Privacy Policy

---

Last Updated: April 6, 2026

Shop Supply & Tool Co., Inc. (“Shop Supply & Tool Co.,” “Shop Supply,” “we,” “us,” or “our”) is committed to protecting your privacy and are constantly working to give you a safe online experience. This “Privacy Policy” applies to the Site and governs data collection and usage. By using the Site, you consent to the data practices described in this Privacy Policy. Please read our Privacy Policy for more information.

1. DEFINITIONS

• “Company”, means the company whose details are set out on the Site, as defined below. 
• “Data” includes both Non-Personal Information and Personal Identifiable Information.
• “Non-Personal Information” is any information that is not Personally Identifiable Information (defined below). Non-Personal Information includes, without limitation, Personally Identifiable Information that has been anonymized.
• “Personal Information,” “Personally Identifiable Information,” “PII,” or “Personal Data” will have the meaning set forth in the applicable data privacy and security laws for the jurisdiction you are located in. In general, Personal Information is non-public information we receive from your use of the Site that can be used, alone or in combination with other information in our possession, to identify a particular person/individual. It may include information such as name, address, telephone number and other personal information you provide us.
• “Site” refers to the Company’s websites (https://shop.shopsupply.net and www.shopsupply.net) and any related blogs, domains, mobile sites, online services, and applications maintained by Company.
• “Shop Supply & Tool Co.,” “Shop Supply,” “We,” “us” and “our” means the Company, Shop Supply & Tool Co., Inc.
• “You” and “your” mean the individual or entity visiting or using the Site.

2. INFORMATION COLLECTED AND CONSENT

You do not have to provide any Personally Identifiable Information to browse the publicly available pages of the Site; however, in order to obtain or use products or services that are or may be provided through the Site or that we may otherwise offer online or offline (collectively, the “Services”) you may be required to register and/or provide Personally Identifiable Information.

Personal Information Your Provide Us

We may collect Personal Information from you in a variety of ways, including, but not limited to, when you (i) register on the Site; (ii) fill out forms or fields on the Site or offline; (iii) complete an application for a product or service available through the Site; (iv) communicate with us through the Site or by email, mail, text, telephone, social media, facsimile or other electronic means; (v) use the Site or authorize us to access any financial information stored or processed by a third party; (vi) provide us with Personal Information or other information; (v) participate in activities or utilize resources provided by or through Company, including without limitation, training programs, or events. We may collect the following information about you depending on the nature of the transaction.

• First and last name, and middle initial
• Alias
• Postal/mailing address
• Billing address
• Email address
• Telephone number
• Cellular telephone number
• Geographic area
• Title
• Internet protocol address
• ID verification/State drivers’ license number
• Age/Date of Birth
• Documents to verify your identity
• Your occupation
• Payment information
• Education information
• Preferred language
• Background check information
• Transaction and financial information related to the transaction
• Information about your business, if applicable
• Geolocation data

We will treat as personal information any item that, either alone or together with other information, we could use to identify an individual. Except as described below, we will not share with third parties any personal information without your permission.

By providing your Personal Information to us, you explicitly agree to our collection and use of such information as described in this Privacy Policy. By providing Personal Information belonging to another person, you expressly represent and warrant that you have the authority and right to do so, and that you obtained all appropriate and required consents.

We may also collect your Personal Information from sources that you have authorized to share with us or that you have authorized us to obtain information from.

If you believe we received our personal information from a source without authority to share your personal information with us, please contact us so that we can resolve your complaint.

Information We Automatically Collect

We may collect information about you automatically when you visit the Site, communicate through the Site, or use any of our online Services.

System Information: We may automatically receive certain information from your browser or mobile device, such as your browser type, the operating system of your device, the equipment you use to access the Site, and the unique identifier of your mobile device.

IP Address: We may also receive your IP address and the name of the internet service provider (“ISP”) or your mobile carrier.

Browsing Information: We may collect the URL of the site from which you came and the URL of the site you visit when leaving the Site or any of our online Services. and your activities on the Site, such as webpages you view and how you interact with those webpages. 

Location: We may collect, depending on your device’s settings, location data and other types of information sent from third party services or GPS-enabled devices.

Site Usage: As you use the Site or any of our online Services, we may also collect information about such usage and your actions on the Site, such as pages you viewed, access times, and how long you spend on a page. We may use cookies to collect such information, as described in more detail below. This information is considered Non-Personal Information, which we can use for any purpose, including, without limitation, to help us improve the Site or the Services and to enhance your, and other users’, experience. 

Aggregated Anonymized Data: We may also convert personal information into Non-Personal Information by excluding information that is personally identifiable. You acknowledge that Non-Personal Information and Personal Information that is converted into Non-Personal Information belongs to us and that we have the right to use such general information as it determines in its sole discretion.

