Privacy Policy

Last Modified: 11/12/24
This privacy policy ("Privacy Policy") describes the practices of SupplyHouse LLC dba SupplyHouse.com (collectively, "SupplyHouse" or "We" or "Company") for collecting, storing, using, disclosing, and protecting information. This policy applies to information we collect:

(collectively, the "Site"). This Privacy Policy does not apply to other websites to which we may link, or to other companies or persons who might be listed as third party contacts or suppliers on our Site, or to whom we may refer you if you contact us.



What This Privacy Policy Covers
This Privacy Policy describes the following general aspects of our collection and processing of information concerning you:

How We Use Your Information

    We use the information we collect in a variety of ways. We collect information from you because it helps us to provide, improve and deliver our products and services. Specifically, we use the information we collect:
  1. To Provide our Services. For many business purposes, such as to: (i) provide the products you may order, including processing, shipping and tracking orders and returns; (ii) analyze trends and conduct research about improving our products and services; (iii) provide support and respond to questions from customers and Site visitors; (iv) improve our Site, products and/or services; (v) learn about customers' needs; (vi) contact consumers for research, informational, and marketing purposes, including customizing our product recommendations and promotions to you based upon your information and purchases; (vii) track traffic patterns and website/app usage; and (viii) enable online ordering and provide customer service with respect to such orders;
    When permitted by law, we may also use your personally identifiable information to contact you in ways other than email or regular mail, such as via telephone contact, facsimile or text message. When you opt-in, we may provide you with informational text messages regarding the status of your order.

  2. To Market to You. To send you promotional, advertising and other marketing materials or communications from us or our agents; serve you advertisements; and provide you with more relevant advertisements (referred to as "Retargeting"). We may correlate your information with other commercially available information to identify demographics and preferences to assist us in our marketing efforts; and provide specific relevant marketing, promotional, or other information to you. We may also share information about you with our data partners and advertising platforms to aid in increasing the relevance of our ads to you.

  3. To Improve our Business. To help us design and deliver our Site, including but not limited to, as part of our network's functionality, engineering activities, and troubleshooting.

  4. As part of Business Transfers. In the event that we: (i) are subject to negotiations for the sale of our business or part thereof to a third party; (ii) are sold to a third party; or (iii) undergo a re-organization, we may need to transfer some or all of your information to the relevant third party (or its advisors) as part of any due diligence process for the purpose of analyzing any proposed sale or re-organization. We may also need to transfer your information to that re-organized entity or third party after the sale or reorganization for them to use for the same purposes as set out in this policy.
    If we, or substantially all of our assets, were acquired, or in the unlikely event that we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer may continue to use your personal information in accordance with this Privacy Policy.

  5. To Comply With the Law and Our Legal Obligations. To investigate claims and/or legal actions, violations of law or agreements, and as part of complying with relevant applicable laws and legal process. For example, we may disclose your information in order to comply with or respond to a request or requirement pursuant to law or regulation, or from a governmental or judicial body, or to help prevent fraud or for risk management purposes.

  6. To Protect Ourselves and Our Customers. To the extent necessary to detect, block, report and mitigate cyber-threats, improve our network and information security, and in order to prevent or detect fraud. Network and information security means the ability of a network or of an information system to resist events, attacks or unlawful or malicious actions that could compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data, or the security of the related services offered by, or accessible via those networks and systems.
    We may use your information to cooperate with police and other governmental authorities, or to protect the rights, property or safety of visitors to the website, users of our mobile app, or the public.

  7. When We De-Identify or Aggregate Information. We may collect, use, transfer, and disclose information that is de-identified or does not identify you. To the extent we combine information that is de-identified or does not identify you with information that does identify you that we collected directly from you on the Site, we will treat the combined information in accordance with the practices described under this Privacy Policy.

Visitors From Outside of the United States

We are a United States company that utilizes service providers located in the United States and other countries. Therefore, when you use our Site, your information may be transferred to, stored and/or processed outside of the country in which you reside and may be maintained on servers and systems located within the United States or other countries. The data protection laws in the United States and those other countries might not be as strict as those in your country. By using our Site and/or submitting information to us, you specifically consent to the transfer of your information to the United States and those other countries and the facilities and servers utilized by us and those with whom we may share your information.

How We Protect Your Information

We believe in providing a safe and secure experience for all of our online visitors. To that end, we have implemented security measures to protect the information collected from you. We maintain physical, technical, and administrative safeguards designed to limit unauthorized access to your personally identifiable information, and to protect you against the criminal misuse of that information.

We use data encryption technology when transferring and receiving your sensitive personal information, such as credit card or financial account information. For example, in your transactions submitted by you through the Site, a solid key icon or a locked padlock icon at the lower portion of your web browser window confirms the website is secured through Secure Sockets Layer (SSL). Pages requesting personal information should always have one of these icons. You can also confirm your data is being encrypted by looking at the URL line of your browser (the place where you type website addresses). When accessing a secure server, the site address will change from "http" to "https". We are also a VeriSign, Inc. certified company and our systems are tested and certified on a daily basis by "McAfee Secure" Security Scan.

While we use the foregoing security measures to protect your information, please note that no transmission of data over the Internet or any wireless network or stored and utilized for business purposes can be guaranteed to be 100% secure, and no security measures are perfect or impenetrable. As a result, while we strive to protect your information, we cannot ensure that any information we receive, store or otherwise utilize is completely secure. You can reduce security risks by using common sense security practices such as choosing a strong password, using different passwords for different services, and using up to date antivirus software.

