Privacy Policy

This Privacy Policy outlines how Restaurant Supply, LLC, owner of RestaurantSupply.com, and its affiliates ("Company," “RS,” "we," "us," or "our") collect, process, share, and protect personal information from customers, website visitors, business partners, vendors, and others who interact with our services. It applies to all users of RS’s website, mobile applications, online services, and other digital or in-person platforms where this Privacy Policy is referenced. By using RS services, you acknowledge and agree to the collection, use, and sharing of your information as described herein.

We collect various types of personal information, depending on how you interact with RS, the products or services you use, and your device and account settings. Not all categories of personal information apply to every individual.

• Basic Identifiers – Name, mailing address, phone number, email address, date of birth, government-issued identification (e.g., driver's license, passport, tax identification number), Social Security Number (SSN) where permitted by law, and digital or electronic signatures.
• Device and Online Identifiers – IP address, MAC address, account login credentials, cookie identifiers, advertising IDs, device model, operating system, mobile network data, and social media usernames.
• Internet and Network Activity – Browsing history, search activity, clicks, interactions with RS websites, mobile applications, and advertisements, keystroke and movement patterns for fraud prevention, login history, and other analytics.
• Commercial and Transactional Information – Purchase, return, and rental history, order details, product preferences, warranty registrations, participation in promotional programs, sweepstakes entries, and registry or list information.
• Communications and Interactions – Content of customer service calls, chat transcripts, emails, text messages, or other communications, including voice recordings for quality assurance and training purposes.
• Demographic and Profile Information – Age, gender, marital or family status, household income, education level, employment details, language preferences, and other customer profile data.
• Financial and Payment Information – Credit and debit card details, billing addresses, payment history, financing and loan application details, and stored payment preferences.
• Geolocation Data – General location data derived from your IP address, as well as precise real-time location when enabled on your device or provided for location-based services.
• Media and Sensory Data – Photographs, audio and video recordings, images uploaded for customer profiles, surveillance footage from in-store locations, and other digital media submitted by users.
• Health and Biometric Information – Fingerprints, facial recognition data, voice prints, iris or retina scans, and other biometric identifiers used for authentication, security, or personalized services.
• Background and Legal Information – Background check results, criminal history where permitted, professional licenses, verification of identity for fraud prevention, and compliance with regulatory requirements.
• Preferences and Behavioral Data – Shopping habits, purchase history, marketing preferences, product interests, interaction tendencies, and inferred characteristics based on your activities and engagement with RS.
• Non-Identifiable or Aggregate Data - Aggregate data that does not directly identify you but is used for analytics, research, business intelligence, and service enhancements. This may include de-identified information about browsing patterns, purchasing trends, and user demographics, which we may use for business optimization or share with third parties in a non-identifiable format.

Providing certain types of personal information may be necessary for us to fulfill purchases, offer services, or comply with legal requirements. If you choose not to provide requested information, some services, transactions, or features may not be available to you.

RS collects personal information through various methods to provide, enhance, and secure our services. Information may be gathered directly from you, automatically through digital tracking technologies, or from third-party sources.

Information You Provide Directly

We collect personal information when you voluntarily provide it through:

• Account creation and profile registration
• Purchases, orders, and returns
• Customer service inquiries and sales interactions
• Participation in promotions, sweepstakes, or surveys
• Subscription to newsletters, marketing communications, or loyalty programs
• Product reviews, feedback, and other user-generated content submissions

Automated Data Collection

RS uses tracking technologies to automatically collect certain personal information when you interact with our digital platforms. This this may include:

• Cookies and Tracking Technologies – We use cookies, web beacons, pixels, and other tracking tools to collect data on browsing behavior, login activity, session history, device identifiers, and usage patterns.
• Website and Mobile Analytics – We track pages visited, time spent on pages, search history, mouse movements, and scrolling behavior to improve our services and personalize user experiences.
• Behavioral Analysis and Fraud Prevention – We analyze keystroke patterns, typing speed, and cursor movements to detect suspicious activity and protect against fraudulent transactions.

