PRIVACY POLICY

Privacy Policy

Effective Date:  December 3, 2025
Last Updated: December 3, 2025

We at EOS Surfaces LLC (“EOS,” “we,” “our,” or “us”) take your privacy seriously. This privacy policy (“Privacy Policy” or “Policy”) is intended to demonstrate our firm commitment to your privacy. The following Policy discloses our practices for collection, use, sharing, maintenance, protection, and storage of personally identifying information (“PII,” “Personal Data,” or “Personal Information”), non-personal information, and sensitive information: 1.) for our websites located at www.eos-surfaces.com and www.eoscu.com (together, “Sites”); and (2) for users of our products and services (“Services”). Hereinafter, the Sites and Services together shall be referred to as the “Services.”

This Policy applies only to information we collect:

• Through the Services.
• In communications, including email, text, chat, mobile communications, and other electronic messages, communications, correspondence, and information exchanges between you and the Services.
• When you interact with our advertising and applications (including mobile apps) on third-party websites and services, if those applications or advertising include links to this Policy.
• Offline when registering for or when attending professional conferences, trade shows, continuing education presentations and other informational events organized or sponsored by us.
• With your consent.

It does not apply to information collected by:

• Us through any other means, including on any other websites operated by EOS or any third party including our affiliates and subsidiaries that do not link to this policy; or
• Any third party including our affiliates and subsidiaries, including through any application or content (including advertising) that does not link to this Policy.

We may provide additional or different privacy policies that are specific to certain features, services, or activities.

Please read this Policy carefully to understand our practices regarding your information and how we treat it. When you access the Services, you will receive a prompt informing you that the Site collects information about you. You will also be provided with a link to the Policy and EOS’s Website Terms of Use (“Terms”). Please affirm your decision regarding collection of information about you through the Services when prompted. The Policy and Terms may change from time to time, so please check the Services periodically for updates. We will provide notice of any changes to the Policy as required by law and you will receive an updated prompt regarding collection of your information. The date of the latest revision will be noted at the top of the relevant Policy and the most recent versions posted on the Sites. We may email or otherwise communicate reminders about this Policy, but you should check our Services periodically to see the current policy and any changes we have made to it.

Information We Collect

Anonymous Information – information that cannot be linked with any particular person. Each time a visitor browses the Site, the user’s browser provides certain information, such as the type and version of the browser, the Internet Protocol (IP) address assigned to the computer, and the type and version of the operating system. Our Internet server also tracks the dates and times of visits, lengths of visits, resources accessed, and other non-personal information associated with the visit.

Personally Identifiable Information – information which can be linked to a particular person. Each time a visitor orders a sample or a brochure, a name and address must be provided in order for us to fulfill the request. We also may ask that the visitor provide a phone number, e-mail address, company name (if applicable), and fax number (if applicable). Further, we may request additional information to better understand the needs of our Site visitors.

We collect the following specific information:

• Account and contact information, including name, home, work, other addresses you share with us, email address, phone number, username, and other contact information you provide us with.
• Payment information, including credit card or debit card information and information about the payment methods and services such as PayPal or Venmo you use in connection with the Services.
• Account history, including information about your subscription, account, transactions, purchases, order history, or discounts.
• Demographic information, including your age, gender, education, or title, if you have consented to such information collection.
• Location information, including general geographic location such as country, state or province, or city based on your IP address and precise geolocation, if you have enabled and consented to location information collection.
• Device information, including your IP address, device identifiers, operating system and version, preferred language, hardware identifiers, browser type and settings, and other device information.
• Content and information you elect to provide as part of your profile or in any reviews you make through the Services or emails, chats, or other communications sent to us.
• Images, voice recordings, and videos collected or stored in connection with the Services if you have consented to such information collection. We also make recordings of conversations with you utilizing a tool enabled by artificial intelligence, or AI. Before any recording is made, you will be offered the opportunity to consent to, or opt out of, such a recording. If you do not consent to the recording, we will not capture the communication.
• Information collected with your consent.
• Your history of products purchased through us, as well as your inquiries directed to us.

We also collect:

• Statistics or aggregated information. Statistical or aggregated data does not directly identify a particular person, but we may derive non-personal statistical or aggregated data from Personal Data. For example, we may aggregate PII to calculate the percentage of users accessing a specific Services feature.
• Technical information. Technical information includes information about your Internet connection and usage details about your interactions with the Services, such as clickstream information to, through, and from our Services (including date and time), products that you view or search for; page response times, download errors, length of your visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from a page.
• If we combine or connect non-personal statistical or technical data with PII so that it directly or indirectly identifies an individual, we treat the combined information as Personal Information.

Categories of Personal Information Collected in the Last 12 Months

EOS Surfaces LLC does not sell personal information as defined under the CCPA/CPRA.

Children's and Minors' Data

Our Services are not intended for, and we do not knowingly collect any Personal Data from, children under the age of 18. If we learn we have collected or received Personal Data from a child under 18 years old without verification of parental consent, we will delete that information.

How We Collect Information

You Provide Information to Us

We collect information about you when you interact with our Services, such as when you order samples, place an order, subscribe to our blog or marketing emails, download our resources, file a warranty claim, request information, participate in a poll/contest/survey, participate in a webinar, create, upload, or post content to the Services such as our blog, including leaving a comment, a review, testimonial, or media such as photos and videos, or audio recordings made of our phone calls with you regarding the Services.

Automatically Through Our Services

As you navigate through and interact with our Services, we may use automatic data collection technologies through HUBSPOT and GOOGLE ANALYTICS to collect information that may include Personal Data. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, and other tracking technologies including details of your interactions with our Services, such as traffic data, location data, logs, and other communication data, and which resources and Services features you access and use.

We may use these automatic collection technologies to collect information about your online activities over time and across third-party sites or other online services (behavioral tracking).

Using automatic collection technologies helps us to improve our Services and to deliver a better and more personalized experience.

The technologies we use for this automatic data collection may include:

Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse to accept or disable cookies by activating the appropriate setting on your browser or device. However, if you select this setting, you may be unable to access certain features of the Services. Our Sites use non-persistent (temporary) cookies to keep track of your shopping cart. Our Sites and our third-party statistics provider also use persistent cookies to track visitor statistics and preference selections. These persistent cookies do not contain any PII.

Web Beacons. Some parts of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit EOS, for example, to count users who have visited the Sites, opened an email, and for other related statistics, for example, recording the popularity of certain content and verifying system and server integrity.

To the extent any of these automated technologies are considered a Personal Data sale, targeted advertising, or profiling, under applicable laws, depending on where you live, you may opt out from use of these automated technologies by submitting a request at https://na1.hs-data-privacy.com/request/LrSzNRgz_z2jsupkA9BptQ. Please note that some Services features may be unavailable as a result.

When you interact with the Services, there are third parties that may use automatic collection technologies to collect information about your or your device. These third parties’ may include:

• Advertisers, ad networks, and ad servers.
• Analytics companies.
• Your device manufacturer.
• Your internet or mobile service provider.
• Conference or trade show operators

These third parties may use tracking technologies to collect information about you when you use the Services. The information they collect may be associated with your Personal Data or they may collect information, including Personal Data, about your online activities over time and across different websites, apps, platforms, and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the provider responsible directly.

From Business Partners and Service Providers

We may receive PII about you from other sources and combine that with information we collect directly from you. For example, we may obtain information about you from service providers that we engage to perform services on our behalf, such as email platform providers, content delivery services, payment processors, promotions services, analytics, security and anti-fraud services, and conference organizers.

How We Use Information

We use information that we collect about you or that you provide to us, including any Personal Data, to:

• Provide you with the Services and any contents, features, information, products, or services that we make available through the Services including samples and brochures, information about EOS, and information from our distribution partners.
• Fulfill and manage subscriptions, purchases, orders, deliveries, payments, returns, exchanges and warranty claims.
• Fulfill any other purpose for which you provide it.
• Provide you with notices about your account/subscription.
• Improve our Services, including by analyzing your information and creating aggregated data derived from your information to develop, maintain, analyze, improve, optimize, measure, and report on our Services and their features and how users interact with them.
• Promote our Services, business, and offerings by publishing advertising on our own Services and by placing ads on third parties' services. We may use your information to model, segment, target, offer, market, and advertise our Services.
• Carry out our obligations and enforce our rights arising from any contracts entered between you and us, including for billing and collection.
• Notify you when Services updates are available and about changes to any products or services we offer or provide through them.
• In any other way we may describe when you provide the information.
• For any other purpose with your consent, including for marketing material such as testimonials.

The usage information we collect, whether connected to your Personal Data or not, helps us improve our Services and deliver a better and more personalized experience by enabling us to:

• Estimate our audience sizes and usage patterns.
• Store information about your preferences, allowing us to customize the Services according to your individual needs and interests.
• Speed up your searches.
• Recognize you when you return to our Services.

We may also use your information to contact you about goods and services that may be of interest to you. If you do not want us to use your information in this way, please check the relevant box located on the form on which we collect your data.

We use location information we collect to assign the correct salesperson, track product interest based on geographic region, target marketing campaigns, assess market interest, comply with legal requirements, or segment customers by location.

Who We Disclose Your Information To

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may also disclose Personal Data that we collect, or you provide as described in this Privacy Policy:

• To our subsidiaries and affiliates.
• To contractors, service providers, and other third parties we use to support our organization, including vendors offering customer relationship management services, who are bound by contractual obligations to keep Personal Data confidential and use it only for the purposes for which we disclose it to them.
• To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of ours assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which Personal Data held by EOS is among the assets transferred.
• To fulfill the purpose for which you provide it. For example, if you give us an email address to share with a potential customer to get a reference from you, we will transmit the contents of that email and your email address to the recipients.
• For any other purpose disclosed by us when you provide the information.
• With your consent.

We may also disclose your Personal Data:

• To comply with any court order, law, or legal process, including responding to any government or regulatory request.
• To enforce or apply our terms of use as shown at https://eoscu.com/terms-of-use and other agreements, including for billing and collection purposes.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our organization, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

The categories of Personal Data we may disclose include:

• Account and contact information.
• Payment information.
• Account history, including information about your subscription, account, transactions, purchases, order history, or discounts.
• Demographic information.
• Location information, including general geographic location.
• Device information.
• Content and information you elect to provide to us.
• Images, voice recordings, and videos collected or stored in connection with the Services, if you have consented to such information collection.

THIRD PARTIES AND INFORMATION WE SHARE

Other than as set forth in this Privacy Policy, EOS will not share your Personal Information, nor will such information be sold or otherwise transferred to unaffiliated third parties without your approval at the time of collection.

Third parties such as business partners, service providers, vendors, advisors and agents may help us administer the Services, communicate with you or others, comply with regulations, or deliver services. We may share your data with them in support of any of these goals. However, prior to doing so, we obtain assurances from these third parties that they will safeguard your Personal Information. There may be other limited instances where we need to share your personal information to respond to your request or inquiry.

In connection with your account, we will make available to you a variety of resources. To facilitate the use of these resources, certain data may be shared with third parties, as follows:

• Third Party Payment Processors. Payment information, including credit card details, is collected and processed by the appropriate payment processor and is not stored on our servers. While we take reasonable precautions to ensure your data is transmitted securely, we cannot guarantee the security of payment information once it has been shared with the appropriate payment processor. By providing your payment information, you acknowledge that we are not liable for any breach of security or misuse of your payment details while in the control of the appropriate payment processor.

• Consent: With your consent, or as directed by you or your authorized representative, we may disclose Personal Information about you to other third parties not described in this Policy.

Retention of Information

We retain the categories of Personal Information described in this Privacy Policy for as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, to enforce agreements and for as otherwise legally permitted or required, such as maintaining the Services, operating the EOS organization, and for safety, security, and fraud prevention. The criteria used to determine retention periods include the type of information, the purpose for which it is collected, and applicable legal requirements. At the end of the retention period, Personal Data will be deleted, destroyed, or de-identified.

Security

We use commercially reasonable administrative, physical, and technical measures designed to protect your Personal Data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your Personal Data transmitted to, though, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communication channels. Any transmission of Personal Data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your Personal Data against unauthorized use, disclosure, and access.

RIGHTS TO YOUR PERSONAL INFORMATION

You may contact us at any time to: (a) request the removal of the Personal Information you provided to us from our databases; (b) update your Personal Information; (c) access or rectify your Personal Information or request its deletion; (d) request a restriction on the processing or opt out of certain processing of your Personal Information, such as targeted advertising; (e) object to the processing of your Personal Information; (f) request a portable form of your Personal Information or (g) exercise other rights with respect to your Personal Information.

We may need to verify your identity or the identity of your agent before complying with any request. While we strongly encourage you to first raise any questions or concerns about your Personal Information directly with us, you may have a right to lodge a complaint with the relevant supervisory authority. You may appeal our decision regarding a request related to these rights by contacting us at Privacy@eos-surfaces.com.

You can contact us with any other questions about our privacy practices at Privacy@eos-surfaces.com.

Rights of Certain Types of Users

1. Individuals Outside of the United States

EOS is located in the United States. Your Personal Information may be stored or processed in the United States or globally as required to administer the Services. If you are accessing the Services from outside the United States, please be aware that your Personal Information may be transferred to, stored, and processed by us and by those third parties with whom we may share your Personal Information as set forth above (see Third Parties and Information We Share section above), in the United States and other countries.

Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of your country of residence. If you wish to be informed about what Personal Information we hold and want it removed from our systems, please contact us at Privacy@eos-surfaces.com or submit a request form at our privacy request page at https://na1.hs-data privacy.com/request/LrSzNRgz_z2jsupkA9BptQ

1. California

Except where expressly noted, the subsections below apply only to “personal information” about California residents, as that term is defined in the California Consumer Privacy Act (“CCPA”), and as supplemented in the Privacy Policy as described above. California residents who wish to exercise the rights described here with respect to their Personal Information may contact us at Privacy@eos-surfaces.com or submit a request form at our privacy request page at privacy.com/request/LrSzNRgz_z2jsupkA9BptQ.

California residents may request and obtain information about the Personal Information that EOS has shared with third parties for such third parties’ direct marketing purposes within the prior calendar year (as defined by California Civil Code § 1798.83, commonly known as California’s “Shine the Light Law”). If applicable, this information would include a list of the categories of Personal Information that was shared and the names and addresses of all third parties with which EOS shared this information in the immediately preceding calendar year. To obtain this information, please send an email message to Privacy@eos-surfaces.com or submit a request form at our privacy request page at https://na1.hs-data-privacy.com/request/LrSzNRgz_z2jsupkA9BptQ with the words “California Shine the Light Privacy Request” in the subject line as well as in the body of your email message.

The categories of Personal Information we have collected and disclose is described in the “Information We Collect” section of this Policy.

Notice of Privacy Rights for California Residents

Right to request deletion of the data – Request to delete

You can ask for the deletion of your Personal Information. If you ask us to delete your Personal Information, we will respect your request and delete your Personal Information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation or any processing that may be required to protect against illegal activities.

Right to be informed – Request to know

Depending on the circumstances, you have a right to know:

• whether we collect and use your Personal Information;
• the categories of Personal Information that we collected in the last twelve months;
• the purposes for which the collected Personal Information is used;
• whether we sell your Personal Information to third parties;
• the categories of Personal Information that we sold or disclosed for a business purpose;
• the categories of third parties to whom the Personal Information was sold or disclosed for a business purpose; and
• the business or commercial purpose for collecting or selling Personal Information.

In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

We will not discriminate against you if you exercise your privacy rights.

Right to Limit Sensitive Personal Information Use

You may request that we limit our use of sensitive information (e.g. information relating to your government ID or geolocation) to specifically permitted purposes.

