Privacy Policy

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information we collect may include the following:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Company name and business details
• Job titles
• Usernames and passwords
• Contact preferences
• Contact or authentication data
• Billing addresses
• Debit/credit card numbers
• Purchase order numbers and business financial data

Sensitive Information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information:

• Financial data (payment instruments, bank account details for B2B transactions)
• Social security numbers or other government identifiers (for business account verification)

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by our payment processors (e.g., Stripe). You may find their privacy notice at https://stripe.com/privacy.

Information automatically collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include:

• Log and Usage Data — IP address, browser type, pages viewed, date/time stamps, and device event information
• Device Data — hardware model, operating system, device identifiers, and ISP information
• Location Data — approximate location based on IP address or GPS (with your permission)

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, including:

• To facilitate account creation, authentication, and B2B company account management
• To deliver and facilitate delivery of products and services
• To respond to user inquiries and offer support
• To send administrative information about products, services, and policy changes
• To fulfill and manage your orders, payments, returns, and exchanges
• To process B2B purchase orders and invoice management
• To send marketing and promotional communications (with your consent)
• To protect our Services through fraud monitoring and prevention
• To evaluate and improve our Services, products, marketing, and your experience
• To comply with our legal obligations

3. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

• Business Transfers. We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition.
• Payment Processors. We share payment information with our payment processing partners (e.g., Stripe) to facilitate transactions.
• Shipping & Fulfillment Partners. We share necessary shipping information with our logistics partners to deliver your orders.
• Affiliates. We may share your information with our affiliates, including our parent company Vulcan Construction Group LLC and any subsidiaries.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

4. Do We Use Cookies and Other Tracking Technologies?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising. We may use Google Analytics to track and analyze the use of the Services. To opt out of being tracked by Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

5. How Do We Handle Your Social Logins?

In Short: If you choose to register or log in to our Services using a social media account, we may have access to certain information about you.

Our Services may offer you the ability to register and log in using your third-party social media account details. If you choose to do so, we will receive certain profile information from your social media provider, which may include your name, email address, and profile picture. We will use the information only for the purposes described in this privacy notice.

6. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than twenty-four (24) months past the termination of the user's account. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

7. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. This includes encryption of payment data, secure API communications, and access control mechanisms. However, despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. You should only access the Services within a secure environment.

8. Do We Collect Information from Minors?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at privacy@orderjunky.com.

9. What Are Your Privacy Rights?

In Short: You may review, change, or terminate your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at privacy@orderjunky.com.

Opting out of marketing communications: You can unsubscribe from our marketing communications at any time by clicking "unsubscribe" in our emails, replying "STOP" to SMS, or by contacting us.

Account Information: If you would like to review, change, or terminate your account, you can contact us. Upon your request, we will deactivate or delete your account and information from our active databases, though we may retain some information for fraud prevention and legal compliance purposes.

10. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature or setting. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

11. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a resident of Colorado, Connecticut, Utah, Virginia, or California, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy, or delete your personal information.

Your rights include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of your personal data
• Right to non-discrimination for exercising your rights
• Right to opt out of targeted advertising, sale of personal data, or profiling

To exercise these rights, contact us at privacy@orderjunky.com.

12. Financial Data & Payment Processing

As a fintech-enabled e-commerce platform, we take additional care with financial data:

• PCI DSS Compliance: All payment card data is processed through PCI DSS-compliant payment processors. We do not store full credit card numbers on our servers.
• B2B Account Data: Business account information including company details, tax identification numbers, and purchase order data is encrypted at rest and in transit.
• Transaction Records: We retain transaction records as required by applicable tax and accounting regulations.
• Third-Party Payment Processors: Payment processing is handled by Stripe and/or other PCI-compliant processors. Their privacy policies govern the handling of your payment data.

13. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this privacy notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may contact us: