Select a Profile

Privacy Policy (updated September 1, 2026)

Wolseley Canada Inc., together with its subsidiaries and affiliates (“Wolseley Canada,” “we,” “us,” or “our”), is committed to protecting the privacy of personal information. This Privacy Policy describes how we collect, use, disclose, retain, and safeguard personal information in connection with our business operations in Canada.

This Policy applies to:

•      customers and prospective customers of Wolseley Canada;
•      individuals who apply for credit or act as guarantors in connection with a credit application;
•      visitors to Wolseley Canada websites and online platforms;
•      applicants for employment with Wolseley Canada; and
•      other individuals whose personal information we collect in the course of our business.

Wolseley Canada is a subsidiary of Ferguson Enterprises Inc., a publicly traded company based in the United States. Certain personal information may be shared within the Ferguson corporate family as described in this Policy.

Employees: If you are a current employee of Wolseley Canada, your personal information is governed by our separate Employee Privacy Policy, which is available through your manager or Human Resources. This Policy applies to you only in your capacity as a customer, credit applicant, or website visitor.

This Policy has been developed to comply with applicable Canadian privacy legislation, including:

•      the Personal Information Protection and Electronic Documents Act (Canada) (“PIPEDA”);
•      the Personal Information Protection Act (Alberta);
•      the Personal Information Protection Act (British Columbia); and
•      the Act respecting the protection of personal information in the private sector (Quebec).

Where provincial privacy legislation applies to our activities in a particular province, we comply with that legislation. PIPEDA applies to our interprovincial and international activities and to our operations in provinces that do not have substantially similar privacy legislation.

If you have questions about this Policy or how we handle your personal information, please contact our Privacy Officer using the information provided below.

Personal Information We Collect

“Personal information” means any information about an identifiable individual. It does not include business contact information (such as an employee’s name, title, business address, or business telephone number) when that information is collected, used, or disclosed solely for the purpose of communicating with that person in relation to their employment, business, or profession. It also does not include information that has been anonymized so that it can no longer identify an individual. We may use and disclose anonymized and aggregated data without restriction.

We may collect the following categories of personal information, depending on the nature of our relationship with you:

Identity and Contact Information: name, home address, telephone number, personal email address, date of birth, driver’s licence number, or other government-issued identification.

Credit and Financial Information: social insurance number (collected only with consent and only where required for credit evaluation), credit reports and credit history, asset and liability information, banking details, financial institution references, and payment history.

Account and Transaction Information: purchase, order, return, and exchange history; account records and correspondence.

Business and Professional Information: information about your business or occupation, and corporate information about customers, including identities of directors, officers, shareholders, owners, and guarantors.

Website and Digital Information: information you provide through our websites and information collected automatically through cookies and similar technologies.

Employment Application Information: qualifications, work history, and references provided in connection with an application for employment.

Sensitive Personal Information: Some personal information we collect (such as social insurance numbers, financial and credit information, and government-issued identification) is considered sensitive. We apply additional safeguards to such information and collect it only where necessary and with appropriate consent.

You are never obligated to provide personal information to us. If we are unable to collect sufficient information to process a credit application or provide a requested product or service, we may be unable to fulfill that request.

How We Collect Personal Information

We collect personal information from a variety of sources, including directly from you and from third parties. We collect directly from you, for example, when you request a quote, submit a credit application, correspond with us, or apply for employment. We also collect from third-party sources such as credit reporting agencies and financial institutions (in connection with credit evaluations) and publicly available sources such as public registries and business databases.

Purposes For Collection, Use And Disclosure

We collect, use, and disclose personal information only for purposes that a reasonable person would consider appropriate in the circumstances and that are consistent with this Policy.

