Privacy Policy & Cookies

CORPORATE.FERGUSON.COM PRIVACY POLICY

Last Updated: August 1, 2024

Ferguson Enterprises Inc. (“Ferguson”, "Company”, “We”, “Us”, or “Our”) respects Your concerns about data privacy and security and is committed to safeguarding the privacy of Your Personal Information. We believe it is important for You to be familiar with how We collect and use information provided to Us when You (“You” or “Your”) visit Our website corporate.ferguson.com ("Website"). This Privacy Policy does not apply to any Personal Information that We collect on other websites operated by or on behalf of the Company.

By using the Website, You consent and agree to the terms of this Privacy Policy and the associated Terms of Use, and the collection and use of information within the terms of this Privacy Policy and the Terms of Use. If You do not agree with the practices and policies described in this Privacy Policy, do not use our Website or any of our online features, products, or services.

If You are applying for a job with Ferguson Enterprises Inc., please review the Applicant Privacy Notice provided at the bottom of the “Careers” page that is accessible using the link under “Associates and Careers” at the top of the Ferguson homepage. This Privacy Policy does not apply to information provided by applicants for employment.

If You have any questions, please contact Us by email, regular mail or phone as set forth below in the “Contacting Us” section.

COLLECTION OF PERSONAL INFORMATION AND NON-PERSONAL INFORMATION

Personal Information” is any information about an individual that, either alone or in combination with other information, identifies You as an individual or relates to an identifiable individual. Personal Information is also referred to as "personal data." With respect to the information We collect and use on the Website, Personal Information includes:

  • first and last name;
  • postal address;
  • state and country of residence;
  • email address;
  • phone number;
  • IP address; and
  • additional unique identifiers (e.g., investor, company, not an investor).

We only collect Personal Information about You through Your use of the Website, such as when You visit Our Website and browse through the pages of the Website, sign up for News Alerts, or request or subscribe to receive documents or information about the Company.

If You do not provide the information requested, We may not be able to respond to Your inquiries or provide the information requested. If You disclose any Personal Information relating to other people in connection to an inquiry or request, You represent that You have the authority to do so and to permit Us to use the information in accordance with this Privacy Policy.

We also automatically collect certain information about how You use the Website. For example, We automatically record the pages of the Website visited, the type of hardware and software You are using, the web browser accessing the Website, information stored in cookies and similar technologies, and Your IP address. We cannot directly identify You from this data, but it allows the Company to compile usage statistics and analytics information for the Website, which helps Us tailor the Website to Our visitors' interests.

USE OF PERSONAL INFORMATION

We may use Your Personal Information in the following circumstances:

  • to respond to Your request for information or documents made available on the Website by completing an Information Request Form (e.g., Annual Report, Proxy Report; ESG Report);
  • to respond to Your request to subscribe to receive News Alerts relating to the Company (e.g., Pressroom Stories, Financial News Releases, Regulatory News Releases, SEC Filings);
  • to communicate with You or contact You directly by email about information or programs relating to the Company that We believe may be of interest to You;
  • to evaluate, analyze, improve, and develop Our Website;
  • when We need to do so in order to comply with a legal obligation;
  • when it is necessary to establish, exercise, or defend legal claims;
  • if You have already made the information public; or
  • if You have given Your consent.

Specifically, We use Your Personal Information for Our legitimate business purposes, including the following:

  1. To provide services available on the Website, including:
    • responding to Your inquiries or fulfilling Your requests when You contact Us through one of Our online contact forms, via email, or otherwise (e.g., when You send Us questions, suggestions, compliments or complaints, or when You request other information about Our Company);
    • contacting You in connection with providing information about the Company that may be of interest;
    • sending administrative information to You about the Website or the Company; and
    • fulfilling Your information or subscription requests by sending You certain documents or information.

  2. To aggregate or anonymize Personal Information so that it will no longer be considered Personal Information. We do so to generate other data for Our use, which We may use and disclose for any purpose, because that other data We have generated is not Personal Information.