Right to Opt-Out

You can request that we stop sharing your Personal Information. Upon receiving a request to opt-out, we will act upon the request as soon as feasibly possible.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us with. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g., phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use Personal Information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purpose of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

To exercise these rights, you can contact us by email at Privacy@eos-surfaces.com or submit a request form at https://na1.hs-data-privacy.com/request/LrSzNRgz_z2jsupkA9BptQ, or by referring to the contact details at the bottom of this Policy. If you have a complaint about how we handle your data, we would like to hear from you.  

1. Other United States Users

For users residing in Colorado, Connecticut, Montana, Virginia, Tennessee, Texas, or Utah, and in other such states not explicitly listed, state law grants you additional rights with regard to your Personal Information under applicable law. You or your legally designated representative may submit a request to exercise your Personal Information rights by contacting us at Privacy@eos-surfaces.com or submitting a form at https://na1.hs-data-privacy.com/request/LrSzNRgz_z2jsupkA9BptQ.

How to Submit a Privacy Rights Request

To exercise your rights under CCPA/CPRA, you may contact us by:

• Complete the request form at
  https://na1.hs-data-privacy.com/request/LrSzNRgz_z2jsupkA9BptQ

• Email: Privacy@eos-surfaces.com (subject line: “California Privacy Rights Request”)
• Phone: 1-800-719-EOS1 (3671)

• Mail: EOS Surfaces LLC

Attn: Privacy Rights

301 East 20th Street

Norfolk, VA 23517

We may need to verify your identity before fulfilling your request. We will confirm receipt of your request within 10 business days and respond within 45 days as required by law.

Choice/Opt-Out of Marketing

Visitors may opt out of receiving marketing communications from us when provided the opportunity when first visiting the Sites or by contacting us at the information above.

Dispute Resolution

In the event of any dispute arising out of or relating to this Privacy Policy , the Terms, and use of the Sites including disputes arising from or questions concerning their existence, interpretation, violation, invalidity, non-performance, or termination, together with any disputes relating to the California Consumer Privacy Act (Privacy Policy, Terms, California Consumer Privacy Act, together “Matters”), the parties shall first endeavor to resolve amicably by informal discussions between authorized representatives of the parties. If the dispute remains unresolved 30 days after either party requests in writing negotiation under this clause or within such other period as the parties may agree in writing, the dispute shall then be resolved by final and binding arbitration in accordance with the arbitration agreement set forth below.

Any controversy or claim arising out of or relating to the Matters, or the breach thereof, shall be settled by binding arbitration administered by the American Arbitration Association under its rules, and judgment on the award rendered by the arbitrator may be entered in any court having jurisdiction thereof.

The arbitration shall take place in Norfolk, Virginia, the United States of America.

There shall be one arbitrator, chosen by the parties pursuant to the American Arbitration Association’s arbitration selection method under the rules of Alternative Dispute Resolution. The language of the arbitration shall be English; the arbitrator shall be a national of the United States.

ANY CAUSE OF ACTION OR CLAIM YOU MAY HAVE ARISING OUT OF OR RELATING TO THE MATTERS MUST BE COMMENCED WITHIN ONE (1) YEAR AFTER THE CAUSE OF ACTION ACCRUES; OTHERWISE, SUCH CAUSE OF ACTION OR CLAIM IS PERMANENTLY BARRED.

Right to Opt Out. You have the right to opt out of the arbitration provisions in this section by providing written notice of your intention to do so to the us at Privacy@eos-surfaces.com within 30 days of consenting to the Policy and Terms (the "Opt Out Period"). Continued use of the Services or Sites after the Opt Out Period, without opting out of these Matters constitutes acceptance of the terms of this Section.

Contact Us

If you have questions about this Privacy Policy or your dealings with our site, please contact us:

Email: Privacy@eos-surfaces.com

Mail: EOS Surfaces LLC, Attn: Webmaster, 301 East 20th Street, Norfolk, VA 23517

Phone: 1-800-719-EOS1 (3671)