Privacy Policy

Who We Are

This privacy policy applies to enrollment forms operated by REI Partnership Hub, LLC ("RPH"), a Colorado limited liability company, on behalf of participating real estate industry associations ("Chapters") in the RPH Lowe's Group Purchasing Organization ("GPO") program.

RPH operates the GPO infrastructure, including enrollment forms, data processing, and communication with Lowe's Companies, Inc. ("Lowe's"). Each Chapter participates in the GPO under a separate Chapter Participation Agreement with RPH.

When you submit an enrollment form, your data is collected by RPH on behalf of your Chapter.

What Data We Collect

When you complete a Chapter enrollment form, we collect:

- Business or personal name on your My Lowe's Pro Rewards account

- Your My Lowe's Pro Rewards Pro Account ID

- Primary contact name

- Primary phone number

- Primary email address

We do not collect payment information, Social Security numbers, passwords, or login credentials for your Lowe's account.

Purpose of Data Collection

The sole purpose of collecting your data is to transfer the required enrollment information to Lowe's National Program Department on behalf of your Chapter to enroll you in the Lowe's GPO program. Your data is submitted to Lowe's National Program team ([email protected]) for processing and alignment of your My Lowe's Pro Rewards account under your Chapter's GPO account.

In the event of updates to the Lowe's GPO program or issues regarding your My Lowe's Pro Rewards enrollment in the GPO, RPH may contact you via email on behalf of your participating Chapter to resolve or remedy issues. Email is the sole communication channel RPH will use to contact you. RPH does not use your data for any purpose other than facilitating enrollment and providing ongoing GPO program support.

Who Receives your Data

Lowe's Companies, Inc.: Your enrollment information is submitted directly to Lowe's National Program Department for the sole purpose described above.

Your Participating Chapter: Your Chapter receives confirmation that you have submitted an enrollment request. Your Chapter does not receive your My Lowe's Pro Rewards login credentials.

RPH does not sell, rent, or trade your personal data to third parties. RPH does not use your data for marketing purposes. Your data is not shared with any party other than Lowe's and your participating Chapter as described above.

How We Store and Protect your Data

Enrollment data is stored in RPH's customer relationship management system (currently GoHighLevel). RPH uses commercially reasonable security measures to protect your data from unauthorized access, disclosure, or misuse.

RPH stores and manages enrollment data using commercially reasonable security measures, including encrypted data transmission, access controls, and secure storage through RPH's operational platforms. RPH selects and maintains platforms that meet or exceed industry-standard data protection practices.

RPH does not sell, share, or distribute member data to any third-party data brokers or marketing platforms. RPH's operational platforms are contractually required to act as data processors and are prohibited from using member data for purposes outside RPH's direction.

No method of electronic storage is 100% secure. In the event of a data breach within RPH's systems or operational platforms, RPH will notify affected individuals and the relevant Chapter within 72 hours of RPH receiving notification of the breach. If RPH determines that its operational platform no longer meets commercially reasonable security standards, RPH will migrate member data to a compliant alternative within a reasonable timeframe and notify affected Chapters.

In the event of any data breach by Lowe's Companies, Inc. or any of its subsidiaries, REI Partnership Hub, LLC shall be held harmless. RPH's responsibility for data security extends only to data within RPH's custody and control. Once enrollment data is transmitted to Lowe's National Program Department, Lowe's is solely responsible for the security of that data within its systems.

In the event of any data breach, misuse, or unauthorized disclosure by your participating Chapter, REI Partnership Hub, LLC shall also be held harmless. Once enrollment confirmation is provided to your Chapter, RPH bears no responsibility for your Chapter's handling of that information.

Data Retention

RPH retains your enrollment data for as long as your GPO enrollment is active and your Chapter participates in the RPH GPO program.

If you request removal from the program, RPH will remove your enrollment data from its active systems within 30 days of the request, unless retention is required for legal or financial reporting purposes.

If your Chapter withdraws from the RPH GPO program, RPH will retain enrollment data only as needed to complete final reporting and rebate calculations, after which it will be deleted.

Your Rights

You have the right to:

- Request access to the personal data RPH holds about you

- Request correction of inaccurate data

- Request deletion of your data, subject to legal and program reporting requirements

- Withdraw from the GPO program at any time by contacting your Chapter or RPH directly

To exercise any of these rights, contact RPH at [email protected] or your participating association.

Children's Privacy

RPH does not knowingly collect personal data from individuals under the age of 18. The GPO enrollment forms are intended for use by business owners and real estate investors.

Applicable Law and Data Privacy Compliance

REI Partnership Hub, LLC is a limited liability company organized under the laws of the State of Colorado. This Privacy Policy and all data processing activities described herein are governed by the laws of the State of Colorado, including the Colorado Privacy Act (CPA), without regard to conflict of law principles.

By submitting the enrollment form, you consent to the collection, processing, and transfer of your data as described in this policy under Colorado law, regardless of the state in which you reside.

RPH honors the following data rights consistent with the Colorado Privacy Act:

- Right to access your personal data

- Right to correct inaccuracies in your personal data

- Right to delete your personal data, subject to legal and program reporting requirements

- Right to opt out of the processing of your personal data for targeted advertising (RPH does not engage in targeted advertising)

- Right to data portability in a commonly used, machine-readable format upon request

To exercise any of these rights, contact RPH at [email protected]. RPH will respond to verified requests within 45 days.

If you believe RPH has not adequately addressed your data privacy concern, you may contact the Colorado Attorney General's office.

Changes to This Policy

RPH may update this privacy policy from time to time. Changes will be posted on the enrollment page with an updated "Last Updated" date. Continued use of the enrollment form after changes are posted constitutes acceptance of the revised policy.

Contact

Questions about this privacy policy should be directed to:

REI Partnership Hub, LLC

Email: [email protected]