This Privacy Policy ("Policy") explains how Taiga Building Products Ltd. ("Company", "we", "us") collects, uses, and discloses information about you through your access or use of our websites: https://www.taiganow.com and www.taigabuilding.com ("websites"), through opening your account, platform, mobile applications, other online services that link to this Policy or when you otherwise interact with us. If you obtain your use of the Services in connection with services offered by a third party, the individual terms of that third party's contract with us and its own privacy policy may differ from what is described in this Policy. We do not control any third-party websites, and we encourage you to read the privacy policy of every website you visit.

CHANGES TO THIS POLICY

We may change this Policy from time to time. If we make any changes to this Policy, we will change the "last updated" date above. If there are material changes to this Policy and you have an active account with us, we will notify you more directly (such as by adding a statement to our website homepage or sending you a notification). We encourage you to check this Policy whenever you use any of our Services or otherwise interact with us to understand how your personal information is used and the choices available to you. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, including the websites, you indicate that you understand and consent to the practices described in this Policy.

CONTENTS

COLLECTION OF INFORMATION

We collect information from you in various ways when you use our Services. We may also supplement this information with information from other companies. We collect two general types of information: personal information and aggregated data. As used in this Policy, the term "personal information" means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual.

Information You Provide to Us

We collect information you provide directly to us. For example, we collect information when you register to use our Services, open your account, or update your profile, participate in any interactive features of the Services (such as sending a message), make a purchase, participate in a contest or promotion, apply for a job, request customer support, or otherwise communicate with us. The types of information we may collect include: your name and email address; shipping address; phone number; payment information; company name, company title, and other profile information you provide; demographic information; information you upload. Please do not upload any sensitive information which has not been requested by Company such as personal information relating to your health, ethnic and racial origins, political opinions, genetic and biometric data, sex life or sexual orientation, religious/philosophical beliefs, or any information about a minor.

Other Information We Collect When You Use our Services

When you access or use our Services, we automatically collect information about you, including:

• Usage Information: We automatically receive certain types of information when you interact with our Services. For example, it is standard for your web browser to automatically send information to every web site you visit, including ours. That information includes your computer's IP address, access times, your browser type and language, and referring web site addresses. We may also collect information about the type of operating system you use, your account activity, and files and pages accessed or used by you.

• Transactional Information: When you make a purchase or return, we will collect information about the transaction, such as product details, purchase price, and date and location of the transaction.

• Log Information: We collect information related to your access to and use of the Services, including the type of browser you use, app version, access times, pages viewed, your IP address, and the page you visited before navigating to our Services.

• Location Information: We collect information related to your location when you use our websites in order to tailor our services, for example to connect you with the nearest store or to provide you the websites in the applicable language. We use various technologies to determine location, including IP address.

• Device and Activity Information: We collect information about the computer or mobile device you use to access our Services, including the hardware model, operating system and version, unique device identifiers, and mobile network information. When using your computer or mobile device with the Services, data recorded on your computer or mobile device about your activity is transferred from your computer or mobile device to our servers. This data is stored and used to provide the Service and is associated with your account.

• Submissions and Company Service: From time to time we may use surveys, contests or sweepstakes requesting personal or demographic information and customer feedback.

• Payment and Shipping Information: If you choose to order a product through the Services, payment is accepted based on your account registration information which includes your name, billing address, your shipping address and other contact details, such as email address and phone number, may also be collected.

• Information Collected by Cookies and Similar Tracking Technologies: We (and our service providers) may also use certain kinds of technology such as cookies, log files, web beacons and similar technologies to collect personal and other information. Among other things, the use of cookies and web beacons enables us to improve our Services and emails by seeing which areas and features are most popular, to count the number of computers accessing our web site, to personalize and improve your experience, to record your preferences, and to allow you to visit our Services without re-entering your account information and/or password. A cookie is a small amount of data which is sent to your browser from a web site's computers and stored on your computer's hard drive. Most browsers automatically accept cookies as the default setting. You can modify your browser setting to reject our cookies or to prompt you before accepting a cookie by editing your browser options. However, if a browser is set not to accept cookies or if a user rejects a cookie, some portions of the web site and services may not function properly. For example, you may not be able to sign in and access certain web page features or services. A web beacon is an electronic image, also called a "gif", that may be used on our web pages to deliver cookies, count visits and compile statistics on usage and campaign effectiveness or in our emails to tell if an email has been opened and acted upon. In order to properly manage our websites, we may anonymously log information on our operational systems, and identify categories of visitors by items such as domains and browser types. These statistics are reported in the aggregate to our webmasters and are non-identifiable.

Information We Collect from Other Sources

We may also obtain information about you from other sources. For example, we may collect information about you from third parties, including but not limited to mailing list providers and publicly available sources. Additionally, if you create or log into your account through a social media site, we will have access to certain information from that site, such as your name, account information, and friends lists, in accordance with the authorization procedures determined by such social media site.

Information We Derive

We may derive information or draw inferences from you based on the information we or our partners collect. For example, we may make inferences about your location based on your IP address.