Privacy Notice for California Residents

Information We Collect

We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information"). Personal information does not include:

  • Publicly available information from government records.
  • Deidentified or aggregated consumer information.
  • Information excluded from the CCPA's scope, like:
    • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA); or
    • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA) or the Gramm-Leach-Bliley Act (GLBA).
In particular, we have collected the following categories of personal information from our customers within the last twelve (12) months:

Category
Examples
Collected
A. Identifiers.
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
YES
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
Some personal information included in this category may overlap with other categories.
YES
C. Protected classification characteristics under California or federal law.
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
NO
D. Commercial information.
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
YES
E. Biometric information.
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
NO
F. Internet or other similar network activity.
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
YES
G. Geolocation data.
Physical location or movements.
YES
H. Sensory data.
Audio, electronic, visual, thermal, olfactory, or similar information.
YES
I. Professional or employment-related information.
Current or past job history or performance evaluations.
YES
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
NO
K. Inferences drawn from other personal information.
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
YES
L. Sensitive personal information
(1) Personal information that reveals a consumer's: social security, driver's license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; mail, email, and text message content unless we are the intended recipient of the communication; or genetic data; or (2) The processing of biometric information for the purpose of uniquely identifying a consumer; or (3) personal information collected and analyzed concerning a consumer's health, or (4) personal information collected and analyzed concerning a consumer's sex life or sexual orientation.
YES


SupplyHouse obtains the categories of personal information listed above from the following categories of sources:
  • Information that you provide when establishing an account with us;
  • Information submitted or collected when you participate in our surveys, contests, promotions, content submissions, direct messaging and/or chats;
  • Records and copies of your correspondence (including email addresses), if you contact us, including email, voice and chat transcripts;
  • Information when you report a problem with our Site;
  • Details of transactions when you make a purchase from us;
  • Information you may be required to provide regarding contact, billing, payment or other financial information when placing an order with us;
  • Your search queries on our Site;
  • Information provided to us from our advertising and analytics partners;
  • Service providers, who help us maintain and provide our Site;
  • Service providers, who help us provide advertising and track customer interactions on our Site and through advertisements; and
  • Information that you provide when you communicate with any of our departments, such as customer service, sales or technical services through our Site, telephone, mail or fax. In addition, when you communicate by telephone, we may record audio of the conversations for quality control, training, security and analytics purposes.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following purposes:

  • to present our Site and its contents to you;
  • to improve your experience on our Site;
  • to provide you with information, products or services and to communicate with you about information that you request;
  • to carry out our obligations and enforce our rights arising from any contracts, terms and conditions and/or arrangements entered into between you and us, including for billing and collection purposes;
  • to allow you to participate in interactive features on our Site;
  • to receive statistical information about how our Site is being used;
  • to provide you with customer service and to improve how we handle your customer service requests;
  • to process your payments;
  • to schedule and deliver, and provide you with updates regarding the shipment and delivery, of the merchandise you order;
  • to allow you to create an account with us and to provide you with notices about your account;
  • to notify you about changes to our Site, or any products or services we offer or provide though it;
  • to process and contact you regarding your employment applications;
  • to provide you with special offers and discounts;
  • to help us provide you with specific offers, to help us develop and improve our Site, and to tailor our Site and our ads to your interests, and for use in remarketing;
  • to aid our data partners and advertising platforms in increasing the relevancy of our ads to you;
  • generate personas, personal preferences, and market trends from algorithmic and language processing/analysis;
  • to provide you with our newsletter;
  • to allow you to participate in our TradeMaster Program;
  • for the purpose of detecting and fixing bugs or errors with our Site;
  • to help protect your information and prevent fraud;
  • to respond to law enforcement requests and as required by applicable law, court order, or governmental regulations;
  • as described to you when collecting your personal information or as otherwise set forth in the CCPA; and
  • to evaluate or conduct a merger, divestiture, stock sale, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Company's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our customers is among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract. We share your personal information with the following categories of third parties:

  • Service providers.
  • Credit card companies.
  • Third Party Marketing Partners.
  • Third Party Analytics Partners.
  • Related Companies.
  • Shippers.
Disclosures of Personal Information for a Business Purpose: Disclosures of Personal Information for a Business Purpose: In the preceding twelve (12) months, SupplyHouse has disclosed the following categories of personal information for a business purpose:

Category A:
Identifiers.
Category B:
California Customer Records personal information categories
Category D:
Commercial information.
Category F:
Internet or other similar network activity.
Category G:
Geolocation data
Category H:
Sensory data
Category I:
Professional or employment-related information.
Category K:
Inferences drawn from other personal information.

We disclose your personal information for a business purpose to the following categories of third parties:
  • Service providers.
  • Credit card companies.
  • Third Party Marketing Partners.
  • Third Party Analytics Partners.
  • Related Companies.
  • Shippers.
Sales of Personal Information: Cal. Civ. Code § 1798.140 (t)(1) defines "selling" of Personal Information as selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer's personal information by the business to a third party for monetary or other valuable consideration In the preceding twelve (12) months, SupplyHouse has sold the following types of personal information to third parties.

Category A:
Identifiers.
Category B:
California Customer Records personal information categories
Category D:
Commercial information.
Category F:
Internet or other similar network activity.
Category K:
Inferences drawn from other personal information.

Changes to This Notice

We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will post the updated notice on our Site and update the notice's effective date. Your continued use of our Site following the posting of changes constitutes your acceptance of such changes.