California Privacy Statement

CALIFORNIA PRIVACY STATEMENT

Effective Date: January 23, 2026

Last Updated: January 23, 2026

Do it Best® Group (consisting of Do it Best Corp. and its Affiliates, including Do it Best Commerce Company, LLC and affiliates associated with True Value® such as such as TV Holdco LLC, TV Hardware Distribution LLC) (collectively, “Do it Best Group”, “we”, or “us”) are providing this California Privacy Statement to comply with the California Consumer Protection Act (as amended by the California Privacy Rights Act) (“CCPA”), the corresponding regulations, and other applicable California statutes. This California Privacy Statement supplements the information contained in our general Privacy Policy found at https://www.doitbest.com/global/privacy-policy/ (the “General Privacy Policy”) and applies only to residents of the State of California, USA, if the personal information you submit to us is within the scope of the CCPA or other applicable California statute. The California Privacy Statements for applicable persons that are (a) employees of Do it Best Group can be found on company intranet resources; and (b) job applicants can be found on www.doitbestcareers.com. In the event of any conflict between this California Privacy Statement (if applicable) and our General Privacy Policy, this California Privacy Statement shall prevail with respect to covered personal information. Any terms used below that are defined in a statute shall have the statutory meaning. Any capitalized terms not otherwise defined shall have the meaning in the General Privacy Policy. This California Privacy Statement does not apply to Affiliates that have a separately posted California Privacy Statement.

1. CATEGORIES OF PERSONAL INFORMATION AND SENSITIVE PERSONAL INFORMATION COLLECTED

We collect, and have collected in the past 12 months, the following categories of personal information and sensitive personal information:

Cat	*Examples*
A	Identifiers such as name, alias, postal address, phone numbers, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, and account name.
B	Personal information as defined in the California Customer Records Act (Section 1798.80(e)) such as the Identifiers in category A as well as gender, profession, bank account number or payment card information.
C	Characteristics of protected classifications under California or federal law such as age or gender.
D	Commercial information such as records of products or services purchased or considered, and information on interactions with Stores, vendors or offerings.
F	Internet or other electronic network activity information such as information regarding your interactions with our Services, Sites or other offerings (e.g., Usage Information), including browsing history, search history, and videos viewed.
G	Geolocation data ssuch as physical location data of your device or computer.
H	Audio, electronic, visual thermal, olfactory, or similar information such as audio recordings of calls to our customer service centers and CCTV video recorded at our facilities.
K	Inferences drawn from any of the above categories to determine characteristics, preferences, attitudes, abilities, or behavior that we collect via our Services or other offerings or obtain from third parties in order to target advertisements or to personalize content.
L	Sensitive Personal Information such as precise GPS geolocation.

We have sold and shared (both as defined in the CCPA) personal information in categories A, B, C, D, F, G and K listed above. For more information on selling and sharing of data please see Section 6 below. You may exercise your right to opt-out of the sale or sharing of your personal information to third parties by one of the methods specified in Section 9.D below.

2. PURPOSES FOR COLLECTING PERSONAL INFORMATION

We collect the categories of personal information and sensitive personal information listed above for one or more of the following business or commercial purposes:

To contact you regarding business transactions and information related to the products or services you have purchased;
To provide products and services to you (for example, if you provide us with personal information in order to place an order with us, we will use that information to process your payment, complete the sale and ship product to you);
To administer, maintain and manage our business relationship and/or provide ongoing support to you;
To communicate with you about products (including as appropriate product recalls), services, and offerings and promotional activities of us and our Stores;
To monitor and track marketing activities, generate insights and metrics, make recommendations, perform identity resolution, retarget, generate lookalike audiences, and show customized or targeted ads, promotions and content to you (including through personalized or cross-context behavioral advertising);
To respond to your comments, reviews, or requests for information;
To administer Programs, including the Best Rewards and True Value Rewards programs (if you are a member of those programs), as more specifically described in the applicable Program Terms therefor;
To use location information to assign you a designated home Store and to customize certain functions of the Services, such as product availability, pricing, local advertising, and the store locator feature;
To enforce any contracts that we enter into with you, or defend claims arising from such contracts;
To contact you regarding future opportunities and changes in our activities, products and services;
To customize and optimize our services, offerings and customer experience, including by generating insights and metrics regarding our operations and strategies, assessing trends and interests, and make recommendations;
To enhance the security of our network and information systems;
To develop, enhance, and improve the products, services and offerings of us and our Stores;
To understand and monitor how people interact with our Sites, Services and offerings;
For safety and security purposes, including where necessary to protect the rights, property or safety of us, Stores or other users or customers;
For event planning and administration purposes;
To comply with obligations under applicable law, industry guidelines and internal policies;
Where we are obligated, or permitted, to do so by applicable law, regulation or legal process, including disclosure to tax, customs or other governmental authorities; or
As described to you when collecting your personal information.