Third-Party Automated Data Collection

We may receive data from third-party services, this may include:

• Advertising Networks – Third-party ad providers collect behavioral and engagement data to deliver targeted advertisements based on your interests.
• Analytics Providers – Third-party analytics platforms monitor website traffic, user engagement, and demographic insights.
• E-Commerce and Payment Processors – Our partners process transactions and collect necessary financial and verification information.

Social Media and External Platforms

RS collects information from social media and third-party integrations, this may include:

• Social Media Engagement – If you interact with RS through social media platforms (e.g., Facebook, Instagram, X, LinkedIn), we may collect your profile information, comments, and other publicly available data.
• Single Sign-On (SSO) and Linked Accounts – If you log in or connect an RS account using third-party authentication (e.g., Google, Apple, or Facebook), we receive certain information from those providers based on your settings.

Security Cameras and Automated License Plate Recognition

For security, fraud prevention, and operational purposes, RS collects:

• Surveillance Footage – In-store security cameras record customer activity for loss prevention and compliance with safety protocols.
• License Plate Recognition – In applicable locations, we may use automated systems to detect and log vehicle license plate numbers in parking areas for security and operational purposes.

Information from Other Sources

We may also collect personal information from:

• Publicly Available Sources – Government records, public directories, and professional licensing databases.
• Business Partners and Vendors – Data provided by manufacturers, suppliers, delivery services, and third-party retailers.
• Credit and Fraud Prevention Agencies – Identity verification, credit checks, and fraud risk assessments.
• Third-Party Data Brokers – Commercially available data that enhances our understanding of customer demographics, preferences, and purchasing behaviors.

Information from Affiliated Companies

We may collect your personal information from other entities within our corporate family, including affiliated businesses.

RS collects and processes personal information to operate, enhance, secure, and improve our products, services, and customer experience while ensuring compliance with legal and regulatory requirements. The ways in which we use personal information include, but are not limited to, the following:

Marketing and Advertising

We use personal information to develop and execute marketing campaigns, promotional offers, and customer engagement strategies across multiple channels, including email, SMS, direct mail, digital advertising, and in-store promotions. This may include:

• Interest-Based Advertising – Delivering targeted advertisements based on browsing activity, purchase history, and interactions with RS platforms.
• Retargeting and Behavioral Advertising – Using cookies, tracking pixels, and third-party advertising networks to re-engage users who have interacted with RS websites, apps, or digital content.
• Campaign Performance Analysis – Measuring and optimizing the effectiveness of advertising campaigns, including tracking engagement and response rates.

Product and Service Fulfillment

We use personal information to facilitate transactions, process orders, manage accounts, and provide customer support. This may include:

• Order Management – Processing purchases, verifying payments, coordinating shipping, and handling returns or exchanges.
• Customer Support and Communications – Providing assistance through phone, email, chat, or other communication channels, including responding to inquiries, troubleshooting, and offering technical support.
• Subscription and Recurring Services – Managing enrollments, billing, and renewal processes for customers participating in subscription-based services or loyalty programs.
• Service Improvements – Using purchase history, feedback, and support interactions to enhance product offerings and service quality.

Personalization and Customer Experience

RS leverages personal information to customize and enhance user experiences across our digital and physical platforms. This may include:

• Tailored Recommendations – Analyzing browsing habits and purchase history to suggest relevant products and promotions.
• Customized Communications – Sending personalized content, exclusive offers, or reminders based on customer preferences and engagement patterns.
• Website and App Optimization – Using analytical data to refine layouts, improve search functionality, and enhance overall usability.
• Customer Behavior Insights – Tracking engagement trends to refine user interactions and enhance RS services.

Cross-Context Behavioral Advertising

We analyze and combine data from various sources to create comprehensive customer profiles, enabling targeted marketing and advertising across multiple platforms. This may include:

• Tracking Customer Interactions – Linking online and offline behaviors to better understand consumer preferences.
• Refining Advertising Strategies – Adjusting marketing efforts based on combined insights from different customer engagement points.
• Coordinated Marketing Efforts – Sharing behavioral insights across RS and affiliated services to align advertising and promotional activities.

