Website Privacy Policy

Many states below have thresholds that businesses must meet for consumers to exercise their rights. The text below assumes that the business meets the threshold. If a State law does not apply us since we do not meet the threshold, we will notify you in response to your request.

For all the enumerated state law rights below, only you or an authorized agent may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request for your minor child.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

All requests must be sent to gsl-leads@goldenstatelumber.com.

If you are located in Colorado, you have the right to access your personal information, correct inaccurate personal data, obtain a copy of your personal data, and to delete personal data under certain circumstances. We may keep some of your personal information if required by the Customer, law or for recordkeeping purposes. You may opt out of processing personal data under the Colorado Privacy Act regarding (a) Targeted Advertising based on your personal data obtained from your activities over time and across websites or applications; (b) profiling, or (c) the sale of personal data to third parties. If we do not take the action you have requested, you may appeal our decision within 45 days after we send it to you. You may contact the Attorney General if you are not satisfied with our response. https://coag.gov/

If you are located in Connecticut, the Connecticut Data Privacy Act provides Connecticut residents with the following enumerated rights:

• The right to access personal data that a controller has collected about you.
• The right to correct inaccuracies in your personal data.
• The right to delete your personal data, including personal data that a controller collected through third parties.
• The right to obtain a copy of your personal data in a portable and readily usable format that allows you to transfer the data to another controller with ease.
• The right to opt-out of:
  • the sale of your personal data;
  • the processing of personal data for targeted advertising; and profiling that may have a legal or other significant impact.

If you are located in Delaware, the Delaware Personal Data Privacy Act (DPDPA) provides you with certain rights regarding their personal data, including rights to:

• Access.
• Correct.
• Delete.
• Data portability.
• Know the categories of third parties to which the controller has disclosed the consumer’s personal data.
• Opt out of:
  • personal data sales, except where required for the consumer’s participation in a bona fide voluntary loyalty or rewards program;
  • targeted advertising; and
  • profiling for solely automated decisions producing legal or similarly significant effects.

The DPDPA also requires a controller to obtain the consumer’s prior consent to process sensitive data.

If you are located in Florida, the Florida Digital Bill of Rights (FDBR) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising;
  • profiling for decisions producing legal or similarly significant effects;
  • sensitive data collection or processing, including precise geolocation; or
  • personal data collection through voice recognition or facial recognition features.
  • Avoid passive surveillance by digital device features.

If you are located in Indiana, the Indiana Consumer Data Protection Act (INCDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.

If you are located in Iowa, the Iowa Consumer Data Protection Act (ICDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Deletion.
• Data portability.
• Opt out of personal data sales.

If you are located in Kentucky, the Kentucky Consumer Data Protection Act (KCDPA) (HB 15 ) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.

(Section 3 , HB 15.)

The KCDPA also requires a controller to obtain the consumer’s prior consent to process sensitive data.

If you are located in Maryland, the Maryland Online Data Privacy Act (MODPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.

If you are located in Minnesota, the Minnesota Consumer Data Privacy Act (MCDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.

If you are located in Montana, the Montana Consumer Data Privacy Act (MCDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correct.
• Delete.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; and
  • profiling for solely automated decisions producing legal or similarly significant effects.

The MCDPA also requires a controller to obtain the consumer’s prior consent to:

• Sell the personal data of consumers between 13 to 15 years old or process it for targeted advertising.
• Process sensitive data.

If you are located in Nebraska, the Nebraska Data Privacy Act (NDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.

If you are located in New Hampshire, the New Hampshire Consumer Data Privacy Act (NHDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correct.
• Delete.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; and
  • profiling for solely automated decisions producing legal or similarly significant effects.

(N.H. RSA § 507-H:4(I) .)

The NHDPA also requires a controller to obtain the consumer’s prior consent to:

• Sell the personal data of consumers between 13 to 15 years old or process it for targeted advertising.
• Process sensitive data.

If you are located in New Jersey, the New Jersey Consumer Data Privacy Act (NJDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correct.
• Delete.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; and
  • profiling for decisions producing legal or similarly significant effects.

The NJDPA requires a controller to obtain the consumer’s prior consent to:

• Process personal data of consumers between 13 and 16 years old for:
• personal data sales;
• targeted advertising; and
• profiling for decisions producing legal or similarly significant effects.
• Process sensitive data.

If you are located in Oregon, the Oregon Consumer Privacy Act (OCPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correct.
• Delete.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.

(ORS 646A.574(1) .)

The OCPA also requires a controller to obtain the consumer’s prior consent to process sensitive data.

If you are located in Rhode Island, the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA) provides customers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for solely automated decisions producing legal or similarly significant effects.

If you are located in Tennessee, the Tennessee Information Protection Act (TIPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; and
  • profiling for decisions producing legal or similarly significant effects.

If you are located in Texas, the Texas Data Privacy and Security Act (TDPSA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Opt out of:
  • personal data sales;
  • targeted advertising; and
  • profiling for decisions producing legal or similarly significant effects.

If you are located in Utah, the Utah Consumer Privacy Act (UCPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Delete.
• Data portability.
• Opt out of:
  • personal data sales; and
  • targeted advertising.

If you are located in Virginia, the Virginia Consumer Data Protection Act (VCDPA) provides consumers with certain rights regarding their personal data, including rights to:

• Access.
• Correction.
• Deletion.
• Data portability.
• Opt out of:
  • personal data sales;
  • targeted advertising; or
  • profiling for decisions producing legal or similarly significant effects.