3. Cookies, Advertising Platforms and Similar Technologies Used on the Site

The Site or our online Services may use “cookies,” or other identifiers, which may be stored on your device, to recognize you as a user when you return to the Site or use the online Services using the same computer and web browser and to maintain your preferences. In addition to the stated uses in the preceding section, we use cookies and other identifiers to identify which areas of the Site or online Services you have visited and how you interact with the Site. We also may use this information to better personalize the content you see on the Site or online Services, serve you with personal advertisements for us and third-party products, either via email, on our Site, or on other websites on the internet does not store unencrypted Personal Information in the cookies. We also do not link Non-Personal Information from cookies to your Personal Information.

In addition, we use the services of advertising platforms to provide relevant marketing to consumers concerning our Services.

In general, we use four different types of cookies:

Strictly necessary cookies: These cookies are necessary to enable the basic features of the Site, including any of our applications, such as providing a secure login.

Functional cookies: These cookies allow our Site to remember your site preferences and choices you make on the Site. We also use functional cookies to facilitate navigation, to display content more effectively, and to personalize your experience.

Advertising cookies: Advertising cookies allow us to select which advertisements and offers you may like. We also use cookies to track online responses to advertisements and other marketing to better understand your interests so that we can present more relevant advertisements and messages to you. 

Analytics cookies: Analytics cookies help us improve our website by collecting and reporting information on how you use it.

Disabling Cookies on Your Browser: Some browsers may allow you to manage the storage of cookies on your device. If supported by your browser, you may set your browser to refuse all cookies (or, sometimes all third-party cookies) or to alert you when a cookie is placed. However, if you select these setting, you may be unable to access certain parts of the Site or the online Services. Unless you have adjusted your browser setting to refuse cookies, the Site and online Services will issue cookies. For more information about how to manage your cookie preferences, use the ‘help’ menu of your web browser or explore the customer support sections of your web browser. To opt-out of all cookies or certain advertising cookies, visit the company website for your browser for instructions. 

Opting-out of Personalized Ads: You can opt-out of receiving personalized ads from advertisers and ad networks that are members of the Network Advertising Initiative (“NAI”) or who follow the Digital Advertising Alliance (“DAA”) Self-Regulatory Principles for Online Behavioral Advertising using their respective opt-out tools. The NAI’s opt-out tool can be found here: http://www.networkadvertising.org/choices and the DAA’s opt-out tool can be found here: http://www.aboutads.info/choices/.

In addition, your mobile devices may offer settings that enable you to make choices about the collection, use, or transfer of mobile app information for online behavioral advertising (for example, Apple iOS’ Advertising ID and Google Android’s Advertising ID). Please note that opting out does not prevent the display of all advertisement to you.

4. HOW WE USE AND SHARE YOUR PERSONALLY IDENTIFIABLE INFORMATION

We will use your personal information to provide the Services that your personal information was shared with us to fulfill. We may use personal information for the following purposes: 

• To improve customer service: Your information helps us communicate more effectively with inquiries and existing customers, and to respond to your customer service requests and support needs.
• To personalize user experience: We may use information in the aggregate to understand how our users as a group use the Services and resources provided on the Site.
• To improve the Site: We continually strive to improve our Site and the Services based on the information and feedback we receive from you.
• To provide products or services and to process transactions: Except as otherwise expressly provided in this Privacy Policy, we will use Data for the purposes of fulfilling our duties and providing the Services. We may use Non-Personal Information for statistical analysis, product development, research, or other purposes. We may use the information that you provide about yourself or that you have provided to our customers for the purpose of providing and fulfilling the Services. We do not share this information with outside parties except to the extent necessary to provide the Services.
• To send periodic mail, emails, and surveys: The email address you provide for the Services will only be used to send you information, newsletters, surveys, and updates pertaining to the Services requested, provided, or that we think you may be interested in. It may also be used to respond to inquiries and/or other requests or questions.
• To develop new products or services: We use your Personal Information and Non-Personal Information for research and commercial purposes. The information we collect may be used to develop new products or Services. Except as otherwise provided in this Privacy Policy, we may use your Personal Information and Non-Personal Information internally or, among other things, to offer our own or third-party products and Services. Only Company, its subsidiaries, its affiliates, its suppliers, and its contractors/service providers involved in distributing the new product or Service may have access to your Personal Information. Our subsidiaries, suppliers/service providers and contractors will be required to use any PII we provide to them only for that intended purpose and subject to the terms of this Privacy Policy.
• Fulfillment Obligations: Comply with contractual obligations, relevant industry standards, and our policies.
• For marketing: Except as otherwise expressly provided for in this Privacy Policy or except as prohibited by applicable law, we may use your Personal Information and Non-Personal Information to enhance our networking, marketing, social, and recruiting activities, and for other similar business purposes. We may also use your Personal Information and Non-Personal Information to contact you on behalf of external business partners about a particular offering that may be of interest to you. In these cases, your Personal Information is not transferred to the third party. We may also use Personal Information to provide you information regarding new products or services related to our products or services. We do not use or disclose sensitive Personal Information, such as race, religion, or political affiliations, without your explicit consent.
• Compliance with applicable law: We may disclose your Personal Information as we may in our sole discretion determine is necessary or reasonably required to comply with law, applicable regulations, court orders or subpoenas; to enforce our Terms and Conditions; or to protect our rights, property, or safety; or the rights, property, or safety of others.
• Security: Mitigate fraud, enhance the security of the Site, and manage institutional risk.
• Change in the Site Ownership: If ownership of the Site or of any relevant Company entity changes, whether in whole or in part, information collected through the Site, or as a result of your use of the Services or our products, your Personal Information may be transferred to the new owner of the Site and/or us, as the case may be, and any Services can continue. In that case, your Personal Information would remain subject to the terms and conditions of the applicable version of the Privacy Policy.
• Payment Processing: For processing payments related to the products and Services we provide you.
• Third-Party Service Providers: Your information may be processed by companies that support our Site and Services

