Privacy Policy

ARCOSA PRIVACY POLICY
(Last Revised August 1, 2024)

FAQ
Common questions about how we process your personal information, as defined by applicable laws.

ANSWERS TO YOUR PRIVACY QUESTIONS
Which website does this Privacy Policy cover?
This Privacy Policy concerns all websites and domains owned by Arcosa, Inc., its subsidiaries and affiliates (collectively, “Arcosa”, “we”, “us”, or “our”).   Arcosa is the “Controller” or “Co-Controller” as defined under applicable privacy laws.  For more information about Arcosa, Inc. and its subsidiaries and affiliates, please visit our website by clicking the following link.

What Personal Information does Arcosa collect?
The information relating to or identifying individuals that Arcosa collects is generally determined by you and your interaction with us, our partners, third-party service providers and other resources (“Personal Information”). Please see the What type of Personal Information do we collect section below for more information on some of the types of Personal Information Arcosa may collect.

How and where does Arcosa collect information?
Arcosa collects business-related Personal Information from job candidates, employees, potential customers, customers, participants at our events, business partners and vendors and their employees, advisors, contractors, and individuals who choose to use our business services on others behalf (collectively, “Individuals”) who:

• Visit our website;
• Receive or send communications from/to us, including email and phone calls;
• Use our services as a customer or authorized user;
• Register for, attend or otherwise take part in our events, etc.;
• Download or otherwise engage our content or publications;
• Submit an inquiry about an invoice, order, etc.;
• Engage with our customer service or employees;
• Apply to work with us, view or share job postings; or
• Work at a partner or supplier of ours and interact with our company in the course of doing business or contemplating doing business with us.

We collect Personal Information from a variety of sources, including but not limited to:

• The person who is the subject of the Personal Information;
• Publicly available sources;
• Third-Party Service Providers we have engaged to do business outreach for us;
• Service Providers; and
• Business partners and/or vendors.

What type of Personal Information do we collect?

• Payment Information: When you make a purchase. For example, your credit card number and billing address.
• Event Information: Collected when you sign-up for events. For example, contact information and mailing address.
• Device Information: We collect limited device information when you visit our website. For example, the type of device you use, or IP address.
• Commercial Information: Collected when you make a purchase. For example, details about the products or services purchased, considered, or other purchasing histories.
• Internet or other Network Activity Information: When you visit our website or interact with our other technologies. This information is either automatically collected or is customer-initiated. For example, your visit to our website and other information regarding interactions with our website. Please see the “What Cookies do you use?” section below for more information.
• Other Information: If you use our website, we may gather data about the browser you use, files viewed, and date/time stamps associated with your usage. When you call us, we may record calls for quality assurance and operational purposes and obtain consent when applicable.

How do you use the Personal Information you collect?
Arcosa collects Personal Information for a number of purposes, including but not limited to the following:

• Product and service fulfillment.
  • Complete, fulfill, manage, and communicate about purchases, etc.;
  • Set up and service the relevant account in our system;
  • Provide customer service; and
  • Manage any tracking, billing, and communications with you.

• Internal operations.
  • Improve effectiveness of our website, inventory, and customer service;
  • Conduct research and analytics related to our operations; and
  • Perform other logistics and operation activities as needed.

• Payment or Credit card processing.
  • Processing payments and address inquiries or inquiries about purchases;
  • Managing accounts, credit, and other transactional information; and
  • Offer products or services which could be of interest.

• Security, compliance, legal obligations and fraud prevention.
  • Protect our assets (on and offline) and prevent fraudulent activities;
  • Validate credentials and authenticate customers;
  • Protect the security and integrity of our services and our data; and
  • Assist any law enforcement and respond to legal/regulatory inquiries.

• Marketing, promotions and advertising.
  • Send customers information about our products, services, and promotions;
  • Provide interactive features on our website, such as product specs;
  • Spot user preferences; and
  • Oversee any promotions, surveys, or the like.

