Tuff Shed Privacy Policy

Last Updated: October 8, 2026

At Tuff Shed (“Tuff Shed” or “we” or “us”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information we collect from you. We firmly believe that electronic security and privacy are necessary for the continued success of the Internet. In support of this, we only use the personally identifiable information (“Personal Information”) that you provide in accordance with the terms outlined below.

This Privacy Policy covers any Personal Information we obtain when you visit us, use our services, or access the features on the websites that Tuff Shed owns or controls (today or in the future), including https://www.tuffshed.com/ and https://www.888tuffshed.com/ (collectively, the “Sites”). This Privacy Policy will apply regardless of whether you access the Sites on a computer, tablet, or mobile device. This Privacy Policy also governs the use of Personal Information we obtain from you from any third-party site or application where we post content or invite your feedback or participation, including, but not limited to, X (formerly known as Twitter), Facebook, Instagram, and LinkedIn. Tuff Shed cannot control the privacy policies or practices of such sites or other third parties and you should always check the privacy policies of these sites and your privacy settings.

Information We Collect

Personal Information

When you use our Sites, you may choose to provide certain information directly to us to request more information or services, including the following Personal Information:

·       first name, last name;

·       password;

·       email address;

·       delivery address;

·       home, work, and mobile phone numbers;

·       age;

·       date of birth;

·       job title;

·       job role;

·       department;

·       company name;

·       geographic location; and

·       other related business/professional information.

We will collect personal identification information from you only if you voluntarily submit such information to us. You can always refuse to supply personal identification information, except that it may prevent you from engaging in certain Site-related activities.

At this time, our Sites are based in and solely intended for residents of the United States and Canada. If you are not a resident of the United States or Canada, please do not provide any Personal Information to us through the Sites. If you have any questions or requests, you may contact us at [email protected].

Usage Information

We may also use cookies and other technologies to automatically gather information about how you use the Sites, including:

·       new or returning visitor;

·       time of visit;

·       duration of visit;

·       pages viewed;

·       where you found the Sites (search, direct, social media, etc.);

·       country you are visiting from;

·       technology you are using (browser, screen resolution, etc.); and

·       gender and age range.

We only use, share, and store Personal Information consistent with this Privacy Policy.

Data Minimization:       We will only collect personal data that is adequate, relevant, and limited to what is reasonably necessary in relation to the specified purpose for which the data is collected and will not use personal data for secondary purposes. Similarly, we  only retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy including any legal, regulatory, warranty or other business obligations.

How We Collect Information

·       We collect Personal Information when you:

·       visit our Sites;

·       request information;

·       fill out a form;

·       save a configured building quote;

·       purchase products or services;

·       apply for a job; and

·       participate in surveys, promotional offers, contests, or sweepstakes.

We also collect information in several ways by your use of the Sites. When you access the Sites, our servers log your IP address, the URL of your request and other information that is provided in the HTTP header. When you conduct searches on the Sites, we may log the search terms that you use. Also, our third-party service providers and clients may ask you voluntarily to provide Personal Information on their websites and may share such Personal Information with us, as governed by their respective privacy policies. Our use of information received from a service provider will be dictated by the service provider’s or client’s privacy policies and not this Privacy Policy. Tuff Shed collects this information in order to provide information about our services that will meet the expectations of our customers.

Cookies and Similar Technologies

We and our service providers use cookies, web beacons, pixels, canvas fingerprinting, and similar technologies to collect and store certain types of information whenever you interact with us, our Sites, and services, or third parties that use our services. These technologies help us operate and improve our Sites, analyze usage, personalize content and user experiences, measure the effectiveness of advertising and marketing campaigns, and protect against fraud and other security risks. When you first visit our Sites, you will be presented with a cookie banner or preference center that allows you to manage your preferences regarding the use of cookies and similar technologies, and if you provide consent, it allows us and our service providers to utilize cookies or similar technologies to track your experience on the Sites.

 A “cookie” is a small text file stored on your web browser or device that enables us to recognize your browser or device and associate it with other user information related to your use of our Sites. Some cookies are deleted when you close your browser session, while others remain on your device until they expire or are deleted. In addition to the cookie banner on the site, most web browsers permit you to manage cookie settings, including blocking or deleting cookies and other similar technologies. Blocking or disallowing cookies and similar technologies may impact the functionality of certain features of the Sites.

These Cookies generally fall into the following categories:

Strictly Necessary Cookies. These Cookies are required for our Sites to function properly and cannot be disabled in our systems. They enable core functionality such as security, network management, user authentication, shopping cart functionality, and access to requested services.

Analytics and Performance Cookies. These Cookies help us understand how visitors interact with our Sites, including which pages are visited, how users navigate the Sites, and whether users encounter errors. This information helps us improve the performance and functionality of our Sites.

Advertising and Marketing Cookies. These Cookies may be set by us or our advertising partners to collect information about your browsing activities over time and across different websites, applications, or online services. They help us deliver advertising that is more relevant to your interests and may be used to measure the effectiveness of advertising campaigns.

You can manage certain Cookie preferences through our Cookie Settings tool, if available, or through your browser settings. Please note that disabling certain Cookies may affect the functionality of our Sites and your ability to access or use certain features.

Web beacons and pixels are small electronic files that allow us to understand how users interact with our Sites, communications, and advertisements, including by measuring page visits, engagement, and the effectiveness of our services and marketing activities.

The types of information collected through these technologies may include IP address, device identifiers, browser type, operating system, date and time of access, pages viewed, links clicked, interactions with advertisements and website content, hardware and software information, referral URLs, and other information regarding your use of our Sites and services. In some locations, these identifiers may constitute personal data.

Google Analytics

The Sites use Google Analytics  and may use other analytics providers to help Tuff Shed understand how visitors use and interact with the Sites and to improve the Sites, our products, services, and user experience. These analytic services may use cookies, pixels, and similar technologies to collect information about your use of the Sites, including your IP address, device and browser information, pages visited, referring URLs  and interactions with the sites. That information will be transmitted to and stored by Google or any other applicable analytics provider. The information will be used for the purpose of evaluating consumer use of the Sites, compiling reports on Sites’ activity for Tuff Shed’s use, and providing other services relating to Site activity and usage. Google or the analytics provider may also transfer this information to third parties where required to do so by law, or where such third parties process the information on their behalf. You may refuse the use of cookies by selecting the appropriate settings on your browser or managing your cookie preferences through our consent tools. Please note that by doing so, you may not be able to use the full functionality of the Sites. The use of cookies by Google Analytics is covered by Google’s privacy policy. We recognize certain browser-based opt-out preferences where required by law.

You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners and view its currently available opt-out options at https://tools.google.com/dlpage/gaoptout.

How We Use Collected Information

Tuff Shed collects and uses your Personal Information for the following purposes:

·       to personalize user experience;

·       to facilitate purchases and transactions, including by advertising;

·       to update you on the status of your purchase and installation;

·       to honor your warranty;

·       we may use information in the aggregate to understand how users as a group use the services and resources provided on our Sites;

·       to improve our Sites;

·       to improve customer service;

·       to more effectively respond to your customer service requests and support needs;

·       to administer content, promotion, survey, or another Site feature;

·       to send you information you have agreed to receive about topics we think will be of interest to you; and

·       if you decide to opt-in to our mailing list, you will receive emails that may include company news, updates, related service information, etc. If at any time you would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email or you may contact us via our Sites.

How We Protect Your Information

We adopt appropriate data collection, storage and processing practices and technical, physical, and administrative security measures to protect against unauthorized access, alteration, disclosure or destruction of your Personal Information and data stored on our Sites. Sensitive and confidential data exchange between the Sites and their users happens over an SSL secured communication channel and is encrypted and protected with digital signatures

Sharing Your Personal Information

Except as set forth in this Privacy Policy or as specifically agreed to by you, we will not disclose any information we gather from you on our Sites.

Tuff Shed also may disclose your Personal Information:

·       in situations where sharing or disclosing your information is required in order to offer you products or services you desire;

·       to our subsidiaries and affiliates with assurances they will treat your Personal Information consistent with this Privacy Policy;

·       to a third party or parties, with your consent and where disclosure is required or permitted by law;

·       if, in the reasonable judgment of Tuff Shed, it is necessary to ensure compliance with our internal policies or to protect our Sites, customers, or others; and

·       to any other entity that acquires all or a portion of our organization by merger, reorganization, operation of law, or sale of some or all of Tuff Shed’s assets.

Tuff Shed may also be required to use or disclose your information in connection with a legal action or other proceeding, including without limitation, in response to a court order or a subpoena. We also may disclose such information in response to a law enforcement agency’s request.

Tuff Shed may disclose Personal Information in response to lawful requests by public authorities, and to meet national security or law enforcement requirements.

Third Parties

In general, the third-party providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us. For example, our sheds are installed by third-party independent contractors who will need information about your order and contact information to perform their job.

