1. Introduction and Scope

Universal Appliances, Kitchens and Baths, Inc., a California corporation doing business as Universal Appliance and Kitchen Center (“we,” “us,” “our,” or the “Company”), respects your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you visit or make a purchase through our website located at https://uakc.com/ (the “Site”), visit our showrooms or service locations, contact us by telephone, email, or chat, or otherwise interact with us (collectively, the “Services”).

This Privacy Policy is provided in accordance with, and is intended to satisfy the notice requirements of, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, and its implementing regulations (collectively, the “CCPA”), the California Online Privacy Protection Act (“CalOPPA”), and other applicable state and federal privacy laws. It also serves as our notice at collection for personal information collected online through the Site.

This Privacy Policy applies only to the Site identified above. We operate related websites — including uakc.com, uakc.net, universalappliancerepair.com, and universal-akb.com — and each website is governed by the privacy policy and cookie policy posted on that website. This Privacy Policy does not apply to information about our employees, contractors, or job applicants, which is addressed in separate notices.

Please read this Privacy Policy carefully. If you do not agree with our practices as described here, please do not use the Site.

2. Definitions

• Personal information (or personal data) means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. It does not include deidentified or aggregate information or publicly available information as defined by applicable law.

• Processing means any operation performed on personal information, such as collection, use, storage, disclosure, analysis, deletion, or modification.

• Business (or controller) means the entity that determines the purposes and means of processing personal information. For the Site, the Business is the Company.

• Service provider, contractor, or processor means a third party that processes personal information on our behalf pursuant to a written contract, for our business purposes, and that is restricted from using that information for any other purpose.

• Sale and sharing have the meanings given in the CCPA. “Sharing” includes making personal information available to third parties for cross-context behavioral advertising, whether or not for money.

3. Personal Information We Collect

We collect the categories of personal information described below. We collect this information (a) directly from you (for example, when you create an account, request a quote, purchase products, schedule delivery, installation, or repair services, sign up for communications, or contact us); (b) automatically from your device when you use the Site (through cookies and similar technologies described in our Cookie Policy); (c) from our service providers and contractors (such as payment processors, delivery and installation partners, and analytics providers); and (d) from advertising networks and social media platforms, when you interact with our advertisements or content.

Sensitive Personal Information

The only categories of sensitive personal information we collect are account log-in credentials (a username in combination with a password) if you create an account, and payment card information, which is collected and processed by our payment processors. We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers, and we use and disclose sensitive personal information only for the purposes permitted by section 7027(m) of the CCPA regulations. Accordingly, we do not offer a “Limit the Use of My Sensitive Personal Information” link.

We do not knowingly collect personal information from children, as described in Section 14 below.

4. How We Use Personal Information

We use the categories of personal information described above for the following business and commercial purposes:

• To provide the Services, including processing orders and payments; arranging delivery, installation, and repair services; administering warranties; and managing your account;

• To communicate with you, including responding to inquiries, providing customer support, and sending transactional messages such as order confirmations and service appointments;

• To market our products and services, including sending promotional emails (from which you may unsubscribe at any time) and serving advertisements, subject to your opt-out rights described in Sections 10 and 11;

• To operate, analyze, maintain, and improve the Site and the Services, including through analytics;

• To detect, investigate, and prevent security incidents, fraud, and other malicious, deceptive, or illegal activity;

• To comply with legal obligations, including tax, accounting, product-safety, and consumer-protection requirements, and to respond to lawful requests from government authorities;

• To establish, exercise, or defend legal claims; and

• For other purposes disclosed to you at the time of collection or with your consent.

We do not collect additional categories of personal information, or use personal information we have collected for materially different, unrelated, or incompatible purposes, without first providing you with notice.

5. How We Disclose Personal Information; Sales and Sharing

We disclose personal information for business purposes to the following categories of recipients, in each case subject to contractual restrictions where required by law:

• Service providers and contractors, such as payment processors, delivery and installation partners, repair technicians, website hosting and information technology providers, email service providers, customer support platforms, and our consent management provider;

• Analytics providers, such as Google Analytics;

• Advertising partners and networks, such as Google and Meta, in connection with advertising and remarketing (see below regarding “sharing”);

• Professional advisors, such as attorneys, accountants, and insurers, where reasonably necessary;

• Government authorities, courts, and other parties where required by law, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to detect and prevent fraud; and

• Successors in interest in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of our assets, in which case personal information may be transferred as a business asset subject to applicable law.

