PRIVACY POLICY

Effective Date: January 9, 2026
Last Updated: July 24, 2026

This Privacy Policy describes how Norfolk Hardware & Home Center (“Norfolk Hardware,” “we,” “us,” or “our”) collects, uses, discloses, and protects information from users (“you” or “Users”) who visit or use our website located at https://www.norfolkhardware.com (the “Site”), including any features, content, or services offered through the Site (collectively, the “Services”).

By using the Site or Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Site.

1. SUMMARY OF KEY POINTS

• We collect information you provide directly (such as contact details and order information) and information collected automatically through cookies and tracking technologies (such as analytics and advertising pixels).
• We use ToolBx to provide an integrated account, checkout, and payment experience. ToolBx may collect and process information to support transactions and customer accounts.
• We use Google Analytics and the Meta Pixel (or similar technologies) for analytics and targeted advertising.
• We do not sell personal information for money, but we may share certain data for targeted advertising, which may be treated as a “sale” or “sharing” under certain privacy laws.
• You can request access, deletion, or correction of your information, and you can opt out of targeted advertising as described below.

2. INFORMATION WE COLLECT

We collect information in several ways: (1) information you provide directly, (2) information collected automatically when you use the Site, and (3) information collected through third-party tools integrated into the Site (such as ToolBx).

A. Information You Provide Directly

We may collect personal information when you:

• browse or interact with the Site
• submit forms (including contact forms)
• subscribe to email and/or SMS updates
• contact customer support
• place an order (as a guest or through an account)
• participate in promotions, contests, surveys, or other Site features

Examples of personal information you may provide include:

• name
• email address
• mailing/shipping/billing address
• phone number
• order details and transaction history
• communications and communications preferences (e.g., email and SMS opt-ins)

You may choose not to provide certain information, but doing so may limit your ability to use certain features (including checkout, order communications, and customer support forms).

B. ToolBx-Hosted Account and Checkout Experience (Fully Integrated)

We use ToolBx to provide an integrated customer account, checkout, and payment experience through the Site. ToolBx may collect and process certain information on our behalf (or as an independent service provider) to support account creation, authentication, order processing, and payments.

Account Registration and Profile Information

If you create an account, ToolBx may collect and store account-related information such as:

• login credentials (e.g., username and password or other authentication credentials)
• saved shipping and billing addresses
• order history and account preferences
• saved payment methods (where available)

Guest Checkout

If you check out as a guest, we (and/or ToolBx on our behalf) will collect the information needed to process and fulfill your order (such as your name, contact information, shipping address, and transaction details), but you will not be required to create login credentials.

ToolBx’s Privacy Policy is available here: https://www.toolbx.com/privacy-policy.

C. Payment and Transaction Information (ToolBx)

Payments made through the Site are processed through ToolBx. ToolBx collects and processes payment and billing information to complete transactions and may use one or more third-party payment processors to process card payments.

Norfolk Hardware does not store your full payment card information on our servers. Payment processing, saved payment methods (if applicable), and related security measures are managed through ToolBx and its payment processing partners, subject to their applicable terms and privacy practices.

D. Information Collected Automatically (Usage & Device Data)

When you access or use the Site, we and our service providers may automatically collect certain information, including:

• IP address
• browser type and settings
• device type and identifiers
• operating system
• approximate location (derived from IP address)
• referring/exit pages and URLs
• pages viewed and actions taken on the Site
• date/time of visits
• clickstream and other usage data

We use this information to operate the Site, improve performance and functionality, support analytics, personalize content, support advertising/retargeting, and help prevent fraud and security incidents.

3. COOKIES, PIXELS, AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies (including pixels, tags, and SDKs) to support Site functionality, analytics, advertising, and measurement.

A. Types of Cookies/Technologies We Use

• Essential cookies: required for core Site functions (e.g., security, session management)
• Analytics cookies: help us understand Site usage and improve performance (e.g., Google Analytics)
• Advertising cookies/pixels: used to deliver relevant ads, measure effectiveness, and support retargeting (e.g., Meta Pixel)

B. Interest-Based Advertising and Retargeting

We may work with advertising partners to display advertisements and measure performance. These partners may use cookies and similar technologies to:

• show ads on third-party websites based on your interaction with our Site
• measure ad campaign effectiveness
• build audiences for retargeting

These technologies may collect online identifiers and browsing behavior. They generally do not collect information like your name, email address, postal address, or phone number unless you provide that information directly to those platforms.

C. Your Choices (Cookie Controls)

You can manage cookies and tracking technologies by:

• adjusting your browser settings to block or delete cookies
• using device-level privacy controls (where available)
• using opt-out tools offered by certain advertising providers or industry groups (where available)
• using any cookie banner or preferences tool presented on the Site (if implemented)

Note: If you disable cookies, some Site features may not function properly.

