Privacy Policy

1. Information We Collect

When you browse our storefront, request a formal Request for Quote (RFQ), establish a commercial Net-30 purchasing account, or contact our technical parts specialists, we collect the following categories of information:

• Personal Identification & Business Information: Name, commercial company name, job title, billing address, freight delivery address (including commercial dock or residential specifications), email address, and phone numbers.
• Commercial Transaction & Inquiry Data: Equipment serial numbers, manufacturer part numbers (MPNs) queried, RFQ quote histories, order numbers, purchase orders, and tax-exempt resale certificates.
• Payment & Credit Information: Payment card tokens processed via PCI-DSS Level 1 certified processors, corporate ACH/wire details, or credit references for Net-30 commercial credit terms. (We do not store raw cardholder data on our servers).
• Technical & Telemetry Data: IP address, device fingerprints, browser version, operating system, referring URL, time spent on part specification sheets, and search telemetry used to refine catalog part-matching algorithms.

2. How We Use Your Information

Your data is processed strictly for legitimate commercial and operational purposes:

3. Cookies and Tracking Technologies

We use strictly necessary session cookies, functional cart cookies, and anonymized performance telemetry. We do not use cross-site behavioral tracking cookies for third-party ad retargeting networks.

4. Data Storage, Retention, and Security

Exact Part Supply implements enterprise-grade physical, electronic, and procedural safeguards. All transmission of customer and transaction data is encrypted using TLS 1.3 encryption protocols. Data stored in our database infrastructure is encrypted at rest using AES-256 standards.

We retain transaction and equipment inquiry records for as long as required to support OEM warranty claims, fulfill legal accounting obligations (typically 7 years for commercial tax records), or maintain active customer commercial accounts.

5. Your Rights Under CCPA/CPRA (California Consumers)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific statutory rights:

• Right to Know & Access: You may request disclosure of the specific pieces and categories of personal information we have collected about you over the preceding 12 months.
• Right to Deletion: You may request the deletion of personal information we collected from you, subject to statutory exemptions (e.g., fulfilling an open warranty claim or statutory tax recordkeeping).
• Right to Correction: You have the right to request correction of inaccurate personal or business contact records.
• Right to Non-Discrimination: We will never discriminate against you, deny service, charge different prices, or provide a lower quality of catalog access for exercising your privacy rights.
• Right to Opt-Out of Sale / Sharing: We do not sell or share personal information for monetary or other valuable consideration.

6. Your Rights Under GDPR (European Economic Area & UK)

For users located in the European Union or United Kingdom, Exact Part Supply acts as the data controller. Your statutory rights under GDPR include:

• Article 15 (Right of Access): Obtain confirmation as to whether your data is being processed.
• Article 16 (Right to Rectification): Rectify inaccurate personal records.
• Article 17 (Right to Erasure / "Right to be Forgotten"): Request erasure of data where processing is no longer necessary.
• Article 18 (Right to Restriction of Processing): Restrict processing under contested circumstances.
• Article 20 (Right to Data Portability): Receive your personal data in a structured, commonly used, machine-readable format.

7. Children's Online Privacy Protection (COPPA)

Exact Part Supply is a specialized commercial and industrial supplier. Our catalog and services are strictly intended for commercial entities and individuals aged 18 and older. We do not knowingly collect or solicit data from children under 13.

8. How to Submit a Privacy Request

To exercise any of your CCPA or GDPR rights, or if you have questions regarding this Privacy Policy, please submit your request to our Data Protection Officer (DPO):

9. Changes to This Privacy Policy

We reserve the right to update this policy to reflect changes in our legal obligations, catalog features, or security enhancements. When updates occur, we will update the "Last Updated" date at the top of this page.