Please read this privacy notice carefully as it sets out how Kingspan Limited (“Kingspan”) uses your personal information. This policy applies to personal information we collect and process in the course of our commercial relationship with you as a customer. For information about how we process personal data collected through our websites (including kingspan.com and divisional subdomains), please see our Website Privacy Policy.

At Kingspan, we are committed to processing personal information about our customers in ways that comply with our legal obligations as well as being clear with our customers about what we do with their personal information. We share your concern about the protection of your personal information and are committed to safeguarding your privacy.

In view of the international nature of our company there may be circumstances in which the General Data Protection Regulations (GDPR) will apply. If that applies to your circumstances, we will be the “controller” of the personal information which you provide to us or which we collect from you.

What is personal information?

Personal information is information relating to an identified or identifiable individual. This document covers information we collect about you.

Some of the key points of Kingspan’s privacy statement are:

• We will never sell your data to third parties without your prior consent.

• We will make it easy for you to manage your information and you can change your communication preferences at any time.

• We do use data to help us provide great customer service, which includes tailoring the information we share with you to help ensure that it’s relevant, useful and timely.

In the course of your dealings and interaction with Kingspan we process personal information to allow us to complete our service and commitment to you as a customer.

The types of personal information we may process include, but are not limited to:

• Identification data e.g. name.

• Contact details e.g. postal address, telephone/email, job title, company name, company type, your role.

• Project details e.g. project name, project address, project type, size of opportunity.

• Website usage data – for more detail on how we process data collected through our websites, please see the Website Privacy Notice)

• Marketing preferences and communication with you for marketing purposes as well as information we infer when we combine information to determine how best to interact with you (please see our Email Marketing Privacy Notice).

• Surveys you have completed.

• Any other personal information that you choose to provide to us when you complete our online contact forms or otherwise make contact with us.

There may also be situations where we collect information that reveals your gender.

Usually you will have provided the information we hold about you but there may be situations where we collect personal information from other sources. The following are the types of information we may collect about you and the source of the information:

• Project information supplied by third parties involved in projects that we are engaged on. This data includes major project details and contact details of responsible person(s) for those projects.

• Your delivery address and contact details supplied by our direct customer base whom we are delivering on behalf of.

• Other group companies may pass your details onto us if you have contacted them by mistake for products that we manufacture.

We use your personal information as follows:

• To comply with our legal obligations;

• To investigate and respond to potential violations of law or of our website policies as well as to potential breaches of our or relevant third parties' systems and networks;

• To identify you and communicate with you;

• To keep internal records;

• To develop products and services; occasionally we may contact you with service and product surveys. We may contact your company and individuals within your company to complete a survey;

• To fulfil your requests and answer your queries or complaints;

• For market research and to assess marketing strategies and campaigns;

• If you already are a customer or other contact of ours, to update our information about our contact with you on our customer relationship management system;

• To deliver our own products and services to you;

• To market our own products and services to you; through means such as newsletters and invitations to events;

• You acknowledge and confirm your acceptance for Kingspan to process your personal data for the purposes listed above.

The Kingspan entity that you deal with commercially will be the data controller for the processing described in this notice. Kingspan Group and each Kingspan affiliate are separate, independent data controllers. If you are unsure which Kingspan entity is your data controller, please contact us using the details in Section 13 below.

We would like to provide you with information about Kingspan’s products and services, and other information from Kingspan, which we think you may find interesting. We may send you such information by post, email and/or telephone if you agree we can or unless you have asked us not to do so (see below).

We do not provide your personal information to external organisations (i.e. to contractors, merchants, distributors and retailers, which are outside of Kingspan) for their own direct marketing in relation to Kingspan products and services without your explicit consent.

If at any time you do not want your information used for direct marketing purposes by a Kingspan company, please contact the relevant Kingspan company from which you have received marketing so that they can unsubscribe you from their marketing lists. If you have received email marketing from a Kingspan company and decide that you no longer wish to receive marketing emails from them, you will be able to opt out of receiving further email marketing from them by following an unsubscribe link in the email, or by such other means as we may communicate to you, including but not limited to telephone and post.

Please note that as we do not as a group operate a global marketing database which means we are unable to unsubscribe you from marketing from all Kingspan companies centrally.

For further information on our collection and use of your personal information for marketing purposes, please see our Email Privacy Notice.