5. RETENTION AND STORAGE OF PERSONAL INFORMATION

We retain your Personal Information for as long as necessary to fulfill the purpose for which it was collected and to comply with applicable laws. We use reasonable security precautions to protect your information while in storage

To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your personal information, whether we can achieve those purposes through other means, and applicable legal requirements.

6. SECURITY

We will use commercially reasonable methods to keep your Personal Information securely in our files and systems. 

7. DO NOT TRACK

Your browser may provide you with the option to send a “Do Not Track” signal to websites you visit. This signal is used to request that websites not send the requesting device cookies, but websites have no obligation to respond to such signal or to modify their operation. Our online sites may not recognize all web browser-based “Do Not Track” signals. However, you may be able to modify your internet-enabled device’s web browser settings to block all cookies or third-party cookies.

8. EXEMPTIONS FROM THE PRIVACY POLICY

Our Privacy Policy does not apply to any information you may send to us by email or instant messaging programs (e.g., AOL, Yahoo, etc.), or through social media networks, even if you open such programs or services by clicking a link displayed on the Site. Email, social media, and instant messages are not recognized as secure communication forms. Please do not send any information you consider private to us by email or instant message or through social media sites (e.g., Twitter, Facebook, etc.) due to the public nature of such postings. 

9. LINKS TO OTHER SITES

The Site and the online Services may contain links to other websites. however, we are not responsible for the actions, practices, or content of websites linked to, or from, the Site or the online Services. You understand such websites may require you to agree to their terms of use and that we have no control over these terms. As always, you understand it is your responsibility to verify your legal use of a website, and use of information from the website and the corresponding website owner.

10. AGE OF CONSENT

The Site is only intended for persons 18 years of age or older. If you are under the age of 18, you must ask a parent or legal guardian for permission prior to submitting any information to this Site.

If you have knowledge that a child 13 years of age or younger has submitted Personally Identifiable Information to us, please contact us and we will delete the Personal Information collected belonging to that child. You may contact us by writing to us at the address below. 

11. CAN-SPAM COMPLIANCE NOTICE

We fully comply with the federal CAN-SPAM Act. You can always opt-out of receipt of further email correspondence from us.

12. CALIFORNIA PRIVACY RIGHTS

Under Section 1798.83 of the California Civil Code, residents of California can obtain certain information with whom they have an established business relationship. That information is about the Personal Information those companies have shared with third parties for direct marketing purposes during the preceding calendar year. The law requires companies to inform consumers about the categories of Personal Information shared with third parties, the names and addresses of those third parties, and examples of the services or products marketed by those third parties. To request a copy of the information disclosure provided by us under Section 1798.83 of the California Civil Code, please contact us via mail at the address below.

13. U.S. STATE LAW PRIVACY RIGHTS

TO THE EXTENT APPLICABLE: This Privacy Policy provides additional information to California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia residents whose Personal Information is collected pursuant to the California Consumer Privacy Act (“CCPA”)(as amended by the California Privacy Rights Act), Colorado Privacy Act ("CPA"), Connecticut Data Privacy Act ("CTDPA"), Delaware Personal Data Privacy Act (“DPDPA”), Florida Digital Bill of Rights (“FDBR”), Indiana Consumer Data Protection Act (“ICDPA”), Maryland Online Data Privacy Act (“MODPA”), Oregon Consumer Privacy Act (“OCPA”), Texas Data Privacy and Security Act (TDPSA”), Utah Consumer Privacy Act (“UCPA”), and Virginia Consumer Data Protection Act ("VCDPA") and other states or countries that may adopt laws after the publication of this Privacy Policy (generically referred to as “Privacy Laws” or “US State Privacy Laws”). The following rights do not all apply under each of the foregoing Privacy Laws. Some states have adopted privacy laws that require specific disclosures. The following explains the rights you may have, depending on where you reside and the jurisdiction that we are subject to related to your Personal Data. 