In our contracts with third parties, we include language that protects the confidentiality of your data.

Certain providers may be located in or have facilities that are located in different jurisdictions than either you or us. So, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

Once you leave our Sites or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our Sites’ terms.

Social Media Sites

We work with third parties, including social network sites like Facebook, Instagram, X, and LinkedIn, and with application developers who specialize in social commerce so we can connect to your social networks. All of these companies operate Social Media Sites. We provide access to our Sites by third parties and business partners so we can generate interest in our products among members of your social networks and to allow you to share product interests with friends in your network.

The use of any features made available to you on our Sites by a third party may result in information being collected or shared about you by us or by the third party. Information collected or shared through any such third-party features is considered public information by us because the Social Media Sites made it publicly available. If you do not want us to be able to access information about you from Social Media Sites, you must instruct Social Media Sites not to share the information. Tuff Shed is not responsible for how these third parties may use information collected from or about you so be sure to review the privacy policies and privacy settings on your social networking sites to make sure you understand the information they are sharing. If you do not want a Social Media Site to share information about you, you must contact that site and determine whether it gives you the opportunity to opt out of sharing such information. However, we do identify any areas on our Sites where third parties share information about you.

We use features on Social Media Sites that allow you to express positive opinions about our products and services. Those Social Media Sites may collect or register your views about our products and services and make those views available to Tuff Shed and on public portions of the Social Media Sites. If you do not wish any of this to happen, you should not express your views about our services on Social Media Sites and you should review your privacy settings on such Social Media Sites. We are not obligated to display your name or other identifying information, account name, profile photo or other information or content on our Sites even if you express an opinion about our products and services or have consented to our use of such information or content. We reserve the right to remove the information of any person for any reason. We may also remove from our Sites, in our sole discretion, any product offering or any photo or product description relating thereto. If you would like us to delete the data we have collected about you that we have received through any social media provider or Social Media Site, please contact us. However, if your information is deleted you may not have access to certain promotions, services information, or opportunities as a result.

Links

The Sites may list or link to third party products or services. Tuff Shed does not have any control over the quality, safety or legality of the items advertised, the truth or accuracy of the listings, the ability of suppliers to sell items or the ability of buyers to buy items. For these reasons, Tuff Shed and its affiliates cannot ensure that a buyer or supplier will actually complete a transaction. Tuff Shed will not be a party to any transactions between you and such third parties and any correspondence concerning such transactions should be conducted between you and the third party.

Children’s Information

The Sites are not directed to children under the age of 13. Children under the age of 13 are prohibited from submitting any personally identifiable information to Tuff Shed through the Sites. If you believe a child has provided us with information, contact us at [email protected].

Your Privacy Rights

Tuff Shed does not sell your data to third parties. States have passed privacy laws that provide individuals data access rights. Tuff Shed complies with the privacy laws in each state. To exercise your privacy rights described below, please submit a verifiable consumer request to us by either:

·       Call us at 844-782-8833

·       Emailing us at [email protected]

Only you, or a legally authorized person to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

·       Provide sufficient information that allows us to reasonably verify you are the person with whom we collected personal information or an authorized representative.

·       Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You have the following privacy rights:

Right to Opt-Out

You have the right to opt out of the processing of their personal data for (1) targeted advertising; (2) the sale of personal data (Tuff Shed does not sell personal data); and (3) profiling. Consumers may opt out by clicking on the unsubscribe button on an e-mail you received or contacting the privacy e-mail listed above.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

·       The categories of personal information we collected about you.

·       The categories of sources for the personal information we collected about you.

·       Our business or commercial purpose for collecting or selling that personal information.

·       The categories of third parties with whom we share that personal information.

·       The specific pieces of personal information we collected about you (also called a data portability request).

·       If we sold or disclosed your personal information for a business purpose, two separate lists that disclose:

o   Sales, identifying the personal information categories that each category of recipient purchased; and

o   disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Right to Correction

You have the right to correct any inaccuracies in your personal data by submitting a written request to do so.

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

Notwithstanding a request to delete, we may retain certain information necessary for us to:

1.         Complete the transaction for which we collected the personal information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.

2.         Honor any existing warranties on products previously purchased

3.         Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.

4.         Debug products to identify and repair errors that impair existing intended functionality.

5.         Exercise free speech or ensure the right of another consumer to exercise their free-speech rights, or exercise another right provided by law.

6.         Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.) or similar laws

7.         Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.

8.         Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.

