Privacy Notice

Last Updated: November 24, 2025

This Privacy Notice (“Notice”) describes how the S&C Electric Company (“us,” “we,” “S&C”) collects and otherwise processes your personal data in connection with:

Your use of our website (sandc.com) and customer portals.
Your communications with us through other channels, such as if you call our customer service center, interact with us at an event, or otherwise contact us.
Your registration for newsletters, updates and marketing.
Any other circumstances in which we refer you to this Notice.

Personal data is sometimes also referred to as personal information, personally identifiable information or other like terms that mean any information that directly or indirectly identifies you either on its own, or when combined with other information, or is reasonably capable of being associated with you or your household.

This Notice does not apply to personal data that we collect in the context of employment, recruitment, or other working relationships with S&C. If you are a job applicant, please refer to our Applicant Privacy Notice for additional information about our privacy practices. If you are an employee or other worker of S&C, how we collect and otherwise process your personal data is covered by the relevant S&C employee privacy notice. Please refer to SourceOne for a copy of this.

This website and our customer portals are intended for business-to-business transactions only, and we do not knowingly collect the personal data of individual consumers. By using our website and customer portals or otherwise providing any information to S&C, you are acknowledging that you are a representative or agent of a business and not an individual consumer. You are also consenting to the collection, use, and disclosure of your information in accordance with this Notice.

This Notice applies to our operations in North America, Central America, South America, Australia, Europe, and Asia. In some instances, we have provided country-specific supplements that set out additional protections for certain cross border operations. Please refer to the link below relevant to your country of residence, if applicable. In the event of a conflict, the terms in the Supplement shall govern and take precedence over the terms of this Privacy Notice.

Jurisdictions with supplements.

California Residents
Europe, UK, Switzerland
Brazil
Canada
Australia
China

Contents

Personal Data We Process and How It Is Collected
How and Why We Use Your Personal Data
How and Why We Disclose Your Personal Data
Cookies and Other Data Collection Technology
Data Retention
Data Security
Marketing
Children’s Privacy
Third Party Links
Transfer of Personal Data
Your Privacy Rights
Changes and Updates

Contact Us

1. Personal Data We Process and How It Is Collected

Depending on how you interact with us, we may process the following categories of personal data about you:

Direct Identifiers, such as your first and last name, mailing address (including zip code), e-mail address, telephone and facsimile numbers.
Commercial Information, such as records of products or services purchased, purchasing histories, and payment card information.
Communication Information, such as the content of communications when you contact us via our hotline or an online form, participate in our programs or events or attend our webinars or tradeshows.
Business-to-Business Information, such as business contact information provided to us to consummate our business-to-business and vendor relationships and carry out business functions.
Information Collected by Cookies and Similar Tracking Technologies, such as IP address, device identifiers, browser type, network location, browser language, operating system, and website usage information including pages viewed on our website and your usage of our website, for the purposes of improving website user experience. For more information about cookies and how to disable them, see our Cookie Policy.

We collect personal data from:

Direct interactions, such as when you enquire about our services, register for an event with us, provide us with information in connection with our services, participate in surveys or questionnaires, subscribe to a newsletter or in any way engage with us or our workers;
Cookies and other Data Collection Technologies, such as when you interact with our website or click on links in our emails;
Through social media, such as if you link to social media platforms or use social media plug-ins, in which case we may (depending on your user privacy settings on that social media platform) automatically receive information about you from that social media platform;
Third parties, such as customers, contractors, consultants and suppliers; and
Security systems, such as when you visit our offices and we obtain closed circuit television (“CCTV”) footage and other information through electronic means such as security/swipe card records.

Sensitive Personal Data

We only process Sensitive Personal Data if you give us your explicit consent, the processing is necessary to meet a legal or regulatory obligation, the processing is in connection with the establishment, exercise or defense of our claims, or is otherwise expressly permitted by applicable laws.

2. How and Why We Use Your Personal Data

S&C collects, holds and uses your personal data for the following purposes:

communicate with you about our products and service offerings, events, S&C news, and changes to our Terms of Use and policies
send you marketing communications and promotional offers that we believe you would be interested in, as permitted by law
operate our business
process payments and other financial transactions
generate sales leads
maintain our website and customer portal and improve user experience
improve our services
deliver the requested products and services
carry out business-to-business functions
process and deliver contest entries and rewards
respond to your comments and questions and provide customer service
support your participation in the activities you select
analyze preferences, trends, and statistics in connection with our business
conduct business dealings with our partners, affiliates, service providers, or contractors
protect our website and portal and you and for fraud detection, theft prevention, and emergency response purposes
comply with our legal and financial obligations, as otherwise permitted or required by law, or as we may notify you
carry out any other purpose described to you at the time the information was collected

We will process your personal data for the purposes identified above on the following bases:

Our legitimate interests, which include processing such personal data for the purposes of providing and enhancing the delivery of our products and information, as well as advertising further products and information to you;
Where such processing is necessary to perform our contract with you or to take steps before entering into our contract with you;
As necessary to comply with our legal obligations, resolve disputes and enforce our contractual agreements; and
Where such processing is necessary to comply with our obligations to protect members of the public and the public interest, including but not limited to, the maintenance of a member directory, regulatory activities and disciplinary actions.

Where we are legally required to do so, we will seek your specific consent to the processing. You will have the right to withdraw your consent at any time.

Certain countries require S&C to offer individuals the options and means to limit their use or disclosure of personal data to third parties. Please refer to the appended Supplements for your country or territory, if applicable, for information on these additional rights and how to exercise them.

