CALIFORNIA PRIVACY POLICY
CALIFORNIA PRIVACY POLICY Last Updated: April 9, 2024

Masonite Corporation (“Masonite”, “Company,” “we,” “our,” or “us”) takes your privacy seriously. We want you to know how we collect, use, share, and protect your Personal Information and about the rights of California Consumers under the California Consumer Privacy Act of 2018 ("CCPA") or the California Privacy Rights Act of 2020 ("CPRA").

Assistance For The Disabled
Alternative formats of this Privacy Statement are available to individuals with a disability. Please contact us at webmaster@Masonite.com for assistance.

The Scope Of This Privacy Policy
What Is Personal Information? “Personal Information” means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California Consumer or household.

What Personal Information Is Covered By This Policy?
This California Privacy Policy applies to the Personal Information of residents of the State of California in their capacity as consumers (“California Consumers”) or ("you") that we collect both online and offline, including through California Consumers' visits to our Website and use of our products, applications, or services that reference this Privacy Policy (collectively, the "Services").

IF YOU DO NOT AGREE WITH ANY PART OF THIS CALIFORNIA PRIVACY POLICY, OUR PRIVACY POLICY, OR OUR TERMS OF USE, PLEASE DO NOT USE OUR WEBSITE AND ONLINE SERVICES AND DO NOT PROVIDE US WITH YOUR PERSONAL INFORMATION.

Whose Personal Information Is Not Covered By This Privacy Policy?
This Privacy Policy does not apply to California residents who are the Company's employees, job applicants, directors, officers, or independent contractors (collectively, “HR Individuals”), or the emergency contacts of HR Individuals or the dependents or spouses who receive Company benefits by virtue of their relationship to an HR Individual in their capacities as HR Individuals or emergency contacts, dependents, or spouses ("HR Individual Family Members").

If you are an applicant, our Applicant Privacy Policy on www.masonite.com/careers/ governs our privacy practices related to your Personal Information. If you are an HR Individual or HR Individual Family Member, our HR Privacy Policy, available on our Company intranet governs our privacy policies related to your Personal Information.

What Else Should I Know About The Company’s Handling Of California Consumers’ Personal Information?
Please read Masonite’s Terms of Use and Privacy policy available at https://masonite.com/privacy-policy/, as they contain important information about your use of the Services. If you have any questions, please contact us using the information below.

Categories Of Personal Information We Collect
We collect and have collected the following categories of Personal Information from California Consumers within the last twelve (12) months:

How and Why we Use Your Personal Information
We may use Personal Information for the purposes described at the time of its collection or as described in this Privacy Policy.

For example, we may use or disclose your Personal Information for one or more of the following purposes:

• To provide you with our Services,
• To carry out contractual obligations we have to you or third parties,
• To verify your identity,
• To process payments you make to us,
• To confirm registrations,
• To maintain the safety, security, and integrity of our Website, Services, and business,
• To respond to law enforcement requests and as required by applicable law, court order, or government regulations,
• To personalize your Website experience and to deliver content and product and offerings relevant to your interests, including targeted offers and ads through our Website, third party sites, and email (after receiving your consent, if required by law),
• To respond to your inquiries or fulfill your requests,
• To notify you about important information regarding changes to our terms, conditions, and policies,
• For marketing such as marketing our products or Services or those of our affiliates. You can unsubscribe from our email marketing via the link in the email or by contacting us (See “For More Information” below),
• As described to you when collecting your Personal Information or as otherwise detailed in the CCPA and CPRA.

We may use anonymized, de-identified, or aggregated information for any purpose as permissible by law.

We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without providing you notice and, if required by law, consent. We do not collect or process sensitive personal information to infer characteristics about you nor do we use or disclose sensitive personal information for any purpose other than those described in applicable sections of the CCPA and CPRA.

The Company will store or retain your Personal Information only for as long as needed for its intended purpose and in accordance with applicable retention rules; to manage our ongoing contractual relationship with you (or as instructed by you), unless a different retention period is mandated or permitted by law.

How We May Collect Personal Information
We collect Personal Information in the following ways:

• Directly from you, for example, through our use of the Services, when you provide us Personal Information in the course of us providing you Services and when you otherwise provide Personal Information to us both online and offline.
• Automatically collected from you, for example, observing your actions on our website. Please also refer to our Cookies Policy.
• From third parties
• Via Internet or Other Electronic Network Activity Information as described above.

To Whom We Disclose Your Personal Information
We disclose your Personal Information to:

• Our affiliates
• Our customers or service providers, such as suppliers or others involved in the distribution chain to provide the products or services that have been requested by you
• Other service providers we use to help deliver our Services to you, such as analytics service providers
• Social media platforms
• Advertising partners
• Potential buyers of some or all of our business or during a restructuring
• Any party for whom your consent has been provided

We may also disclose and exchange information with law enforcement agencies and other government agencies and regulatory bodies to comply with our legal and regulatory obligations.

When we disclose Personal Information for a business purpose, we enter a contract that describes the purpose, requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract, and includes any other required provisions.

