#1 Home Improvement Retailer

Cart

Cart

Home
Privacy & Security Center
California Privacy Rights & Report

Privacy ToolBoxPrivacy & Security Center

California Privacy Rights & Report

About the California Consumer Privacy Act


The California Consumer Privacy Act (CCPA) provides that California residents have the right (subject to certain limitations) to:

  • Know and Access the personal information we collect about them
  • Correct the personal information we maintain about them
  • Delete the personal information we collect about them
  • Opt out of having their personal information sold for valuable consideration or shared for certain targeted advertising
  • Limit the use and disclosure of sensitive personal information only to those certain purposes permitted by CCPA
  • Non-discrimination for exercising their privacy rights. We may, however, provide a different level of service or charge a different rate if the difference is reasonably related to the value of the information
We disclose your information in ways that do not directly identify you to select third parties to enhance your experiences with us, to improve our ability to serve you, to keep you aware of our products, services, and offers, and to tailor the offers and promotions displayed to you online by select third party advertisers to your interests. This disclosure may be considered a "sale" or "sharing" of your personal information. Read Information Disclosures for more details.
To exercise your California privacy rights, please view the Exercise My Privacy Rights page.

CCPA Requests in Calendar Year 2025


This report provides information about the total number of CCPA requests we received from individuals determined to be California residents in 2025 and our responses to them.

AccessDeleteOpt-out1CorrectLimit Use of SPI
Received3622,05313,518,559195435
Fulfilled2291,48713,518,55943435
Unable to be Fulfilled214056601520
1Opt-out request volume includes requests received through opt-out preference signals, including the Global Privacy Control (GPC), as well as requests submitted through our "Do Not Sell or Share My Personal Information" page and other means described in our Privacy & Security Statement. Because GPC and similar opt-out preference signals are transmitted automatically with each qualifying visit by an enabled browser or extension, the opt-out request count reflects the total volume of signals received, including signals from automated web crawlers, search engine indexers, and other non-human traffic that transmit the signal as part of their default HTTP header configuration. This automated signal volume accounts for the disparity between opt-out request totals and individually submitted access, deletion, and correction requests.

2Requests may not be fulfilled for various reasons, including: requests to access, delete or correct do not pass our identity verification process; individuals requesting access, deletion or correction do not confirm their email addresses within the requisite time; individuals submit requests while requests of the same type are being processed; and requests are subject to exemptions established by law.

Average Number of Days to Fulfill CCPA Requests3

AccessDeleteOpt-outCorrectLimit Use of SPI
10287238
3We consider a requestor's request fulfilled when we inform them that we have completed the access, delete, opt-out, correct or limit use of sensitive personal information in whole or in part.

For additional information about our collection, use, and disclosure of personal information, please see our Privacy and Security Statement.