Nav

Privacy Policy

Effective Date: August 18, 2026

1. Introduction and Scope

At Boise Cascade Company (“Boise Cascade”, “we,” “our,” “us”), we are committed to protecting the privacy of our customers, website visitors, and everyone who interacts with our Services. Our goal is to offer you a personalized level of service while respecting and protecting your privacy.

This Privacy Policy explains the types of information we collect, how we intend to use it, and the choices you have regarding your information. It applies to information Boise Cascade and its affiliates and subsidiaries collect across our websites (including www.bc.com and other Boise Cascade-operated sites), mobile applications, other online services, and in our normal offline business activities (collectively, “Services”). It also applies to information collected in email, text, or other electronic messages between you and our websites. This Privacy Policy does not apply to information collected by a third-party, including through any application or content (such as advertising) that may link to or be accessible from or through our Services.

Please read this Privacy Policy carefully to understand our policies and practices regarding your information and how we will treat it. By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

To view our Privacy Notices of Collection for Employees and Applicants, please access the Equal Opportunity Employer page of this website. For language translation requests, please email [email protected].

2. Information We Collect

Boise Cascade collects several types of information from and about users of our Services, including information by which you may be personally identified (“Personal Information”) and information that is about you, but individually does not identify you, such as your Internet Protocol (IP) address. We collect this information directly from you, automatically as you navigate our Services, and from third parties. 

2.1 Personal Information You Provide

We collect Personal Information and other data directly from you through a variety of interactions, channels, and activities. This includes information you provide to us in the following ways:

  • Direct Forms and Account Management: Information you provide by filling out forms on our websites, registering to use our Services, creating an account, or subscribing to newsletters.
  • Customer Support and Correspondence: Records and copies of your communications (including email addresses) when you contact us, report a problem with our websites or Services, request technical support, or engage with us via live chat.
  • Product and Service Interactions: Information provided during product registration, warranty claims, and software downloads.
  • Surveys and Feedback: Your responses to surveys that we might ask you to complete for research or feedback purposes.
  • Employment Applications: Information submitted during the job application process (which may include the collection of protected classification information where required or permitted by applicable law).
  • Engagement and Promotions: Information submitted to participate in contests, sweepstakes, or through social media engagement.
  • Permits and Leases: Applications for, and the management of, recreation leases and permits.

2.2 Personal Information Automatically Collected

As you interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns.  This automatically collected information includes:

  • Usage Details: Details of your visits to and interactions with our Services, including traffic data, location data, logs, other communication data, and the specific resources that you access and use.
  • Device Information: Information about your computer, mobile device, and internet connection, including your IP address, operating system, and browser type.

2.3 Personal Information from Third Parties

We may receive Personal Information from third parties, such as service providers, joint marketing partners, social media platforms, identity verification services, credit agencies, mailing list providers, references (for job applicants), and publicly available sources.

2.4 Information Collected Through Social Networks

If you interact with us on social media or use social media features on our Services, those platforms may share information with us. Please be aware that any information you post to public forums, message boards, or social media pages is public information. We caution you against disclosing sensitive personal information in these public spaces.

3. Cookies and Other Tracking Technologies 

We and our third-party partners use tracking technologies to operate, maintain, and improve our Services, as well as to personalize your experience and deliver targeted advertising. These technologies include:

  • Cookies: Small text files stored on your device. We use both session cookies (which expire when you close your browser) and persistent cookies (which stay on your device until deleted). We utilize first-party cookies (set by us) and third-party cookies (set by our partners).
  • Web Beacons / Pixel Tags: Small electronic files that permit us to count users who have visited pages or opened an email.
  • Local Storage & Mobile Identifiers: Technologies used to store data locally on your device or identify your mobile hardware.
  • Session Replay Technologies: Tools that may record your interactions with our Services (such as mouse clicks, scrolling, keystrokes, and navigation paths) to help us troubleshoot issues and optimize your user experience.

3.1 Categories of Cookies We Use

  • Necessary: These cookies are essential for our Services to function properly, enabling core features like security, network management, and accessibility. Because they are required for the Services to operate, they cannot be switched off in our systems. While you can set your browser to block or alert you about these cookies, some parts of the Services will not work if you do so.
  • Preferences: These cookies enable the Services to provide enhanced functionality and personalization, such as remembering your preferences or allowing you to access embedded third-party features (e.g., social media sharing). If you do not allow these cookies, some or all of these services may not function properly.
  • Statistics: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Services. They help us understand which pages are the most and least popular, analyze bounce rates, and see how visitors navigate the Services. 
  • Marketing: These cookies may be set through our Services by our advertising partners. They are used to track your online activities over time and across different websites to build a profile of your interests and deliver relevant, customized advertisements to you.

3.2 Managing Your Preferences

You can manage your cookie preferences and opt out of certain non-essential tracking at any time by clicking the Change your consent link located below.

