Weyerhaeuser State-Specific Privacy Rights

Effective Date: December 5, 2024

Thank you for your interest in Weyerhaeuser Company and its affiliates, including Weyerhaeuser NR Company (collectively “Weyerhaeuser,” “we,” “us,” or “our”). This U.S. State Privacy Addendum ("Privacy Addendum") applies to consumers in certain U.S. states when you access or use our websites that link to this Privacy Addendum, or when you otherwise interact with us, such as through our customer support channels, at an event, or on social media. Many U.S. states, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah and Virginia have enacted consumer privacy laws that grant their residents certain rights and require additional disclosures (“State Laws”). As new State Laws are passed, we will extend necessary protections to our customers. If you are a resident of these states (“you”), this section applies to you. This Privacy Addendum also serves as our California Notice at Collection.

This Privacy Addendum explains how we collect, use, and disclose Personal Information and the rights you have regarding your Personal Information pursuant to the applicable State Law. This Privacy Addendum does not apply to job applicants or current or former employees who are residents of California. If you are a California employee, please contact us for more information. Additional information is available for California former employees and retirees. Information is also available for California job applicants.

As used in this Privacy Addendum, the term “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal information does not include information that is publicly available, de-identified, aggregated, or otherwise exempted by applicable State Law.

This Privacy Addendum should be read in conjunction with all other Weyerhaeuser policies that govern your relationship with us. Unless otherwise noted, the disclosures contained within this Privacy Addendum cover our activities in the prior 12 months from the Effective Date as well as our current practices.

We may from time-to-time update information in this Privacy Addendum. The date on which we last updated this Privacy Addendum is provided above (the Effective Date). If we make material changes, we will provide you with additional notice (such as by sending you a notification or adding a statement to the Services). We encourage you to read this Privacy Addendum regularly to stay informed about our information practices and the choices available to you and contact us with any questions.

COLLECTION AND USE OF PERSONAL INFORMATION

      Categories of Personal Information We Collect

      Sources of Personal Information

      Business Purposes for Collection, Use, and Disclosure

      Additional Purposes for Using Personal Information

      Categories of Recipients to Whom We Disclose Personal Information

RETENTION OF PERSONAL INFORMATION

STATE-SPECIFIC PRIVACY RIGHTS

      Access, Correction, and Deletion

      Request to Opt Out of the Sale and Sharing of Personal Information

      Right to Limit Use and Disclosure of Your Sensitive Personal Information

      Verification Process for Consumer Requests

      Authorized Agents

      Response Timing

      Right to Non-Discrimination for the Exercise of Your Privacy Rights.

ACCESSIBILITY TO USERS WITH DISABILITIES

CONTACT FOR MORE INFORMATION

 

 

COLLECTION AND USE OF PERSONAL INFORMATION 

Categories of Personal Information We Collect

The information we collect about you depends on how you interact with us or use our Services. We collect the categories of Personal Information indicated in the chart below. Note the specific pieces of Personal Information we collect about you may vary depending on the nature of your interactions with us, and may not include all of the examples listed. Some of the information is collected from you directly such as when you communicate with us or request customer support or attend an event. In other situations, we collect certain information about your interactions with us automatically, such as device and usage information, and information collected by cookies and similar tracking technologies.

Sources of Personal Information

We collect Personal Information directly from you, your devices or browsers, our service providers that assist us in providing our services and running our business, suppliers, business partners (e.g., builders and dealers), and other data providers.

Business Purposes for Collection, Use, and Disclosure

We collect, use, and disclose Personal Information for the following business purposes:

¹ Includes maintaining and servicing your accounts, communicating with you, verifying your information, processing orders and payments, and similar functions and services.

 

Additional Purposes for Using Personal Information

In addition to the uses set forth above, we may use the categories of Personal Information identified above:

• monitor and analyze trends, usage, and activities in connection with our Services;
• to comply with applicable legal and regulatory requests and obligations (including investigations);
• to investigate, establish or defend legal claims and allegations;
• for security or the prevention, detection, or investigation of fraud, suspected or actual illegal activity, violations of company policy or rules, or other misconduct; and
• to seek advice from lawyers, auditors, and other professional advisers.

