Last Updated: November 8, 2025

This California Notice at Collection and Privacy Policy (“CCPA Disclosure”) explains how Vulcan Materials Company and its subsidiaries and affiliates (“Company”, “us”, “our”, or “we”) collect, use, disclose, and/or retain personal information (“Information Practices”) subject to the California Consumer Privacy Act, as amended (“CCPA”). This CCPA Disclosure applies solely to California residents (“consumers” or “you”).

This CCPA Disclosure does not apply to information we collect in the context of an individual’s interaction with us as a job applicant, employee, contractor, or other role within our Company. Please refer to our California Workforce Notice at Collection and Privacy Policy.

This CCPA Disclosure identifies the categories of personal information to be collected from you and the purposes for which the personal information will be used, including whether that information is sold or shared.

The following table includes disclosures for the preceding 12 months of: categories of personal information we have collected about consumers, the categories we have disclosed for a business purpose, and categories of third parties with whom we disclosed the personal information during that period.

GENERAL PERSONAL INFORMATION

Categories of Personal Information	Business/Commercial Purposes for Collection and Disclosure	Categories of Third Parties Receiving Personal Information
Identifiers: For example, name, alias, signature, address, phone number, email address, social security number, driver’s license or other state identification card number, passport number, or any other personal identifier.	To provide our products and services to you. To communicate with you, such as when you ask questions or request information on our products or services To provide you with information about our products or services. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device. Keeping track of visitors to our website. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Debugging to identify and repair errors that impair existing functionality. Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing analytic services, storage, identifying potential candidates, or other similar services.	Invoicing and payment processors. Internet service providers Data analytics providers Cloud storage providers Marketing and investor relations providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics, product quality, and planning tool providers Customer relationship management tool providers
Personal Information Categories from Cal. Civ. Code § 1798.80(e): For example, age, race, height, weight, and gender.	To comply with our legal obligations To facilitate our operations and transactions with you, including but not limited to background and credit checks	Legal and regulatory compliance service providers Financial service providers
Characteristics of CA or Federal Protected Classifications: For example, race, religion, national origin, age (40 and over), gender, sexual orientation, medical condition, ancestry, pregnancy, familial status, disability, veteran status, or genetic information.	To provide our products and services to you. To communicate with you, such as when you ask questions or request information on our products or services. To provide you with information about our products or services. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or product and to improve or enhance a service or product. Keeping track of visitors to our website. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Debugging to identify and repair errors that impair existing functionality. Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing analytic services, storage, identifying potential candidates, or other similar services.	Invoicing and payment processors Internet service providers Data analytics providers Cloud storage providers E-mail distribution service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Legal and regulatory compliance service providers Customer relationship management tool providers
Commercial Information: For example, records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	To provide our products and services to you. To communicate with you, such as when you ask questions or request information on our products or services. To provide you with information about our products or services. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or product and to improve or enhance a service or product.. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Performing services on behalf of the business, including maintaining or servicing accounts, providing products or services, providing customer service, processing orders or transactions, verifying customer information, processing payments, providing analytic services, storage, identifying potential candidates, or other similar services.	Invoicing and payment processors Internet service providers Data analytics providers Cloud storage providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics, product quality, and planning tool providers Regulatory compliance service providers Customer relationship management tool providers
Internet or Other Similar Network Activity: For example, browsing history, search history, and information regarding a consumer’s interaction with a website or advertisement.	To provide our products and services to you. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose. Debugging to identify and repair errors that impair functionality.	Internet service providers Data analytics providers Website analytics providers Cloud storage providers Marketing and investor relations providers E-mail distribution service providers Help Desk service providers
Geolocation Data: For example, information that can be used to determine a device’s physical location.	For our operational purposes or the operational purposes of our service providers or contractors Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose	Cloud storage providers Logistics, product quality, and planning tool providers Customer relationship management tool providers
Sensory or Surveillance Data: For example, call recordings or other audio, electronic, or visual monitoring or surveillance.	To verify or maintain quality or safety of a service or device and to improve or enhance a service or device. Ensuring security and integrity as needed and as reasonably necessary and proportionate for this purpose.	Logistics, product quality, and planning tool providers Security service providers
Profile Data: For example, purchasing history and tendencies, products, or services purchased, obtained, or considered.	To provide our products and services to you. To communicate with you, such as when you ask questions or request information on our products or services. To provide you with information about our products or services. Undertaking internal research for technological development. Undertaking activities to verify or maintain quality or safety of a service or device and to improve or enhance a service or device.	Invoicing and payment processors Internet service providers Data analytics providers Cloud storage providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers

SENSITIVE PERSONAL INFORMATION

Categories of Personal Information	Business/Commercial Purposes for Collection and Disclosure	Categories of Third Parties Receiving Personal Information
Social Security Number, Driver’s License, State Identification Card, or Passport Number	To perform services or provide goods you request and reasonably expect from us To detect, prevent, and investigate security incidents involving your information To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders To ensure the quality or safety of a product, service, or device	Invoicing and payment processors Internet service providers Web hosting service providers E-mail distribution service providers Help Desk service providers Financial, credit, and accounting service providers Cybersecurity service providers Logistics and planning tool providers Customer relationship management tool providers
Financial account, debit card, or credit card number when provided with any required security or access code, password, or credentials allowing access to an account	To perform services or provide goods you request and reasonably expect from us To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders To ensure the quality or safety of a product, service, or device	Internet service providers Payment processors Financial, credit, and accounting service providers Cybersecurity service providers Logistics and planning tool providers
Precise geolocation	To perform services or provide goods you request and reasonably expect from us To perform services for our business needs such as maintaining accounts, providing customer service, and fulfill orders To ensure the quality or safety of a product, service, or device To detect, prevent, and investigate security incidents involving your information	Cloud storage providers Logistics and planning tool providers Customer relationship management tool providers
Racial or ethnic origin, and health information	To comply with our legal obligations	Legal and regulatory compliance service providers