USE OF INFORMATION

We use your personal information to process your requests or transactions, to provide you with information or services you request, to inform you about other information, events, promotions, products or services we think will be of interest to you, to facilitate your use of, and our administration and operation of, the Services and to otherwise serve you and our customers. For example, we may use your personal information:

• to present our websites and its contents to you.

• to enable you to conduct commercial transactions on the websites.

• to send you a welcoming email and to contact you about your use of the Services; to respond to your emails, submissions, comments, requests or complaints; to perform after-sales services; to anticipate and resolve problems with our service; to respond to customer support inquiries, for assistance with our product and service development; and to inform you of updates to products and services from Company that better meet your needs.

• to request feedback and to enable us to develop, customize and improve our Services.

• to conduct marketing analysis, sometimes working with advertising and personalization third parties that use cookies or marketing automation tools, to deliver targeted marketing campaigns across multiple platforms (e.g. via web, email, mobile, etc.) and create customer profiles by tracking your behavior and preferences while using these platforms. Cookies also assist us with measuring the performance of our advertising campaign and with identifying the pages you view, the links and ads you click on and the site from which you came before arriving at a webpage. Information gathered may be used to personalize and customize future email marketing messages you receive

• to send you surveys or newsletters, to contact you about services, products, activities, special events or offers from Company or our partners and for other marketing, informational, product development and promotional purposes. You may opt out of marketing emails by clicking on the unsubscribe link provided in each email marketing message you receive. Please allow up to ten (10) days for your preferences to be processed.

• to contact you if you win a contest.

• to carry out our obligations and enforce our rights arising from any contracts with you, including for billing and collection or to comply with legal requirements.

• for other purposes about which we notify you.

SHARING OF INFORMATION

We will not give, sell, rent, share, or trade any of your personal information to any third party except as outlined in this Policy or with your consent. We may disclose personal information:

• To service providers, that perform services for us, including to provide the Services to you, as set below:

  Types of service providers	Examples of information that may be transferred
  Marketing and advertising	Customer contact details such as email addresses and first names/last names are provided to service providers to allow them to send marketing emails and communications on our behalf.
  Payments and accounting	Customer transaction data is shared with our payments-related business services providers, to process online payment transactions, to calculate applicable sales tax, to invoice and bill, and to help calculate revenue, pay bills and perform accounting tasks on our behalf.
  Data storage or processing	Customer purchasing data is stored on cloud platforms.
  Other third-party vendors and service providers	Customer information is shared with our sales representatives and service providers who ship and deliver your orders, and operate our sales and customer service teams.
  Fraud detection and prevention services	Customer personal information is shared with fraud detection services to ensure customer data is protected.

• To third parties to protect Company, agents, customers, and others including to enforce our agreements, policies and terms of use;

• To third parties when the Company, in good faith believes, that disclosure is needed to respond to an emergency, or protect the personal safety of any person;

• To a potential acquirer, buyer, or successor in the event of an acquisition, merger, restructuring, or in connection with a transaction involving the sale of some or all or our business or assets. In such an event, you will receive notice if your data is transferred and becomes subject to a substantially different privacy policy;

• Between and among Company and our current and future parents, affiliates, subsidiaries and other companies under common control and ownership;

• To comply with any court order, law, or legal process, including to respond to any government or regulatory request, in accordance with applicable law;

• With your consent.

This Policy in no way restricts or limits our collection and use of aggregated data, and we may share aggregated data about you and our users with third parties for various purposes in perpetuity, including to help us better understand our customer needs and improve our Services, to provide new Services and for advertising and marketing purposes. Aggregated data is information we collect about a group or category of services or users from which individual user identities have been removed. In other words, no personal information is included in aggregated data. Aggregated data helps us understand trends in our user's needs so that we can better consider new features or otherwise tailor our Services.

TRANSFERRING YOUR PERSONAL INFORMATION

We may process, store, and transfer your personal information in and to a foreign country, with different privacy laws that may or may not be as comprehensive as Canadian law. In these circumstances, the governments, courts, law enforcement, or regulatory agencies of that country may be able to obtain access to your personal information through the laws of the foreign country.

ADVERTISING AND ANALYTICS SERVICES PROVIDED BY OTHERS

We may allow others to provide analytics services on our behalf across the websites and in mobile applications. These service providers may use cookies, web beacons, device identifiers and other technologies to collect information about your use of the Services and the websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, where a mouse was scrolled, and conversion information. This information may be used by Company and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites, and better understand your online activity. For more information about interest-based ads, or to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices in the United States. You can opt-out of several third party ad servers' and networks' cookies simultaneously by using an opt-out tool created by the Digital Advertising Alliance of Canada.

We use Google Analytics which allows us to see information on user activities including, but not limited to, page views, source and time spent on our website and mobile application. You may opt out of our use of Google Analytics by visiting the Google Analytics opt-out page: https://tools.google.com/dlpage/gaoptout. We also may use Google Integrated Services, such as BigQuery. More information about Google Analytics and its operation can be found by visiting here https://marketingplatform.google.com/about/analytics/.

