Trinity Industries, Inc. Privacy Policy

Last Updated: May 7, 2026

Trinity Industries, Inc. and its affiliates and subsidiaries (“Trinity,” “us,” “our” or “we”) value your privacy. This privacy policy (the “Privacy Policy”) describes how Trinity collects, stores, uses, discloses, and otherwise processes the Personal Information (as defined below) described in this Privacy Policy and the rights and choices individuals have regarding such Personal Information. Trinity is primarily a business-to-business entity providing industrial products and services to its business customers in the industrial, energy, transportation, and construction sectors.

By using our Services (as defined below), you agree that your Personal Information will be handled as described in this Privacy Policy. Your use of our Services and any dispute over privacy is subject to this Privacy Policy and our Terms of Use, including their applicable terms governing limitation of damages. We periodically update our Privacy Policy, so please check back here for the latest version.

Scope of This Privacy Policy
Personal Information We Collect
How We May Use Personal Information
How We May Disclose Personal Information
Cookies and Other Tracking Mechanisms
Your Privacy Rights and Choices
Children’s Information
Retention
Security
Changes to the Privacy Policy
Questions and Contact Information

1. Scope of This Privacy Policy

Except as otherwise described below, this Privacy Policy applies to the Personal Information Trinity collects and processes related to: individuals who visit our websites and mobile apps on which this Privacy Policy is posted (the “Sites” and “Apps”); individuals who download and use any of our interactive features, widgets, applications, or content we make available through the Sites and Apps; current, former, and prospective business customers, agents, vendors, and business partners who interact with us; and individuals who communicate or otherwise interact or engage with us or the products or services available through the Sites and Apps (collectively referred to as the “Services”).

Depending on how you interact or engage with us, we may provide you with supplemental privacy notices with additional details about our privacy practices. For example, this Privacy Policy does not apply to job applicants and candidates who apply for employment with us or to employees in the context of our working relationship with them. To the extent we provide you with different or additional privacy notices, those additional notices shall govern such data collection and use.

2. Personal Information We Collect

As further described below, we collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you (“Personal Information”). We may collect Personal Information directly from you, automatically through your use of the Services, and from other, third-party sources. To the extent permitted by applicable laws, we may combine the information we collect from publicly available or third-party sources.

2.1 Personal Information We Collect Directly From You

The Personal Information we collect varies depending on whether you are a customer or other website visitor. The Personal Information we collect may also depend on your use of our Services and our interactions with you. In general, we may collect the following Personal Information directly from you:

Identifiers. When you contact us, including if you sign up to learn more about our Services, fill out our web forms, or otherwise communicate with us, we may collect your name, alias, phone number, postal address, email address, the nature of your inquiry, unique personal identifier, online identifier, IP address, account name, or other similar identifiers and any other information you choose to provide.
Customer Records. Includes your account and profile information and customer records that contain Personal Information, such as account credentials, communications preferences, billing and payment information, customer service and support tickets and records, and other information you provide.
Professional Information. If applicable, we may also collect professional-related information, such as related to your job title, company name, business address, business email and phone number, and certain professional licensing and qualifications. In some circumstances, we may also collect information related to your education.
Communications and Interactions. When you email, call, or otherwise communicate or interact with us and with members of our team, we may collect and maintain a record of your contact details, communications, and our responses.
Protected Classifications. With your consent, to comply with applicable law, we may collect certain characteristics of protected classifications, such as sex, age, and marital status.
Events and Other Requests. We also may collect information related to your participation in our events as well as other requests that you submit to us related to our Services. For example, if you register for or attend events we host or sponsor, we may collect information related to your registration for and participation in such event.
Commercial Information. Such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Business Development Information. To assess and pursue potential business opportunities, we may collect and receive Personal Information about current, former, and prospective business customers, agents, vendors, and business partners, including name, company information, contact details, and communications records.
Inferences. Such as inferences drawn from any of the information described in this section about a consumer including inferences reflecting the consumer’s preferences, characteristics, behaviors, attitudes, abilities, and aptitudes.
Audio, Electronic, Visual, or Similar Information. Includes information collected via call recordings if you are interacting with us in a customer service capacity or if you call us on a recorded line, recorded meetings and webinars, videos, photographs, and CCTV footage to secure our offices and premises.