3. RETENTION OF PERSONAL INFORMATION AND SENSITIVE PERSONAL INFORMATION

Do it Best Group will retain collected personal information and sensitive personal information as long as necessary to fulfill the purposes for which it was collected and as described herein, and thereafter as reasonably necessary to meet accounting, reporting, audit, or legal and regulatory requirements (including record retention requirements), to defend or bring potential legal claims, or for a longer period if we have other legitimate business reasons for retaining the information. For example, we retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevance of products and content we recommend. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and applicable legal requirements.

4. SOURCES OF PERSONAL INFORMATION

We obtain the categories of personal information listed above from the following categories of sources:

directly from our customers or prospective customers. For example, from information that our customers provide to us related to the orders for products that they purchase from us or our Stores, in connection with establishing an Account with us, from contact with our call centers, from participation in contests or sweepstakes, or when visiting a Store.
directly and indirectly from activity on our Sites, Services and other offerings. For example, from submissions through our Site or information collected automatically from use of our Sites, Services or mobile applications.
from friends (if a friend purchases something for you),
from third party sources, including marketing partners and data brokers.
from publicly available sources.
from our Affiliates and related companies.
from Stores or third party vendors, Service Providers or contractors, including Payment Processors
from Third Party Services, including Analytics Services and AdTech Services, and from cookies, web beacons and embedded tracking codes that collect information about visitor traffic on our Sites and Services.

5. DISCLOSURE OF PERSONAL INFORMATION FOR BUSINESS PURPOSES

In the preceding 12 months, we have disclosed the categories of personal information and sensitive personal information listed above in Categories A (Identifiers), B (Personal Data), C (Characteristics), D (Commercial Information), F (Online Activity), G (Geolocation Data), K (Inferences), and L (Sensitive Personal Information) (see Section 1) to: Service Providers or contractors performing services for us or persons assisting us to provide a requested product or service (including Payment Processors, delivery services, IT infrastructure, AI technology, and chat service providers); our Affiliates and related companies for internal business purposes; Analytics Services that help us generate performance metrics regarding our Site and Services; and Third Party Services, including AdTech Services that provide advertising services and serve ads for Products and Services. We have disclosed information in Categories A (Identifiers), B (Personal Data), C (Characteristics), D (Commercial Information) and K (Inferences) to Stores, including those with whom you have purchased products or placed a Ship-to-Store Order or an order via a Hosted Store Service.

6. SALE AND SHARING OF PERSONAL INFORMATION

We do not sell the personal information of consumers in the traditional sense. However, California’s definition of “selling” data is broad and potentially covers many types of data transfers that do not involve selling for monetary consideration, including some disclosures of personal data to Stores. Under the CCPA “share” means to disclose personal information to third parties for cross-context behavioral advertising which means targeting advertising based on personal information obtained from a consumer’s activities across third party websites or services. Like many companies we may use, or permit third parties to use, personal information (including Usage Information) to target advertising as further described in our General Privacy Policy. As defined in the CCPA, we sell or share, and have sold or shared in the preceding 12 months, the following categories of personal information listed above to third parties:

Category	Categories of Third Parties to Whom Info was Sold or Shared	Purposes for Selling or Sharing
A Identifiers	Stores Analytics Services AdTech Services	Customer & order management Marketing & advertising Loyalty programs
B Personal Information under Cal. Records Act	Stores Analytics Services AdTech Services	Customer & order management Marketing & advertising Loyalty programs
C Protected Characteristics	Stores AdTech Services	Customer & order management Marketing & advertising Loyalty programs
D Commercial Information	Stores AdTech Services	Customer & order management Marketing & advertising Loyalty programs
F Internet/Network Info	Analytics Services AdTech Services	Customer & order management Marketing & advertising
G Geolocation Data	Analytics Services AdTech Services	Marketing & advertising
K Inferences from Data	Stores AdTech Services	Customer & order management Marketing & advertising Loyalty programs

To learn more about your right to opt out of the sale and/or sharing of your personal information, please see Section 9.

7. PERSONAL INFORMATION OF CONSUMERS UNDER 16 YEARS IF AGE

We do not knowingly sell or share (as defined in the CCPA) the personal information of consumers under 16 years of age.

8. SENSITIVE PERSONAL INFORMATION

Collected sensitive personal information consists of precise geolocation data. You may limit the collection of precise geolocation data through applicable settings on your device. We do not use or disclose sensitive personal information (as defined in the CCPA) for purposes other than those permitted purposes specified in the CCPA, including to perform services on behalf of our business (such as using location to determine the nearest store to a consumer, to assign a designated home Store, and to customize certain functions of the Services, such as product availability, pricing, and local advertising).

9. RIGHTS UNDER THE CCPA

The CCPA grants California residents the following rights:

A.Right to Know

You have the right to request that we disclose the following information to you. To request this information, you can submit a verifiable consumer request. Once we receive and confirm your verifiable request, we will disclose the requested information to you.

• The categories of personal information we have collected about you,

• The categories of sources for the personal information we have collected about you,

• Our business or commercial purpose for collecting selling, or sharing that personal information,

• The categories of third parties to whom we disclose personal information, and

• The specific pieces of personal information we have collected about you.

B.Right of Deletion

You have the right to request that we delete the personal information that we have collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers and contractors to delete) your personal information from our records, unless an exception applies. If your request is denied, the response we provide to your verifiable consumer request will explain the reason for denying your request. Please note that deletion of personal information will result in deletion of your Account on our Sites (including doitbest.com and truevalue.com), termination of your participation in loyalty programs (including Best Rewards and True Value Rewards), and loss of any loyalty points and unused rewards.

C.Right to Correct

You have the right to request that we correct inaccurate personal information that we maintain about you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will correct (and direct our service providers and contractors to correct) inaccurate personal information that we maintain about you, unless an exception applies. If your request is denied, the response we provide to your verifiable consumer request will explain the reason for denying your request.

D.Right to Opt-Out of Sale and/or Sharing

You have the right to opt-out of the sale and/or sharing (both as defined in the CCPA) of your personal information. You can submit a request to opt-out by:

• Visiting our Privacy Choices page (click here) and selecting “Opt-out of the sale and sharing of my personal information",

• Sending us an email at privacypolicy@doitbest.com, or

• Turning on “Global Privacy Control” signals through your browser, which our Site will process as a request to opt-out of sale and sharing for the relevant browser and device as further described in Section 13.

Please note that when you place a Ship-to-Store Order or an order via Hosted Store Services, we must share your personal information with the applicable Store to complete that transaction, and you may not opt-out of such sharing if you choose to place such an order. By accessing and using Hosted Store Services or placing a Ship-to-Store Order you consent to the transfer to and processing and use of your personal information and related Usage Information by the applicable Store for its own purposes.

Please note that operation of the Best Rewards^SM and True Value Rewards loyalty Programs is reliant on the exchange of personal information between us and Stores to calculate loyalty rewards, and if you opt-out of the sale and/or sharing of your personal information this will result in termination of your participation in those loyalty Programs and the loss of any loyalty points or unused rewards. To the extent permitted under applicable law we will endeavor to obtain your confirmation that this is your intent at the time you exercise your right to opt-out, but will have no liability for any unintended termination of your Best Rewards or True Value Rewards Account.

E.Right To Limit Use of Sensitive Personal Information

We do not use or disclose sensitive personal information that we have collected from you for purposes other than those business purposes permitted under the CCPA and therefore do not provide a method to limit such activities.

F.Right of Non-Discrimination

You have the right to not receive discriminatory treatment by us for exercising any of your CCPA rights.

10. EXERCISING YOUR PRIVACY RIGHTS

You may exercise your right to opt-out of the sale and/or sharing as provided above in Section 9(D). To exercise your right to know, right of deletion, or right to correct please submit a verifiable consumer request to us by:

Visiting our Privacy Choices page (click here) and selecting “Opt-out of the sale and sharing of my personal information",
Calling us at (855) 828-9792, or
Sending us an email at privacypolicy@doitbest.com.

We reserve the right to confirm your California residency to process your requests. In accordance with the CCPA, we will need to confirm your identity to process your requests and we may require you to login to your account with us, provide information associated with your account or transactions with us, or require you to provide government identification, signed declarations and other proof of identity. You may designate an authorized agent to make a request on your behalf as provided under California law and we reserve the right to request proof of such authorization. You may also make a verifiable consumer request on behalf of your minor child. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm that the personal information relates to you, or if you do not provide us with sufficient detail to allow us to understand and respond to your request. Our response will explain any reasons we cannot comply with a request, if applicable.

11. AUTHORIZED AGENTS

You may use an authorized agent to submit a request to know, request to delete, or request to correct on your behalf. The authorized agent can submit such requests on your behalf by following the instructions in Section 10 above. When you use an authorized agent to submit a request to know, request to delete, or request to correct, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request. We may also require you to do either of the following: (a) verify your own identity directly with us; and/or (b) confirm directly with us that you provided the authorized agent permission to submit the request.

12. REQUEST RESPONSE TIMING AND FORMAT

Upon receipt of your request, we will provide directions on identity verification requirements which may include submission of pieces of personal information that we can match to our records. Once you provide such information, and assuming we are able to verify your identity by matching the information you provided to our records, we will begin to gather information to respond to your request. For requests to correct, we may require you to provide additional documentation to rebut any of our own documentation that the personal information that you are requesting to correct is accurate.

No later than 10 business days after receiving your request, we will confirm receipt of the request and provide information about how we will process the request. We will endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (we may take up to 45 additional days), we will inform you of the reason and extension period in writing. If we cannot verify the request within the 45 calendar days, we may deny the request. If we deny your request, we will inform you of the reason for its denial.

13. PROCESSING OF PRIVACY OPT-OUT PREFERENCE SIGNAL

Certain browsers and other technologies send opt-out preference signals to the websites you visit notifying the website of your desire to stop the sale or sharing of your personal information. For more information, please see www.globalprivacycontrols.org. Our Site will interpret such signal as a request to opt-out of sale and sharing for the relevant browser and device – see Section 9(D). At this time, an opt-out in response to the signal only applies to the browser you are using and only includes the online sale and sharing of your personal information during the current session. Alternatively, you can choose to provide the information requested via our Privacy Choices page (click here) and selecting “Opt-out of the sale and sharing of my personal information" which may enable us to process your opt-out request more broadly than for a specific device or browser, including cases where you are logged into your Account.

14. NOTICE OF FINANCIAL INCENTIVE

We provide reward price discounts, coupons, services and other benefits for members of the Best Rewards^SM and True Value Rewards® loyalty programs, Account holders, members of our mailing and email lists, and participants in other promotional Programs. Because Programs involve the collection of personal information (including Categories A, B, C, D, F, G, K, and L identified in Section 1 above), they may be considered to be “financial incentives”. Please see our Notice Regarding Loyalty Programs and Financial Incentives in our General Privacy Policy for details (click here).

You may opt-out of participation by ceasing to participate in a Program (including by cancelling your Account or opting out of the Texting Program), opting out of sharing or selling of your personal information as provided in Section 9.D, or by contacting us as provided in Section 17. Please note that operation of the Best Rewards and True Value Rewards loyalty Programs is reliant on the exchange of personal information between us and Stores regarding purchases you make using your Rewards Number, including purchases at a Store, to calculate loyalty rewards. Your decision to opt out of the sale or sharing of your personal information will result in termination of your participation in all loyalty programs (both Best Rewards and True Value Rewards), and loss of any loyalty points and unused rewards.

15. DIRECT MARKETING DISCLOSURES

California’s "Shine the Light" law (Civil Code Section 1798.83) requires businesses to respond to requests from California customers asking about the business's practices related to disclosing personal information to third parties for the third parties’ direct marketing purposes unless the business has in place a policy not to disclose personal information for the third parties’ direct marketing purposes if the customer has exercised an option to opt-out of such information-sharing. We have such a policy in place and California residents can exercise their right to opt-out of such sharing using the methods provided above in Section 9(D).

16. CHANGES TO OUR PRIVACY STATEMENT

We reserve the right to amend this California Privacy Statement from time to time as provided in our General Privacy Policy (click here).

17. CONTACT INFORMATION

If you have any questions, comments, or concerns about this California Privacy Statement, the ways in which we collect and use your personal information, or your choices and rights regarding such use, please do not hesitate to contact us by:

Clicking here,
Calling us at (855) 828-9792, or
Sending us an email at privacypolicy@doitbest.com.