Weyerhaeuser California Privacy Notice

Effective Date: January 1, 2023

Welcome! Thank you for your interest in Weyerhaeuser Company and its affiliates, including Weyerhaeuser NR Company and Weyerhaeuser Company Limited (collectively “Weyerhaeuser,” “we,” “us,” or “our”). This California Privacy Notice (“California Notice”) applies to California consumers (“you”), and explains how we collect, use, and disclose Personal Information and the rights you have regarding your Personal Information pursuant to the California Consumer Privacy Act, as amended (the “CCPA”). This California Notice does not apply to job applicants or current or former employees who are residents of California. If you are a California employee, please contact us for more information. Additional information is available for California former employees and retirees. Information is also available for California job applicants.

As used in this California Notice, the term “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal information does not include information that is publicly available, de-identified, aggregated, or otherwise exempted by the CCPA.

This California Notice should be read in conjunction with all other Weyerhaeuser policies that govern your relationship with us. Unless otherwise noted, the disclosures contained within this California Notice cover our activities in the prior 12 months from the Effective Date as well as our current practices.

We may from time-to-time update information in this California Notice. The date on which we last updated this California Notice is provided above (the Effective Date). We encourage you to read this California Notice and contact us with any questions.

COLLECTION AND USE OF PERSONAL INFORMATION

      Categories of Personal Information We Collect

      Sources of Personal Information

      Business Purposes for Collection, Use, and Disclosure

      Additional Purposes for Using Personal Information

      Categories of Recipients to Whom We Disclose Personal Information

RETENTION OF PERSONAL INFORMATION

CALIFORNIA PRIVACY RIGHTS

      Requests to Know

      Request to Delete

      Request to Correct Inaccurate Information

      Request to Opt Out of the Sale and Sharing of Personal Information

      Right to Limit Use and Disclosure of Your Sensitive Personal Information

      Verification Process for Consumer Requests

      Authorized Agents

      Response Timing

      Right to Non-Discrimination for the Exercise of Your Privacy Rights.

ACCESSIBILITY TO USERS WITH DISABILITIES

CONTACT FOR MORE INFORMATION

 

 

COLLECTION AND USE OF PERSONAL INFORMATION 

Categories of Personal Information We Collect

We collect the categories of Personal Information indicated in the chart below. Note the specific pieces of Personal Information we collect about you may vary depending on the nature of your interactions with us, and may not include all of the examples listed.

Sources of Personal Information

We collect Personal Information directly from you, your devices or browsers, our service providers that assist us in providing our services and running our business, suppliers, business partners (e.g., builders and dealers), and other data providers.

Business Purposes for Collection, Use, and Disclosure

We collect, use, and disclose Personal Information for the following business purposes:

¹ Includes maintaining and servicing your accounts, communicating with you, verifying your information, processing orders and payments, and similar functions and services.

 

Additional Purposes for Using Personal Information

In addition to the uses set forth above, we may use the categories of Personal Information identified above:

• to comply with applicable legal and regulatory requests and obligations (including investigations);
• to investigate, establish or defend legal claims and allegations;
• for security or the prevention, detection, or investigation of fraud, suspected or actual illegal activity, violations of company policy or rules, or other misconduct; and
• to seek advice from lawyers, auditors, and other professional advisers.

 

Categories of Recipients to Whom We Disclose Personal Information

We may disclose your Personal Information to the following categories of parties for the following purposes:

• Service providers. We may provide your information to service providers to help us operate and manage our business.
• Government authorities. We may disclose Personal Information for legal compliance, law enforcement, and public safety purposes. For example, to law enforcement, government or regulatory bodies, lawful authorities, or other authorized parties in order to comply with laws, regulations, court orders, or other legal obligations.
• To professional advisers. We may disclose the information we collect from you to seek advice from lawyers, auditors, other professional advisers, or as evidence in litigation in which we are involved.
• Business transfers. We may disclose Personal Information in the event we sell or transfer all or a portion of our business assets (e.g., further to a merger, reorganization, liquidation, bankruptcy, or any other business transaction), including negotiations of such transactions.

 

RETENTION OF PERSONAL INFORMATION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Information (which includes the categories of Personal Information set forth in the charts and sections above) for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, obligations, or as necessary to resolve disputes. To determine the appropriate retention period for Personal Information, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes we process your Personal Information for, and whether we can achieve those purposes through other means. For certain types of Personal Information, we will only maintain it for a limited duration.