Additionally, you may refuse or delete cookies through your browser settings. Please note that if you adjust your browser settings to block all cookies (including Necessary cookies), you may not be able to access or use all or parts of our Services.

3.3 Do Not Track and Global Privacy Control

Some web browsers may transmit “Do Not Track” (DNT) signals to websites. Currently, our Services do not respond to standard DNT signals. However, we do process “Global Privacy Control” (GPC) signals as opt-out requests for targeted advertising and sales of Personal Information in jurisdictions where required by law.

4. Analytics and Advertising

4.1 Third-Party Analytics and Advertising Services

We use third-party analytics and advertising services to help us understand user traffic, usage patterns, and to deliver relevant advertising. These vendors may include, but are not limited to:

  • Google Analytics: Used for traffic analysis and advertising features (including remarketing, demographic, and interest reporting). You can opt out of Google Analytics by downloading the Google Analytics Opt-out Browser Add-on.
  • Social Advertising Platforms: We may use tools provided by Meta (Facebook, Instagram), LinkedIn, and X (Twitter) to deliver targeted campaigns.

We do not control these third parties’ collection or use of your information.  However, you can opt out of many targeted advertising networks through industry resources such as the Network Advertising Initiative (NAI) and the Digital Advertising Alliance (DAA). 

5. Video Teleconferencing Meetings 

We use third-party platforms, like Microsoft Teams, to host video teleconferencing meetings. If you are joining a meeting hosted by Boise Cascade, the meeting may be recorded and/or AI transcription may be enabled. Boise Cascade may collect, store, and use meeting audio, video, and shared screen content, including voice patterns and facial geometry (which may constitute biometric data under applicable law), for business operations purposes, including meeting documentation, accessibility, collaboration, and operational recordkeeping. Where AI transcription is enabled, collected biometric data is used to generate transcripts and identify speakers. Boise Cascade will retain biometric data for 183 days, or until the stated purpose is fulfilled, whichever is earlier, at which point it will be permanently deleted unless required by law or legal hold. Collected data, including audio, visual, and biometric data may be shared with the host of the platform (e.g., Microsoft), solely for the stated purposes and will not be sold, leased, or traded by Boise Cascade. By joining or remaining in a meeting which is being recorded or in which AI transcriptions are enabled, you consent to the capture and use described above. To request access to or deletion of your data, or to withdraw consent, see Section 16. To withdraw consent during a meeting, disconnect from the meeting. Withdrawal does not affect data already collected. 

6. Third-Party Links and External Websites

Our Services may contain links to external, third-party websites (and occasionally, specific subsidiary or affiliate websites that operate under their own distinct privacy policies). Please be aware that we do not control these external sites, and this Privacy Policy does not apply to the information collected by them.

When you click on a link that takes you to another website, you will be subject to that third party’s privacy practices and policies. We strongly encourage you to review the privacy notices of any website you visit before providing any Personal Information.

While Boise Cascade supports the protection of privacy on the internet, we are not responsible for the privacy practices, data collection methods, security, or the content of these external websites.

7. How We Use Your Information

We use the information we collect about you, or that you provide to us, for a variety of business purposes, including:

  • Service Delivery: To present our Services and their contents to you, and to provide the information, products, or services that you request from us.
  • Fulfilling Requests: To fulfill any other specific purpose for which you provide the information.
  • Contract Performance and Enforcement: To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
  • Communications: To notify you about changes to our Services or any products or services we offer or provide through them.
  • Improvements and Analytics: To improve the content, functionality, and performance of our Services, as well as our customer relationships and experiences.
  • Detect and Prevent Provide: To monitor security incidents and protect against illegal activity. 
  • Evaluate Job Applicants: To process employment applications and conduct background checks as permitted.
  • With Your Consent: In any other way we may describe when you provide the information, or for any other purpose with your consent.

8. Disclosure of Personal Information

Boise Cascade does not sell your Personal Information. We share it only in the following circumstances: 

  • Affiliates and Subsidiaries: To our affiliates and subsidiaries for purposes consistent with this Privacy Policy.
  • Service Providers and Contractors: To trusted third parties we use to support our business (such as IT hosting, customer service, and analytics providers). These entities are bound by contractual obligations to use Personal Information only for the specific purposes for which we disclose it to them.
  • Business Transfers: To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Boise Cascade’s assets. This includes transactions functioning as a going concern or as part of bankruptcy, liquidation, or similar proceedings, in which personal information held by Boise Cascade about our users is among the assets transferred.
  • Legal and Regulatory Compliance: To comply with any court order, law, or legal process, including to respond to any lawful government or regulatory request.
  • Enforcement of Agreements: To enforce or apply our terms of use and other agreements, including billing and collection purposes.
  • Protection of Rights and Safety: If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Boise Cascade, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
  • With Your Consent: To fulfill the specific purpose for which you provide it, or for any other purpose disclosed by us when you provide the information, with your consent.

We may share de-identified or statistical data without restriction.