3. How and Why We Disclose Your Personal Data

We disclose your personal data in the following circumstances or as otherwise described at the time we collect your personal data:

Service providers, contractors and suppliers: S&C provides your personal data to other parties who help us operate and provide certain services to our business, such as information technology and telecommunications (such as data centers, hosting providers, email service providers), marketing, accounting, shipping, delivery, and other business process outsourcing providers. We provide our service providers only with the personal data necessary to provide their services. S&C’s service providers may only process your personal data for purposes of providing services to us.
Business partners: S&C discloses your personal data to business and marketing partners whose products, offers, or services you may be interested in, and they may use the information for their own marketing purposes or the marketing purposes of others.
Affiliates: S&C shares your personal data with our affiliate companies to accomplish the processing activities described above.
Corporate restructuring: In relation to a merger, sale, acquisition, divesture, restructuring, reorganization, dissolution, bankruptcy, or other change of ownership or control (whether in whole or in part). In the event of any change in ownership or control, the purchaser will be entitled to use your personal data in the same way as set out in this Notice.
Law enforcement and courts: S&C discloses your personal data in response to subpoenas, warrants or orders of judicial or governmental authorities with jurisdiction. We also disclose your personal data in response to lawful requests from law enforcement officials or other governmental authorities or if we have reasonable grounds to believe that the information is relevant to a breach of contract or laws or in other cases where we are permitted to by law in connection with protecting our legal rights or those of others. In matters involving a danger to personal or public safety, we voluntarily provide information to appropriate government authorities.
Advisors and lawyers: S&C discloses your personal data to our lawyers and other professional advisors where necessary to obtain advice or to otherwise protect and manage our business interests.
With your consent. S&C discloses your personal data with your consent or at your direction.
S&C also discloses your personal data to enforce our Terms of Use.

4. Cookies and Other Data Collection Technology

We use cookies and other tracking technologies, such as cookies and web beacons, to collect information about you. “Cookies” are small data files stored on your hard drive or in device memory that help us improve our Services and your experience and count visits. Web beacons (also known as “pixel tags” or “clear GIFs”) are electronic images that we use on our Services and in our emails to help deliver cookies, count visits, and understand usage and campaign effectiveness. For more information about cookies and how to disable them, see our Cookie Policy.

5. Data Retention

We store your personal data for as long as necessary to carry out the purposes for which we collected it and other legitimate business purposes, including to fulfill our legal, accounting, regulatory or reporting obligations. When your personal data is no longer required, we will delete, destroy, de-identify or anonymize your personal data, in accordance with legal requirements.

6. Data Security

We implement appropriate technical and organizational measures designed to safeguard your personal data. While our security measures are intended to protect your personal data, the complete security of any transmission over the public internet cannot be guaranteed. As a result, we do not warrant the security of any electronically stored information or information you transmit to us over the Internet.

7. Marketing

If you do not wish to receive marketing-related emails from us, please click the unsubscribe link at the bottom of a marketing email or email us using the information in the section “Contact Us” at the end of this Notice. Please note that even if we stop all marketing communications, you may still receive administrative, legal, and other important communications from us.

8. Children’s Privacy

The S&C website and services are directed to adults aged 16 and older. S&C does not knowingly collect personal data from children under 16 years of age. If S&C discovers that it has collected personal data from a child under 16, S&C will delete that child’s personal data from S&C’s systems.

9. Third Party Links

Our services may include links or references to third party websites and services that we do not operate or control. If you provide your personal data to that third party through its websites or services, you will be subject to that third party’s privacy practices and policies. This Notice does not apply to any personal data that you provide to a third party website or service. We recommend that you read the privacy policy that applies to that third party website or service. A link or reference to a third party website or service does not mean that we endorse that third party or the quality or accuracy of the information presented on its website or service.

10. Transfer of Personal Data

S&C and its service providers may transfer your personal data to, or store or access it in, jurisdictions that may not provide levels of data protection that are equivalent to those of your home jurisdiction. We will take steps to ensure that your personal data receives an essentially equivalent level of protection in the jurisdictions in which we process it. We will rely on legal mechanisms available under applicable law for the transfer of data, for example, your consent, or where the EU and/or UK General Data Protection Regulation (“GDPR”) applies, adequacy decisions or, where appropriate, EU Commission Standard Contractual Clauses and UK Addendum (“SCCs”).

11. Your Privacy Rights

Your rights over your personal data are protected by applicable law in many countries. Subject to some limitations, S&C extends certain rights globally to all S&C clients beyond the requirements of their national law:

The right to confirm, know and access your data. You have the right to confirm whether we are processing your personal data and request a copy of the personal data we hold about you.
The right to rectify your data. You have the right to request that we correct personal data that you believe we hold which may be inaccurate or incomplete.
The right to erase your data. You have the right to request that we delete the personal data that we hold about you. We may deny your request under certain circumstances, such as if we need to comply with our legal obligations or complete a transaction for which your personal data was collected. If we deny your request for deletion, we will let you know the reason why.
The right to transfer your data. You have the right to request that we transfer your personal data to other organizations.
The right to restrict processing of your data. You have the right to request that we restrict processing of your personal data. There may be some instances where we are not able to restrict processing of your personal data. For example, if you do not provide us with a particular reason for wanting the restriction.
The right to object to processing of your data. You have the right to object to the processing of your personal data. We may not always be able to accept your objection. For example, if we need to continue to process your personal data for our business, legal and regulatory and other purposes.

Depending on your country of residence, you may have additional rights. Please refer to the appended Supplement for your country, if applicable, for information on these additional rights and how to exercise them.

You may exercise your privacy rights and withdraw consent (to the extent we are processing your personal data based on consent) by submitting a verifiable consumer request to S&C by one of the following methods:

contact us at (+1) (773) 338-1000 (ask for Legal & Compliance Department)
email us at privacy@sandc.com

Before we can process your request, we will ask you a series of questions in order to attempt to verify your identity. We will honor your privacy rights request within the required period under applicable law, unless we request an extension as permitted by data privacy laws.

12. Changes and Updates

We may update this Notice from time to time. If we make any changes, we will revise the date at the top of this Notice. If we materially change the way we collect, use or disclose your personal data we will notify you in advance by email and/or by placing a prominent notice on this website. The amended privacy notice supersedes all previous versions.

Please note that if you decide to exercise some of your rights, we may be unable to perform the actions necessary to achieve the purposes set out in Section 2 or you may not be able to use or take full advantage of the services and products we offer.

13. Contact Us

If you have any questions, comments or concerns, please contact S&C at any time by emailing us at privacy@sandc.com, or writing or calling at:

S&C Electric Company
Attn: Legal & Compliance Department
6601 North Ridge Boulevard
Chicago, Illinois 60626-3997
(773) 338-1000

The S&C Electric Company includes the following entities: S&C Electric Company (US); S&C Electric UK Holdings Limited (United Kingdom); S&C Electric Australia Pty Ltd. (Australia); S&C Electric do Brasil Ltda. (Brazil); S&C Electric China (China); S&C Electric Mexicana, S. de R.L. de C.V. (Mexico); and S&C Electric Canada Ltd. (Canada).

You may use the general contact information above to reach any one of these entities, and we will take steps to forward your questions, comments or concerns to that entity per your instruction. You may also visit our website to locate the contact information for each entity or use the contact information listed in the relevant Supplement.

If you have any complaints or concerns about our processing of your personal data, you have the right to lodge a complaint with a data protection authority in the country where the alleged infringement of data protection law occurred. Contact information for data protection authorities can be found above or in the relevant country-specific Supplement.

Supplementary Privacy Information for California Residents

S&C primarily provides services to other businesses. In the course of our operations, we may collect limited personal information from you through your use of our website or other services. If you are a resident of California, this section applies to you.

A. Summary of Categories of Personal Information Collected and Disclosed

Within the last 12 months, S&C has collected the categories of personal information detailed in the section titled “Personal Data We Process” above. S&C collects personal information for the purposes identified in the section titled “How We Use Your Personal Data” above.

In the preceding 12 months, we have disclosed the following categories of personal information for business purposes to the following categories of recipients:

Category of Personal Information We Collect	Business Purpose for Disclosure and Processing	Category of Recipients
Identifiers, such as your first and last name, mailing address (including zip code), e-mail address, telephone and facsimile numbers, and date of birth.	To provide information technology and telecommunications services; delivery and shipping;	Information technology providers (such as data centers, hosting providers, email service providers), marketing and analytics providers; shipping and delivery providers; accounting providers
Commercial information, such as credit card number and related information.	To facilitate and process transactions	Information technology providers; payment processing providers
Internet or other electronic network activity information, such as IP address and other device identifiers.	To provide information technology and telecommunications services (such as data centers, hosting providers, email service providers); marketing; accounting; shipping; delivery; and other business processes	Information technology providers (such as data centers, hosting providers, email service providers); marketing and analytics providers; shipping and delivery providers; and other business processes
Inferences drawn from any of the information identified herein, such as your preferences	To provide analytics and marketing services; to improve our products and services	Information technology providers; and marketing and analytics providers

B. Selling or Sharing of Personal Information

Below, we describe the categories of personal information we may sell or share for targeted advertising currently and in the preceding 12 months. We also describe the third parties who received or may receive the personal information and the business or commercial purpose for the sale or sharing. We do not knowingly sell or share the personal information of children under the age of 16, and have not done so in the prior 12 months.

Category of Personal Information	Sold and Shared	Category of Third Party	Business or Commercial Purpose for Sale or Sharing
Internet or other electronic network activity information, such as IP address and other device identifiers.	Shared	Analytics and marketing providers	To provide analytics and marketing services; to improve our products and services
Inferences drawn from any of the information identified herein, such as your preferences	Shared	Analytics and marketing providers	To provide analytics and marketing services; to improve our products and services

C. Opt-Out Preference Signals

We honor opt-out preference signals. An opt-out preference signal is a signal that is sent by a platform, technology or mechanism on your behalf that communicates your choice to opt-out of the sharing of your personal information for targeted advertisements. You can learn more about implementing opt-out preference signals here or by exploring other developing technologies and services that offer this tool.

We treat opt-out preference signals as valid requests to opt-out of the sharing of your personal information under privacy laws. Ordinarily, your opt-out preference signal is sufficient for us to honor your request, but in some instances we may request additional information to help facilitate your request for offline sharing. We will not use, disclose or retain this additional information for any purpose other than to facilitate the request.

Some web browsers incorporate a “Do Not Track” (“DNT”) or similar feature that signals to websites that a user does not want to have his or her online activity and behavior tracked. If a website that responds to a particular DNT signal receives the DNT signal, the browser can block that website from collecting certain information about the browser’s user. We follow the DNT signals we receive from your browsers.

Please note that you can also opt-out of the sharing of your personal information through our other methods described below.

D. Automated Processing and Profiling

We do not use automated processing and profiling tools that can have a legal or similarly significant effect on consumers. If you have any questions, you can Contact Us at privacy@sandc.com or (+1) (773) 338-1000 (ask for Legal & Compliance Department).