CALIFORNIA PRIVACY RIGHTS

Under the CCPA, California consumers have certain rights that they may exercise independently or through an authorized agent. To exercise any of these rights, please visit our CCPA Requests webpage or call our toll-free phone number at (844) 330-7632. Please note that when submitting a request, you will be asked to provide information to verify your identity before action is taken. We will not fulfill a CCPA request unless we have been provided enough information for us to reasonably verify that the requestor is the consumer to whom the Personal Information relates.

Request to Know

You may request more details about the Personal Information we have collected, used, and disclosed about you, as follows:

• the categories of Personal Information we have collected about you;
• the categories of sources from which we collected the Personal Information about you;
• our business purpose for collecting or disclosing your Personal Information;
• the categories of Personal Information that we disclosed for a business purpose in the preceding 12 months, and for each category identified, the categories of recipients to which we disclosed that particular category of Personal Information; and
• the specific pieces of Personal Information we collected about you.

A California consumer may submit a Request to Know no more than twice in any 12-month period.​​​​

Request to Delete

Subject to certain exceptions, consumers have the right to request that we delete Personal Information that we have collected about them. If an exception applies, we will let you know when we respond to your request to delete. If applicable, we will also notify our service providers to which we transferred your information about your request to delete.

Request to Correct Inaccurate Information

If you believe that any of the Personal Information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate Personal Information, we will use commercially reasonable efforts to correct the information as you direct.

Request to Opt Out of the Sale and Sharing of Personal Information

We do not sell your Personal Information or share it for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of minors under 16 years of age.

Right to Limit Use and Disclosure of Your Sensitive Personal Information

We do not use sensitive Personal Information for the purpose of inferring characteristics about you, or for any other reasons besides the permitted business purposes. For this reason, we do not treat the sensitive Personal Information we collect as subject to a Limit the Use of My Sensitive Personal Information request and, therefore, we do not offer a way for you to submit such a request.

Verification Process for Consumer Requests

Upon receipt of a consumer request, we will take reasonable steps to confirm that the consumer submitting the request is the consumer to whom the information relates (or his or her authorized agent), and to prevent unauthorized access to, correction of, or deletion of information. We will generally request that you provide specific information related to your stated relationship with Weyerhaeuser. For example, if you are a customer, we may request that you provide information about your most recent purchase, or if you are a Recreational Lease Holder, we may request that you provide information about your lease. The information you provide must match a minimum number of data points with information that we maintain and that we consider reliable for purposes of verification. The specific steps taken to verify the identity of the requesting consumer may vary based on the nature of the request, including the type, sensitivity and value of the information requested, the risk of harm posed by unauthorized access or deletion, the likelihood that fraudulent or malicious actors may seek the information, the robustness of Personal Information provided to verify your identity, the nature of our business or commercial relationship with you, and available technology for verification.

We will generally try to avoid requesting additional information from you for the purpose of verification, but we may need to do so if we cannot verify your identity based on the information already maintained by us. If we request additional information to verify your identity, it will be for that purpose only, and will be deleted as soon as practical after processing the request, except as otherwise required by law.

Authorized Agents

You can designate an authorized agent to make a request on your behalf, by one of the following:

1. Explicit Written Consent
2. Power of Attorney
3. A parent or guardian may also make a verifiable consumer request on behalf of his or her minor child.

We may deny a request from an authorized agent if the agent does not submit proof that the consumer has authorized them to act on his or her behalf.

Response Timing

We will endeavor to respond to a verifiable request to know, correct or delete within 45 days of our receipt of the request. If we require more time (up to an additional 45 days), we will inform you of the reason.

Right to Non-Discrimination for the Exercise of Your Privacy Rights

We will not retaliate against you if you choose to exercise any of the privacy rights described above.

ACCESSIBILITY TO USERS WITH DISABILITIES

This California Notice is accessible to users with disabilities, including keyboard-only users and those with visual impairments. Users with visual impairments can use a screen reader to learn more about our California privacy practices. A list of available screen readers can be found by searching the Internet, including the website for the National Library Service for the Blind and Print Disabled.

CONTACT FOR MORE INFORMATION

If you have any questions about our privacy policies and practices, you may contact us by email at privacy@weyerhaeuser.com or by mail at the following address:

               Weyerhaeuser Company 
               220 Occidental Ave. S.
               Seattle, WA 98104
               Attn: Privacy - Legal Department