9.         Comply with a legal obligation.

10.       Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

Depending on your state of residence and applicable law, you may have the following additional rights regarding your Personal Information:

Right to Opt Out of Targeted Advertising.

You may request that we stop processing your Personal Information for targeted advertising, including advertising based on your activities across different websites, applications, or online services.

Right to Opt Out of Profiling.

 You may request that we not process your Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you, such as decisions relating to employment, housing, credit, education enrollment, insurance, health care, or access to essential goods and services.

Right to Appeal.

 If we decline to take action regarding your privacy rights request, you may appeal our decision by contacting us using the methods described below and specifying that you are submitting an appeal. We will review your appeal and respond within the timeframe required by applicable law. If your appeal is denied, we will provide information regarding any further recourse available to you.

Right to Obtain Information Regarding Third-Party Disclosures.

 Subject to applicable law, you may request information regarding the categories of third parties to whom we have disclosed your Personal Information and the categories of Personal Information disclosed.

Use of Authorized Agents.

Where permitted by law, you may designate an authorized agent to submit privacy rights requests on your behalf. We may require the authorized agent to provide proof of authority and may require you to verify your identity directly with us.

Exercising Privacy Rights

Response Timing and Format

We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver a written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. If you believe that we have not adequately responded to your request, you may appeal that decision by sending an e-mail to the [email protected] box with the subject line “Appeal”

Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. Unless permitted by the law, we will not:

·       Deny you goods or services.

·       Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

·       Provide you a different level or quality of goods or services.

·       Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

International Users

At this time, our Sites are based in and solely intended for residents of the United States and Canada. If you are not a resident of the United States or Canada, please do not provide any Personal Information to us through the Sites. If you have any questions or requests, you may contact us at [email protected].

Security

We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline.

Credit card information is captured by a PCI Compliant third-party.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. We do not collect sensitive personal information for the purpose of inferring characteristics about consumers. To the extent we collect sensitive personal information, we use and disclose such information only as reasonably necessary to provide requested products and services, maintain security, comply with legal obligations, or as otherwise permitted by applicable law.  Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers on which we store personally identifiable information are kept in a secure environment.

Surveys & Contests

From time-to-time our site requests information via surveys or contests. Participation in these surveys or contests is completely voluntary, and you may choose whether or not to participate and therefore disclose this information. Information requested may include contact information (such as name and shipping address), and demographic information (such as zip code, age level). Contact information will be used to notify the winners and award prizes. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site.

Your Consent and Updates to this Policy

You acknowledge that this Privacy Policy is part of the Terms and Conditions for your use of the Sites, and you agree that using the Sites signifies your assent to Tuff Shed’s Privacy Policy. Tuff Shed reserves the right to change this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes on this page so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. As we may make changes from time to time without notifying you, we suggest that you periodically consult this Privacy Policy. Your continued use of the Sites after the effective date of any modification to this Privacy Policy will be deemed to be your agreement with the changed terms.

If you have any questions about your privacy or security on our Sites, please contact us using the following information:

Attn: Privacy Policy

Tuff Shed Inc.

1777 S. Harrison Street, Suite 600

Denver, Colorado 80210

[email protected]

SMS Terms & Conditions

Last Updated October 8, 2026

(U.S. Residents Only)

This SMS Terms and Conditions page describes our mobile program and available codes. Your prior express consent is required in order for us to send you SMS messages. Consent to receive SMS messages is not a condition of purchase.

TUFF SHED SPECIAL OFFERS

Text JOIN to 88479 to opt-in to receive Tuff Shed Mobile Alerts. No more than 2 messages per month. Reply STOP to cancel. HELP for help. Message & Data Rates may apply.

By voluntarily providing us with your mobile number as part of a sales transaction, you consent to sending SMS messages to update the status of your building’s installation schedule, pre-fabrication, and delivery. Reply STOP to cancel. HELP for help. Message Data Rates may apply.

Text STOP to 88479 to stop receiving SMS messages from Tuff Shed Mobile Alerts.

For more info, Text HELP to 88479 for Help or call: 888.883.3743, option 2 or contact [email protected].

TUFF SHED PRODUCT INFORMATION

Text SHED to 88338 to join Tuff Shed Promo Alerts. Up to 5 msgs/mo. Reply HELP for help, STOP to cancel. Msg & Data Rates May Apply.

To discontinue receiving SMS messages from Tuff Shed Promo Alerts, text STOP to 88338.

For additional help, text HELP to 88338 or contact [email protected] or call (888) 883-3743.