Privacy Policy

Last Modified: May 5, 2026

INTRODUCTION

Facility Guidelines Institute, Inc. (“FGI” or “We”) respect your privacy and are committed to protecting it through our compliance with this privacy policy (this “Policy”). FGI is the data controller for personal information processed pursuant to this Policy.

This Policy describes the types of information we may collect from you or that you may provide when you visit https://fgiguidelines.org/, https://shop.fgiguidelines.org/, https://fgiguidelines.net/, https://FGICodes.org, https://FGICodes.net, https://OneSource.FGICodes.org, and https://FGIUniversity.org, including any content, functionality, applications, platforms, and services offered on or through such websites or FGI (collectively, the “Services”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This Policy applies to information we collect:

On the Services.
In email, text, and other electronic messages between you and FGI.
If applicable, through mobile and desktop applications you download from the Services or from FGI.
When you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this Policy.
Pursuant to any document or form that expressly incorporates this Privacy Policy by reference.

It does not apply to information collected by any third party, including through any application or content (including advertising) that may link to or be accessible from or on the Services.

Further, this Policy does not apply to any personal information collected from or about any of our employees. Personal information collected from any such employees will be protected by our employment policies and handbook.

Please read this Policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using any of the Services or entering into any document or submitting any form that expressly incorporates this Policy by reference, you agree to this Policy. This Policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT

We collect several types of information from and about users of our Services, including information: (i) by which you may be personally identified, such as name, postal address, e-mail address, telephone number, or any other identifier by which you may be contacted online or offline; (ii) that is about you but individually does not identify you, such as job title; and/or (iii) about your internet connection, the equipment you use to access our Services, and usage details (collectively, “personal information”).

FGI collects and processes personal information solely to the extent (i) that it has a legitimate, lawful basis for processing and (ii) that such personal information is relevant to the purposes for which it was collected or disclosed.

We collect this information:

Directly from you when you provide it to us.
Automatically as you navigate through the Services. Information collected automatically may include usage details, IP addresses, and information collected through cookies.
From third parties, for example, our business partners and service providers.

Information You Provide to Us

The information we collect on or through our Services may include:

Information that you provide by filling in forms on our Services or provide to us directly (in person or otherwise). This includes information provided at the time of registering or subscribing to use our Services, requesting further services, or reporting a problem about the Services. To create an account with us, you must provide your name, username, email address, organization, and job category or title. It is optional to provide a profile photo.
Records and copies of your correspondence (including email addresses), if you contact us.
Details of transactions you carry out through our Services and of the fulfillment of your orders. You may be required to provide payment or other financial information before placing an order through our Services. When an order is placed, you must provide your name, email address, phone number, billing address, shipping address (for physical products only), and the requisite payment information, including card brand/type and suffix. We do not store credit card numbers or full payment credentials on our systems; all payment processing and credit card transactions are handled by a third-party payment processor.
Your search queries on the Services.
Your responses to surveys that we might ask you to complete.

Our basis for collecting and processing this information is (i) performance of the contract with, or request by, you; (ii) your consent with regard to personal information you volunteer with regard to your correspondence, survey responses, complaints, or business concerns; (iii) your consent with regard to any personal information you provide us that is considered sensitive (e.g. information on your health or ethnic origin); and (iv), in some cases, a legal obligation to which we are subject (e.g., maintaining transaction records and records of certain correspondence).

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Services, we may use automatic data collection technologies to collect certain information about your equipment, device, browsing actions, and patterns, including:

Web server traffic information. This information tells us the number of visitors to our site, how long they stay on the Services, and links from other sites that led them to us. We collect aggregate data rather than individual user information, and we use this group data to improve our Services. The web server traffic information we collect automatically is only aggregate statistical data and does not include personal information.
Usage and technical data. We collect limited usage and technical data, including content views and feature interactions to enforce subscription and trial limits, as well as technical identifiers such as IP address and user-agent data as required for the operation, security, and reliability of our Services.

Information we collect automatically helps us to improve our Services and to deliver a better and more personalized service, including by enabling us to:

Estimate our audience size and usage patterns.
Store information about your preferences, allowing us to customize our Services according to your individual interests.
Speed up your searches.
Recognize you when you return to our Services.

The technologies we use for this automatic data collection may include cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of the Services.

Cookies are used in accordance with user preferences set through our cookie banner.

Strictly necessary/essential cookies (required) support authentication, core functionality, security, and necessary user preferences.
Analytics cookies (optional) are used to understand the usage and performance of our Services.
Marketing cookies (optional) support marketing attribution.

Users may withdraw consent to cookies at any time through the cookie banner. Withdrawal does not affect prior lawful processing.

