1. Scope of this Notice

This Privacy Notice describes, generally, how Tartan Supply handles and processes personal information related to:

• The use of our Services that link to this Notice;
• Our former, current, and prospective customers, partners, and vendors;
• Individuals who communicate with us;
• Individuals who use our products and services and individuals whose personal information we receive in providing the Services; and
• Individuals who visit our buildings and property.

Our collection, use, disclosure, and processing of personal information about individuals will vary depending on the circumstances. This Notice is intended to describe our overall privacy and data protection practices and may be supplemented by additional disclosures at the time we collect particular information.

This Notice does not apply to the personal information we process relating to our employees, non-employee workers, job applicants, and candidates who apply for employment with us. Any such individuals can contact us as provided below for additional information.

In this Notice, our use of the term “personal information” includes other similar terms under applicable privacy laws—such as “personal data” and “personally identifiable information.” In general, personal information includes any information that identifies, relates to, describes, or is reasonably capable of being associated, linked, or linkable with a particular individual.

---

2. How We Collect Information

We may collect information about you by various means, including:

• Directly from you, both online (e.g., website, app, email) and offline (e.g., phone, industry event);
• From other third-party sources and social media platforms that you may use to engage with us;
• Through your use of our Services; and
• By combining information from different sources, including online and offline data.

---

3. What Personal Information We Collect

When you interact with us, we may collect and process the following categories of personal information:

• Profile and subscription information, such as name, company/employer, title/role, mailing address, email address, phone number, username and password, and other information that may be provided with or for an account.
• Transactional Information, such as business credit history, payment information, and transactions for purchases made through our Services.
• Promotional/Marketing Information, including information provided by participation in marketing and other events.
• Survey information, in response to questions we may send in connection with the Services, including for feedback and research purposes.
• Communications between you and us, such as via email, mail, phone, or other channels.
• Offline Activity you directly engage in with us, if any.
• Online User Activity described in the next section.

Unless we specifically request or invite it, we ask that you not send or otherwise disclose to us any sensitive information such as racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background, or trade union membership. If we request or invite you to provide such information, we will use it only for the stated purpose and in accordance with applicable privacy laws.

If you provide us with information regarding another individual, you represent that you have that person’s consent to give us their information and to permit us to use it in accordance with this Notice.

---

4. Online User Activity, Cookies, and Automated Data Collection

We, along with vendors we use, may collect information about your use of our Services by automated means, including but not limited to cookies, pixels, SDKs, and other similar technologies.

Cookies and similar technologies help us automatically identify you when you return to our Services. They also allow us to analyze website traffic patterns, improve our Services, and customize content and advertising.

When you use our Services, the information we may collect by automated means includes:

• Usage Details, such as the date, time, and length of visits, pages accessed, search terms, referring website addresses, and frequency of visits.
• Device Information, including IP address, device type, unique device identifier, operating system, browser type, mobile network information, and device telephone number.
• Location Information, if you choose to provide the Services with access to your device’s location.

We do not respond to web browser-based Do Not Track (“DNT”) signals at this time.

---

5. How We Use Information We Collect

We may process personal information for the following purposes:

• Providing our Services, managing accounts, processing transactions, and providing customer support.
• Notifying you about changes to our policies.
• Managing our business relationships.
• Investigating and handling reports to our hotline.
• Improving and operating our Services.
• Sending promotional and marketing communications about our products or services.
• Ensuring security and compliance with legal obligations.
• Auditing, reporting, and internal operations.

We do not use your personal information for automated decision-making or profiling, and we do not sell your personal information.

---

6. Online Advertising

You may see Tartan Supply advertising on various websites and platforms. If you believe our advertising appears in inappropriate or offensive content, please contact us.

---

7. How We Share Your Information

Tartan Supply may share your personal information with affiliates, partners, and trusted third-party service providers that help us operate our business. These may include:

• Event registration service providers
• Vendor invoice tracking service providers
• Contract management service providers
• Data processing vendors

We may also disclose information if required by law or to protect our legal rights.