9. Data Security

We implement commercially reasonable administrative, physical, and technical safeguards designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, the transmission of information via the internet is not completely secure. While we strive to protect your Personal Information, we cannot guarantee the security of data transmitted to or from our Services. Any transmission of Personal Information is at your own risk. Furthermore, users are responsible for protecting the information, systems, and credentials (such as passwords) on their own premises or devices.

10. Data Retention 

We will retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected and processed, as described in this Privacy Policy. This includes retaining data to satisfy any legal, regulatory, tax, accounting, or reporting requirements, and to enforce our agreements or resolve disputes.

11. Children’s Privacy 

Our Services are intended for a general audience and are not directed to children under the age of 16. We do not knowingly collect or solicit Personal Information from children under 16. If you are under 16, please do not use our Services or provide any information to us. If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information promptly. If you are a parent or guardian and believe we might have any information from or about a child under 16, please contact us using the information provided below.

12. International Data Transfers 

Boise Cascade is based in the United States, and our servers are located in the U.S. If you are accessing our Services from outside the United States, please note that your information will be transferred to, stored, and processed in the U.S. By using our Services or providing us with your information, you acknowledge and consent to the transfer of your data to the U.S., which may have data protection and privacy laws that differ from, or are less comprehensive than, those in your jurisdiction.

13. Your Privacy Choices

We strive to provide you with choices regarding the Personal Information you provide us with:

  • Cookies and Tracking: You can manage your cookie preferences at any time through the Cookie Settings link on our website. You can also set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent.
  • Marketing Communications: You can opt out of receiving promotional emails from us at any time by following the “unsubscribe” link included in the footer of those emails, or by contacting us directly.
  • Access, Correction, and Deletion: To access, correct, or delete your Personal Information, please use the contact methods outlined below or follow the processes detailed in the “Your State Privacy Rights” section.

13.1 Right to Non-Discrimination

Boise Cascade will not discriminate against you for exercising any of your privacy rights under this Policy or applicable state laws. Specifically, unless permitted by applicable law, if you choose to exercise your rights, we will not:

  • Deny you products or services.
  • Charge you different prices or rates for products or services, including through the use of discounts or other benefits, or by imposing penalties.
  • Provide you with a different level or quality of products or services.
  • Suggest that you will receive a different price or rate for products or services, or a different level or quality of products or services.

14. Accessibility

Boise Cascade is committed to making our Services, including this Privacy Policy, accessible to all individuals, including those using screen readers or assistive technologies. If you experience difficulty accessing this policy, please contact us at 844-823-2382 or [email protected] for an alternative format.

15. Changes to This Privacy Policy 

We reserve the right to update or modify this Privacy Policy from time to time at our discretion. If we make material changes to how we treat our users’ Personal Information, we will notify you by posting the updated policy on this page with a revised “Effective Date” at the top. We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our Services following the posting of changes constitutes your acceptance of such changes.

16. Contact Us 

If you have any questions, comments, or concerns about this Privacy Policy or our privacy practices, please contact us via any of the following methods:

 

Appendix A: U.S. State Privacy Addendum

Depending on your state of residence, applicable consumer privacy laws may provide you with additional rights regarding our collection, use, and disclosure of your Personal Information. Residents of states with enacted privacy laws (including, but not limited to, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia) may have some or all of the following rights:

  • Right to Know and Access: The right to confirm whether we are processing your Personal Information and to access such information, including obtaining a copy in a portable and readily usable format (Data Portability).
  • Right to Delete: The right to request the deletion of Personal Information you have provided to us or that we have obtained about you.
  • Right to Correct: The right to request the correction of inaccuracies in your Personal Information, taking into account the nature and processing purpose of the information.
  • Right to Opt-Out: The right to opt out of the processing of your Personal Information for purposes of:
    • Targeted advertising;
    • The sale of personal data; or
    • Profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.
  • Right to Limit Sensitive Data: The right to either limit our use of, or require your explicit consent before we process, your sensitive Personal Information.
  • Right to Non-Discrimination: The right to not receive discriminatory treatment by us for the exercise of your privacy rights.
  • Right to Appeal: In certain states, the right to appeal our decision if we decline to take action on your privacy request.

How to Exercise Your Rights: The exact scope of these rights may vary by state. To exercise any of the rights described above, please submit a verifiable consumer request to us by:

Verification Process and Authorized Agents: To protect your privacy and security, we are required by law to verify your identity before fulfilling your access, deletion, or correction requests. We will attempt to verify your identity by matching the information you provide in your request with the information we already have on file. Depending on your state of residence, you may also use an authorized agent to submit a request on your behalf, provided you have given the agent legally sufficient written permission to do so.

Additional Information for California Residents: For more detailed information specifically addressing the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including specific categories of data collected and disclosed over the past 12 months, please review our comprehensive California Consumer Privacy Act (CCPA) & California Privacy Right Act (CPRA) Notice.