Sensitive Personal Information: Arcosa does not use or disclose sensitive Personal Information except for limited purposes authorized by law. For example, Arcosa may collect a government ID number for employment purposes, or a tax ID number to provide certain products or services. Such uses of sensitive Personal Information do not afford rights to limit Arcosa’s processing of sensitive Personal Information for these purposes, although we may nonetheless ask for consent or provide notice and choice about how the information is processed depending on the relevant context.

Sometimes Information is Vital: Where we need to collect and use Personal Information by law, or to complete a transaction or fulfill a contract with your company, and you fail to provide the Personal Information required, such deficiency is likely to prevent us from meeting certain obligations of our contract or relationship with your company.

Other People’s Privacy: If you provide us with Personal Information relating to another person, you must inform them directly of the sharing of their information with Arcosa, our identity, why their information is required, and how it will be used, and obtain their consent to use and disclose their information to Arcosa. The other person must have given consent to you to share their information with us. THEY have to consent. Please know you cannot consent for them.

With whom do you disclose this Personal Information?
To the extent applicable, we may disclose information with companies who perform services for us for legitimate business purposes, with a vendor to fulfill a contract with your company, protect our data and the website, or as required by law.  We may also disclose information with a third party in the event we sell the business, or any part of the business. In the past 12 months, Arcosa processes and discloses the following categories of Personal Information with the following types of businesses:

Do you collect Personal Information from residents of the United Kingdom or the European Union?
No. Arcosa only does business in North America. We do not actively solicit business or initiate contact with businesses or consumers outside of North America at this time.

Do you respond to privacy right requests for a copy, deletion, correction, limitation or access to my Personal Information?
In the event we hold Consumer Personal Information subject to such laws, yes.

U.S. privacy laws (California Consumer Privacy Act (“CCPA”), Virginia Consumer Data Privacy Act, Colorado Privacy Act, Utah Consumer Privacy Act, Connecticut’s Act Concerning Personal Data Privacy and Online Monitoring, and any other U.S. privacy law and regulations (collectively, “U.S. Privacy Laws”)), apply to “Consumers” in the U.S. Generally, we collect, retain, and use your Personal Information for our business purposes and limited, if any, commercial purposes. What that means is we typically collect Personal Information from you when you are acting as a business representative, not as an individual Consumer. Business purposes are purposes which are generally not tied to an opt-out right under U.S. Privacy Laws, as they do not implicate a sale, sharing or targeted advertising of a Consumer as defined under those laws.

Commercial purposes, on the other hand, are generally associated with an opt-out right under U.S. Privacy Laws, particularly where they involve sales, sharing, or targeted advertising of a Consumer as defined by those laws. An example is where a third-party business collects your Personal Information via third-party Cookies, and when we or that third-party business uses your information for certain advertising purposes.  However:

Arcosa does not knowingly sell or allow third parties to sell your information.

Arcosa does not knowingly share Personal Information for purposes of targeted advertising.

Arcosa does not use technologies to track an individual’s behavior across the internet, or otherwise derive value from use of such technologies. Arcosa does use limited Google technology to obtain limited information about how a visitor interacts with our website.

How do I exercise my privacy rights under applicable law?

In the event we hold Consumer Personal Information about you and are subject to applicable U.S. Privacy Laws, if you wish to access, correct, update, limit the use of sensitive Personal Information, or request deletion of your Personal Information, you can do so by sending us an email to ConsumerAccessRequest@arcosa.com, or by using the contact details provided under the “How to Contact Us” heading below.

Verification & Authorized Agents
We will of course need to verify you are who you say you are before we provide any access (to anyone, including an Authorized Agent) to your Personal Information. To protect your privacy, such verification by Arcosa may vary, depending on the sensitivity of the information. We use the information you provide to match the identifying information, if any, already maintained by Arcosa.  An “Authorized Agent” is a natural person or an entity registered with the relevant government agency, such as a Secretary of State, who you have authorized to act on your behalf.  Arcosa requires you to confirm that you have provided the Authorized Agent permission to submit the request, including a signed permission. “Signed” means the written attestation, declaration, or permission has either been physically signed or provided electronically pursuant to the Uniform Electronic Transactions Act. Arcosa may deny a request from an Authorized Agent who does not submit proof that they have been authorized to act on your behalf.