Core Business Purposes

•      Credit evaluation: reviewing and processing credit applications, assessing creditworthiness, obtaining and exchanging credit information with credit reporting agencies and other references, and monitoring ongoing credit risk;
•      Products and services: processing orders, arranging delivery, facilitating returns and exchanges, administering warranties, and providing ongoing customer service;
•      Account administration: opening, maintaining, and managing customer accounts, including verifying the identity of customers and their authorized representatives (such as directors, officers, and guarantors of corporate customers);
•      Fraud prevention and security: monitoring, detecting, and preventing fraudulent or suspicious transactions, and meeting risk management requirements;
•      Legal and regulatory compliance: meeting our obligations under applicable laws and regulations, responding to legal process, enforcing our agreements, and collecting amounts owing to us;
•      Business records: maintaining business records for reasonable periods in accordance with applicable legal and regulatory retention requirements and our internal records management practices; and
•      General business administration: managing and administering our business, including audit, insurance, and internal reporting requirements.

Marketing and Communications

We may use your personal information to inform you about products, services, promotions, or events that may be of interest to you. You may opt out of receiving marketing communications at any time by contacting our Privacy Officer or by following the unsubscribe instructions included in our electronic communications. Opting out of marketing will not affect communications related to your existing accounts, orders, or services.

Disclosure Within the Ferguson Corporate Family

We may disclose personal information about representatives of our corporate customers (including directors, officers, shareholders, owners, and guarantors) to our affiliates within the Ferguson corporate family for the purposes of:

•      identity, financial, and related background verification;
•      ongoing risk management and fraud detection; and
•      the provision of products and services.

Other Purposes

We may collect, use, or disclose personal information for other purposes with your consent, or without your consent where permitted or required by applicable law. Examples of circumstances where we may act without consent include responding to a court order or subpoena, complying with a lawful request from a law enforcement or government agency, or collecting a debt owed to us.

Consent

We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law.

Forms of Consent

Consent may be express or implied, depending on the sensitivity of the information and the reasonable expectations of the individual in the circumstances.

•      Express Consent: We obtain your express consent when you provide personal information directly to us for a stated purpose, such as when you sign a credit application or complete an online form. Express consent is always required for the collection, use, or disclosure of sensitive personal information (such as social insurance numbers and financial information).
•      Implied Consent: In some cases, your consent may reasonably be implied from your actions or the circumstances. For example, when you provide personal information in connection with a purchase or service request, your consent to use that information to fulfill the request is implied.

When Consent Is Not Required

Canadian privacy laws permit or require us to collect, use, or disclose personal information without consent in limited circumstances, including legal compliance, law enforcement, debt collection, emergencies threatening life or safety, fraud prevention, and the investigation of a breach of an agreement or contravention of law. In all such cases, we limit the information to what is necessary for the purpose.

Withdrawing Your Consent

You may withdraw your consent at any time by contacting our Privacy Officer in writing. We will inform you of the likely consequences, which may include our inability to continue providing certain products or services. Withdrawal of consent is subject to legal or contractual restrictions and reasonable notice.

Consent and Credit Applications

When you submit a credit application, the consent provisions included in the application govern the collection, use, and disclosure of your personal information for credit evaluation purposes.

Cookies and Tracking Technologies

When you visit a Wolseley Canada website or online platform, including WolseleyExpress.com , we may use cookies and similar tracking technologies to collect certain information automatically.

We use cookies and similar technologies for site functionality and analytics, and, where you have provided consent, for advertising and targeting purposes. Where required by applicable law, we obtain your consent before placing non-essential cookies on your device.

When you first visit our website, you will be presented with a cookie consent mechanism allowing you to accept or decline non-essential cookies. You may update your preferences at any time through the cookie settings link on our website. Most web browsers also allow you to manage or delete cookies through your browser settings, though doing so may affect the functionality of our websites.

Disclosure To Third Parties

We do not sell, rent, or trade your personal information. We may disclose personal information to third parties in the circumstances described below, with your consent or as permitted or required by law.

Service Providers: We engage third-party service providers to perform functions on our behalf, such as payment processing, credit card processing, credit reporting, data hosting, information technology support, delivery and logistics, and customer communications. These service providers may access your personal information only to the extent necessary to perform their services and are required by contract to protect your information in a manner consistent with this Policy.