Our basis for collecting and processing this information is (i) your through our cookie banner; and (ii) for strictly necessary or essential cookies, our legitimate interests in ensuring network and information security, including preventing unauthorized access to electronic communications networks and stopping damage to computer and electronic communication systems security, fraud prevention, diagnostics, and service reliability.

THIRD-PARTY USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES

Some content or applications on the Services are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons, pixels, or other tracking technologies to collect information about you when you use our Services. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible third party directly.

HOW WE USE YOUR INFORMATION

We use information that we collect about you or that you provide to us, including any personal information:

To present our Services and their contents to you.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it.
To create, maintain, customize, and secure your account with us.
To carry out our obligations, legal or otherwise, and enforce our rights arising from any contracts entered into between you and us, including for performing administrative services requested or necessary to facilitate our relationship (e.g., facilitating payments, billing, collection or deliveries of products, services, information or materials).
To notify you about changes to our Services or any products or services we offer or provide though them.
To provide you with support and to respond to your inquiries.
To provide you with news and general information about products, services and events, if permitted by applicable law, unless you have opted not to receive such information.
To improve your experience.
To monitor the usage of the Services.
To detect, prevent and address technical issues with the Services.
To prevent harm to FGI, our products or services, or to any person or property (e.g., fraud prevention) and/or in the bringing or prosecution of a claim or potential claim against you or defending FGI against claims or potential claims made against us.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of FGI’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by FGI about our users is among the assets transferred.
For any other purpose with your consent.

We use limited automated processes to support service operation, including logic that tracks usage of the Services and enforces subscription or free-trial access limits. These processes are necessary for contract performance, are limited to service access control, and do not involve profiling or producing legal or similarly significant effects beyond service availability.

RETENTION OF YOUR INFORMATION

We will retain your personal information for the period necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required or allowed by law. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you and provide requested products or services to you;
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them);or
Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

DISCLOSURE OF YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties.

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide as described in this Policy:

To our subsidiaries and affiliates.
To contractors, service providers, and other third parties we use to support our business and perform certain services on our behalf but only to the extent necessary.
To our sponsors in connection with their sponsorship of our products, services, and events.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of FGI’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by FGI about our Services’ users is among the assets transferred.
To fulfill the purpose for which you provide it.
With your consent or at your request.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our terms of use (available at: https://fgiguidelines.org/terms-privacy-policy/) and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of FGI, our customers, or others.

When we engage contractors, service providers, and other third parties (“Agents”) to support our business and perform certain services on our behalf, these Agents also may need to disclose personal information collected on our behalf with us. Our Agents include the following categories of third-party recipients:

Payment Processors: (e.g. Stripe) to securely handle credit card transactions.
Logistics Providers: for shipping and handling products.
Cloud Infrastructure Providers: for data storage and hosting.
Email Service Providers: to send transactional emails and newsletters.
Analytics Providers (optional): to understand how our Services are used in order to improve said Services.
Legal Representation: to prevent harm to our company, our products or services or a person or property.

We are liable to you for our Agents’ processing of your personal information in a manner consistent with this Policy and applicable data privacy laws and regulations.

When FGI transfers personal information to countries other than the country where it was provided, we do so in compliance with applicable data privacy laws and/or regulations, including, as applicable, the GDPR. We will not transfer personal information subject to the GDPR and relating to you to a country outside EEA unless: (1) the country or recipient is covered by an adequacy decision of the European Commission under GDPR Article 45; (2) appropriate safeguards have been put in place which meet the requirements of GDPR Article 46 (for example using the Standard Contractual Clauses); or (3) one of the derogations for specific situations under GDPR Article 49 is applicable to the transfer. These include (in summary) if the transfer is necessary to perform, or to form, a contract to which we are a party; the transfer is necessary for the establishment, exercise or defense of legal claims; you have provided your explicit consent to the transfer; or the transfer is of a limited nature, and is necessary for the purpose of our compelling legitimate interests.

CHOICES ABOUT HOW WE USE AND DISCLOSE YOUR INFORMATION

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Services may then be inaccessible or not function properly.
Promotional Offers from Us. If you do not wish to have your email address used by us to promote our own or third parties’ products or services, you can opt-out by following the unsubscribe link or instructions provided in any email we send.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

LINKS FROM THE Services; THIRD-PARTY COLLECTION

If the Services contain links to other sites and resources provided by third parties, these links are provided for your convenience only. In addition to links from the Services, we cooperate with a number of third parties to provide resources which relate to our services in other formats. These third parties may also independently collect information on their own behalf, in person or through other means, in connection with services provided by us. We have no control over third-party collection and use of your information or the contents of third-party sites or resources, and accept no responsibility for them or for any loss or damage that may arise from your use of, or provision of information in connection with, any of them. If you decide to access any of the third-party websites linked to the Services or otherwise provide information to any third parties, you do so entirely at your own risk and subject to the terms and conditions of use for such websites or other policies provided by such third parties at the time of collection.

