Unified Master Privacy Policy

1. SCOPE AND AFFILIATED BRANDS

This Privacy Policy applies to the GME Supply Co. family of brands, including GME Supply, Gearcor, Columbia Safety and Supply, Farwest Line Specialties, and Wayne Enterprises, Inc. (collectively, "the Company"). We operate as a unified entity; information collected on one brand’s platform may be shared within our family of brands to provide you with a seamless and personalized industrial buying experience across our offices and retail locations in Missouri, New York, and Texas.

2. INFORMATION WE COLLECT

Notice at Collection: This section serves as our Notice at Collection under California law. We collect the following categories of information:

• Identifiers: Name, email, shipping/billing address, IP address, and browser ID.
• Promotion-Specific Identifiers Social media handles, user-generated content (such as contest photo or video submissions), and, where required for high-value prize tax reporting, government identifiers (e.g., Social Security numbers).
• Commercial Information: Purchase history, gear preferences, and uniform sizing.
• Professional/Employment Information: Employer name and job title.
• Internet/Network Activity: Browsing history and interactions with our web beacons and pixels.
• Enriched Data: Business profile information from commercial credit bureaus.
• Inferences: Predicted inventory needs based on purchasing trends.

3. ORGANIZATIONAL, UNIFORM, AND CORPORATE ACCOUNTS

If you participate in a corporate uniform program or use our services on behalf of an organization:

• Administrator Access: Your employer’s account administrator or safety manager may have access to your order history, shipping details, and clothing sizes.
• Managed Programs: For brands like Wayne Enterprises and Gearcor that offer managed employee allowance programs, we share utilization data with your employer to facilitate billing and program compliance.

4. BUSINESS USES AND MARKET RESEARCH

We use your data to operate our business in a manner similar to leading digital marketplaces:

• Market Research: We analyze purchasing trends to predict inventory needs.
• Data Analysis: We use third-party tools to analyze navigation and streamline features.
• Safety & Recall Notices: We use your contact information to notify you of manufacturer product recalls.
• Sweepstakes and Contests: We use your information to administer promotions, verify eligibility, notify winners, and fulfill prizes. Participation is voluntary, and specific promotions may be subject to additional Official Rules.

5. SHARING WITH THIRD PARTIES

We do not sell your personal information for monetary compensation. However, we "share" information for cross-context behavioral advertising as follows:

• Service Providers: Shipping carriers, payment processors, and market research firms.
• Manufacturers & Vendors: To validate warranties, facilitate direct-ship orders, or co-administer brand-specific giveaways and prize fulfillment.
• Targeted Advertising: We use third-party pixels to show relevant safety gear ads. This activity may be considered "sharing" under California law.

6. DATA RETENTION AND SAFETY COMPLIANCE

We retain personal information for as long as necessary to provide services and comply with safety standards:

• Transaction Records: Retained for a minimum of seven (7) years to ensure documentation for safety audits and equipment lifecycle tracking.
• Marketing Identifiers: Retained until you opt out or request deletion.
• Promotion Records: Information related to contest entries and prize winners is retained as required by law for tax reporting and promotional compliance.
• Criteria for Retention: We determine retention periods based on the duration of your account relationship, industry safety requirements (e.g., OSHA), and tax audit cycles.

7. YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have the following rights:

• Right to Know: You may request a report of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions (such as safety audit requirements).
• Right to Correct: You may request the correction of inaccurate personal information we maintain.
• Right to Opt-Out: You may opt out of the "sharing" of your data for targeted advertising. You can exercise this right by clicking the "Do Not Sell or Share My Personal Information" link in our footer or by using a Global Privacy Control (GPC) signal.
• Right to Limit: You may request to limit the use of sensitive personal information if used for purposes beyond providing the core service.
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

8. INTERNATIONAL DATA TRANSFERS (NOTICE TO NON-U.S. USERS)

GME Supply Co. is headquartered in the United States. If you are visiting our website or purchasing gear from outside the United States, please be aware that your information will be transferred to, stored, and processed in the U.S. By using our services, you understand and consent to the transfer of your information to our facilities and those third parties with whom we share it as described in this policy.

For residents of the European Economic Area (EEA), United Kingdom, or Switzerland: We process your personal data primarily to fulfill contracts (orders) or based on our legitimate interests in providing safety equipment. You may have certain rights under the GDPR, including the right to access, correct, or erase your data. Please contact us at [email protected] to exercise these rights.