  3. To accomplish Our business purposes, including:
    • data analysis, which includes enhancing, improving, or modifying the content and efficiency of Our Website;
    • internal audits, to verify that Our Website processes function as intended and are compliant with legal, regulatory, and contractual requirements;
    • fraud and security monitoring, which includes activities to detect and prevent cyberattacks or attempts to commit identity theft;
    • identifying usage trends, which includes understanding which parts of Our Website are of most interest to visitors;
    • to comply with applicable laws, regulatory requirements and lawful court orders and legal process; and
    • when it is necessary for Our legitimate interests and Your interests and fundamental rights do not override those legitimate interests.

DISCLOSURE OF PERSONAL INFORMATION

We do not "sell" or "share" (as those terms are defined in the California Consumer Privacy Act ("CCPA") and as amended by the California Privacy Rights Act) the Personal Information collected on Our Website to any third party for any reason. We do not sell Your Personal Information in exchange for money.

We may disclose Personal Information when We have a legitimate interest or a legal obligation to do so, which may include disclosure of Your Personal Information outside Your country of residence. This includes the following:

  • To Our service providers that provide functions on Our behalf to facilitate services they provide to Us. This includes providers of services for Website hosting, cloud services, analytics services, content management systems, information technology consulting, email delivery, software management, legal services, and other services related to conducting Website operations. Our disclosure to these service providers is limited to processing Personal Information based upon Our instructions and Personal Information is given to these service providers only to the extent it is necessary to do so.
  • To comply with applicable law and regulations.
  • To cooperate with law enforcement, or public and government authorities. This includes responding to law enforcement requests and orders, or to provide information We believe is important.
  • For other legal reasons. This includes enforcing Our terms and conditions, and protecting Our rights, privacy, safety, and property, and that of You or others.
  • In connection with a sale or business transaction. We have a legitimate interest in disclosing or transferring Your Personal Information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of Our business, assets or stock (including in connection with any bankruptcy or similar proceedings). Such third parties may include, for example, an acquiring entity and its advisors.

USE AND DISCLOSURE OF OTHER INFORMATION

Other Information” is any information that does not reveal Your specific identity or does not directly relate to an identifiable individual. This includes:

  • browser and device information;
  • information collected through certain cookies, pixel tags, and other technologies;
  • demographic information and other information provided by You that does not reveal Your specific identity; and
  • information that has been aggregated in a manner such that it does not reveal Your specific identity.

If We are required to treat Other Information as Personal Information under applicable law, then We may use and disclose it for the purposes for which We use and disclose Personal Information as detailed in this Policy.

We may collect Other Information in a variety of ways, including:

  • Through Your browser or device. Certain information is collected by most browsers or automatically through Your device, such as Your Media Access Control (MAC) address, computer type (Windows or Mac), screen resolution, operating system name and version, device manufacturer and model, language, and Internet browser type and version. We use this information to ensure that the Website functions properly while You are accessing the Website.
  • Using cookies and other similar technologies. Cookies are pieces of information stored directly on the computer or device that You are using. Cookies allow Us to collect information such as browser type, time spent on the Website, pages visited, and other traffic data. To learn more about how We use cookies, please see the information provided below
  • Analytics. We use Google Analytics, which use cookies and similar technologies to collect and analyze information about use of the Website and report on user activities and trends. You can learn specifically about Google’s practices by going to www.google.com/policies/privacy/partners/ and opt out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.
  • IP Address. Your IP address is automatically assigned to Your computer by Your Internet Service Provider. An IP address may be identified and logged automatically whenever a visitor accesses the Website, along with the time of the visit and the page(s) that were visited. Collecting IP addresses is standard practice and is done automatically by many websites, applications, and other services. We use IP addresses for purposes such as calculating usage levels, diagnosing server problems, and administering the Website. We may also derive Your approximate location from Your IP address.

We may use and disclose Other Information for any purpose, except where We are required to do otherwise under applicable law. In some instances, We may combine Other Information with Personal Information. If We do, We will treat the combined information as Personal Information as long as it is combined.

COOKIES

Cookies are used on the Website. A cookie is a small data file which is placed on Your computer or other mobile or handheld device as You browse a website. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. A cookie can also help analyze web traffic or can let a website operator know when You visit a particular site.

The Website uses cookies that are essential to the operation of the Website and enable a Website visitor to browse the Website and use its features, such as accessing content on the Website or requesting documents and information about the Company. These types of cookies are also referred to as "strictly necessary cookies" and cannot be altered or deleted on the Website. Without these cookies, You cannot access or browse the Website and its contents or use the various features of the Website. Our Website hosting service provider administers the use of all cookies utilized on the Website.

You may be able to set Your browser to prevent any cookies being placed on Your device from the Website, but this will affect the operation of the Website by restricting its functions and features, and the Website may not function properly or at all. In addition, You may need to do so on each browser and device that You use and may need to opt out each time You delete Your cookies or upgrade Your browser.

The Website also uses certain cookies for Our internal research on how We can improve the Website for all visitors. These cookies assess how You interact with the Website and do not collect identifiable Personal Information about a specific visitor, identify a specific visitor personally or disclose Personal Information about the visitor. This anonymized data is collected by the Company and is not used for any other purpose.

Some web browsers may transmit ‘do-not-track’ signals to the websites with which the browser communicates. As of the Effective Date of this Privacy Policy, an industry standard has not yet been established on how to respond to these signals. Therefore, Our Website does not currently recognize or respond to these signals, but the Company will reassess its approach once a standard is established.

OPTION TO DISCONTINUE SUBSCRIPTIONS OR OTHER EMAILS

Our Website allows You to complete an Information Request Form to receive an Annual Report, Annual Proxy or an ESG Report, or to subscribe to receive certain documents and information about the Company on an ongoing basis. These documents and information will be provided to You by email. In addition, We may contact You by email in connection with providing additional information about the Company that may be of interest. We will ensure that each e-mail You receive includes an opt-out feature and instructions on how to unsubscribe if You no longer wish to receive future e-mails from Us. In addition, You can unsubscribe or opt-out of email alerts at any time by going to Our "Subscribe to News" page and completing the "Unsubscribe from News" section.

SECURITY

We seek to use reasonable organizational, technical, and administrative measures to protect the Personal Information and Other Information collected from a visitor to the Website. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If You have reason to believe that Your interaction with Us is no longer secure, please immediately notify Us in accordance with the “Contacting Us” section below.

DATA PRIVACY INQUIRIES AND ACCESS TO PERSONAL INFORMATION

If You believe the Personal Information We have for You is inaccurate, incomplete, or no longer current, please contact Us at DataPrivacy@ferguson.com or call Us directly at +1-833-865-0355 so that We can update, remove, or correct the information as appropriate and as required by applicable law. 

RIGHTS TO PERSONAL INFORMATION – UNITED KINGDOM AND EUROPEAN ECONOMIC AREA (EEA)

If You are in the United Kingdom or the EEA and are visiting Our Website, You can access, change, correct or delete Your Personal Information, withdraw Your consent previously provided, as well as transfer Your Personal Information or object to or limit the processing of Your Personal Information.

The controller of Your Personal Information is Ferguson Enterprises Inc., located at 751 Lakefront Commons, Newport News, VA 23606.

If You would like to request (i) to review, correct, or delete Personal Information that You have previously provided to Us, (ii) to withdraw Your consent to processing Personal Information (which does not affect the lawfulness of processing based on Your consent prior to withdrawal), (iii) to restrict the use of Your Personal Information or object to processing Your Personal Information, or (iv) to receive an electronic copy of Your Personal Information for purposes of transmitting it to another company (to the extent any of these rights are provided to You by applicable law), You may contact Us by email at DataPrivacy@ferguson.com. We will respond to Your request consistent with applicable law.

For Your protection, We may only implement requests with respect to the Personal Information associated with the particular email address that You use to send Us Your request, and We may need to verify Your identity and obtain other relevant information before implementing Your request. We will undertake Our best efforts to comply with Your request as soon as reasonably practicable and as required by law.

You also have the right to lodge a complaint with a supervisory authority in the country of Your residence if You believe that the collection and use of Your Personal Information infringes on applicable law or is not in accordance with this Privacy Policy. You can lodge a complaint by contacting the authority directly.