Sales and Sharing of Personal Information

We do not sell personal information in exchange for money. However, like many businesses, we use third-party advertising cookies and similar technologies on the Site, and our disclosure of certain personal information to advertising partners through those technologies may constitute “sharing” for cross-context behavioral advertising — and in some circumstances a “sale” — as those terms are defined by the CCPA and other state privacy laws. In the preceding twelve (12) months, we have disclosed for these purposes the following categories of personal information: identifiers, internet or other electronic network activity information, and commercial information. The categories of recipients are advertising networks and analytics providers.

You have the right to opt out of the sale and sharing of your personal information, as described in Sections 10 and 11. We do not sell or share the personal information of consumers we know to be under sixteen (16) years of age.

6. Cookies and Tracking Technologies

We and our third-party partners use cookies, pixels, scripts, and similar technologies on the Site. Cookies that are not strictly necessary for the Site to function are deployed consistent with the preferences you express through the consent banner and preference center on the Site. For a detailed description of the technologies we use, the categories of cookies, and how to manage your preferences, please see our Cookie Policy for the Site, which is incorporated into this Privacy Policy by reference.

7. Retention of Personal Information

We retain each category of personal information for as long as reasonably necessary for the purposes disclosed in this Privacy Policy. Because retention needs vary, we use the following criteria to determine retention periods: (a) the duration of our relationship with you, including the life of your account and any warranty or service obligations; (b) our legal, tax, accounting, and regulatory obligations; (c) applicable statutes of limitations and the need to establish, exercise, or defend legal claims; (d) fraud-prevention and security needs; and (e) whether the information remains necessary for the purposes for which it was collected. When personal information is no longer required, we delete, deidentify, or aggregate it in accordance with applicable law.

8. How We Protect Personal Information

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, use, modification, or disclosure, appropriate to the nature of the information we handle. These safeguards are designed to include measures such as transport-layer encryption for information submitted through the Site, access controls limiting access to personnel with a business need, personnel policies and training, diligence on service providers, and incident response procedures, including notification to you and to regulators where required by law. However, no method of transmission over the Internet and no method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions and to verification of your identity:

• Right to know and access. You may request that we disclose the categories of personal information we have collected about you; the categories of sources; the business or commercial purposes for collecting, selling, or sharing it; the categories of third parties to whom we disclose it; and the specific pieces of personal information we have collected about you.

• Right to delete. You may request that we delete personal information we have collected from you, subject to exceptions permitted by law (for example, to complete a transaction, honor a warranty, detect security incidents, or comply with a legal obligation).

• Right to correct. You may request that we correct inaccurate personal information we maintain about you.

• Right to opt out of sale or sharing. You may direct us not to sell or share your personal information, as described in Sections 10 and 11.

• Right to limit use of sensitive personal information. As described in Section 3, we do not use or disclose sensitive personal information for purposes that would trigger this right; if that changes, we will post the required link and honor this right.

• Right to non-discrimination. We will not discriminate against you for exercising your rights, including by denying you goods or services, charging different prices, or providing a different level or quality of goods or services.

• Right to data portability. Where you request specific pieces of personal information, we will provide them in a portable and, to the extent technically feasible, readily usable format.

How to Exercise Your Rights

You may exercise your rights by any of the following methods:

• Email: webmaster@uakc.com (please include “Privacy Request” in the subject line);

• Toll-free telephone: 877-696-2982;

• Privacy widget: through our privacy widget on the Site — click Click to open the widget, navigate to “Settings,” and select and submit the applicable request; or

• Mail: Universal Appliances, Kitchens and Baths, Inc., Attention: Privacy Compliance, 21012 Golden Triangle Rd., Santa Clarita, CA 91350.

Verification; Authorized Agents; Timing

For requests to know, access, delete, or correct, we must verify your identity to a reasonable degree of certainty. We will ask you to provide information that we can match against records we maintain (and, if you have an account, we may ask you to submit your request through your password-protected account). We will use information you provide for verification only for that purpose. You may designate an authorized agent to submit a request on your behalf; we may require the agent to provide proof of your signed written authorization and may require you to verify your own identity or confirm the authorization directly with us.

We will confirm receipt of a request to know, access, delete, or correct within ten (10) business days and will respond within forty-five (45) calendar days, which we may extend by an additional forty-five (45) days where reasonably necessary upon notice to you. We will act on verified opt-out requests within fifteen (15) business days. We do not charge a fee to process requests unless they are manifestly unfounded or excessive.

10. Right to Opt Out of Sale or Sharing (“Do Not Sell or Share My Personal Information”)

You may opt out of the sale and sharing of your personal information at any time by any of the following methods: (a) clicking the “Do Not Sell or Share My Personal Information” link in the footer of the Site; (b) setting your cookie preferences through the consent banner or preference center on the Site to decline advertising and other non-essential cookies; or (c) using an opt-out preference signal as described in Section 11. Once you opt out, we will not sell or share your personal information unless you subsequently provide consent, and we will wait at least twelve (12) months before asking you to reauthorize.

11. Opt-Out Preference Signals (Global Privacy Control)

We honor opt-out preference signals, including the Global Privacy Control (“GPC”), as valid requests to opt out of the sale and sharing of personal information, as required by the CCPA and by the laws of other states that recognize such signals (including, for example, Colorado, Connecticut, Delaware, Montana, New Jersey, Oregon, and Texas). When our systems detect a GPC or other recognized signal from your browser or device, we process it, in a frictionless manner, as an opt-out of sale and sharing for that browser or device and, if you are logged into an account, we will apply it to your account where we are able to associate the signal with you. If your opt-out preference signal conflicts with a more specific preference you have set on the Site, we will honor the signal but may notify you of the conflict and give you the opportunity to consent to specific uses. GPC is available through certain browsers and browser extensions; to learn more, visit https://globalprivacycontrol.org.

12. Privacy Rights of Residents of Other States

If you reside in another state with a comprehensive consumer privacy law — including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia — you may have some or all of the following rights, subject to the thresholds, definitions, and exceptions of your state’s law: the right to confirm whether we process your personal data and to access it; the right to correct inaccuracies; the right to delete; the right to obtain a portable copy; and the right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

You may exercise these rights using the methods described in Section 9. If we decline to take action on your request, you may appeal our decision within a reasonable period after receiving our response by replying to our response or by emailing webmaster@uakc.com with the subject line “Privacy Appeal.” We will respond to your appeal within the period required by your state’s law (generally forty-five (45) to sixty (60) days) with a written explanation. If your appeal is denied, you may contact your state attorney general or other designated regulator to submit a complaint.

13. Do Not Track; Third-Party Tracking Disclosure

Some browsers transmit “Do Not Track” (“DNT”) signals. Because no uniform standard for DNT signals has been adopted, the Site does not currently respond to browser DNT signals. We do, however, honor Global Privacy Control opt-out preference signals as described in Section 11. Please also be aware that third parties, such as analytics and advertising providers, may collect personal information about your online activities over time and across different websites when you use the Site; you can limit that collection through the choices described in Sections 10 and 11 and in our Cookie Policy.

14. Children’s Privacy

The Site is a general-audience website intended for adults and is not directed to children under thirteen (13) years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us using the information in Section 20, and we will delete that information as required by the Children’s Online Privacy Protection Act and its implementing rule. In addition, we do not sell or share the personal information of consumers we know to be under sixteen (16) years of age.

15. California “Shine the Light”

California Civil Code section 1798.83 permits California residents to request certain information regarding a business’s disclosure of personal information to third parties for those third parties’ own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes without your consent. California residents may make inquiries under this statute by emailing webmaster@uakc.com.

16. Third-Party Websites and Services

The Site may contain links to websites, embedded content, and services operated by third parties, including manufacturers, vendors, and social media platforms. Those third parties maintain their own privacy policies, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policy of any third-party website before providing personal information or completing a transaction.

17. Notice of Financial Incentives

We do not currently offer financial incentives, price differences, or service differences in exchange for the collection, retention, sale, or sharing of personal information. If we introduce such a program (for example, a loyalty program), we will provide the notice required by law and obtain your opt-in consent before enrolling you.

18. Accessibility

We are committed to making this Privacy Policy accessible to consumers with disabilities. If you would like to receive this Privacy Policy in an alternative format, please contact us at webmaster@uakc.com or 877-696-2982.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the “Last Updated” date at the top of this page. If we make material changes to the way we collect, use, sell, or share personal information, we will provide conspicuous notice on the Site (and, where appropriate and feasible, by email) before the changes take effect, and we will obtain your consent where required by law. We encourage you to review this Privacy Policy periodically.

20. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, or wish to exercise your privacy rights, please contact us:

Universal Appliances, Kitchens and Baths, Inc.

d/b/a Universal Appliance and Kitchen Center

Attention: Privacy Compliance

21012 Golden Triangle Rd.

Santa Clarita, CA 91350

Email: webmaster@uakc.com

Toll-Free Telephone: 877-696-2982

We will use commercially reasonable efforts to respond promptly to any question or concern.