E. Your Privacy Rights

The right to know. You have the right to request to know the specific pieces and/or the categories of personal information we maintain about you, the sources of that data, the purposes we collected it, the categories of personal information we have disclosed or sold in the last 12 months, and the categories of third parties to whom we’ve disclosed or sold your personal information in the last 12 months.
The right to correction. You have the right to request us to correct inaccurate personal information we maintain about you.
The right to deletion. You have the right to request that we delete the personal information that we have collected or maintain about you. We may deny your request under certain circumstances, such as if we need to comply with our legal obligations or complete a transaction for which your personal information was collected. If we deny your request for deletion, we will let you know the reason why.
The right to opt out of the sale and sharing of your personal information. You have the right to opt out of sharing for your personal information for targeted advertising. You may opt-out of the sharing of your personal information for targeted advertising by clicking Do Not Sell or Share My Personal Information. You may also exercise this right using the methods below.
The right to equal service. If you choose to exercise any of these rights, S&C will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of S&C’s websites or services.

F. Exercising Your Privacy Rights

You (or an agent you authorize) may exercise your right to know and your right to deletion twice a year free of charge. To exercise your right to know or your right to deletion, contact us at (+1) (773) 338-1000 (ask for Legal & Compliance Department) or email us at privacy@sandc.com.

We will take steps to verify your (and any agent’s) identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information. For example, we may request additional information about you to verify your identity, or we may request a signed document from you that authorizes your agent to make the request on your behalf. To protect your personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.

G. Authorized Agents

If permitted or required by applicable law, you may exercise your privacy rights through an authorized agent (which may include a guardian or conservator). If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. If you are an authorized agent seeking to make a request, please contact us at privacy@sandc.com.

H. Shine the Light

California residents are entitled to request and obtain from S&C once per calendar year information about any of your personal information shared with third parties for their own direct marketing purposes, including the categories of information and the names and addresses of those businesses with which we have shared such information. You may submit your request to the information in the section “Contact Us” at the end of this Notice and include “Shine the Light” in the subject line of your email.

Supplementary Privacy Information for Individuals in Europe and the United Kingdom and Switzerland

This privacy information shall additionally apply when S&C Electric Company (“us,” “we,” “S&C”) processes personal data within the scope of the EU General Data Protection Regulation (“GDPR”), the Data Protection Act 2028 (“DPA 2018”) and UK General Data Protection Regulation (“UK GDPR”) and the Swiss Federal Act on Data Protection (“nFADP”).

Terms which are undefined shall have the meanings ascribed to them in the GDPR, UK GDPR, nFADP or the Notice. Where there is a conflict between the Notice and this Supplement, the terms of this Supplement shall apply solely with regards to individuals who reside in the EU, UK and/or Switzerland.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights and protections under the privacy laws of these countries and regions regarding the processing of your personal data, and this section applies to you.

1. This Privacy Notice is provided on behalf of each S&C Entity listed at paragraph 14 of this Notice. S&C Entities are not joint controllers with regard to personal data collected under this Notice. Depending on the type of services or the location where services are provided, different Entities may be the data controller in relation to your personal data. The data controller is the Entity named when we collect your personal data or in the location where S&C referred you to this Privacy Notice.

If no S&C entity has been clearly identified, the data controller or data controllers may be identified in the following order or precedence:

For personal data that S&C collects on or through its websites, S&C Electric Company (US) is the data controller.
For personal data that is collected in connection with our newsletters and other marketing message, the data controller is identified on the subscription form and in each message.
For communications and activities, the data controller is the Entity that is identified in the respective communication or in the context of the activity.
For personal data collected in the context of a recruitment process, the data controller is the Entity identified in the job posting or otherwise seeking to source a position.
For personal data that S&C collects pursuant to a contractor or other similar relationship, the S&C entity with which you have the contractor or other similar relationship is the data controller.
For activities in the context of the procurement of products and services, the data controller will be the Entity identified in the order form, agreement, or similar document.

If you have any doubt about the controller or controllers of your personal data, please contact us using the information in the section “Contact Us” in this Notice.

2. Supplementary information with regard to the legal bases we rely on when processing your personal data.

Use of Personal Data	Legal Basis
Processing and fulfilling purchases of products or services	Contract: We use your personal data to complete your purchases and other transactions. We use a third-party payment processor to process your payment card information and generally do not retain payment card information on our systems. Legitimate Interests: We use your personal data to fulfill your requests, respond to your comments, and notify you of important information, such as updates to this Notice, our Terms of Use, your account, our company and the services we offer.
Administrative communications	Legitimate Interests: We use your personal data to fulfill your requests, respond to your comments, and notify you of important information, such as updates to this Notice, our Terms of Use, your account, our company and the services we offer.
Marketing communications	Legitimate Interests: To provide you with information we think may be of interest to you. Note that we may obtain your consent to use your personal data for marketing purposes where required by law.
Entry in contests	Legitimate Interests: We use your personal data to allow you to participate in a contest that you entered.
Analytics and website traffic analysis	Legitimate Interests: We use your personal data to that we can understand how individuals use our website and make decisions on how we can improve our website.

3. We do not rely on your consent as a legal basis for processing your personal data. In limited circumstances where we are legally required to do so, we rely on consent. We will only do so provided we have obtained your specific and freely given consent to processing. We will provide a mechanism for you to withdraw your consent at any time.

Your withdrawal of consent does not affect the lawfulness of S&C’s collecting, using, and sharing of your personal data prior to the withdrawal of your consent. Even if you withdraw your consent, in certain limited circumstances S&C may have the right to continue to use your personal data. These circumstances might include compliance with legal obligations or the establishment, exercise, or defense of legal claims.

4. We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). We also do not collect any information about criminal convictions and offences, or any other personal data that might be considered sensitive. In the future, should we need to process these data, we will only do so provided we have notified you in advance.

5. To ensure we provide marketing materials and content on our website that is of interest we use technology in our emails and on our website that logs whether you click on the links in our emails, and the time and date you access our website as well as the time spent on our website, when you follow a link to our website. You can choose to not click these links.