RECORD RETENTION

Except as otherwise permitted or required by applicable law or regulation, we will only retain your personal information for as long as is necessary to fulfill the purposes for which we originally collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

NETWORK AND INFORMATION SECURITY

The security of your personal information is very important to us. We take reasonable steps to protect information we collect from you to prevent loss, misuse and unauthorized access, disclosure, alteration, and destruction.

The servers on which information is stored are kept in a controlled environment with limited access. While we take reasonable efforts to guard personal information we knowingly collect from you, no security system is impenetrable and the transmission of information via the Internet is not completely secure. Any transmission of personal information is at your own risk. In addition, we cannot guarantee that any collected personal information you choose to include in the Services are maintained at adequate levels of protection to meet specific needs or obligations you may have relating to that information.

CHILDREN’S PRIVACY

Company understands the importance of protecting children's privacy online. The websites and our services are not intentionally designed for or directed at children 13 years of age or younger. Company does not knowingly collect or maintain information about anyone under the age of 13. If you believe we have collected information from your child in error or have questions or concerns about our practices relating to children, please notify us and we will promptly respond.

YOUR CALIFORNIA PRIVACY RIGHTS

Consumers residing in California are afforded certain additional rights with respect to their personal information under the California Consumer Privacy Act or ("CCPA") (California Civil Code Section 1798.100 et seq.) and the "Shine the Light" Law (California Civil Code Section 1798.83). If you are a California resident, this section applies to you.

California Consumer Privacy Act

Additional Disclosures Related to the Collection, Use, Disclosure of Personal Information

Collection and Use of Personal Information: In the preceding 12 months, we may have collected the following categories of personal information: identifiers, characteristics of protected classifications under California or U.S. law, commercial information, internet and electronic network activity, geolocation data, audio and visual information, inferences drawn about your preferences, and other categories of personal information that relates to or is reasonably capable of being associated with you. For examples of the precise data points we collect and the sources of such collection, please see "Collection of Information" above. We collect personal information for the business and commercial purposes described in "Use of Information" above.

Disclosure of Personal Information: We may share your personal information with third parties as described in the "Sharing of Information" section above. In the preceding 12 months, we may have disclosed the following categories of personal information for business or commercial purposes: identifiers, internet and electronic network activity information, commercial information, audio and visual information, geolocation data, demographic information, inferred information, and other information that we have derived or inferred about you or that relates to or is reasonably capable of being associated with you.

Sale of Personal Information: Company does not, and will not, sell the personal information of our customers.

Your Consumer Rights

If you are a California resident, you have the right to request (1) more information about the categories and specific pieces of personal information we have collected and disclosed for a business purpose in the last 12 months, (2) deletion of your personal information, and (3) to opt out of sales of your personal information, if applicable. You may make these requests by calling 604.438.1471 or visiting this page https://taiganow.com/profile. We will verify your request by asking you to provide information related to your recent interactions with us, such as information regarding a recent purchase. To designate an authorized agent to exercise these rights on your behalf, please contact us. We will not discriminate against you if you exercise your rights under the CCPA.

YOUR CHOICES

Account Information

You have the right to request access to personal information we hold about you and you may, if provided for by applicable law, have a right to ask that your personal information be corrected, erased, or transferred (or withdraw consent to the use of your personal information). If you would like to exercise any of these rights, please contact us at taiganow@taigabuilding.com or call us at 604.438.1471.

We may request specific information from you to help us confirm your identity and your right to access, and to provide you with the personal information that we hold about you or make your requested changes. Applicable law may allow or require us to refuse to provide you with access to some or all of the personal information that we hold about you, or we may have destroyed, erased, or made your personal information anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

If you withdraw your consent we may not be able to provide you with a particular product or service. We will explain the impact to you at the time to help you with your decision.

Please note that we may retain certain information as required by law or for legitimate business purposes after deleting your account. We may also retain cached or archived copies of information about you in accordance with our retention policies.

Promotional Communications

Company may send you communications or data regarding our Services, including but not limited to (i) notices about your use of our Services, including any notices concerning violations of use, (ii) updates, and (iii) promotional information and materials regarding our Services. You may opt-out of receiving promotional emails from Company by following the opt-out instructions provided in those emails. You may also opt-out of receiving promotional emails and other promotional communications from us at any time by emailing hello@taiganow.com with your specific request. Opt-out requests will not apply to transactional service messages, such as security alerts and notices about your current account and Services.

CONTACT

Questions, Requests, or Complaints

We welcome your questions, comments, and requests regarding this Policy and our privacy practices. Please contact us at:

Privacy Officer

taiganow@taigabuilding.com.

Taiga Building Products

800–4710 Kingsway, Burnaby, BC V5H 4M2

800.667.1470 (Toll Free)

To discuss our compliance with this Policy please contact our Privacy Officer using the contact information listed above.