Privacy Policy

This Privacy Policy ("Policy") applies to SupplierKit, and SupplierKit LLC ("Company") and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to the Company include https://www.supplierkit.com/. We reserve the right to change this policy at any given time, of which you will be promptly updated. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page.

GDPR Compliance

If your personal information is governed by the GDPR, you may have additional rights, including:

• Requesting erasure of personal information
• Objecting to processing based on legitimate interests
• Requesting restriction of processing
• Requesting data transfer to yourself or a third party
• Withdrawing consent at any time

We process your personal information to fulfill our contractual obligations to you and for our legitimate business interests, such as improving our services.

Using Our Website and Cookies

SupplierKit uses cookies to enhance user experience. Cookies are small data files stored on your device for various purposes, including personalization. Users can disable cookies through their browser settings.

Third-Party Websites

SupplierKit may link to third-party websites and applications for convenience. This privacy policy does not apply to third-party sites, and we are not responsible for their privacy practices. Users access these external sites at their own risk.

Destruction and De-Identification

SupplierKit takes reasonable steps to de-identify or destroy personal information when no longer needed, except where required by law. We retain your personal information for as long as your account is active or as needed to provide you services, and for a period thereafter as necessary to comply with our legal obligations.

Data Storage and Security

We store and process your information using Amazon Web Services (AWS). To ensure the highest level of data sovereignty and compliance with European data protection standards, all primary databases and backups are hosted in the AWS Europe (Frankfurt) Region (eu-central-1).

California Consumer Privacy Act and California Privacy Rights Act

If you are a California resident, you have the following rights under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"):

• Right to Know. You may request details on what personal data we collect, use, and share.
• Right to Delete. You can request deletion of personal data, subject to certain legal exceptions.
• Right to Correct. You may request corrections to inaccurate personal information.
• Right to Opt-Out. You can opt out of the sale or sharing of personal data for advertising.
• Right to Restrict Sensitive Data Use. You may limit the use of sensitive personal information.
• Right Against Retaliation. The Company will not discriminate against you for exercising your rights.

Collection of Your Personal Information

In order to better provide you with products and services offered, the Company may collect personally identifiable information, such as your:

• First and last name
• Email address
• Phone number

We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. To wit, we will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.

Use of Your Personal Information

The Company collects and uses your personal information in the following ways:

• To operate and deliver the services you have requested
• To provide you with information, products, or services that you request from us
• To provide you with notices about your account
• To carry out the Company’s obligations and enforce our rights arising from any contracts entered between you and us, including for billing and collection
• To notify you about changes to SupplierKit or any products or services we offer or provide through it
• In any other way we may describe when you provide the information
• For any other purpose with your consent

The Company may also use your personally identifiable information to inform you of other products or services available from the Company and its affiliates.

Sharing Information with Third Parties

The Company does not sell, rent, or lease its customer lists to third parties.

The Company may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.

The Company may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.

International Transfers

While the Company is based in the United States, your data is primarily stored on servers located in Frankfurt, Germany. By using our services, you acknowledge that your personal information may be accessed by our US-based staff for support purposes, but the physical data residency remains within the EU-central-1 region.

Right to Deletion

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and
• Direct any service providers to delete your personal information from their records.

Under the CCPA and CPRA, you have the right to request that the Company, and any third parties with whom your personal information is sold or shared, delete any personal information that has been collected about you. To exercise your rights, contact us at david@supplierkit.com.

Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, and provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• Comply with an existing legal obligation; or
• Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Email Communications

From time to time, the Company may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. In order to improve our services, we may receive a notification when you open an email from the Company or click on a link therein.

If you would like to stop receiving marketing or promotional communications via email from the Company, you may opt out of such communications by clicking the Unsubscribe link within the email.

Changes to This Statement

The Company reserves the right to change this Policy from time to time. For example, when there are changes in our services, changes in our data protection practices, or changes in the law. When changes to this Policy are significant, we will inform you. You may receive a notice by sending an email to the primary email address specified in your account, by placing a prominent notice on our website, and/or by updating any privacy information. Your continued use of the application and/or services available after such modifications will constitute your: (a) acknowledgment of the modified Policy; and (b) agreement to abide and be bound by that Policy.