When you interact with our website you can choose if you would like to receive marketing emails. We will log your choices and this will help determine what future marketing will be of interest to you and if you would prefer to not receive marketing emails from us. You can choose to not receive our marketing emails at any time.

You are able to opt-out from marketing communications at any time by sending an email to privacy@sandc.com or by using the “unsubscribe” link in any e-mail marketing communications you receive from us.

6. You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you in advance. Where appropriate, we will communicate other purposes to you, to the extent these are not compatible with the original purpose, prior to or at the time of collecting your personal data and, if required by law, seek your consent. We may process your personal data without your knowledge or consent where required by applicable law.

7. We require all our third-party service providers who will process your personal data, to implement appropriate security measures and maintain the confidentiality of your personal data in accordance with applicable data protection and privacy laws. Our third-party service providers must use your personal data for specified purposes, only and in accordance with our instructions. We do not allow our third-party service providers to use your personal data for their own purposes

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. If you would like to know more about how we protect your personal data when it is transferred to a country outside your home country that does not benefit from an EU Commission or Information Commissioner’s Office adequacy decision you can contact us using the information in the section “Contact Us” in this Notice.

9. If you wish to exercise any of your data privacy rights, please contact us using the information in the section “Contact Us” of this Notice. We may charge you a reasonable fee if you request additional copies of your personal data or make other requests that are manifestly unfounded or excessive. In so far as practicable and required under law, we will notify third parties with whom we have shared your personal data of any request for correction, deletion, and/or restriction to the processing of your personal data. Please note that we cannot guarantee third parties will comply with your requests and we encourage you to contact those third parties directly.

10. Applicable laws may allow or require us to refuse to provide you with access to some or all of the personal data that we hold about you or we may have destroyed, erased, or made personal data about you anonymous in accordance with our record retention obligations and practices. If we cannot provide you with access to your personal data in line with your enquiry we will inform you of the reasons why (subject to any legal or regulatory restrictions).

11. If you are not satisfied with S&C’s response to a privacy-related request, you have the right to lodge a complaint with your local Data Protection Authority. Contact details for your Data Protection Authority can be found using the links below:

For individuals in the EEA: https://edpb.europa.eu/about-edpb/board/members_en
For individuals in the UK: https://ico.org.uk/global/contact-us/
For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

Supplementary Privacy Information for Individuals in Brazil

This supplementary privacy information shall additionally apply when personal data is processed by S&C Electric do Brasil Ltda., located at R. Carlos Gusso, 250 - Águas Belas, city of São José dos Pinhais, state of Paraná, Brazil, Postal Code No. 83040-630, (“us,” “we,” “S&C”) within the scope of the Brazilian Data Protection Law, Lei Geral de Proteção de Dados (LGPD).

Terms which are undefined shall have the meanings ascribed to them in the LGPD or the Notice. Where there is a conflict between the Notice and this supplementary privacy information, the terms of this supplementary information shall apply solely with regards to individuals who reside in Brazil.

A. How we process your personal data

Below you will find information on the purposes for which we process your personal data and what data is collected if you are a person involved with our clients, prospective clients, suppliers, visitors, job applicants and other third parties.

What are the purposes of using your personal data?	Who is the personal data subject?	What personal data do we collect for this purpose?
Relationship with prospecting clients, to register and send quotations	Prospecting clients	Name Telephone; Personal and/or corporate address; Personal and/or corporate e-mail; Position.
Customer relations, which includes visits to customers, visits to the S&C factory, training on products	Clients	Name Telephone; Corporate address; Corporate e-mail; Position.
Preparation of commercial and technical offers, proposals and order processing, including internal registration, case studies to promote products and solutions to customers and management of customer contracts	Clients and prospecting clients	Name; CPF; Telephone; Personal and/or corporate address; Corporate e-mail; Position.
Carrying out credit analysis and tax consultations	Clients and prospecting clients	Name; ID; CPF; Personal and/or corporate address; Corporate e-mail; Telephone; Position; Personal data contained in the Articles of Association; Name and CRC of the client's accountant (contained in accounting statements - DRE and balance sheet).
Invitations and registration for fairs and exhibitions for clients and prospects	Clients and prospecting clients	Name Telephone; Corporate address; Corporate e-mail; Position.
Access control and security of property and people on S&C premises, which includes camera monitoring (CCTV) and monitoring of visits to the factory	Visitors, including suppliers, customers, prospects and third parties in general	Name Telephone; Personal and/or corporate address; Personal and/or corporate e-mail; Position; ID; Company you work for; Security cameras/CCTV Vehicle license plate data.
Management and execution of projects with clients, which includes sharing drawings and project documents, carrying out inspections on equipment for delivery to the client (including drawing up reports), activities for assembling and installing the equipment, technical support (remote or in person) and procedures for transporting and delivering equipment.	Clients	Name; ID; CPF; Telephone; Corporate address; Personal and/or corporate e-mail. Position.
Management and execution of contracts with suppliers (including financial institutions, customs, etc.), which includes maintaining and updating supplier registers, requesting quotations and purchase orders, pre-contractual and contractual negotiations and customs clearance processes.	Suppliers	Name ID; CPF; Telephone; Personal and/or corporate address; Position; Bank details.
Quality control and supplier approval processes, which include inspections of purchased products, technical support for manufacturing and intermediation for the execution of technical services by the supplier at the S&C Brasil client	Suppliers	Name; ID; CPF; Corporate telephone number; Personal and/or corporate address; Corporate e-mail; Position. In situations where the supplier carries out technical services at the S&C client, due to health, security and environment (HSE) regulations, in addition to the personal identification and contact details listed above, the following personal data may be processed: Education; Health data (ASO); Education Sex; Race; Photo; Control of working hours; Work permit data (CTPS).
Attending to information technology demands, such as releasing and controlling access to wi-fi for visitors, dealing with suppliers in the area for purchases and technical support	Suppliers and visitors	Name Telephone; Corporate e-mail; Corporate address.
Recruitment and selection procedures when you apply for a job at S&C Brasil	Job applicants	Name; Education; Position; Areas of interest; Salary; Date of birth; Curriculum data; Professional, educational and academic experience).