Required Information to Process Requests
If you have an inquiry, please provide us with the following:

a.  your name;
b.  type of request;
c.  what company you interacted with or to whom you provided your information;
d.  approximate date of collection of the information; and
e.  a valid email address to contact you.

You may also contact us at:

Arcosa, Inc.
Attn: Legal Dept.
500 N Akard St., Suite 400
Dallas, TX 75201 

And at:         1-833-462-5996

Timing of Response
Within 10 days of receipt of a request to access, delete, correct, update or limit processing of Personal Information, Arcosa will confirm receipt of that request and provide information about how we will process it.  Generally, we respond to verified requests within 45 days.  If more time is needed to respond or verify identity, we will provide notice and an explanation of why more time is required.  Arcosa may deny a request if we cannot verify identity or are legally permitted to deny the request.  If such is the case and Arcosa denies a request, we will provide the basis for the denial, provide or delete any personal information not subject to the denial, and refrain from using the Personal Information retained for purposes other than permitted by the denial. Arcosa will maintain a record of requests and our responses for 24 months.

Appeals
You may have a right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please contact us by sending an email to ConsumerAccessRequest@arcosa.com.

Automated Decision Making
Arcosa does not use Personal Information which would subject a person to a decision based solely on automated processing, which produces legal effects (“Automated Decision-Making“). Automated Decision-Making currently does not take place on our website or as part of our services.

Discrimination
Arcosa does not discriminate against anyone for exercising privacy rights under applicable law.

California Specific Rights
California law entitles California residents in the business and employment context to certain rights with regard to their Personal Information. Those rights have been incorporated into this Privacy Statement under this “How do I exercise my privacy rights under applicable law?” section.

Arcosa employees or job applicants who are residents of California may send an email to ConsumerAccessRequest@arcosa.com, or contact Human Resources or their Recruiter for more information about their rights under California law.

What Cookies do you use?
Arcosa, to a limited extent, uses common information-gathering tools such as cookies, pixels and other technologies to automatically collect information as you navigate our website, account or when you interact with emails we send you.

Cookies
A cookie is a piece of data contained in a small text file stored in your browser or elsewhere on your hard drive. Cookies allow us to identify your device as you navigate our websites or your account, allowing you to more effectively navigate and interact with our website or your account.

By themselves, cookies do not identify you specifically; they merely recognize your browser. So, unless you identify yourself specifically to Arcosa we don’t know who you are just because you visit our websites. We use both session and persistent cookies. Session cookies are cookies that disappear when you turn off your computer. Persistent cookies stay on your computer even after it’s turned off. Additionally, the cookies on our websites fall into three categories: (1) Required Cookies, (2) Functional Cookies, and (3) our limited website Analytics Cookies. We do not use cookies that track your commercial activity and use of the Internet; we do limited tracking of Arcosa Site activity, as it concerns your direct use and interaction with our Sites.

How to Control & Delete Cookies

Using Your Browser. You may use your browser settings to opt out of Functional and Analytics Cookies. For more information click here. To manage privacy and storage settings for Adobe flash cookies, click here.

Do Not Track. Some browsers allow a “do not track” (“DNT“) setting to request that a web application disable its tracking of a user. When you choose to turn on the DNT setting in your browser, your browser will send a signal to websites, analytics companies, ad networks, and other web services that may be tracking your activity. As noted above, we do not use cookies or other technologies that monitor or track your activity across the web, and therefore do not recognize DNT signals, as there is no tracking activity to block and thus no purpose for implementing DNT settings on our website. However, if you would like to set up DNT, please feel free to visit the All About DNT page, to enable DNT signals for sites who do in fact use tracking technologies.