2.2 Personal Information We Collect Automatically

We and our service providers may automatically collect Personal Information related to your use of the Services through cookies, pixel tags, software developer kits, and other similar technologies. The Personal Information we may automatically collect when you visit our Sites and Apps or interact with our Services may include:

Internet or Other Electronic Network Activity Information. Includes, but is not limited to, browsing history, clickstream data, search history, information regarding interactions with our website, advertisements, or emails, and usage data such as page views, links and items clicked, features used, scrolling activity, time spent within the Services, and other activity and usage related.
Geolocation Data. We may collect device location information about you, such as through your IP address. We may also collect device location information about you through our fleet management software.

For more information about our use of cookies and other similar technologies, please see the “Cookies and other Tracking Mechanisms” section below.

2.3 Sources of Personal Information

In addition to the information you directly provide to us, we may collect and receive Personal Information about you from affiliates and subsidiaries, business partners, clients and customers, data analytics providers, social networks, Internet service providers, operating systems and platforms, government entities, public databases, information brokers, and vendors and service providers who provide services or perform functions on our behalf. For example, we may collect certain contact information, such as your name and email, from our business partners, and vendors and service providers. We also may receive certain Personal Information from our business customers and clients for the purposes of administering our Services, or data analytics and marketing providers for purposes of reaching new customers.

3. How We May Use Personal Information

We may use the Personal Information we collect or receive about you for the following purposes:

Services and Support. To provide you with information or Services that you have requested or agreed to receive and to enable you to participate in a variety of the Services’ features.
Analytics and Improvement. To conduct research and for analytical purposes, such as to evaluate and improve our Services or their functionality, to customize your experience within our Services, to better understand how users’ access and use the Services and for internal business purposes; or to serve you specific content that is relevant to you.
Communication with You. To contact you with regard to your use of the Services and, in our discretion, changes to the Services and/or Services’ policies. Additionally, to provide and operate our Services, communicate with you about your use of the Services, respond to your inquiries, provide troubleshooting and technical support, and to otherwise run our day-to-day operations.
Marketing and Promotions. To provide you with marketing materials or communications related to our Services.
Research and Surveys. To administer surveys and questionnaires and to conduct research and further develop our Services (in some cases, this may include working with trusted third parties to perform research).
Planning and Managing Events. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financing, and to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions.
Security and Protection of Rights. To develop Services, provide support and improve the security of our Site and Services by investigating and resolving reported complaints and security issues and processing your registration submitted through the Services, including verifying your information is active and valid.
Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, to respond to a subpoena, warrant, court order, or other legal process, or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
Auditing, Reporting, and Other Internal Operations. To conduct financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; our general business, accounting, recordkeeping and legal functions; and to maintain appropriate Business Records and enforce company policies and procedures.
General Business and Operational Support. To protect the Services and our business operations, to protect our rights or those of our stakeholders, to prevent and detect fraud, unauthorized activities and access, and other misuse and where we believe necessary to investigate, prevent or take action regarding illegal activities, situations involving potential threats to the safety or legal rights of any person or third party, or to investigate violations of our Terms of Use or this Privacy Policy; and for purposes disclosed at the time you provide your information or as otherwise set forth in this Privacy Policy.

4. How We May Disclose Personal Information

We may disclose the Personal Information we collect with the following:

Affiliates, Subsidiaries, and Business Partners. We may disclose the Personal Information we collect to our corporate affiliates and subsidiaries. Trinity also partners with other businesses to offer our products and Services, and we may disclose Personal Information to those business partners.
Vendors and Services Providers. We may disclose the Personal Information we collect to vendors and service providers who perform functions on our behalf, such as IT and website and mobile app hosting, marketing and marketing research providers, customer support, data storage, payment processing providers, data analytics providers, auditors, consultants and legal counsel.
Marketing and Analytics Providers. We may also disclose your Personal Information, such as device and browsing, and activities and usage information, to marketing and advertising networks, data analytics providers, and other companies who provide marketing or analytics services on our behalf. For more information, see the “Cookies and Other Tracking Mechanisms” section below.

