Privacy Policy

1. Introduction

This Privacy Policy explains how One PPF Inc. (“ONE PPF,” “Company,” “we,” “us,” or “our”) collects, uses, stores, and protects information when you access our website, submit inquiries, apply for dealer programs, or otherwise interact with our services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Services.

2. Scope & Relationship to Other Documents

This Privacy Policy:

• Applies to website visitors, leads, customers, and dealers
• Governs data handling only
• Does not create dealer rights, employment rights, or warranty coverage

Dealer obligations are governed solely by executed Dealer Agreements.

Employee data is governed by employment agreements and HR policies.

3. Information We Collect

A. Information You Provide

• Name, email address, phone number (including mobile)
• Business name and contact details
• Dealer application information
• Support inquiries or communications
• Preferences and opt-in selections

B. Information Collected Automatically

• IP address, browser type and device info
• Operating system
• Pages viewed and time spent
• Referring URLs
• Approximate geographic location (derived from IP)

C. Cookies & Similar Technologies

• Used for site functionality
• Analytics and performance monitoring
• User experience improvements

You may disable cookies in your browser, but some features may not function properly.

4. How We Use Information

• Operate and maintain the Services
• Respond to inquiries and support requests
• Process dealer inquiries and onboarding
• Communicate service-related updates
• Send marketing communications (where permitted or consented)
• Improve products, services, and user experience
• Prevent fraud and protect security
• Comply with legal and regulatory obligations

5. SMS / Mobile Communications

If you provide a mobile number and opt in: message frequency varies, standard message/data rates may apply, you may opt out at any time by replying STOP.

Important: ONE PPF does not sell, rent, trade, or share mobile numbers with third parties for marketing or promotional purposes.

6. Information Sharing

We share information only in limited circumstances:

• With service providers performing services on our behalf (e.g., hosting, analytics, email/SMS delivery)
• To comply with legal obligations or protect rights
• In connection with a business transaction (merger, acquisition, asset sale)

We do not share personal information for third-party marketing.

Service providers we currently use include: Resend (transactional email delivery), Mailgun and AWS SES (bulk and transactional email), Microsoft 365 (mailbox), ShipEngine (shipping and fulfillment), Stripe (payment processing), Google Analytics (website analytics), and Google Places (address autocomplete).

7. Data Retention

We retain information only as long as reasonably necessary to fulfill the purposes described in this Policy, comply with legal obligations, and support legitimate business needs.

8. Security

We implement reasonable administrative, technical, and organizational safeguards to protect information. However, no system is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect personal information from minors. If discovered, such data will be deleted. This is a B2B platform for dealers and installers; we do not market to or knowingly collect data from individuals under 18. The under-18 threshold reflects both COPPA (which protects individuals under 13) and general contract law (which generally requires the age of majority for binding agreements). Where COPPA applies, we treat individuals under 13 the same as individuals under 18.

10. Your Rights & Choices

Depending on your location, you may have the right to:

• Request access to your personal information
• Request correction or deletion
• Opt out of marketing communications

Requests may be submitted to: sales@onepaintprotection.com

10a. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• The right to know what categories of personal information we collect and how we use it
• The right to request deletion of personal information we have collected from you
• The right to opt out of the sale of personal information, note that ONE PPF does not sell personal information
• The right to non-discrimination for exercising any of these rights

To exercise any of these rights, contact us at sales@onepaintprotection.com. We will respond within the timeframes required by law.

10b. Connecticut Privacy Rights (CTDPA)

If you are a Connecticut resident, the Connecticut Data Privacy Act (CTDPA), enacted in 2023, provides you with additional rights regarding your personal data:

• The right to confirm whether we are processing your personal data and to access that data
• The right to correct inaccuracies in your personal data
• The right to request deletion of personal data we have collected
• The right to opt out of targeted advertising and the sale of personal data, note that ONE PPF does not sell personal data
• The right to non-discrimination for exercising any of these rights

To exercise any of these rights, contact us at sales@onepaintprotection.com. We will respond within the timeframes required by the CTDPA.

11. Do Not Track

We do not currently respond to “Do Not Track” browser signals due to lack of uniform standards.

12. Transition & Operational Change Clause

ONE PPF may relocate, expand, or operate in additional jurisdictions. Such changes do not alter how personal data is handled under this Policy. This Policy remains effective unless expressly updated. Governing law remains as stated below unless revised in writing.

13. Governing Law and Arbitration

This Privacy Policy is governed by the laws of the State of Connecticut, without regard to its conflict of law provisions. Any dispute, claim, or controversy arising out of or relating to this Policy shall be resolved by binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, with the arbitration seated in Hartford, Connecticut. Judgment on the arbitration award may be entered in any court of competent jurisdiction. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions control.

14. Updates

We may update this Privacy Policy periodically. The “Last Updated” date reflects the most recent revision. Continued use of the Services constitutes acceptance.