Social Media and Social Media Advertising

We collect and use information from social media interactions to improve customer engagement, market our products, and respond to user feedback. This may include:

• Targeted Social Media Ads – Running paid advertising campaigns on platforms such as Facebook, Instagram, LinkedIn, and other social networks based on user interests and activity.
• User-Generated Content – Featuring customer reviews, testimonials, or shared images in marketing materials.
• Social Media Interactions – Collecting insights from user engagement, including likes, comments, direct messages, and shares.
• Influencer and Brand Partnerships – Working with social media influencers or brand advocates to expand product awareness.

Fraud Prevention and Security Monitoring

To protect RS, its customers, and business operations, we monitor transactions, interactions, and network activity for suspicious behavior, fraud risks, and security threats. This may include:

• Identity Verification – Validating user identities to prevent unauthorized account access and fraudulent transactions.
• Transaction and Behavioral Monitoring – Detecting and flagging potentially fraudulent purchases, bot activity, or account takeovers.
• Website and System Security – Implementing measures to safeguard against cyber threats, data breaches, and malware attacks.
• Risk Assessment and Compliance – Using automated systems to evaluate and mitigate fraud risks before completing transactions.

Legal Compliance and Enforcement

RS processes personal information to comply with applicable legal obligations, regulatory requirements, and internal policies. This may include:

• Regulatory Compliance – Adhering to industry standards, data protection regulations, and financial reporting requirements.
• Legal Requests and Investigations – Providing necessary information in response to subpoenas, court orders, or governmental inquiries.
• Dispute Resolution and Policy Enforcement – Investigating claims, enforcing our terms and conditions, and resolving customer or business disputes.
• Loss Prevention and Internal Investigations – Conducting inquiries into unauthorized activity, theft, or policy violations.

RS shares personal information with various third parties to operate our business, provide services, fulfill legal obligations, and enhance customer experiences. The categories of third parties we disclose personal information to, and the purposes for doing so, include but are not limited to the following:

Affiliates and Subsidiaries

We may share your personal information with other companies within our corporate family, including affiliated and subsidiary businesses. These companies may use your information in ways that align with this Privacy Policy, such as for operational efficiencies, joint marketing efforts, and customer service support.

Service Providers and Vendors

We disclose personal information to third-party service providers and vendors who assist us in delivering services. These include, but are not limited to:

• Order Fulfillment and Logistics – Shipping companies, warehouse providers, and returns processors.
• Payment Processors – Entities that handle billing, refunds, financing, and payment card processing.
• Customer Support – Call centers, chat support providers, and CRM platforms.
• IT and Security Services – Companies that maintain our digital infrastructure, monitor security risks, and prevent fraud.
• Marketing and Advertising Partners – Third parties that assist in digital advertising, social media campaigns, and promotional activities.
• Data Analytics and Measurement Firms – Companies that help us track website performance, improve services, and refine our marketing strategies.

Financial Institutions

For payment processing and financing options, we may disclose personal information to banks, credit card issuers, and payment processors. These institutions use the information to verify transactions, process payments, and prevent fraud.

Registries and Shopping Lists

If you create a registry, wish list, or shopping list on our platform, we may disclose your information as part of those services. This allows others to find, share, and purchase items for you based on your preferences.

Other Businesses for Joint Marketing and Product Fulfillment

We may share personal information with third-party businesses for co-branded marketing programs, joint promotional offers, or product fulfillment partnerships. These companies are contractually restricted from using your personal information for purposes other than those required to deliver their services.

Government Agencies and Legal Authorities

RS may disclose personal information when legally required or when we believe it is necessary to protect our business, customers, employees, or the public. This may include:

• Compliance with Legal Requirements – Responding to subpoenas, court orders, regulatory inquiries, or other legal processes.
• Fraud and Risk Management – Reporting suspected fraud, security breaches, or financial crimes.
• Safety and Security Measures – Addressing potential threats, enforcing our policies, and assisting in investigations related to criminal activity.

Third Parties in Connection with Business Transfers

In the event of a merger, acquisition, sale of assets, restructuring, bankruptcy, or other business transfer, RS may disclose personal information as part of due diligence or the execution of the transaction. We take reasonable measures to ensure that any recipient of this information upholds the principles outlined in this Privacy Policy.

Sharing of Non-Identifiable or Aggregate Data

RS may share de-identified, anonymized, or aggregated data with third parties for research, business intelligence, and analytical purposes. This information does not directly identify any individual and may be used to evaluate consumer trends, improve marketing strategies, and enhance business operations.