B. Sharing of personal data

We share personal data related to our customers, suppliers, partners and with third-party suppliers and business partners selected with caution and required to employ appropriate measures to protect personal data.

The purposes of this sharing are described below. We do not sell your personal data to third parties.

- Public authorities or government bodies: we may share your personal data with government authorities when necessary to comply with legal or regulatory obligations or to defend S&C's rights and interests in administrative, judicial or arbitration proceedings.

- Service Providers and/or Product Suppliers: We may share your personal data with companies that provide us with services or products, on the understanding that they will keep the personal data secure and comply with the LGPD and other laws relating to data protection. Thus, we may share your information with the following service providers/product suppliers and business partners such as, but not limited to:

Lawyers and auditing firms;
Notaries;
Credit analysis companies;
Banks;
Digital signature platforms;
Dispatchers.

- Corporate mergers and acquisitions: we may share your personal data during a corporate transaction, such as a merger and acquisition, sale of assets or as part of prior due diligence. In these cases, your personal data may be shared with potential buyers or sellers and their advisors, subject to appropriate confidentiality and personal data protection obligations.

- S&C Group companies: we may share your personal data with other S&C Group entities to provide auditing services; schedule services; purchase products, powers of attorney, payment forwarding; schedule meetings, among others.

C. International Transfer of Personal Data

The laws of foreign countries do not always have the same level of data protection as the LGPD and other Brazilian data protection rules. If it is necessary to transfer personal data to foreign entities, we will seek to adopt all appropriate measures and safeguards to protect your personal data and will do so in accordance with the LGPD and the International Data Transfer Regulation (Resolution CD/ANPD n. 19/2024).

D. Data subjects' rights

You can request from S&C Brasil:

a) Confirmation of processing and access: you can ask S&C to confirm the existence of the processing of your personal data and you can access it by requesting it to S&C;

b) Correction: you can request that your personal data be corrected if it is incomplete, inaccurate or out of date. In this regard, it is important that changes to your personal data are informed to S&C as soon as possible so that we can update our databases and keep your Personal Data correct;

c) Anonymization, blocking or deletion: you can request the anonymization (we will no longer be able to connect this personal data to you), blocking (we will temporarily suspend its use) or deletion (we will permanently delete your personal data) of your personal data if you believe that it is unnecessary or excessive for the purposes indicated or that it is being processed in disagreement with the provisions of the LGPD;

d) Portability: you may request that S&C transfer your personal data to a third party, safeguarding intellectual property rights, trade secrets and confidential information;

e) Information on sharing: you can consult this information in the section of this Policy entitled “Sharing of Personal Data”, but if you have any doubts, you can also ask us for more details. Keep in mind that some information may be restricted to the extent that disclosure could violate intellectual property rights, trade secrets and confidential information;

f) Information on the possibility of not offering consent and on the consequences of its denial: the LGPD gives Data Subjects the right to receive information on the possibility of denying consent (in cases where it is applicable), so in cases where we process your personal data on the basis of your consent, you are free not to authorize the use of personal data;

g) Review of automated decisions: you may request a review of decisions made solely on the basis of automated processing of your personal data and which affect your interests, such as decisions aimed at defining your personal and professional profile or aspects of your personality. As a rule, S&C does not carry out automated processing, but if you have any doubts, just let us know;

h) Revoking consent: in cases where you have given us your consent in order to authorize the processing of your personal data, you have the right to revoke this consent. On this occasion, you will be informed of the consequences of such withdrawal;

i) Opposition: we may process your personal data for legitimate purposes, without the need to collect consent (e.g. in cases where we need to carry out access control to our building, to ensure our and your safety). In some of these cases, you are guaranteed the right to object to the processing if you do not agree and we will evaluate your request.

However, in some cases we will not be able to fully process your request for deletion or your objection, to the extent that we may process your personal data for compliance with our legal and/or regulatory obligations, for the exercise of rights in legal proceedings, for the performance of your contract with us, for the legitimate interest of S&C, among other purposes informed to you. When this occurs, we will inform you in the response to your request and we will be available to answer your questions on the matter.

In addition to the above rights, you have the right to petition the ANPD if you believe that the processing of your personal data has been carried out unlawfully or in disregard of the applicable legislation.

These rights can be exercised by sending an e-mail to the following address: privacidade@sandc.com and we will endeavor to respond as quickly as possible.

Upon receiving your request, we may require certain information to verify your request, confirm your identity and prevent fraudulent requests. If the request is submitted by a person other than you, without providing proof that the request is legitimately made on your behalf, the request will be rejected.

E. IF YOU HAVE ANY QUESTIONS, PLEASE CONTACT US

If you have any questions about the processing of your personal data by S&C Brasil, please contact us at the following e-mail address: privacidade@sandc.com.

Data Protection Officer: Andersen Ballão Advocacia (Gil Justen)

Supplementary Privacy Information for Individuals in Canada

If you are a resident of Canada, this supplement (“Canada Supplement”) applies to you and discloses the practices of S&C, including its subsidiaries and affiliates listed in Section 14 of the Notice, regarding the collection, use, safeguard, disclosure, transfer, access, disposal and other processing of personal information of individuals in Canada.