We do not guarantee that you will receive notice or an alert when providing information to a third party or when you leave our Services, and it is your responsibility to determine the party to whom information is being provided or when you have left the Services. Any personal information you provide to a third party, including through linked pages or applications, is provided directly to that third party and is subject to that third party’s privacy and other policies. We encourage you to learn about the privacy and security practices and policies of any third party before providing them with personal information.

YOUR RIGHTS WITH REGARD TO YOUR PERSONAL INFORMATION

To the extent provided under applicable data privacy or data protection laws, you may have the following rights to obtain from us: (i) confirmation as to whether or not we process personal information from you and, where that is the case, access to the personal information; (ii) rectification of inaccurate personal information; (iii) erasure of personal information; (iv) restriction of processing of personal information; and (v) receive the personal information which you have provided to us and transmit those data to another data controller without hindrance. If you have such rights, you may exercise any of these rights by contacting us at info@fgiguidelines.org.

You may also have the right to lodge your complaints with the applicable legal authorities, including, without limitation, the applicable E.U. supervisory authority(ies), the U.K. Information Commissioner, and the Swiss Federal Data Protection and Information Commissioner.

We will respond to your requests in accordance with, and within the appropriate timeframe determined by, the applicable law and/or regulation governing the use of the given personal information. In most cases, we will respond to requests within one month; provided, however, if the request is complex, we may extend our response time in accordance with applicable law and regulation.

We will contact users to obtain prior affirmative express consent when the same is required when it is required by the scope of the GDPR, the U.K. Data Protection Laws, the FADP and/or the Standard Contractual Clauses. Where we process your data on the basis of your consent, we will ask for your consent explicitly but, in some cases and only where permitted by applicable law, we may infer in a transparent manner consent from your actions. We may also ask you to provide additional consent if we need to use your personal information for purposes not covered by this Policy.

CHILDREN’S PRIVACY

Our Services are not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Services. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on the Services or through any of its features, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at info@fgiguidelines.org.

DISCLAIMER

FGI strives to provide informative, timely, accurate material on our Services. However, the information provided should not take the place of professional guidance or advice. FGI and others who provide information posted on the Services are not responsible for errors or omissions in the information provided or any actions that result from use of such information. Corrections and additions to the content on the Services are made when necessary and as time permits.

DATA SECURITY

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we work to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Services.

USE OF MATERIAL

FGI retains the copyright to the content of its Services, unless otherwise noted. To request permission to reprint or reuse information from the Services, contact us. Use of FGI’s logos and use of the FGI Codes for Planning and Design and FGI’s Guidelines for Design and Construction documents without FGI’s prior consent is strictly prohibited. Please send written requests describing the intended use, timeframe, and contact information to info@fgiguidelines.org.

INTERNATIONAL TRANSFERS

When FGI transfers personal information to countries other than the country where it was provided, we do so in compliance with applicable data privacy or data protection laws and/or regulations, including, as applicable, the European Union General Data Protection Regulation 2016/679 (the “GDPR”), the European Union retained law version of the GDPR (as adopted by the United Kingdom (the “U.K.”)) and the U.K. Data Protection Act 2018 (c.12) (collectively, the “U.K. Data Protection Laws”), Switzerland’s Federal Act on Data Protection (“FADP”) and/or the standard contractual clauses for controller to processor transfers and/or for controller to controller transfers, all as set out in the European Commission Decision of 5 February 2010 (2010/87/EU), or any variation thereof that is required, as a result of any change or difference in applicable data protection law(s) or regulation(s) or a change in a decision of a competent authority under any applicable data privacy or data protection law or regulation, to allow such transfers to be made (or continue to be made) without breach of any applicable data privacy or data protection law or regulation, (collectively, the “Standard Contractual Clauses”). We may transfer personal information from persons outside of the U.S. to FGI or third parties located either in the U.S. or otherwise, provided that such transfers to the U.S. or other countries from any of the European Economic Area (the “EEA”) member states, the U.K. or Switzerland will comply, as applicable, with the GDPR, U.K. Data Protection Laws, FADP and/or the Standard Contractual Clauses in all respects.

CHANGES TO OUR PRIVACY POLICY

It is our policy to post any changes we make to this Policy on this page. The date the Policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Services and this Policy to check for any changes.

CONTACT INFORMATION

To ask questions or comment about this Policy and our privacy practices, contact us:

By mail at PO Box 60628, Florence, MA 01062.

By email at info@fgiguidelines.org.