RIGHTS TO PERSONAL INFORMATION - CALIFORNIA

If You are a resident of California, You have the following rights:

  • Right to Correct: You have the right to request that We correct inaccuracies in Your Personal Information.
  • Right to Delete: You have the right to request that We delete Personal Information that We have collected from or obtained about You (subject to certain exceptions).
  • Right to Know: You have the right to request that We disclose to You what Personal Information We collect about You, including the right to request that We provide You the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, the categories of third parties to whom We disclose Personal Information, and the specific pieces of Personal Information We have collected about You (typically for the 12-month period preceding Your request).
  • Right to Non-Discrimination: The right not to be discriminated against because You exercised any of these rights.

As noted above, We do not "sell" or "share" any Personal Information that is collected on this Website to any third party for any reason. Therefore, the "Right to Know About Sale of Sharing" and the "Right to Opt-out of Sale or Sharing" under the CCPA does not apply to the Website.

To exercise any of these rights (other than non-discrimination), You may contact Us by email at DataPrivacy@ferguson.com or call Us directly at +1-833-865-0355. You may also designate an authorized agent to exercise these rights on Your behalf. If You use an authorized agent to submit a request, We will not act on that request unless We are able to authenticate, with commercially reasonable effort, both Your identity and the authorized agent’s authority to act on Your behalf.

Once You submit a request, You are sent an email that requires clicking on a link to verify the email address. This two-factor validation helps protect against fraudulent submissions. Please note that a DSAR request is not processed until You have authenticated Your request by verifying the email address submitted. 

There may be certain circumstances when We may not completely fulfill Your request, as permitted under the applicable California statute and regulations. For example, in connection with a Request to Delete, We may need to retain certain information to complete a transaction, detect fraud, or comply with a legal obligation.

CONSUMER'S RIGHTS TO PERSONAL INFORMATION – COLORADO, CONNECTICUT, MONTANA, OREGON, TEXAS, UTAH, AND VIRGINIA

As a resident of Colorado, Connecticut, Montana, Oregon, Texas, Utah, or Virginia, You may have one or more of the following rights:

  • Right to Confirm Access: You have the right to confirm whether We are processing Your Personal Information and request access to Your Personal Information.
  • Right to Correct: You have the right to request that We correct inaccuracies in Your Personal Information.
  • Right to Delete: You have the right to request that We delete Personal Information that We have collected from or obtained about You (subject to certain exceptions).
  • Right to Obtain a Copy: You have the right to obtain a copy of any Personal Information in digital format We may hold about You. If You are an Oregon resident, You also have the right to a list of third parties with whom We share Personal Information.
  • Right to Appeal: If You are unsatisfied with Our actions related to exercising one of Your privacy rights above, You may appeal Our decision.
  • Right to Non-Discrimination: You have the right not to be discriminated against because You exercised any of these rights.

As noted above, We do not "sell" any Personal Information that is collected on this Website to any third party for any reason, and We do not share Personal Information with any third party for purposes of targeted advertising or profiling. Therefore, the "Right to Opt-out" under these states’ laws do not apply to the Website.

To exercise any of these rights (other than non-discrimination), You may contact Us by email at DataPrivacy@ferguson.com or call Us directly at +1-833-865-0355. 

Once You submit a request, You are sent an email that requires clicking on a link to verify the email address. This two-factor validation helps protect against fraudulent submissions. Please note the request is not processed until You have authenticated Your request by verifying the email address You submitted.

There may be certain circumstances when We may not completely fulfill Your request, as permitted under the applicable statute or regulation. For example, in connection with a Request to Delete, We may need to retain certain information to complete a transaction, detect fraud, or comply with a legal obligation.

Right to Appeal (CO, CT, MT, OR, TX, VA Residents) – If, for any reason, You would like to appeal Our decision relating to Your request and You are a resident of Colorado, Connecticut, Montana, Oregon, Texas, or Virginia, You have the right to submit an appeal by emailing Us at DataPrivacy@ferguson.com or calling Us directly at +1-833-865-0355. Please include the original Request ID, the basis for Your appeal, and any additional information to consider.

RETENTION PERIOD

We retain Your Personal Information in accordance with Our Company’s Records Retention Policy, which typically provides for retention as long as needed or permitted for the purpose(s) the Personal Information was obtained and consistent with applicable law. The criteria used to determine Our retention periods include:

  • the length of time We have an ongoing relationship with You (for example, for as long as You keep using the Website or continue Your subscription or information requests);
  • whether there is a legal obligation to which We are subject (for example, We may be required to keep records of Your Personal Information and Other Information collected from Your visits to the Website for a certain period of time before We can delete them); and
  • whether retention is necessary as a legitimate interest to Our business.

Once retention of the Personal Information is no longer necessary for the purposes outlined above, We will either delete or deidentify the Personal Information or, if this is not possible (for example, because Personal Information has been stored in backup archives), then We will store and protect the Personal Information until deletion or deidentification is possible.

THIRD PARTY WEBSITES

The Website may contain links to other websites. This Privacy Policy does not apply to the privacy, information, or other policies and practices of any linked website, including without limitation any linked website that may be affiliated with the Company or its businesses. Such policies and practices for any linked website are subject to and governed by the Privacy Policy, Terms of Use and any other policies or disclosures of those linked websites. The inclusion of a link on Our Website does not imply endorsement of the linked website or service by Us.

We are not responsible for the information collection, use, disclosure, or security policies or practices for linked websites or of other organizations, such as YouTube and LinkedIn, or any other application developer, application provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer, including with respect to any Personal Information You disclose to or that is collected by other organizations through or in connection with any third-party links.

USE OF THE WEBSITE BY MINORS

The Website is not intended for use by or directed to individuals under the age of 18, and We do not knowingly or intentionally collect Personal Information from individuals under 18 years old on the Website.

If a parent or guardian believes or becomes aware that his or her child has provided Us with Personal Information, please immediately notify Us as set forth in the “Contacting Us” section below.

California minors under 18 years old may request the removal of any information that We may have collected by contacting Us as set forth in the “Contacting Us” section. Upon such request, We will anonymize or remove any content posted by or collected from the minor, unless required by law to retain such content or information.

CROSS-BORDER TRANSFERS OF PERSONAL INFORMATION

The Personal Information We collect when You visit Our Website will be processed and stored in the United States. If You are not a resident of the United States, by using the Website You acknowledge and agree that Your information will be automatically transferred to the United States and outside of Your country of residence or the country in which You are located. You further acknowledge and agree that the United States may have data protection rules that are different from those of Your country of residence. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in the United States may be entitled to access Your Personal Information. For example, information may be shared in response to valid demands or requests from government authorities, courts, and law enforcement officials in in the United States.

SENSITIVE PERSONAL INFORMATION – NOT REQUESTED OR COLLECTED

We request that You not send Us, and You not disclose to Us, any sensitive Personal Information or special categories of Personal Information (e.g., social security numbers or government IDs, financial information, information related to racial or ethnic origin, political opinions, religious, philosophical, or other beliefs, information related to sex life or sexual orientation, health data, biometric or genetic characteristics, criminal convictions and offenses, or trade union membership) on or through the Website or otherwise. We do not intentionally collect sensitive Personal Information through the Website or its operations, and do not require disclosure of any sensitive Personal Information for any reason.

UPDATES TO THIS PRIVACY POLICY

We may update Our privacy policy from time to time and use of the information We collect now is subject to the privacy policy in effect at the time of use. The "LAST UPDATED" legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised, and We encourage You to check Our Privacy Policy periodically. Any changes will become effective when We post the revised Privacy Policy on Our Website. Your use of the Website, and/or Your purchase of a product or service following these changes means that You accept the revised Privacy Policy.

CONTACTING US

Ferguson Enterprises Inc. is the company responsible for collection and use of Your Personal Information under this Privacy Policy. If You have a complaint about Our handling of Your Personal Information, We would appreciate the opportunity to address Your concerns directly and before You approach a regulator.

If You have any questions about this Privacy Policy, please contact Us by email at DataPrivacy@ferguson.com or call Us directly at +1-833-865-0355. 

Ferguson (Jersey) Limited is the designated representative of Ferguson Enterprises Inc. in the United Kingdom and the European Economic Area. You may contact the representative directly at:

Data Privacy Representative
Ferguson (Jersey) Limited
1020 Eskdale Road
Winnersh Triangle
Wokingham
Berks
RG41 5TS
Tel: +44 (0)118 927 3800