We may disclose your Personal Information for the following purposes:

Operating Our Business. To our business partners, affiliates and subsidiaries, and vendors and service providers in order to operate our business, provide our Services, and otherwise run our day-to-day operations consistent with the business purposes outlined under Section 3 above.
In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the Personal Information we have collected from you with or to the other company. We may also disclose certain Personal Information as necessary prior to the completion of such a transaction or other corporate transaction such as a financing or restructuring, to lenders, auditors, and third-party advisors, including attorneys and consultants.
Security and Protection of Rights. Where we believe it is necessary to protect the Services, our rights and property, or the rights, property, and safety of others, we may disclose Personal Information to (i) prevent, detect, investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services, (ii) situations involving potential threats to the health, safety, or legal rights of any person or third party, or (iii) enforce, detect, investigate, and take action in response to violations of our Terms of Use. We may also disclose Personal Information related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
Legal Obligations. To comply with legal and regulatory obligations (e.g., pursuant to law enforcement inquiries, regulatory investigations, subpoenas, or court orders), we may also share Personal Information to establish or protect our legal rights, property, or safety, or the rights, property, or safety of others.
Aggregated and Deidentified Information. Notwithstanding anything else in this Privacy Policy, we may use, disclose, and otherwise process aggregate and deidentified information related to our business and the Services with third parties for quality control, analytics, research, development, and other purposes.
Other Disclosures. We may disclose Personal Information in other ways not described above that we notify you of or that we obtain your consent for, as required by applicable laws.

5. Cookies and Other Tracking Mechanisms

We use cookies, pixel tags, web beacons, imbedded scripts, software developer kits and other similar tracking mechanisms to automatically collect information about browsing activity, type of device, and similar information within our Services (collectively, “Tracking Technologies”). We use this information to, for example, analyze and understand how you access, use, and interact with our Services, to identify and resolve bugs and errors in our Services, to assess, secure, protect, optimize, and improve the performance of our Services, as well as for marketing and advertising purposes, analytics purposes, and to personalize content in our Services. We may also aggregate such information to analyze trends, administer our Services, and gather broad demographic information for aggregate uses.

5.1 Cookies

“Cookies” contain information that Trinity or our service providers transfer to your device through a web browser for tracking, performance, or functionality purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within the Services.

To prevent cookies from tracking your activity on our websites and mobile apps or visits across multiple websites and mobile apps, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Individuals who visit our Sites who disable cookies will be able to browse the Websites, but some features may not function.

5.2 Pixel Tags

Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these pixel tags in connection with our Services to, among other things, track the activities of users and help us manage content and compile usage statistics. We may also use these in our emails to let us know when they have been opened or forwarded so we can track response rates and gauge the effectiveness of our communications.

5.3 Third-Party Analytics

We use third-party tools, such as Google Analytics, which are operated by third-party companies to evaluate usage of our Website, Mobile App, and Services. These third-party analytics companies use cookies, pixels, and other tracking technologies to collect usage data about our Services to provide us with reports and metrics that help us evaluate usage of our Services, improve our websites and mobile apps, and enhance performance and user experiences. To learn more about Google’s privacy practices, please review the Google Privacy Policy. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics.

5.4 Software Development Kits

We may use software development kits (“SDKs”) which are operated by third-party companies to gather information when you interact with our Mobile App. Some online tracking technologies help us maintain the security of our websites and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

5.5 Cross Device Tracking

We and our providers may use the information we collect about you within our Services and on other third-party websites, mobile apps, and services to help us and these third parties identify other devices that you use (e.g., a mobile phone, tablet, other computer, etc.) to interact or engage with us or the Services.

6. Your Privacy Rights and Choices

6.1 Information for California Residents

If you are a resident of California, please see below for additional rights you may have.

Your California Privacy Rights

The California Consumer Privacy Act (“CCPA”)¹ provides California residents with certain rights regarding their Personal Information. In general, California residents, including our business contacts who reside in California, have the following rights with respect to their Personal Information, subject to certain exceptions:

Right to Know/Access. With respect to the Personal Information we have collected about you, you have the right to request:
- The categories of Personal Information we collected about you;
- The categories of sources from which the Personal Information is collected;
- Our business or commercial purposes for collecting and disclosing Personal Information;
- The categories of third parties to whom we have disclosed your Personal Information; and
- A copy of the specific pieces of Personal Information we collected about you.
Right to Correct. You have the right to request that we correct inaccuracies in your Personal Information.
Right to Delete. You may have the right to request that we delete the Personal Information we have collected from you.
Right to Opt-Out of Sales and Sharing. We do not “sell” or “share” Personal Information as defined under the CCPA.
Right to Limit Use and Disclosure. We do not use or disclose “sensitive personal information” for purposes that would require us to comply with a “right to limit” request under CCPA.
Right to Non-Discrimination. We will not discriminate against you for exercising any of the rights described in this section.