A. Exclusions to Definition of Personal Information

In certain jurisdictions in Canada, personal information does not include information that is used solely for the purpose of communicating or facilitating communication with an individual in relation to their employment, business, or profession.

B. Your Privacy Rights

If you are a resident of Canada, applicable laws provides you with specific rights regarding your personal data. These may include:

Right to Withdraw Consent: Subject to certain legal and contractual limitations, you have the right to withdraw your consent from us processing your personal information. You may exercise this right at any time by writing to our Privacy Officer at the contact information set out below. This may limit our ability to provide you with our services, act on your behalf or engage with you as you would like. S&C will inform you of the implications of such withdrawal. Any withdrawal of consent will apply thereafter and not to information handling practices that have been previously undertaken based on prior consent. We may, however, collect, use or disclose personal information without your knowledge or consent in exceptional circumstances where such collection, use or disclosure is permitted or required by law.
Right to Accuracy: You have the right to verify the accuracy and completeness of your personal information in our records to request that we correct information that you believe is inaccurate.
Right to Access: You have the right to request access to your personal information, which enables you to receive a copy of the personal information we have collected from you.
Right to Transfer: In some instances, you may have the right to request the transfer of your personal information to a third party. In such instances, S&C will provide your personal information to the third party you have chosen in a structured, commonly used, machine-readable format. This request may only apply to personal information which you provided us.
Right to Opt-Out of Certain Information Handling Practices, including the disclosure of personal information to third parties which is not reasonably necessary for providing the services and goods you’ve requested or as otherwise required by law.
Right to Make a Complaint: You have the right to make a complaint with the relevant data protection authority.
Other Canadian Privacy Rights. Canadian residents have the right to receive information that identifies any third-party companies or individuals that S&C has shared your personal information with, as well as a description of the categories of personal information disclosed to that third party. You may obtain this information once a year and free of charge by contacting us at the address below.

C. Disclosure of Personal Information Outside Canada

Some of our affiliates, service providers and third party business partners may be located outside of Canada, including in the United States or Europe. Please see below for a list of such third parties. You acknowledge and agree that, as a result, your personal information may be collected, processed, used, disclosed, stored or accessed outside of Canada for the purposes described in this Privacy Notice and Canada Supplement.

The personal information would be subject to the laws of the jurisdiction in which the personal information is stored and/or processed. Such laws may be different than those in Canada, such as permitted access to personal information by law enforcement and government authorities in such jurisdictions. For example, information may be disclosed in response to valid demands or requests from government authorities, courts, or law enforcement in other countries.

Category of Third Party	Location(s) of Third Party	Type of Information Disclosed/Business Purpose for Disclosure and Processing
Affiliated entities that assist the Canadian entity with business operations.	U.S.A.; Mexico	To support day-to-day business operations, including finance, HR, IT, customer service, and compliance functions; to ensure consistent service and administrative efficiency across S&C’s global entities.
Suppliers, agents and contractors, including companies used for storage, processing, and delivery of services.	U.S.A.	To store, process, and deliver products and services; to provide logistics, payment processing, and related operational support necessary to fulfill business obligations.
Administrative and technical support providers, including cloud storage providers, IT support, and data analytics providers.	U.S.A.	To provide information technology and telecommunications services (such as data centers, hosting providers, email service providers); marketing; accounting; shipping; delivery; and other business processes
Public media and marketing providers, including companies used for advertising, marketing, public relations, and press releases.	U.S.A.	To provide analytics and marketing services; to improve our products and services
Parties in connection with proposed or actual financing, insuring, sale, securitization, assignment or other disposal of all or part of the business or assets.	U.S.A.	To facilitate and process transactions

D. Transfer of Personal Information Outside Quebec

If you are an individual resident in the province of Quebec, please note that your personal information may be transferred outside of the province, provided that S&C has conducted a privacy impact assessment with respect to such transfer that establishes your personal information will receive adequate protection, in light of generally recognized principles regarding the protection of personal information. Any communication of personal information outside Quebec will be subject to a written agreement.

E. Activating Cookies

Some Cookies are automatically deactivated upon your access and use of our website. However, unless you activate Cookies, you may be unable to fully utilize and access all areas and features of the website. You may activate Cookies by visiting our website and clicking “Activate Cookies”.

F. Protecting Your Personal Information

Access to private, sensitive and confidential information, including Personal Information, is restricted to authorized employees or contractors with legitimate business reasons. S&C’s employees and contactors understand the importance of keeping your Personal Information private. All employees and contractors are expected to maintain the confidentiality of Personal Information.

Despite the foregoing security measures and significant steps S&C has taken to protect your personal information, no company can fully eliminate all security risks associated with the processing of personal information. If personal information is accessed by third parties it may lead to phishing attempts to get more information from you and/or identify theft. In the event there has been a breach of our security safeguards which involve your personal information, including the unauthorized access, use or disclosure of your personal information, loss of your personal information, or other breach, and where there is a risk that significant harm will come to you as a result of that breach, S&C will notify you within thirty (30) days of the breach and report the breach to the applicable privacy commissioner or other regulatory authority.

G. Privacy Officer

We have appointed a Privacy Officer to oversee compliance with the Notice and this Canadian Supplement. If you have any questions about the Notice or this Canadian Supplement or how we handle your personal information, please contact the Privacy Officer at:

S&C Electric Company
Attn: Privacy Officer
6601 North Ridge Boulevard
Chicago, Illinois 60626-3997
(773) 338-1000

privacy@sandc.com

Supplementary Privacy Information for Individuals in Australia

This supplementary privacy information shall additionally apply when S&C Electric Company (“us,” “we,” “S&C”) processes personal data within the scope of the federal Privacy Act 1988 and the Australian Privacy Principles.

In addition to the legal bases for disclosing your personal data as described above, occasionally, we may be required to disclose your personal data to third parties that are located outside of Australia (as the relevant case may be). In this instance, we will take all reasonable steps to ensure that those third parties, in whichever jurisdiction, adhere to the terms of this Notice.
We take all reasonable and lawful steps to keep personal data secure, accurate and up to date and only retain your personal data for as long as reasonably required to satisfy the purpose for which they were collected and used (unless a longer period is necessary for our legal obligations or to defend a legal claim). This means that:
- personal data is stored on secure servers in digital format or secured physical files;
- our team members and data processors are obliged to respect the confidentiality of any personal and/or sensitive information or data and receive training in personal information handling;
- we only permit authorised personnel to access your information; and
- we encrypt personal information wherever possible.

If you are an Australian resident and if you have a complaint or concerns about our processing of your personal data, or if you know or suspect any violations of your privacy in connection with your use of the website and customer portals, please contact us.

Please include your name, email address and/or telephone number and clearly describe your complaint. We will acknowledge your complaint and respond to you regarding your complaint within a reasonable period of time.

If you are dissatisfied with the response, you have the right to lodge a complaint with a data protection authority in the country where the alleged infringement of data protection law occurred. Contact information for data protection authorities can be found above or in the country-specific Supplement.

Supplementary Privacy Information for Individuals in China

In the course of our operations, we may collect limited personal information from you through your use of our website or other services. If you are a resident of the People’s Republic of China (“PRC”), this section applies to you.

The personal information processor (“PI Processor”) is the entity named when we collect your personal information or in the location where S&C referred you to in this Notice. If no S&C entity has been clearly identified, the PI Processor may be identified in the following order or precedence:

For personal information that S&C collects on or through its websites, S&C Electric Company (US) is the PI Processor.
For personal information that is collected in connection with our newsletters and other marketing message, the PI Processor is identified on the subscription form and in each message.
For communications and activities, the PI Processor is the entity that is identified in the respective communication or in the context of the activity.
For personal information that S&C collects pursuant to a contractor or other similar relationship, the S&C entity with which you have the contractor or other similar relationship is the PI Processor.
For activities in the context of the procurement of products and services, the PI Processor is the entity identified in the order form, agreement, or similar document.

If you have any doubt about the PI Processor of your personal information, please contact us using the information in the section “Contact Us” at the end of this Notice. Contact information for each PI Processor may be found on www.sandc.com.

We collect the following categories of personal information for the respective purpose:

Functions	Categories of Personal Information to be Collected	Collection Purpose
Processing and fulfilling purchases of products or services.	Direct Identifiers and Commercial Information, including first and last name, mailing address, email address, telephone number, and credit card number.	We use your personal information to complete your purchases and other transactions. We use a third-party payment processor to process your payment card information and generally do not retain payment card information on our systems.
Administrative communications.	Direct Identifiers and Communication Information, including first and last name and email address.	We use your personal information to fulfill your requests, respond to your comments, and notify you of important information, such as updates to this Notice, our Terms of Use, your account, our company and the services we offer.
Marketing communications.	Direct Identifiers, including first and last name, email address, mailing address, and telephone numbers	With your consent, we use your personal information for internal marketing purposes.
Entry in contests.	Direct Identifiers, including first and last name, mailing address, email address, and telephone number.	We use your personal information to allow you to participate in a contest that you entered.
Analytics and website traffic analysis.	Internet Activity Information, such as IP address and device identifiers.	We use your personal information to understand how individuals use our website and make decisions on how we can improve our website.

We disclose the following categories of personal information for specific business purposes to the following categories of recipients:

Category of Personal Information to be Disclosed	Purpose for Disclosure	Category of Recipients
Identifiers, such as your first and last name, mailing address (including zip code), e-mail address, telephone and facsimile numbers, and date of birth.	To provide information technology and telecommunications services; delivery and shipping.	Information technology providers (such as data centers, hosting providers, email service providers), marketing and analytics providers; shipping and delivery providers; accounting providers.
Commercial information, such as credit card number and related information.	To facilitate and process transactions.	Information technology providers; payment processing providers.
Internet or other electronic network activity information, such as IP address and other device identifiers.	To provide information technology and telecommunications services (such as data centers, hosting providers, email service providers); marketing; accounting; shipping; delivery; and other business processes.	Information technology providers (such as data centers, hosting providers, email service providers); marketing and analytics providers; shipping and delivery providers; and other business processes.
Inferences drawn from any of the information identified herein, such as your preferences.	To provide analytics and marketing services; to improve our products and services.	Information technology providers; and marketing and analytics providers.

If you are a resident in the PRC, apart from the rights set forth in “Your Privacy Rights”, you have the following additional rights:

Cancellation of Account: You may contact us via the contact information in this Notice, and we will assist you in the cancellation of your account after verifying your identity. After you choose to cancel your account, we will delete or anonymize all of your personal information in a timely manner in accordance with the requirements of laws and regulations, unless otherwise provided by laws and regulations. After you have cancelled your account, we will not be able to continue to provide you with account registration services and products or services that require the use of an account to log in.

S&C is committed to complying with the PRC laws and regulations with regard to the cross-border transfer of personal information from the PRC to other jurisdictions. Due to the fact that we provide products or services through resources and servers located around the world, with your authorized consent, your personal information may be transferred to jurisdictions outside the country/region where you use the product or service, or accessed from those jurisdictions. These jurisdictions may have different data protection laws, or may not have such laws in place. In such cases, we will ensure that your personal information receives protection that is sufficiently equivalent to that within the People’s Republic of China.

If you would like to know more about how we protect your personal information, or obtain a copy of the adequate safeguards, you can contact us using the contact information in this Notice.