As applicable, the Privacy Laws supplement the information contained herein, in our general Privacy Policy, and applies solely to visitors, users and others who reside in jurisdictions that we are subject to and that apply to you. Some or all of the privacy rights set forth below may apply to you. The following terms in this Section 13 supersede any inconsistent terms in any other sections of the Privacy Policy to the extent that any apply to you. Accordingly - 

• We do not sell your personal information

• We secure your rights under US state privacy laws

These include:

1. Right to Access and Know. 

2. Right to Request Correction of your Personal Information. 

3. Right to Request Deletion of Your Personal Information. 

4. Right to Opt-out of Sharing for Cross-Context Behavioral Advertising. 

5. Right to Data Portability. 

• As also secure –

1. Verification of Requests to Exercise Rights

2. Categories of Personal Information We Collect

3. How We Use Your Information

4. Request to Delete

5. Opt-Out Request

6. Non-Discrimination

14. CROSS-BORDER DATA TRANSFER. 

Personal data voluntarily submitted to us by you online, via electronic communication, or otherwise, may be maintained or accessed in servers or files in the United States, which the European Union and UK have not deemed to provide “adequate” privacy protection.  If you do not consent to having your personal data processed and stored in the United States, please do not provide it to us on the site or through any other means. We contend that the General Data Protection Regulation (EU) 2016/679 and the United Kingdom’s equivalent do not apply to our processing of Personal Information and that it is not within the jurisdiction of the EU. All processing of PII is governed by the applicable laws of the United States of America.

15. HOW TO SUBMIT A REQUEST TO US TO EXERCISE YOUR PRIVACY RIGHTS.

You may submit your verifiable requests to us by clicking here (provide the URL here too OR email address that populates the subject line with “Personal Information Request” or something similar) or submitting your requests at the address or email address set forth below.

Mailing a request to us, as appearing on our contact information tab in our Site.

Unless otherwise provided for under applicable privacy law, only you, or someone legally authorized to act on your behalf, may make a verifiable request to your Personal Information. Unless otherwise provided for in applicable privacy law, we are not required to provide you with Personal Information more than twice in a 12-month period.

We will not be able to respond to your request to provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you or someone you are authorized to request and receive the Personal Information on behalf of.

Unless legally obligated to respond in a shorter timeframe, we will try to respond to your request within forty-five (45) days of receipt of your written request. If we require more time (up to 90 days), we will inform you of the extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance, specifically by electronic mail communication.

We may request specific information from you to help us confirm your identity and process your request.  Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.  

US APPEALS: If you are a resident in a state that provides any of the rights set forth in Section 13 and we refuse to take action on your request related to any of the above specified rights or any other privacy related request, you may appeal our refusal by clicking the link below, filling out the form and submitting it to us. We will inform you in writing of any action taken or not taken in response to your appeal within sixty (60) days of receiving your appeal. Our response will include a written explanation of the reason or reasons for our decision. If we deny your appeal, you may contact the attorney general in your state to file a complaint.

To submit an appeal, email us the basis for your appeal to the contact information as appears on our Site. Please include the following information in your email:

• Name
• Address
• Email Address
• What you are seeking
• Basis for your appeal

California: To file a complaint with the California Privacy Protection Agency, please click here. 

Texas: To file a complaint with the Texas Attorney General, please click here. If the link to the Privacy Complaint Form is broken or otherwise not working, please navigate to this page to complete the complaint process and click the “Privacy Complaint Form”: https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint 

16. YOUR NEVADA PRIVACY RIGHTS

Nevada law (SB 220) permits customers in Nevada to opt-out of the sale of certain kinds of Personal Information. A sale under Nevada law is the transfer of this Personal Information to third parties for monetary consideration so these third parties can then re-sell or license the sold information. We do not sell your Personal Information to third parties as defined in Nevada law. If you are a Nevada resident and wish to opt-out of the sale of your Personal Information, should we change our practices in the future, you must send a request to by mail.

17. AMENDMENTS

We reserve the right to change the Privacy Policy from time to time as our sole discretion with or without notice. Revisions to the Privacy Policy regarding the use of Personal Information are not retroactive.

18. EMPLOYEES, CONTRACTORS AND JOB APPLICANTS

To view or obtain a copy of our privacy policy related to employees, independent contractors, including individuals that perform work for us that are not employees, dependents, emergency contacts and beneficiaries of employees or independent contractors, please contact us. See Section 19 for contact information.

19. CONTACT

If you have any questions about the Privacy Policy, or to report a violation of the Terms and Conditions, please contact us by mail at the contact information as appears on our Site.