Exercising Your Rights. If you are a California resident and would like to exercise any of these rights, please use our contact information in Section 11.

For all requests submitted via mail, please clearly state that the request is related to your “California Privacy Rights” and provide your name, mailing address, and phone number where you may be reached.

Verification. Before we can respond to your request, we must first verify your identity using the Personal Information you recently provided us. We will take steps to verify your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information in order to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for the denial.

Authorized Agent. You may designate someone to submit requests and act on your behalf. Authorized agents will be required to provide proof of their authorization in their first communication with us, and we may also require that the relevant consumer directly verifies their identity and the authority of the authorized agent.

¹ References to the CCPA should be understood to include the California Privacy Rights Act (CPRA), as the CPRA amended and expanded the CCPA.

6.2 Information for Mexico Residents

If you are a resident of Mexico, you may have the following rights:

Right of Access. You have the right to confirm with us whether we process your personal data, and if it is, to request access to that personal data, including the categories of personal data processed, the purpose of the processing, and the recipients or categories of recipients of that data.
Right to Rectification. You may at any time request to rectify inaccurate or incomplete personal data concerning you. We encourage you to review any information you have provided to us regularly to ensure that it is accurate and up to date, and to inform us of any changes as soon as possible.
Right to Cancelation. You have the right to ask us to cancel and remove your personal data from our records or databases. The cancellation of your personal data will give rise to a blocking period after which the data will be deleted.
Right to Object. You can object to the use of your personal data for specific purposes.
Right to Revoke Consent. You may revoke the consent you have given us for the processing of your personal data. However, not in all cases we will be able to fulfil your request or terminate the use immediately, since due to a legal obligation we may need to continue processing your personal data.
Limit the Usage or Disclosure. You may limit how we use or disclose your personal data for advertising or promotion communications.

How We May Use Personal Information

Under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (“FDPL”), the following processing purposes (as described above) are considered secondary, as they are not necessary for the existence, maintenance and compliance of the legal relationship that you may have with us:

Research and Surveys.
Marketing and Promotions.
Planning and Managing Events.

Exercising Your Rights. If you are a resident of Mexico and would like to exercise any of these rights please use our contact information in Section 11.

6.3 Information for Canada Residents

If you are a resident of Canada, you may have the following rights:

Your Canada Privacy Rights

Right to Access. You may have a right to request access to the Personal Information we have collected from you;
Right to Correct. You may have a right to request that we correct or rectify inaccuracies in your Personal Information; and
Right to Withdraw Consent. You may have a right to withdraw your consent to the processing and disclosure of your Personal Information.

Exercising Your Rights. If you are a resident of Canada and would like to exercise any of these rights, please use our contact information in Section 11.

6.4 Information for India Residents

If you are a resident of India, you may have the following rights:

Right to request review. You may have the right to request review of your Personal Information.
Right to rectification or correction. You may have the right to rectify or correct your Personal Information.
Right to withdraw consent. You may have the right to withdraw consent, however, Services which require such information may not be available or provided to you.

Exercising Your Rights. If you have any questions or concerns regarding our use of your Personal Information, or if you wish to exercise any of your rights, please see Section 11 on how to contact us.

6.5 Information for Saudi Arabia Residents

If you are a resident of Saudi Arabia, you may have the following rights:

Right to Information. You have the right to be informed about the processing of your Personal Information.
Right to Correction. You may ask to have your Personal Information corrected. The accuracy of your information is important to us. If you change your name or address/email address, or you discover that any of the other information we hold is inaccurate or out of date, please let us know using our contact information stated in Section 11. Once we receive your notice, we will cease processing of your information that is incomplete or inaccurate.
Right to Withdraw Consent to Processing. Where we rely on your consent as the legal basis for processing your Personal Information, you may withdraw your consent at any time by contacting us using our contact information stated in Section 11. If you would like to withdraw your consent to receiving any direct marketing to which you previously opted in, you can also do so by using the unsubscribe link in our emails.
Right to Erase. You may ask for your Personal Information to be removed from our systems or from paper records if certain conditions are met in order to exercise this right.
Right to Access. You have the right to access your Personal Information and to obtain a copy of your personal data in a clear and readable format. We may not provide you with a copy of your Personal Information if this concerns other individuals or if we have another lawful reason to withhold that information such as if the request is unfounded or excessive, or if the personal data is erased.
Right to Lodge Complaint with Data Protection Regulator. You can contact the Saudi Data & Artificial Intelligence Authority (“SDAIA”) at the SDAIA website (https://sdaia.gov.sa) or via the National Data Governance Platform (https://dgp.sdaia.gov.sa). However, if your Personal Information has been used in a way that you believe does not comply with the applicable Data Protection Law, we encourage you to contact us first through our contact information listed in Section 11, and we will seek to resolve any issues or concerns you may have.

Exercising Your Rights. If you are a resident of Saudi Arabia and would like to exercise any of these rights, please use our contact information in Section 11.

If you submit a request to exercise your rights, we may ask you for information to verify your identity and, where applicable, to help us search for your Personal Information. This is necessary to respond to your request and is necessary in our legitimate interest to respond. We will respond to you within thirty (30) calendar days after receiving a complete request from you. If we require additional information from you, we may need an additional thirty (30) calendar days to fulfill your request.

6.6 Transfer of Information to the United States, Your Jurisdiction Rights

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), Canada, Mexico, Saudi Arabia or India, please be aware that the Personal Information you submit, including information provided through our Services, is being sent to a location in the United States. The data protection laws in the United States may differ from those of the country in which you are located, and your Personal Information may be subject to access requests from governments, courts, or law enforcement in the United States according to laws of the United States. By providing such Personal Information, you are consenting to (and represent that you have authority to consent to) the transfer of such information to the United States for the uses and purposes described in this Privacy Policy.

If the data protection laws in the United States differ from those of your jurisdiction and are not recognized by the relevant authorities as providing an adequate level of data protection, transfers will be compliant with the applicable data protection law. This includes implementing appropriate safeguards (such as Standard Contractual Clauses or Binding Corporate Rules, where relevant) and ensuring that suitable technical and organizational security measures will be in place. These measures are designed to protect personal data against accidental or unlawful destruction, accidental loss or alternation, unauthorized disclosure or access, and all other unlawful forms of processing. To the extent required by applicable law, only the minimum necessary Personal Information will be transferred outside of the applicable jurisdiction.

7. Children’s Information

We offer Services to businesses for the manufacture, lease, or purchase of railcars, and it is not intended for use by minors, including children under the age of eighteen. We do not knowingly collect Personal Information from children under the age of 18. If you are a child under 18 years of age, you are not permitted to use our Sites and Apps and you should exit this Site or App immediately. In the event that we become aware that we have collected Personal Information from any child, we will dispose of that information. If you are a parent or guardian and you believe that your child under the age of 18 has provided us with Personal Information, please contact us as described below.

8. Retention

We retain your Personal Information for as long as needed, or permitted, based on the reason we obtained it (consistent with applicable law). When deciding how long to keep your Personal Information, we consider whether we are subject to any legal obligations (e.g., any laws that require us to keep records for a certain period of time before we can delete them) or whether we have taken any legal positions (e.g., issued any legal holds or otherwise need to preserve the information). From time to time, we may also deidentify your Personal Information, retain it, and use it in compliance with the CCPA.

9. Security

We have implemented commercially reasonable safeguards that are intended to protect the Personal Information that we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

10. Changes to the Privacy Policy

We may add to, update, delete from or modify our Privacy Policy at any time at our sole discretion. If we make changes to this Privacy Policy that materially change how we handle your Personal Information, we may post or display notices of changes on our Site, in accordance with applicable laws. Once posted, these changes to the Privacy Policy are effective immediately. If any change that we make is not acceptable to you, you should stop using our Site, App or Services. If you continue to use our Services, doing so is your agreement to be bound by those changes. You should check back regularly and review this Privacy Policy so that you are aware of the most current rights and obligations that apply to your agreement with us.

11. Questions and Contact Information

If you have questions about this Privacy Policy, you may contact:

Trinity Industries, Inc.
Attn: Brian Mork, Chief Privacy Officer
Email: Privacy@Trin.net
Phone: 1-800-492-4420
14221 N. Dallas Parkway, Suite 1100
Dallas, TX 75254

If you reach out to us with questions or comments about the Services, the Privacy Policy, or the Terms of Use, we will share your messages with those within our organization who are most capable of addressing the issues contained in your message. We will keep a copy of your message until we have had an opportunity to address your concerns. We may archive your message for a certain period of time or discard it.