By using RS services, you acknowledge that your personal information may be disclosed as outlined above. Where required by law, we will provide notice or seek consent before sharing personal information for purposes not covered in this Privacy Policy.

RS provides multiple options to manage your privacy preferences and control how your personal information is used for marketing, advertising, and tracking purposes. You may adjust your settings using the methods outlined below.

Opt-Out of Marketing Communications

You can opt out of receiving promotional communications from RS through the following methods:

• Email Marketing – Click the "Unsubscribe" link in any marketing email you receive or adjust your preferences in your account settings.
• Text Messages (SMS/MMS) – Reply “STOP” to any promotional text message or contact customer support to opt out.
• Phone Calls – Request to be placed on our internal do-not-call list by contacting RS customer service.
• Direct Mail – If you prefer not to receive promotional mail, you may request removal from our mailing list by contacting RS.

Please note that even if you opt out of marketing communications, you may still receive non-promotional messages related to transactions, account updates, or customer service inquiries.

Managing Cookies and Tracking Preferences

RS and its third-party partners use cookies and tracking technologies to enhance your browsing experience and analyze website performance. You can manage these settings by:

• Adjusting your browser settings to block or delete cookies.
• Using RS’s cookie preference management tool (if available) to control which cookies are used.
• Configuring device settings to limit tracking on mobile applications.

Disabling cookies may affect certain website functions, including personalized recommendations and shopping cart features.

Interest-Based Advertising Preferences

RS and its advertising partners use interest-based advertising to deliver relevant ads. To manage your preferences:

• Visit the Network Advertising Initiative (NAI) opt-out page at www.networkadvertising.org/choices.
• Use the Digital Advertising Alliance (DAA) consumer choice tool at www.aboutads.info/choices to opt out of targeted ads.
• Adjust settings in your mobile device to limit ad tracking (e.g., “Limit Ad Tracking” on iOS or “Opt-Out of Ads Personalization” on Android).

Opting out of interest-based advertising will not stop advertisements from appearing, but they may be less relevant to your interests

Do Not Track (DNT) and Other Privacy Signals

Some browsers and devices allow users to send a Do Not Track (DNT) signal to websites. However, RS does not currently respond to DNT signals, as there is no industry-standard approach to their implementation.

RS provides you with options to access, review, and update your personal information to ensure accuracy and compliance with applicable privacy regulations. Below are the methods available for managing your personal data.

Updating Your Account and Profile Information

You may update, modify, or correct certain personal information by:

• Logging into your RS account and accessing the Account Settings section.
• Editing your profile details, including name, contact information, and preferences.
• Updating stored payment methods or shipping addresses.
• Contacting RS customer support for assistance with profile updates.

Requesting Data Access, Correction, or Deletion

You have the right to request access to the personal information we collect about you, as well as request corrections or deletion of certain data. To submit a request, you may:

• Contact RS customer support via email or phone.
• Specify whether you are requesting access to your data, correction of inaccurate information, or deletion of personal data (subject to legal retention requirements).
• If applicable, request a copy of the personal information we have collected about you.

Certain data may not be deleted due to legal, security, fraud prevention, or transactional record-keeping obligations.

Verification Process for Identity Confirmation

To protect your privacy and security, RS requires identity verification before processing requests related to accessing, modifying, or deleting personal information. This verification process may include:

• Confirming your identity using registered contact information (email or phone number).
• Answering security questions related to your account activity.
• Providing additional documentation (if necessary) to authenticate your request.

If we are unable to verify your identity, we may be unable to process your request or may request additional details for confirmation.

Retention Policies for Personal Data

RS retains personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

• Processing transactions and maintaining business records.
• Complying with legal, regulatory, and tax obligations.
• Resolving disputes, enforcing agreements, and preventing fraud.
• Maintaining security and operational integrity.

When personal information is no longer required, RS securely deletes, anonymizes, or otherwise disposes of the data. Your personal information may be retained longer if required or permitted by applicable law.

RS takes the security of your personal information seriously and implements a range of administrative, technical, and physical safeguards to protect your data against unauthorized access, misuse, loss, or alteration. While we strive to maintain strong security protocols, no system is completely secure, and we encourage users to take precautions to protect their own information.