Personal Information Disclosed for a Business Purpose and Sale/Sharing of Personal Information
In the preceding twelve (12) months, the Company has disclosed Personal Information for a business purpose (see How and Why We Use Your Personal Information above) to the categories of third parties indicated in the chart below.

California law defines the term “sale” very broadly. It includes the disclosure of personal information for anything of value. The term “sharing” is defined as disclosure of Personal Information for personalized advertising which is based on a consumer’s information obtained from the consumer’s activity across non-affiliated websites. Applying these definitions, we may have sold or shared the following categories of personal information in the past 12 months:

Your California Privacy Rights
Right to Know
California Consumers have the right to submit a verifiable request to know what personal information the Company has collected, sold, shared, or disclosed about you.

Right to Access and Portability
California Consumers have the right to request what categories of personal information we collect, use, or disclose about you over the last 12 months. You also have the right to request the specific pieces of personal information that we collected about you and to have a copy of that information provided to you in a readily useable format, subject to certain limitations.

Right To Delete
California Consumers have the right to submit a verifiable request for deletion of their Personal Information that Company has collected from the Consumer, subject to certain exceptions.

Right to Correct
California Consumers have the right to request that we correct inaccurate personal information that we have collected from you and retained, subject to certain exceptions.

How to Exercise Your Rights
Masonite will respond to requests in accordance with CCPA and CPRA if it can verify the identity of the individual submitting the request. California Consumers can exercise their rights in the following ways:

• Complete the online request form
• Contact our Global Compliance Officer or other privacy official by email here: privacy@Masonite.com.
• Contact by telephone: 1-877-307-8198

Requests By Authorized Agents
You may designate an authorized agent to exercise your California Privacy Rights by submitting to us a completed “Authorized Agent Designation” form. You can obtain the designation form by contacting us at privacy@Masonite.com. If an authorized agent submits a request to know or a request to delete on your behalf, the authorized agent must submit with the request either (a) a power of attorney that is valid under California law, or (b) a document signed by you that authorizes the authorized agent to submit the request on your behalf. In addition, we may ask you to follow the applicable process described above for verifying your identity. Only you, or your authorized agent may make a verifiable request related to your Personal Information.

How We Will Verify Your Requests
The processes that we follow to verify that the person making a California Privacy Rights Request is the person about whom we have collected personal information are described below.

You are not required to create an account with us to make a verifiable request. However, if you submit a request through your password protected account, we consider that sufficient verification when the request related to Personal Information associated with that specific account.

If you submit a request by any means other than through a password-protected account that you created before the date of your request, your request must include sufficient information to allow us to reasonably verify you are the person about whom we collected personal information or an authorized representative.

You must also describe your request sufficiently enough to allow us to understand, evaluate, and respond to it. We will only use personal information provided in a verifiable request to verify the requestor's identity or authority to make the request.

If we cannot verify your identity or authority to make the request and confirm the personal information relates to you, we cannot respond to your request or provide you with personal information.

Response Information
We endeavor to respond to a verifiable request within required timeframes, including confirming initial receipt within ten (10) business days and responding in full within forty-five (45) calendar days of its receipt. If we require more time, we will inform you of the reason and extension period in writing.

If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response electronically.

Any disclosures we provide will only cover the 12-month period preceding the verifiable request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Non-Discrimination and Non-Retaliation
The Company will not discriminate, or retaliate, against you for exercising the rights provided to you under law and described in this Policy.

Right to Opt Out of Sale or Sharing of Personal Information
California Consumers have a right to opt-out of the sale or sharing of the Personal Information. If you would like to opt out of sharing your Personal Information, please note that the Company processes opt-out preference signals in a frictionless manner. California Consumers can submit opt-out preference signals by going to our website www.masonite.com and clicking on the cookie icon on the bottom right-hand corner of the page. Collection preferences will appear in a panel on the right-hand side of the page (see also our Cookies Policy), and the last toggle is “Do Not Sell or Share My Personal Information” which may be adjusted to enable you to opt out of sharing your Personal Information.

Your Right to Information About Disclosures of Personal Information for Direct Marketing Purposes
Under California law, California Consumers can request information from us (see below) whether we have disclosed Personal Information to any third parties for the third parties' direct marketing purposes. We will not sell consumer’s Personal Information to, or share it, with third-party companies for their direct marketing purposes.

Third-Party Links and Services
We provide links to third party websites operated by organizations not affiliated with Company. We do not disclose your Personal Information to organizations operating such linked third-party websites. We do not review or endorse, and are not responsible for, the privacy practices of these organizations. We encourage you to read the privacy policy of each and every website that you visit. This Privacy Policy applies solely to information collected by Company through the Services.

Minors Under 16 Years of Age
We respect the privacy of children. Our Services are not designed to attract an audience younger than sixteen (16), and we do not knowingly collect Personal Information from children under sixteen (16). If you are under the age of sixteen (16), you are not permitted to use our Services and should not send any information about yourself to us through the Services. Please contact us using the contact details below if you believe we may have collected information from your child under the age of sixteen (16), and we will work to delete it.

For More Information
For questions or concerns about Company’s privacy policies and practices, please contact us at privacy@Masonite.com.