 

Categories of Recipients to Whom We Disclose Personal Information

We may disclose your Personal Information to the following categories of parties for the following purposes:

• Service providers. We may provide your information to service providers to help us operate and manage our business.
• Government authorities. We may disclose Personal Information for legal compliance, law enforcement, and public safety purposes. For example, to law enforcement, government or regulatory bodies, lawful authorities, or other authorized parties in order to comply with laws, regulations, court orders, or other legal obligations.
• To professional advisers. We may disclose the information we collect from you to seek advice from lawyers, auditors, other professional advisers, or as evidence in litigation in which we are involved.
• Business transfers. We may disclose Personal Information in the event we sell or transfer all or a portion of our business assets (e.g., further to a merger, reorganization, liquidation, bankruptcy, or any other business transaction), including negotiations of such transactions.

 

RETENTION OF PERSONAL INFORMATION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Information (which includes the categories of Personal Information set forth in the charts and sections above) for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal, obligations, or as necessary to resolve disputes. To determine the appropriate retention period for Personal Information, we consider applicable legal requirements, the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes we process your Personal Information for, and whether we can achieve those purposes through other means. For certain types of Personal Information, we will only maintain it for a limited duration.

STATE-SPECIFIC PRIVACY RIGHTS

Under the applicable State Laws, consumers have certain rights that they may exercise independently or through an authorized agent. To exercise any of these rights, please visit our Privacy Requests webpage or call our toll-free phone number at (844) 330-7632. Please note that when submitting a request, you will be asked to provide information to verify your identity before action is taken. We will not fulfill a request unless we have been provided enough information for us to reasonably verify that the requestor is the consumer to whom the Personal Information relates.

Access, Correction, and Deletion

You have the right to (1) request to know more about and access your personal information, including in a portable format, (2) request deletion of your personal information, and (3) request correction of inaccurate personal information. You can also access, modify, and delete certain information stored within your online account by logging into your account at any time.

Request to Opt Out of the Sale and Sharing of Personal Information

We do not knowingly sell your Personal Information or share it for cross-context behavioral advertising. We do not knowingly sell or share the Personal Information of minors under 16 years of age.

Right to Limit Use and Disclosure of Your Sensitive Personal Information

We do not knowingly use sensitive Personal Information for the purpose of inferring characteristics about you, or for any other reasons besides the permitted business purposes. For this reason, we do not treat the sensitive Personal Information we collect as subject to a Limit the Use of My Sensitive Personal Information request and, therefore, we do not offer a way for you to submit such a request.

Verification Process for Consumer Requests

We will verify your request by asking you to provide certain information, including your name, email address, mailing address, and phone number.

Authorized Agents

Where required by law, you can designate an authorized agent to make a request on your behalf.

We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may be required to contact the individual who is the subject of the request to verify his or her own identity or confirm the authorized agent has permission to submit the request. We may deny a request from an authorized agent if the agent does not submit proof that the consumer has authorized them to act on his or her behalf.

Response Timing

We will endeavor to respond to a verifiable request to know, correct or delete within 45 days of our receipt of the request. If we require more time (up to an additional 45 days), we will inform you of the reason. If we deny your request, you may appeal our decision by contacting the Legal Department using the contact information below. If you have concerns about the results of an appeal, you may contact the attorney general in the state where you reside.

Right to Non-Discrimination for the Exercise of Your Privacy Rights

We will not retaliate against you if you choose to exercise any of the privacy rights described above.

ACCESSIBILITY TO USERS WITH DISABILITIES

This Privacy Addendum is accessible to users with disabilities, including keyboard-only users and those with visual impairments. Users with visual impairments can use a screen reader to learn more about our state-specific privacy practices. A list of available screen readers can be found by searching the Internet, including the website for the National Library Service for the Blind and Print Disabled.

CONTACT FOR MORE INFORMATION

If you have any questions about our privacy policies and practices, you may contact us by email at privacy@weyerhaeuser.com or by mail at the following address:

               Weyerhaeuser Company 
               220 Occidental Ave. S.
               Seattle, WA 98104
               Attn: Privacy - Legal Department
               Toll-Free Phone: (844) 330-7632