Credit Reporting Agencies and Financial References: In connection with credit evaluations, we may disclose personal information to and receive personal information from credit reporting agencies, financial institutions, and other credit references. Information provided to credit reporting agencies may be used by them in accordance with their own policies and may be disclosed to other creditors.

Affiliates Within the Wolseley and Ferguson Corporate Family: We may disclose personal information to our affiliates within the Wolseley Canada and Ferguson corporate family, including Ferguson Enterprises Inc. and its subsidiaries, for the purposes described in this Policy. These disclosures are subject to contractual safeguards and the cross-border transfer protections described in this Policy.

Product Warranties: We may disclose personal information to third-party suppliers as necessary to administer product warranties on products you have purchased from us.

Business Transactions: In the event of a proposed or actual merger, acquisition, financing, sale, or other transaction involving all or part of Wolseley Canada or its assets, personal information may be disclosed to the parties involved in the transaction and their advisors for the purpose of evaluating, negotiating, and completing the transaction. If such a transaction is completed, the acquiring party may use and disclose your personal information for the purposes described in this Policy, unless further consent is obtained.

Legal and Regulatory Disclosures: We may disclose personal information without your consent where permitted or required by law, including to:

•      comply with a court order, subpoena, warrant, or other lawful process;
•      respond to a lawful request from a law enforcement or government agency;
•      collect a debt owed to Wolseley Canada;
•      protect the rights, safety, or property of Wolseley Canada, our customers, or others; and
•      meet insurance, audit, and regulatory requirements.

Cross-Border Transfers

In the course of our business operations, personal information may be transferred to, stored in, or accessed from jurisdictions outside of Canada, including:

•      United States: We share personal information with our parent company, Ferguson Enterprises Inc., and certain service providers located in the United States, for the purposes described in this Policy.
•      Republic of Ireland and The Netherlands: Certain employee-related personal information may be processed in Ireland and/or the Netherlands through our human resources information systems.

When personal information is transferred outside of Canada, it becomes subject to the laws of the receiving jurisdiction. Foreign governments, courts, law enforcement agencies, and regulatory bodies may be able to access your personal information under the laws of those jurisdictions.

Safeguards for Cross-Border Transfers

Before transferring personal information outside of Canada, we take reasonable steps to ensure that the information will be protected to a standard comparable to that required under Canadian privacy legislation. These steps include:

•      conducting an assessment of the risks associated with the transfer, including an evaluation of the legal framework of the receiving jurisdiction and the safeguards that will apply (as required under Quebec privacy legislation for transfers outside of Quebec);
•      entering into contractual agreements with recipients that require them to protect personal information in a manner consistent with this Policy and applicable Canadian privacy law; and
•      limiting the information transferred to what is necessary for the identified purpose.

Transfers Within Canada

Quebec privacy legislation also requires an assessment before personal information collected in Quebec is transferred to another province. We conduct these assessments as part of our privacy governance practices.

Retention And Destruction

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required to meet our legal, regulatory, and business obligations.

Retention Periods: Retention periods depend on the nature of the information, the purpose for which it was collected, and applicable legal and regulatory requirements. Specific retention periods are set out in our internal records management practices.

Destruction and Anonymization: Once personal information is no longer required for the purposes for which it was collected, or for any legal or regulatory obligation, we will securely destroy it or render it permanently anonymous. We use appropriate methods for secure destruction, including physical destruction of paper records and permanent deletion or overwriting of electronic records.

Safeguards

We protect personal information using administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include access controls, employee training, encryption and other security technologies, secure storage, and incident detection and response capabilities.

Third-Party Service Providers

Where personal information is processed by third-party service providers on our behalf, we require those providers by contract to maintain safeguards consistent with this Policy and applicable privacy legislation.

No Guarantee

While we take reasonable steps to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of your personal information.