4. HOW WE USE YOUR INFORMATION

• To provide and operate the Services (including processing orders and fulfilling purchases)
• To create and manage customer accounts (including authentication, account preferences, and order history)
• To communicate with you (transaction confirmations, shipping updates, support responses)
• To personalize your experience and improve the Site
• To process payments through ToolBx
• To send marketing communications (email and SMS, where permitted by law and based on your preferences)
• To run promotions, surveys, contests, and other Site features
• To detect, prevent, and respond to fraud, abuse, security issues, and technical problems
• To comply with legal obligations and enforce our rights

5. SMS / TEXT MESSAGE COMMUNICATIONS

If you provide your mobile phone number and opt in to receive text messages, we may send you:

• promotional messages
• service updates (if offered and you opt in)
• order-related messages (if offered)

Message frequency may vary. Message and data rates may apply.

You may opt out of marketing text messages at any time by replying STOP or following the instructions provided in the message. You can also contact us using the information in the “Contact Us” section.

6. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information for money. However, we may share personal information in the following circumstances:

A. Service Providers

We may share your information with vendors and service providers who perform services on our behalf, including:

• ToolBx (account portal hosting, checkout, payment facilitation, transaction processing support)
• payment processing partners used by ToolBx
• shipping and fulfillment providers
• website hosting and IT providers
• customer support platforms
• marketing and email/SMS service providers
• analytics providers (including Google Analytics)

These providers are permitted to use your information only as necessary to provide services to us and are expected to protect it.

B. Advertising and Analytics Partners (Targeted Advertising / “Sharing”)

We may share certain information such as online identifiers and usage data with advertising and analytics partners (including Meta) to deliver targeted advertising, measure campaign performance, and support retargeting and audience creation. Depending on applicable law (including California), this may be considered “sharing” for targeted advertising and may be treated as a “sale” or “sharing” even if no money is exchanged.

C. Legal, Compliance, and Safety

We may disclose information when we believe it is necessary to:

• comply with legal obligations
• respond to lawful requests
• enforce applicable terms
• protect our rights, property, and safety
• prevent fraud, abuse, or security issues

D. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of business assets, your information may be transferred as part of that transaction.

7. YOUR PRIVACY RIGHTS AND CHOICES

A. Marketing Emails

You may unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us.

B. Account Access and Updates

If you have an account, you may update certain account information through the ToolBx-hosted account portal. If you would like to request deletion of your account, please contact us using the information below.

C. Opt-Out of Targeted Advertising (“Do Not Sell or Share”)

You may opt out of targeted advertising and the “sharing” of personal information used for targeted advertising by:

• using browser settings to block third-party cookies
• enabling “Global Privacy Control” (GPC) where supported
• adjusting cookie preferences (if we provide a cookie preference tool)
• contacting us to request an opt-out (see “Contact Us”)

If you are a California resident, you may also exercise your right to opt out of “sale” or “sharing” of your personal information for cross-context behavioral advertising.

D. U.S. State Privacy Rights (Including California)

Residents of certain U.S. states may have additional rights, including the right to request access to the personal information we maintain about you, request deletion (subject to certain exceptions), request correction of inaccurate personal information, opt out of targeted advertising or certain disclosures, and not be discriminated against for exercising privacy rights.

To submit a request, contact us using the information in the “Contact Us” section. We may need to verify your identity before fulfilling certain requests.

8. DATA RETENTION

We retain personal information only as long as reasonably necessary to provide the Services, fulfill transactions and maintain business records, comply with legal, tax, and accounting obligations, and resolve disputes and enforce agreements. Retention periods may vary depending on the type of information and the purpose for which it was collected.

9. SECURITY

We maintain reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, use, or disclosure. Sensitive information transmitted through the Site is protected using encryption in transit (e.g., SSL/TLS).

Where account and payment services are hosted by ToolBx, ToolBx is responsible for implementing appropriate safeguards for information processed through its portals.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. THIRD-PARTY WEBSITES AND INTEGRATED SERVICES

The Site may contain links to third-party websites or services. We are not responsible for the content or privacy practices of third-party sites.

In addition, certain functionality on our Site (including integrated ToolBx-hosted account and payment services) is provided by third parties. When you interact with these services, your information may be collected and processed by those providers and their service providers, subject to their applicable terms and privacy policies. ToolBx’s Privacy Policy is available here: https://www.toolbx.com/privacy-policy.

11. CHILDREN’S PRIVACY

The Site is not intended for children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through the Site, please contact us so we can delete it.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy at any time. When we do, we will revise the “Last Updated” date above. Your continued use of the Site after changes are posted constitutes acceptance of the revised policy.

13. DISPUTE RESOLUTION AND ARBITRATION

Any dispute, claim, or controversy arising out of or relating to your use of the Site or the Services, including matters related to this Privacy Policy, is subject to the binding individual arbitration agreement, jury trial waiver, and class action waiver set out in our Terms & Conditions, which is incorporated into this Privacy Policy by reference. Please review the “Dispute Resolution and Arbitration” section of our Terms & Conditions for the full terms, including how to opt out.

14. CONTACT US

If you have any questions about this Privacy Policy or would like to submit a privacy request, contact us at: