Skip to main content
U.S. store · privacy · personal information

Privacy Policy

How REACH Supply handles personal information for U.S. shopping, accounts, orders, trade applications, product questions and support requests.
POLICY INFORMATION
Original effective date
July 24, 2022
Updated September 10, 2026
At a glance

Your information and privacy choices

Information used for shopping, order fulfillment, account security and support is separate from optional marketing.

Necessary informationContact, transaction and support details help provide the services you request.
Limited disclosuresRelevant information goes to payment, delivery, fulfillment and other service providers.
Separate choicesOptional marketing and privacy rights are not blanket permissions in purchase terms.
Direct requestsAsk about access, correction, deletion or applicable opt-outs without creating an account.

1. Overview and scope

This Privacy Policy explains how REACH Supply collects, uses, discloses, retains, transfers, and protects personal information when you use ReachSupplyCo.com, create an account, place an order, apply for a Trade Account, submit a compatibility, return, or warranty request, contact support, receive marketing, or otherwise interact with the U.S. store.

This Privacy Policy applies to information handled by REACH Supply through the website and related customer-service and business processes. It does not replace the privacy notices of payment processors, carriers, suppliers, or third-party services that process information under their own terms.

U.S. storefront and business contact: REACH Supply serves U.S. customers through ReachSupplyCo.com. Business address: 4850 S Kilbourn Ave, Chicago, Illinois 60632, United States. Customer service: [email protected] · +1 888 619 1122. The separate Canadian storefront is ReachSupply.ca and serves Canadian customers in Canadian dollars.
Plain-language summary: We collect information reasonably needed to operate the store, complete and deliver orders, support customers, prevent fraud, comply with law, and improve services. We do not sell customer personal information for money.

2. Accountability and privacy contact

REACH Supply is responsible for personal information under its control and designates a Privacy Officer to coordinate privacy practices, requests, complaints, service-provider oversight, retention, and incident response.

Privacy questions may be sent to [email protected] or by phone at +1 888 619 1122. REACH Supply's U.S. business address is 4850 S Kilbourn Ave, Chicago, Illinois 60632, United States. Submit only the information reasonably needed to identify the account, transaction, or request.

3. Information we collect

Depending on how you interact with the store, we may collect the following categories:

  • Identifiers and contact details: name, business name, email, telephone number, billing address, shipping address, account username, customer number, and online identifiers.
  • Order and commercial information: products, quantities, prices, discounts, taxes, status, shipping, tracking, returns, refunds, warranty claims, invoices, quotes, and purchasing history.
  • Payment-related information: payment-method type, billing details, authorization status, transaction status, and limited identifiers supplied by payment providers. We generally do not store complete payment-card numbers.
  • Account information: protected credentials, saved addresses, preferences, order history, user roles, saved lists, approvals, purchase limits, and settings.
  • Trade Account information: legal and operating business details, contacts, business type, purchasing needs, EIN or tax information, resale or exemption documentation, verification results, pricing group, and account communications.
  • Support and product-fit information: equipment brand, model and serial number, existing part number, photographs, videos, installation details, technical findings, correspondence, and claim evidence. Uploaded files may incidentally contain other personal information, so submit only what is relevant.
  • Internet, device, and usage information: IP address, browser, device, operating system, referring page, pages viewed, approximate location derived from IP, cookie identifiers, and interactions with the website or emails.
  • Marketing and preference information: subscription choices, consent records, campaign interactions, advertising preferences, and unsubscribe status.
  • Fraud, security, and compliance information: signals, risk scores, authentication records, logs, and other information used to prevent unauthorized transactions, account abuse, chargebacks, and security incidents.
  • Inferences: inferences created from purchasing, browsing, account, or support activity to improve service, identify fraud risk, or present relevant products where permitted.
  • Sensitive personal information: precise account credentials, payment information handled by processors, government or tax identifiers submitted for business verification, and the contents of private communications. We request that customers avoid submitting Social Security numbers or unrelated identification.

4. Sources of information

We collect information directly from you through checkout, accounts, forms, emails, calls, support requests, Trade Account applications, and uploaded files.

We collect some information automatically through essential cookies, server logs, security tools, and, where enabled subject to applicable choices, analytics or advertising technologies.

Information may also come from payment processors, carriers, suppliers, fulfillment partners, fraud-prevention providers, business registries, public business sources, advertising and analytics providers, and other parties involved in a transaction or account review.

5. How information is used

We may use personal information to:

  • create, secure, and administer customer and Trade Accounts;
  • verify identity, business information, addresses, payments, tax documentation, and eligibility;
  • authorize and capture payments and process orders, shipments, refunds, returns, warranties, and disputes;
  • identify products and assess compatibility using information supplied by the customer;
  • communicate about orders, accounts, security, recalls, policies, and support;
  • operate, secure, troubleshoot, personalize, and improve the website and services;
  • measure website and campaign performance and understand customer journeys;
  • provide marketing or targeted advertising where permitted and subject to applicable choices;
  • prevent fraud, misuse, unauthorized access, and security incidents;
  • meet tax, accounting, recordkeeping, regulatory, and legal obligations; and
  • establish, exercise, or defend legal claims and enforce agreements.

We will not use personal information for a materially different purpose without any notice, consent, or other process required by applicable law.

6. Consent and permissions

We obtain consent when required for the relevant marketing, tracking or sensitive-information use. The applicable law determines when a purpose requires consent and when another lawful basis or exception applies.

Information needed to fulfill an order or investigate a support request is distinct from optional marketing. Refusing an optional use does not itself prevent a purchase or request. Withdrawing consent does not erase lawful record-retention obligations.

Accepting purchase terms does not give unrestricted permission to use private correspondence, claim evidence or uploaded files for unrelated purposes.

7. Service providers and other disclosures

We may disclose information when reasonably necessary to:

  • payment processors, financial institutions, and fraud-prevention providers;
  • shipping carriers, freight providers, and logistics services;
  • suppliers, distributors, manufacturers, warehouses, and warranty administrators;
  • hosting, cloud, security, email, support, analytics, advertising, and website providers;
  • accountants, insurers, auditors, consultants, and legal advisers;
  • government agencies, regulators, law enforcement, courts, or other parties where permitted or required by law; and
  • parties to a proposed or completed financing, merger, sale, restructuring, or transfer of business, subject to appropriate safeguards.

Service providers may process information for the services they provide to us and as otherwise permitted by law. We do not rent customer lists or sell customer personal information for money.

8. Suppliers and direct fulfillment

Many orders may be fulfilled directly by suppliers, distributors, manufacturers, warehouses, or logistics partners. We may provide the information required to confirm, pack, ship, deliver, track, recall, return, or administer warranty service for an order.

This information may include the recipient name, company, shipping address, telephone number, email where required for delivery, products ordered, quantities, order references, and claim details. We do not provide complete payment-card details to fulfillment partners.

9. Payments, fraud screening, and automated tools

Payment providers displayed at checkout collect and process payment information under their own privacy notices and security standards. REACH Supply generally receives payment status, billing details, method type, and limited identifiers rather than the complete card number.

REACH Supply and its providers may use automated tools to assess payment, order, account, device, location, and behavioral signals for fraud and security risk. An order may be declined, delayed, limited, canceled, or referred for human review.

Where applicable law provides a right to information, review, or appeal concerning a qualifying automated decision, we will provide the required process.

10. Cookies, analytics, and advertising

We and our providers may use cookies, pixels, local storage, and similar technologies for:

  • Essential functions: cart, checkout, login, security, fraud prevention, and site operation.
  • Preferences: remembering selections, location, currency, and display choices.
  • Analytics: traffic, errors, performance, attribution, and customer journeys.
  • Advertising: campaign measurement, audience creation, and more relevant advertising where enabled and permitted.

Essential technologies are required for the store. Where non-essential analytics or advertising technologies require consent or an opt-out opportunity, they should operate according to the choice provided through the site’s cookie or privacy-preference controls.

Browser settings may block cookies, but blocking essential cookies can prevent checkout or account features from working.

11. Sale, sharing, targeted advertising, and Global Privacy Control

REACH Supply does not sell customer personal information for money. State privacy laws can nevertheless treat some advertising or analytics disclosures as a sale, sharing or targeted advertising. Relevant rights depend on the law’s applicability and the actual processing.

To ask about or exercise an applicable opt-out, contact [email protected]. Any privacy controls presented on the site provide additional choices. An account is not required to make an opt-out request.

Where required by applicable law, a recognized Global Privacy Control or other qualifying opt-out signal is treated as an opt-out for the browser or device and for associated information to the extent the law requires. A legally required signal is not conditional on submitting a separate verified request.

See the California Attorney General’s GPC guidance.

12. Marketing communications

Promotional email identifies the sender, uses a non-deceptive subject line, provides required contact information and includes a working unsubscribe method. U.S. commercial-email unsubscribe requests are honored within 10 business days as required by CAN-SPAM.

Use the unsubscribe link or email [email protected]. No account login or fee is required. Lawful, necessary order, security, recall, warranty or support messages may continue.

Promotional text messages and calls require the permissions applicable to the channel. Providing a phone number for an order or support request does not by itself provide every permission needed for optional marketing.

13. Processing in other jurisdictions

Service providers, suppliers, fulfillment partners, and technology systems may process or store information in the United States or other countries. Information processed in another jurisdiction may be subject to that jurisdiction’s laws and lawful-access requirements.

REACH Supply uses contractual, technical, organizational, and other safeguards appropriate to the information and service.

14. Retention and disposal

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy and for order fulfillment, warranty, fraud prevention, tax, accounting, legal, dispute, security, and recordkeeping requirements.

Retention varies by information type, sensitivity, purpose, account status, and legal obligation. When information is no longer required, it is deleted, destroyed, or deidentified using measures appropriate to the information. Protected backups may retain information until the normal backup cycle removes it.

15. Security and privacy incidents

REACH Supply uses administrative, technical, and physical safeguards appropriate to the nature and sensitivity of the information, including access controls, encrypted connections, account protections, monitoring, backups, and service-provider controls. No system or transmission method is completely secure.

We maintain procedures to contain, assess, document, and respond to suspected privacy and security incidents. Where required, REACH Supply will notify affected individuals, regulators, consumer-reporting agencies, or other parties in accordance with applicable breach-notification laws.

The Federal Trade Commission provides data-breach response guidance for businesses.

16. U.S. state privacy rights

Depending on your state of residence, the nature of the information, and whether a particular law applies to REACH Supply, you may have rights to:

  • confirm whether personal information is processed and request access;
  • request correction of inaccurate personal information;
  • request deletion, subject to legal exceptions;
  • receive certain information in a portable format;
  • obtain information about categories, sources, purposes, and recipients;
  • opt out of sale, sharing, targeted advertising, or qualifying profiling;
  • limit certain uses or disclosures of sensitive personal information where applicable;
  • withdraw consent where processing depends on consent;
  • appeal a denied request where applicable; and
  • receive equal service and pricing without unlawful discrimination for exercising privacy rights.

Rights are subject to applicable scope, exceptions, frequency limits and thresholds. Identity verification applies only to the requests for which the law permits it. We may deny or limit a request where permitted by law and will explain available appeal or complaint options where required.

Authorized agents may submit requests where permitted, but we may require proof of authority and may verify the consumer directly.

17. California privacy information

Where the CCPA applies, California residents may have rights to know, correct and delete personal information, opt out of sale or sharing, limit qualifying uses of sensitive information, and receive non-discriminatory treatment. Applicability and exceptions depend on the law and the relevant processing.

The information described in Information we collect can include identifiers, customer records, commercial information, internet activity, approximate location, submitted visual or electronic material, business-contact information, inferences and sensitive account or payment-related information. Sources, purposes and recipients are described in Sections 4, 5, 7 and 8.

Retention depends on the information and purpose: transaction records support fulfillment, tax and accounting; claim files support the relevant case and applicable warranty; security records support fraud and incident review; and preferences support your choices. See Retention and disposal.

For requests, use the privacy contact below. See Sale, sharing and opt-out signals and the California Attorney General’s CCPA guidance.

18. Children and minors

The store is intended for adults and business customers and is not directed to children under 13. We do not knowingly collect personal information online from a child under 13 without the notice and verifiable parental consent required by the Children’s Online Privacy Protection Act and its implementing rule.

If you believe a child has provided personal information, contact the Privacy Officer so the situation can be reviewed and appropriate action taken.

The Federal Trade Commission publishes the COPPA Rule.

19. Changes to this policy

We may update this Privacy Policy to reflect changes in services, providers, technology, practices, or law. The revised page will show its effective and reviewed dates.

Material changes will receive any additional notice, consent, or choice required by applicable law.

20. Contact, privacy requests, and appeals

Start with the Support Center or contact our privacy team directly. You do not need an account, prior order or acceptance of new purchase terms to make a privacy request.

Privacy Officer — REACH Supply · U.S. storefront

Business address: 4850 S Kilbourn Ave, Chicago, Illinois 60632, United States

Email: [email protected]

Phone: +1 888 619 1122

Website: ReachSupplyCo.com

Describe the request and provide enough contact or account information to locate the relevant records. Verification may be needed for access, correction or deletion; only proportionate information will be requested. A sale/sharing opt-out is not subject to identity verification where the applicable law prohibits it.

Do not send passwords, complete card numbers, Social Security numbers or unrelated identity documents. Where an appeal is available, contact us through the same route and identify the message as a privacy-request appeal. We will explain applicable response periods, lawful extensions and appeal or complaint options.

You may also contact the attorney general or privacy regulator with jurisdiction over the matter.