Your Rights

Canadian privacy legislation provides you with rights regarding your personal information. You may exercise any of the rights described below by contacting our Privacy Officer in writing.

Right of Access: You have the right to request access to the personal information we hold about you. Upon verifying your identity, we will inform you of the existence, use, and disclosure of your personal information and provide you with a copy. We will respond to access requests within the timeframe required by applicable privacy legislation.

We may decline access where the information contains references to other individuals, is subject to solicitor-client privilege, or cannot be disclosed for legal or security reasons. If we refuse a request in whole or in part, we will provide reasons and inform you of your right to complain to the applicable Privacy Commissioner.

Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal information. Upon receiving satisfactory supporting documentation, we will make corrections promptly. Where corrected information has previously been disclosed to a third party, we will notify the third party of the correction where appropriate and practicable.

Right to Withdraw Consent: As described in this Policy, you may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.

Right to Data Portability (Quebec): Quebec residents may request that personal information collected directly from them, in computerized form, be provided in a structured and commonly used format to them or to another organization.

Right to De-indexation (Quebec): Quebec residents may request that we cease disseminating their personal information or de-index any hyperlink attached to their name where dissemination contravenes the law or a court order, or causes serious harm.

Right to Request Deletion: You may request deletion of personal information no longer necessary for the purposes for which it was collected. We will comply unless retention is required to meet a legal or regulatory obligation, enforce our agreements, or complete a requested transaction.

Fees: We do not charge a fee for access or correction requests unless the request is manifestly unfounded or excessive. If a fee applies, we will inform you of the amount before processing the request.

Privacy Breach Notification

Wolseley Canada maintains procedures to detect, assess, and respond to privacy breaches. Where a breach creates a real risk of significant harm to affected individuals, we will notify the applicable Privacy Commissioner and affected individuals as required by applicable law. We maintain records of all privacy breaches as required by applicable legislation. If you have questions about a privacy breach or our breach response procedures, please contact our Privacy Officer.

Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, our business operations, or applicable law. When we make changes, we will update the effective date at the top of this Policy and post the revised version on our website.

Where a change is material, we will take reasonable steps to notify affected individuals before the change takes effect, such as by posting a prominent notice on our website or by direct communication where appropriate.

We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

Contact Us and Complaints

If you have questions about this Policy, wish to exercise any of the rights described in this Policy, or have concerns about how we handle your personal information, please contact our Privacy Officer:

Privacy Officer Wolseley Canada Inc. 880 Laurentian Drive Burlington, Ontario L7N 3V6 Email: privacy@wolseleyinc.ca Telephone: (905) 335-7373

Complaints

If you believe that we have not handled your personal information in accordance with this Policy or applicable privacy legislation, you may submit a complaint in writing to our Privacy Officer at the address above.

Upon verifying your identity, the Privacy Officer will investigate the complaint and provide a written response within 30 days. If the complaint is well founded, we will take appropriate steps to correct our practices. If we determine that the complaint is not well founded, we will notify you in writing with an explanation.

Escalation to a Privacy Commissioner

If you are not satisfied with our response, you have the right to file a complaint with the Privacy Commissioner that has jurisdiction over your matter:

•      Office of the Privacy Commissioner of Canada: www.priv.gc.ca
•      Office of the Information and Privacy Commissioner of Alberta: www.oipc.ab.ca
•      Office of the Information and Privacy Commissioner for British Columbia:  www.oipc.bc.ca
•      Commission d’accès à l’information du Québec: www.cai.gouv.qc.ca

Amendments to Privacy Policy

This version of the Wolseley Canada Privacy Policy is in effect as of September 1, 2026. This Privacy Policy is subject to amendment in response to developments in any applicable privacy legislation and the Chief Privacy Officer will review and revise this Privacy Policy from time to time as required by such changes in privacy law. Notification of any changes in the Privacy Policy will be posted on the website of Wolseley Canada. Any changes in this Privacy Policy will apply to personal information collected from the date of the posting of such revised Privacy Policy.