Global Privacy Control. Global Privacy Control (“GPC“) is a technical specification you can use to inform websites of your privacy preferences for ad trackers. To set up GPC, you can visit the Global Privacy Control page. Again, we do not recognize the GPC signal, as there is no sale or tracking activity of personal information to block, and thus no purpose for implementing GPC settings on our website.

Opting out of Advertising Cookies. To learn more about how to opt out of targeting and advertising cookies, you can go to the Your Online Choices page, the Network Advertising Initiative page, and the Digital Advertising Alliance’s Consumer Choice page. These opt-out tools are provided by third parties, not Arcosa. We do not control or operate these tools or the choices that advertisers and others provide through these tools.

Web Beacons
Arcosa in limited circumstances may use web beacons to gather information about your use of our website, any accounts, and how you interact with emails sent to you. Web beacons are clear electronic images that recognize certain data on your computer. Additionally, we may use web beacons in marketing emails to provide information about your use of the email. We use web beacons to operate and improve our websites and email communications.

Do third parties collect Personal Information on this website?
Yes, but only when authorized to act in the capacity as our service provider.

Does this website link to other websites or third-party content?
In limited circumstances Arcosa websites may provide links to third-party websites, services, or applications Arcosa does not operate or control. Our Privacy Policy does not apply to those third-party services, and we do not take responsibility for any content, practices, or actions of those third-parties. You must review all notices of any third-party service before providing information to such parties.

What do you do to protect the Personal Information you collect, use and store?
Use of any online network or system inherently involves risks of unauthorized disclosure or exposure. Arcosa has taken appropriate technical, organizational and administrative security measures designed in an effort to protect the security, confidentiality and integrity of information. We use at least industry standard level encryption, security controls and system monitoring to keep access restricted and our data secure.

How long do you keep the Personal Information you collect, use and store?
Arcosa retains the Personal Information it collects for the length of time necessary to fulfill our obligations or conclude our relationship with you and your organization, or if there is legitimate and lawful business purpose in accordance with our record retention policies and applicable laws and regulations. When we have no ongoing legitimate business need to use the information, we will either delete or anonymize it or, if this is not possible (for example, because it has been stored in backup archives), we will securely store and isolate it from further use until deletion is possible.

Who is this website for?
Actual and potential business customers of Arcosa business products and services in the U.S.

What terms govern my use of this and other Arcosa websites?
Your use of the Arcosa websites is governed by the Arcosa Terms of Use, which can be found here.

Does this website collect information about children under 18?
No.  No child under 18 should use this site.  Our services and website are not in any way directed to individuals under 18 and we do not knowingly collect Personal Information from those under 18. If you are a parent or guardian and believe your child has provided us with Personal Information without your consent, please send an email to ConsumerAccessRequest@arcosa.com, or by any method identified in the “How to Contact Us” section below, and we will work to delete any such Personal Information from our systems.

What can I do if I don’t agree with the Privacy Policy?
Stop using the website.  However, our Privacy Policy will apply to your use as it existed during the time period of your use of our website.

When is the effective date of this Privacy Policy?
August 1, 2024

How will I know if this Privacy Policy changes?
We will post the new one on this page and provide a notice of the changes. We will handle your Personal Information in accordance with the Privacy Policy in effect at the time it was processed unless Arcosa provides a new policy on our site or obtains your consent.

How do I contact you?
If you have questions or comments about this Policy or the ways in which Arcosa collects and uses Personal Information it processes, please do not hesitate to contact us at:

Phone:                  833-462-5996
Email:                    ConsumerAccessRequest@arcosa.com
Postal Address:

Arcosa, Inc.
Attn: Legal Department
500 N. Akard St., Ste 400, Dallas, TX 75201

If you need to access this Statement in an alternative format due to having a disability, please contact ConsumerAccessRequest@arcosa.com and 833-462-5996.