below. Complaints will be resolved internally in accordance with our complaints procedures.

If you live in the European Union, European Economic Area, the United Kingdom, or Switzerland and you have a complaint regarding the handling of your personal information in accordance with the EU-U.S. or Swiss-U.S. Privacy Shield Framework and your efforts to resolve the matter internally are unsatisfactory, the complaint may be submitted to the American Arbitration Association (http://go.adr.org/privacyshield.html), which has been selected as the independent recourse mechanism to resolve complaints and disputes relating to treatment of personal information originating in the European Union, European Economic Area, the United Kingdom, or Switzerland and transferred to the U.S. under this Privacy Policy. Under certain conditions, you may be entitled to invoke binding arbitration through the Privacy Shield Panel when other dispute resolution procedures have been exhausted. PoolCorp is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

If you are a past or present employee of PoolCorp in the European Union, European Economic Area, the United Kingdom, or Switzerland, PoolCorp has also chosen to cooperate with and comply with the advice of EU data protection authorities (DPAs) in relation to such unresolved complaints (as further described in the Privacy Shield Principles). Please contact us to be directed to the relevant DPA contacts.

XI. Exercising Your Privacy Rights

When exercising the rights or options described in this Privacy Policy, the following guidelines apply:

No fee usually required – You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee or decline to comply with your request if your request is clearly unfounded, repetitive, or excessive.
What we may need from you – When exercising your rights or otherwise assisting you, we may need to request specific information from you to help us confirm your identity. This is a security measure to ensure we do not disclose personal information to any person who is not entitled to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time to respond – We try to respond to all legitimate requests within 30 days of your request. Occasionally it may take us longer than 30 days to respond, for instance if your request is particularly complex or you have made a number of requests. In this case, we will notify you of the delay, and may continue to update you regarding the progress of our response.
No discrimination – You will not be subject to discrimination as a result of exercising the rights described herein. In some cases, when you exercise one of your rights, we will be unable to comply with the request due to legal obligations or otherwise, or we will be unable to provide you certain products or services. These responses are not discrimination and our reasons for declining your request or ceasing services will be provided at that time.
Authorized agent – You may designate an authorized agent to make a request on your behalf. In order to designate an authorized agent to make a request on your behalf, you must provide a valid power of attorney, the requester’s valid government issued identification, and the authorized agent’s valid government issued identification.

XII. How to Contact Us

PoolCorp welcomes feedback and questions on this Privacy Policy. If for any reason you wish to contact us, our contact information is:

Pool Corporation
Attn: PoolCorp Privacy Agent
109 Northpark Boulevard
Covington, Louisiana 70433
[email protected]

To exercise your rights as described in this Privacy Policy, please use the following web form: http://dataprivacy.poolcorp.com

XIII. Changes

We reserve the right to change this Privacy Policy at any time and will post any changes to this Privacy Policy as soon as they go into effect. Please refer back to this Privacy Policy on a regular basis. Your continued use of the Websites following posting of changes constitutes your acceptance of such changes.

This Privacy Policy was last updated November 25, 2019.