Privacy policy

Effective: October 29, 2026 | October 29, 2026

1. About this policy

This privacy policy sets out how TenCate Grass Holding BV and its subsidiaries ("TenCate Grass", "we", "us", or "our") collect, use, and protect personal information when you visit our websites or correspond with us. This policy applies to all visitors to tencategrass.us and our other web properties. By using our websites, you accept and agree to be bound and abide by this Privacy Policy, our Cookie Policy, and our Terms of Use, which are incorporated herein by reference.

This policy is effective as of August 5, 2026 and will be reviewed and updated at least every 12 months in accordance with the California Privacy Rights Act.

2. Information we collect

We collect the following categories of personal information, as defined under the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(v)):

• Identifiers: name, company name, email address, telephone number, country, and IP address.
• Commercial information: product enquiries, order details, and service requests.
• Internet or other electronic network activity: website usage data collected via cookies and analytics tools, including pages visited, time on site, and referring source.
• Inferences: we may draw inferences from the above categories to understand preferences and tailor communications.

We collect this information when you:

• Submit a contact or enquiry form on our website;
• Correspond with us by email or telephone;
• Subscribe to our marketing communications;
• Visit our websites (automatically, via cookies and analytics tools).

3. How we use your information

We use the personal information we collect to:

• Respond to your enquiries and conduct business with you;
• Fulfil contractual obligations where you or your company are a customer or supplier;
• Send marketing communications where you have subscribed (you may unsubscribe at any time);
• Conduct internal market research and improve our products and services;
• Operate and maintain our websites, including security and fraud prevention;
• Comply with applicable legal obligations.

We do not sell your personal information to third parties. We do not share your personal information with third parties for cross-context behavioral advertising purposes.

4. Third parties we share information with

We may share your personal information with:

• Other TenCate Grass group entities, for business and administrative purposes;
• Service providers who process data on our behalf, including email and hosting providers (Portal for Business), IT suppliers (PCI, Cobra CRM), and delivery services (FedEx, DHL);
• Analytics providers, including Google Analytics, which collects website usage data.

All third-party service providers are required to process your information only on our instructions and in accordance with applicable data protection law. We do not authorise them to use your information for their own purposes.

5. Cookies and tracking technologies

Our websites use cookies and similar tracking technologies. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: required for the website to function. These cannot be disabled.
• Analytics cookies: used to understand how visitors interact with our site (e.g. Google Analytics). These collect anonymised usage data.
• Preference cookies: used to remember your settings and choices.

As you navigate through and interact with our websites, we may use automatic data collection technologies, such as cookies, pixels, and analytics to collect certain information about your equipment, browsing actions, and patterns, including:

• Details of your visits to our websites, including traffic data, general location data, logs, and other communication data and the resources that you access and use on the websites.
• Information about your computer and internet connection, including your IP address, operating system, device, and browser type.
• Information about the types of marketing communications that you open and/or to which you respond.
• Page URLs and referrers.
• Information about your interactions with our websites, including your browsing behavior and engagement with our website features.

This information may be shared with the third parties that provide the cookies and other tracking technologies, including real-time sharing. For full details of the cookies in use on this site, please see our Cookie Notice.

You can manage your cookie preferences at any time using the cookie consent tool on this site. California residents may also opt out of the sharing of data collected via analytics cookies by using the 'Do Not Sell or Share My Personal Information' link in the footer of this page.

6. Data retention

We retain your personal information only for as long as necessary for the purposes for which it was collected:

• Contact and enquiry data: retained for the duration of our business relationship and for up to three years thereafter, unless a longer period is required by law.
• Customer and supplier data: retained for the duration of the contractual relationship and for as long as required to comply with legal obligations (including tax and accounting requirements).
• Marketing subscription data: retained until you unsubscribe or request deletion.
• Website analytics data: retained in accordance with the applicable analytics provider's retention settings (default Google Analytics retention is 14 months).

7. International data transfers

TenCate Grass is headquartered in the Netherlands. Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where some of our group entities and service providers are located.

For transfers from the EEA to countries without an adequacy decision, we rely on EU Standard Contractual Clauses as the transfer mechanism. If you would like further information about the safeguards in place, please contact us at the details below.

Note: References in earlier versions of this policy to Privacy Shield certification are no longer applicable. The EU-US Privacy Shield framework was invalidated by the Court of Justice of the European Union in July 2020 (Schrems II). All US transfers are now covered by Standard Contractual Clauses.

8. Security

We maintain appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These include access controls, encryption of data in transit, and regular security reviews.

9. Your rights

Depending on where you are located, you may have the following rights in relation to your personal information.

All users:

• Right to access: you may request a copy of the personal information we hold about you.
• Right to correction: you may request that we correct inaccurate information.
• Right to deletion: you may request that we delete your personal information, subject to certain exceptions.
• Right to restrict processing: you may ask us to limit how we use your data in certain circumstances.
• Right to object: you may object to processing based on legitimate interests.
• Right to data portability: you may request your data in a structured, machine-readable format.

California residents (additional rights under CCPA/CPRA):

• Right to know: you may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months, including the categories of sources, business purposes, and third parties with whom we share it.
• Right to delete: you may request deletion of your personal information, subject to certain exceptions.
• Right to correct: you may request correction of inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell your personal information. We do not share your personal information for cross-context behavioural advertising. If this changes, you will have the right to opt out and a 'Do Not Sell or Share My Personal Information' link will be provided.
• Right to limit use of sensitive personal information: where we process sensitive personal information, you may direct us to limit its use to specified permitted purposes.
• Right to non-discrimination: we will not deny you goods or services, charge you a different price, or provide a lower quality of service because you exercised any of your rights under California law.

10. How to exercise your rights

To exercise any of the rights described above, please contact us by:

Email: privacy@tencategrass.com

Mail: TenCate, 736 Market St, Suite 1700, Chattanooga, TN 37402

We will respond to verified requests within 45 days as required under CCPA, or within one month as required under GDPR. We may ask you to verify your identity before processing your request. We will not charge a fee for reasonable requests.

California residents may also submit requests using the Global Privacy Control (GPC) browser signal, which we will recognize as a valid opt-out signal in accordance with CPRA requirements.

11. Children's privacy

Our websites are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

12. Links to other websites

Our websites may contain links to third-party websites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to this policy

We review and update this policy at least every 12 months. We will post the updated policy on this page with a revised effective date. For material changes, we may notify you by email or by a prominent notice on our website.

14. Contact us

For questions about this policy or about how we handle your personal information, please contact:

TenCate

Privacy / Data Protection

Email: privacy@tencategrass.com

Website: tencategrass.us

EU residents with unresolved concerns may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl. California residents with unresolved conerns may contact the California Privacy Protection Agency at cppa.ca.gov.