For information about cookies, retargeting and other online marketing activities, please see our Website Privacy Policy and Cookie Policy.

In addition to the sharing of information mentioned above under section 4 (Marketing), we may share your personal information with third parties as follows:

• Third party providers in order for us to process payments that are due to us, in doing so we provide bank card details to such providers;

• Licensed credit reference agencies, debt collection agencies and lawyers when we carry out credit checks, to report on your payment performance and/or seek to recover debts due to us;

• Our accountants, auditors, lawyers or similar advisers when we ask them to provide us with professional advice;

• Emergency services in the event that we need to report accidents or incidents or request emergency assistance;

• Any Government Department, public body or other third party where we believe in good faith that the law requires this; in the interests of public health and safety; or in order to protect the rights, property, or safety of Kingspan, its employees or others;

• Kingspan Holdings (Ireland) Limited and its affiliates (including Kingspan Group entities and business divisions) may share your personal data with each other where necessary to fulfil our obligations to you or for internal administrative purposes. All such sharing is subject to our data protection policies;

• We may transfer your personal data to Kingspan group companies and service providers outside the European Economic Area (EEA) and the United Kingdom. Where the destination country is not subject to an adequacy decision, we use appropriate safeguards;.

• We may use artificial intelligence (AI) to support our services, but we do not train or fine‑tune our models using personal data. Where AI is used, we apply data minimisation and anonymisation and appropriate safeguards to prevent personal data from being used to develop or improve models.

We retain your personal information for no longer than is necessary for the purposes for which the personal information is collected, taking into account, but not limited to, any legal obligations and applicable tax and accounting requirements we have to retain data for certain periods of time and contractual obligations such as in order to fulfil warranty/product guarantee obligations.

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms.

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

Mostly, however, we process contacts information for our legitimate business interests in the context of providing or receiving services to customer or from our service providers or in the case of partners, for the purpose of the collaboration or partnership. If we collect and use your personal information in reliance on anything other than our legitimate interests, we will make clear to you at the relevant time. For example, if we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the ‘Contact us’ heading below.

Kingspan hold and share data with Kingspan Holdings, affiliates and relevant third parties who are compliant with our data policies.

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.

Specifically, our servers are located in UK and Ireland and our group companies, third party service providers and partners operate in the EEA (European Economic Area). This means that when we collect your personal information we may process it in any of these countries.

We have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Statement, and to at least the same standards as required under the Privacy Act 1993.

General Data Protection Regulation (GDPR)

Kingspan is part of a group of companies within the European Union, insofar as Kingspan is required, Kingspan will comply with the requirements of the GDPR in respect of your personal information in addition to the requirements of the Privacy Act 1993.

Kingspan is committed to ensuring that your personal information is secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures where relevant to safeguard and secure the information we collect.

You have the right to be informed that we hold your personal data, the right of access to that data we hold, the right to rectification of any errors in that data, the right to erasure, sometimes referred to the right to be forgotten, the right to restrict how we process your data, the right to data portability and the right to object to how we process your data.

To exercise any of these rights, please contact the Kingspan entity you deal with commercially, or contact Kingspan Group by phone on +44 0429 698 000 and we will direct your request to the relevant data controller.

These rights can be exercised at any time. They are not absolute and are subject to certain exceptions and/or qualifications.

You are also entitled to make a complaint to a data protection regulator, which for New Zealand is the Office of the Privacy Commissioner. Their contact details are available on the Privacy Commissioner‘s website: https://www.privacy.org.nz

If you do have any concerns about how we process your personal data, you can also contact us using the contact details at the end of this Privacy Statement.

Kingspan Holdings (Ireland) Limited ("Kingspan Group") and its affiliates operate globally. The Kingspan entity that you deal with commercially will be the data controller for your personal information under this notice. Kingspan's business divisions may also process your data where relevant to your commercial relationship.

For information about how we process personal data collected through our websites, please see our Website Privacy Policy.

We review our privacy practices from time to time. We ask that you bookmark and periodically review this page for updates to our Privacy Notice.

For further information regarding these rights, about this Privacy Statement generally or to make a complaint please contact us at APACdataofficer@kingspan.com

Before assessing your request, we may request additional information in order to identify you. If you do not provide the requested information and, as a result we are not in a position to identify you, we may refuse to action your request.

This notice was updated August 2026.