The categories identified as collected in the tables above were collected from the following categories of sources:

You directly
Internet service providers
Data analytics providers
Government entities
Operating systems and platforms
Social networks
Corporate merger and acquisition activity
Service providers

Notice of Sale and/or Share: While we do not sell personal information in exchange for monetary consideration, we do disclose personal information for other benefits that could be deemed a “sale” or “share” under various data protection laws because it is sometimes broadly defined to include activities such as the delivery of interest-based advertising on websites or allowing third parties to receive certain information, such as cookies, IP address, and/or browsing behavior. You may exercise your right to opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC). We honor Opt-Out Preference Signals, including GPC. If you choose to use an Opt-Out Preference Signal, you will need to turn it on for each supported browser or browser extension you use.

RETENTION PERIODS

We retain information for different periods of time depending on the purposes for which we collect and use it. Unless it is unduly burdensome, we will delete or de-identify information when it is no longer needed to fulfill the purposes listed for each category above, unless a longer retention period is required to comply with applicable laws. There may be technical or other operational reasons where we are unable to fully delete or de-identify your information. Where this is the case, we will take reasonable measures to prevent further processing your information.

YOUR RIGHT TO KNOW

You have the right to request that we disclose any of the following:

the categories of personal information we have collected about you
the categories of sources from which the personal information is collected
the business or commercial purpose for collecting, selling, or sharing with third parties for cross context behavioral advertising (e.g. targeted advertising)
the categories of third parties to whom we disclose personal information
the specific pieces of personal information we have collected about you

You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

YOUR RIGHT TO REQUEST CORRECTION OF INACCURATE PERSONAL INFORMATION

You have the right to request correction of inaccurate personal information maintained by us. We may request documentation from you to determine the accuracy of the information. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used for the purpose of correcting your personal information and complying with our recordkeeping requirements. We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months, unless you provide new or additional documentation that the information at issue is inaccurate.

As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny this request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances. You can submit a correction request through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

YOUR RIGHT TO REQUEST DELETION OF YOUR PERSONAL INFORMATION

You have the right to request that we delete any of your personal information collected by us, subject to certain exceptions. You can do this through a verified consumer request. That process is described below in the section, “Submitting a Verified Consumer Request.”

There may be scenarios where we deny your deletion request. If that occurs, we will provide you with an explanation as to why we could not delete all or some of your personal information.

SUBMITTING A VERIFIED CONSUMER REQUEST

You have the right to submit verified consumer requests to know information, to correct information, or for deletion.

The response to a request to know will provide all personal information collected and maintained about you since January 1, 2023, unless doing so proves impossible or would involve disproportionate effort. Please note that we are not required to provide personal information to you more than twice in a 12-month period. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

You can submit a verified consumer request through our webform or by calling our toll-free number at 1-800-873-4898. In order to verify your identity, we will ask you to provide us with information we can match with our own records. If you call us, you will be asked to provide the same information requested in the webform. If you submit a request that is not through one of these designated methods or is deficient in some manner unrelated to verification, we will provide you with information on how to submit the request or remedy any deficiencies.

Once we receive your verifiable consumer request, we will confirm receipt of the request within 10 business days describing our verification process. We will respond to your request within 45 calendar days, if we are able to verify your identity. Requests for deletion will require a separate confirmation that you want your information deleted.

Requests to Know or Delete for Child Under the Age of 13: We do not knowingly collect information of minors under the age of 13, and we have no actual knowledge of selling such Personal Information of minors under 16 years of age

USING AN AUTHORIZED AGENT TO SUBMIT A REQUEST

Only you, or a natural person or a business entity registered with the Secretary of State to conduct business in California that you have authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. If you use an authorized agent, you may provide a power of attorney executed pursuant to California Probate Code sections 4000 to 4465. If a power of attorney that meets those provisions is not submitted, you will be required to provide the authorized agent signed permission to submit a request, verify your identity directly with us, and directly confirm with us that you provided the authorized agent permission to submit the request here.

YOUR RIGHT TO NON-DISCRIMINATION FOR THE EXERCISE OF A PRIVACY RIGHT

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may still offer you certain financial incentives permitted by the CCPA such as discounts, rewards, premium features, loyalty accounts, or club card programs that can result in different prices, rates, or quality levels.

CHANGES TO OUR PRIVACY NOTICE

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on the Website and update the notice’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

CONTACT FOR MORE INFORMATION

If you have questions or concerns about this privacy policy and our privacy practices, contact us at: webmaster@vmcmail.com. If you would like to request that this notice be provided in an alternative format in order to accommodate a disability, please contact us at community@vmcmail.com or call us at (205) 298-3220.

Notice at Collection & Privacy Policy for California Residents