Lowe’s Foundation U.S. Privacy Statement
Effective April 21, 2025
This Privacy Statement applies to your interaction with the Lowe’s Foundation as a prospective, current or former Lowe’s Foundation donor, grantee, funding recipient, website visitor, or business partner.
It describes how the Lowe’s Foundation collects, uses, shares, and protects personal information from and about you, along with choices you can make about such information. This Privacy Statement is not a contract and does not create any legal rights or obligations
What Information We Collect
- Identification information that can be used to identify you, such as your name and email address. We may also collect online identifiers, such as your IP address, when you browse our website.
- Online activities information, such as IP address, browsing history, search history, and other information when you interact with our website and advertisements, such as referral source (e.g., search engine, direct traffic). We, and our third-party partners, may record your keystroke activity and rhythms, mouse movements, scrolling and clicks when you use our website for our internal business purposes, such as to improve our services, and to address functionality issues.
- Professional or employment-related information, such as business contact information, job title, company name, and office visitor access information, where applicable, if submitted 2 as part of a donation, grant, or partnership application.
- Demographic information, such as age, gender, or race/ethnicity (if voluntarily provided as part of a donation, grant, or partnership application).
- Inferences or preferences we learn or infer about you.
- Note that we may de-identify or pseudonymize personal information so that it is non- personal information, such as aggregating (combining it with data about other individuals) and/or converting it to a code, sometimes using a function commonly known as “hashing,” or otherwise removing characteristics that make the data personally identifiable to you. We maintain and use de-identified data without attempting to re-identify it, except where permitted by applicable law, such as to determine whether our de-identification processes satisfy legal requirements. We will treat de-identified or pseudonymized information as non- personal information to the fullest extent allowed by applicable law. If we combine non- personal information with personal information, then we will treat the combined information as personal information under this Privacy Statement.
We do not knowingly collect or disclose personal information from children under the age of 16 without parental or guardian consent. If a child under the age of 16 has provided us with personal information, we ask that a parent or guardian contact us so that the information can be deleted.
For more information about how we retain your information, please see the “How We Retain Your Information” section below.
What Are the Sources of Your Information
We collect different types of information about you from several sources, including:
Information You Provide
You may provide identification information, demographic information, professional or employment-related information, inferences or preferences, and other personal information described under “What Information We Collect” section when you submit or apply for a donation, grant, or scholarship, as a business partner, and/or as you interact with us.
Information We Collect by Automated Means
We may collect Online Activities information described under “What Information We Collect” section by automated means online and offline.
Information We Collect from Other Sources
We may obtain certain information about you from other businesses, such as background checks, references, or social networks (e.g., LinkedIn). We may also obtain information about you from Lowe’s affiliates. We may also obtain potential donor or grantee applicant information from public sources or business partners.
Information We Generate, Derive, or Infer
We may generate personal information about you, such as assigning an applicant ID to you. We may also derive or infer information about you, such as information related to any assessment you may take as part of an application and/or interview process
Cookies and Other Technologies
We use cookies and similar tracking technologies to enhance your experience on our website and improve our website.
What are Cookies?
Cookies are small text files placed on your device when you visit our website. Lowe’s Foundation and its business partners use them for different purposes.
Types of cookies we use are:
- Functional Cookies – Required for website functionality (e.g., page navigation).
Why We Collect Your Information
We use your personal information for various business purposes, including to:
- Communicate with you through various channels with transactional or promotional information, such as confirmation and newsletters
- Evaluate and respond to your requests, inquiries, and applications
- Administer our website and perform accounting, auditing, billing, reconciliation, and collection activities
- Comply with and enforce applicable legal requirements, industry standards and our policies and terms
- Assist law enforcement, respond to regulatory inquiries, and defend our or any third party’s rights or property
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity
How We Share Your Information
We share personal information outlined above for business purposes with third parties, our service providers, and our affiliates, such as Lowe’s Companies Inc., to deliver and support our platforms, to support various marketing and advertising processes, and to conduct core business tasks, as described below:
Within Lowe’s
We may disclose information about you within our family of companies for internal administrative purposes and uses that are consistent with this Privacy Statement. For example, the Lowe’s entity responsible for tax and reporting may receive personal information about donation and/or funding recipients.
Other Service Providers
We may disclose your personal information to companies or agents that provide services to us, such as analytics vendors, information technology vendors, vendors providing web hosting and support, and vendors that help us manage application processes. These providers may need access to information about you in order to perform their functions.
Third-Party Partners
We may disclose information about you to unaffiliated third parties for their own specific purposes.
Public Disclosure
We may disclose certain personal information about our funding and donation recipients, such as name, job title, and business organization, publicly in connection with our charitable operations.
Legal, Enforcement, Security and Investigation
We may disclose information about you (1) if we believe we are required to do so by law, regulation or legal process, such as a court order or subpoena; (2) as we deem appropriate or necessary in response to requests by government agencies, such as law enforcement authorities or tax authorities; (3) when we believe disclosure is appropriate or necessary to protect the rights, property or safety of Lowe’s Foundation, our customers or others, including to prevent physical, financial or other harm, injury or loss or to collect debt you owe; or (4) in connection with an investigation of suspected or actual unlawful activity.
Sale or Transfer of Business or Assets
We reserve the right to transfer personal information we have about you (including, without limitation, during the course of any due diligence process) if we sell or transfer all or a portion of our business or assets (including, without limitation, in the event of a reorganization, dissolution, bankruptcy or liquidation).
Categories of Personal Information Disclosed for Business Purposes
We disclose all of the categories of personal information described under “What Information We Collect” section for business purposes, including maintaining records related to your application, managing all aspects of your application process, protecting the security and integrity of data, systems, processes, and our business, fraud prevention, comply with legal, compliance, law enforcement and security requirements. Examples of the types of vendors we disclose personal information to for these purposes include as information technology vendors, vendors providing hosting, support, and vendors that help us manage application processes, security and fraud prevention, legal, and compliance and risk management vendors.
Your Privacy Rights and Choices
Privacy Rights for Residents of Certain States
Residents of certain states have rights to access, delete, correct, or opt-out from certain types of processing or sharing of their personal information. Depending on your state of residency and subject to certain legal limitations and exceptions, you may be able to exercise some or all of the following rights:
Access your personal information. You may request confirmation of the processing of your data and to access a copy of your personal information we maintain about you. In certain states, to the extent feasible, the data will be provided in a readily usable format to allow data portability.
In addition, in California, you may request to learn more about the categories and specific pieces of personal information we collect about you, the categories of sources from which personal information is collected, and the categories of entities with whom we share personal information. You can also learn about categories of entities who may use your personal information for additional purposes relevant to our services (e.g., joint marketing, joint services offering) for valuable considerations. The information may be delivered by mail or electronically at your request.
In Oregon, you may request to learn more about the specific third parties to which we disclose personal information.
- Correct your personal information. You may request to correct inaccurate personal information we maintain about you. If you would like to change information related to your order or services, please contact a store associate or Lowe’s Customer Care.
- Delete your personal information. You may request that Lowe’s Foundation delete your personal information that we maintain about you subject to certain exceptions permitted by law such as to complete the transactions, detect security incidents, prevent fraudulent or illegal activities, identify and repair errors, comply with laws and regulations, and for other solely internal and lawful purposes.
- Opt out from sale of your personal information. You may opt out of the sale of your information (which includes the exchange of your personal data for valuable consideration). Lowe’s Foundation does not process personal information for targeted and/or cross-contextual advertising purposes and therefore does not provide this opt-out right to residents in applicable states.
- Sensitive personal information. To the extent we collect and process “sensitive personal information,” we obtain opt-in consent as required by applicable law. Residents of certain states may request Lowe’s Foundation to limit the use and disclosure of sensitive personal information for certain purposes subject to certain exceptions permissible by law, such as providing products or services, detecting security incidents and protecting safety, preventing fraud or illegal actions, and maintaining the quality of services we provide. Please note that the definition of sensitive personal information varies by state, so your rights with respect to specific types of information will depend on your state of residency.
- Opt out of profiling in furtherance of legal or similarly significant effects. Lowe’s Foundation does not process personal information for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects and therefore does not provide this right to residents in applicable states.
- Non-discrimination for exercise of privacy rights. We will not discriminate or retaliate against you for exercising your rights under relevant state privacy laws.
- Appeal your request. Residents of certain states may appeal a decision to not take action on your privacy right request within a reasonable time after your receipt of the decision.
Below is a summary of your privacy rights based on your state of residency:
- California Residents: Right of access, correct or delete personal information, right to opt out of “sale” and “sharing” of personal information for targeted advertising, limit the use and disclosure of sensitive personal information, and non-discrimination.
- Colorado, Connecticut, Delaware, Virginia, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, and Texas Residents: Right of access, correct or delete your personal information, right to opt out of sale of personal information and targeted advertising, right to opt out of profiling, no discrimination, right to appeal.
- Iowa, Utah Residents: Right of access or delete personal information, right to opt out of sale of personal information and targeted advertising, no discrimination.
How to Submit Privacy Request(s)
Depending on the state you reside in, you have certain rights as indicated below. Lowe’s Foundation provides right to access and right to opt out of sale/sharing and targeted advertising to residents of all states.
- Access, correct or delete personal information. To access, correct or delete your personal information, please enter the Lowe’s Privacy Request Portal or call 800-309-5732. We need your contact information, such as name, address, phone number, and email, to submit your request and verify your identity for access or deletion requests.
- Our verification process consists of you answering a series of questions correctly to verify your identity. We may collect your language preference for the purposes of providing you with the ID verification questions in your preferred language. Your language preference information is not used for any other purposes and is deleted after your request is complete. We may require you to log into your Lowe’s online account (if you have one) or with your consent, send you a text to your mobile number to verify your identity.
- Opt out from sale or sharing of personal information. To opt out of sale or sharing of personal information, please submit an opt-out request via the Lowe’s Privacy Request Portal or by calling 800-309-5732 and asking to restrict sale or sharing of personal information.
- Limit the use and disclosure of sensitive personal information. As disclosed above, some of the personal information we collect may be considered sensitive under California and other state laws. To limit the use and disclosure of sensitive personal information, please submit limit the use and disclosure of sensitive personal information request via the Lowe’s Privacy Request Portal or call 800-309-5732.
- Appeal. To appeal a decision to not take action on your privacy right request, please click the “Your Open Request” tab in the Lowe’s Privacy Request Portal.
- Authorized agent. In certain states, you may designate an agent to submit privacy requests on your behalf, but for your protection, we may need to verify your identity directly with you before fulfilling certain requests, and we will deliver your personal information directly to you (if requested). We need your agent’s contact information, and your agent needs to have your information ready when submitting the request.
If you are an authorized agent submitting a request to opt out of sales or targeted advertising on behalf of a Colorado, Connecticut, Oregon, Montana or Texas resident, please submit the request pursuant to the above instructions. We may require documentation to authenticate the customer’s identity and that you are authorized to submit the request on the customer’s behalf in order to be able to fulfill your request. Please keep in mind that if we cannot authenticate that you are authorized to act on the customer’s behalf or we cannot authenticate the customer’s identity, we may deny the request.
We respond to requests to exercise privacy rights in accordance with our legal obligations, but please note that these rights depend on residency and not all of these rights may be available to you depending on where you live. In certain circumstances, we may decline a privacy rights request such as where we are unable to verify your identity.
Additional Privacy Choices
In addition to the rights described above, we also make the following privacy choices available:
To stop receiving marketing emails, you may click on the “Unsubscribe” link in any marketing email you receive from us and update your preferences on the resulting webpage. We may continue to send transactional emails.
How We Protect Your Information
We maintain administrative, technical, and physical safeguards designed and intended to protect personal information against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure or use. Despite these safeguards, due to inherent uncertainty in the use of the internet and information systems and the potential for unlawful attacks by third parties, we cannot guarantee that the use of our systems, websites or applications will be completely safe or secure.
How We Retain Your Information
We retain personal information only for as long as is reasonably necessary to fulfill the purpose for which it was collected, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting, and other applicable obligations.
Once retention of the personal information is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal information or, if this is not possible (for example, because personal information has been stored in backup archives), then we will store and protect the personal information until deletion or deidentification is possible.
Scope
When we use the term “personal information” in this Privacy Statement, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. It does not include aggregated or deidentified information that is maintained in a form that cannot reasonably be used to infer information about, or otherwise be linked to, a particular individual. Where we maintain de-identified data, we will maintain and use the data in de-identified form and not attempt to re-identify the data except as required or permitted by law.
The Privacy Statement covers the privacy practice of Lowe’s Foundation. It applies to personal information about a prospective, current or former Lowe’s Foundation website visitor, donor, grantee, funding recipient, or business partner.
This Privacy Statement does not apply to:
- Lowe’s Companies, Inc. in-store and online retail operations.
- Lowe’s corporate job applicant-related and employment-related records.
- Your interactions with third parties or their websites that are linked to or accessible from Lowe’s websites or that are operated by unaffiliated parties, even though the website may contain references to Lowe’s. The information collection, use and sharing practices are governed by the respective privacy notices at the bottom of the sites.
- Credit-related products (such as Lowe’s-branded credit cards), which are covered by the issuing banks’ privacy notices.
How to Contact Us
If you have questions or comments about this Privacy Statement or if you would like us to update the information we have about you, please contact us as indicated below.
Privacy Office
1000 Lowes Blvd., NB6LG
Mooresville, NC 28117
[email protected]
Updates
This Privacy Statement may be updated periodically and without prior notice to you to reflect changes in our information practices or relevant laws. We may post a notice on Lowesfoundation.org and other websites that point to this Privacy Statement to notify you of any substantive changes to the way we collect and use information. We will indicate at the top of the Privacy Statement when it was last updated