Security Measures in Place to Protect Data

We employ industry-standard security measures to safeguard personal information collected through our platforms, including. Limiting access to personal data to authorized personnel and implementing role-based security restrictions.

Encryption and Authentication Practices

To further protect sensitive personal information, RS utilizes Multi-Factor Authentication (MFA) – Implementing additional authentication layers to enhance account security and prevent unauthorized access.

Limitations of Security Measures

While RS follows best practices to protect personal information, no security system is completely immune to threats. Users should take steps to safeguard their personal data, including:

• Using Strong Passwords – Creating unique and complex passwords and updating them regularly.
• Being Cautious of Phishing Attacks – Avoiding suspicious emails, links, or messages requesting sensitive information.
• Keeping Devices Secure – Using antivirus software and keeping systems up to date to protect against malware and cyber threats.

In the event of a data breach that compromises personal information, RS will take appropriate measures to investigate, mitigate risks, and notify affected individuals as required by applicable laws. If you suspect any unauthorized activity related to your RS account, please contact customer support immediately.

RS retains personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, enforce agreements, resolve disputes, and protect our business interests. The retention periods for different types of personal data vary based on the nature of the information, applicable laws, and operational requirements.

General Retention Periods

We generally retain personal information for as long as you maintain an account with RS or as required to provide our services. If you close your account or request deletion, we may continue to retain certain data for a period necessary to:

• Complete pending transactions or fulfill contractual obligations.
• Provide customer service and support.
• Maintain business and operational records.

Once data is no longer required for these purposes, it is securely deleted, anonymized, or otherwise disposed of in accordance with our internal policies.

Legal and Regulatory Retention Requirements

Certain personal information must be retained for a specified period to comply with:

• Tax, Financial, and Accounting Regulations – We may retain financial records, invoices, and payment details as required by applicable tax and financial laws.
• Fraud Prevention and Security Investigations – Transactional and authentication data may be preserved to detect, investigate, and prevent fraud or unauthorized activities.
• Litigation and Compliance Obligations – We may retain records as necessary to respond to legal claims, regulatory inquiries, or law enforcement requests.

Retention periods mandated by law may vary by jurisdiction and type of information.

Retention Policies for Different Data Categories

The retention period for specific categories of personal information depends on the type and purpose of the data:

• Account and Profile Information – Retained as long as the account remains active and for a period following closure, as required for legal and operational purposes.
• Transaction and Payment Records – Retained for financial reporting, tax compliance, and dispute resolution, typically for 7 years or as required by law.
• Marketing and Communication Preferences – Retained until you opt out or request deletion, though transactional communication records may be kept for reference.
• Security and Fraud Prevention Data – Retained based on risk assessment and regulatory compliance needs, typically for a minimum of 5 years.
• User-Generated Content (e.g., Reviews, Testimonials) – May be retained indefinitely unless removal is requested and permitted by applicable policies.

RS reviews retention policies periodically and ensures that personal data is securely handled throughout its lifecycle. If you have any questions about data retention or would like to request deletion of specific personal information, please contact RS customer support.

RS is committed to protecting the privacy of children and complies with applicable laws, including the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect, use, or disclose personal information from children under the age of 13 without verifiable parental consent.

Age Restrictions for Data Collection

Our services, website, and digital platforms are intended for general audiences and are not designed for use by children under 13. We do not knowingly solicit or collect personal information from children under 13. If we become aware that a child has provided personal information without parental consent, we will take steps to delete the information promptly.

Individuals between the ages of 13 and 18 may use our services only with the involvement and supervision of a parent or legal guardian. By accessing RS platforms, you confirm that you meet the required age for data collection under applicable laws.

Parental Control and Consent Mechanisms

If a parent or legal guardian believes that their child has provided personal information to RS without consent, they may:

• Contact RS customer support to request removal of the child’s information.
• Request details about the type of information collected and how it has been used.
• Exercise their rights under COPPA to review, modify, or delete their child’s data.

We encourage parents and guardians to monitor their children's online activities and educate them about safe internet practices. If you have any concerns about children’s privacy on our platform, please contact us for assistance.

RS’s website, mobile applications, and digital platforms may contain links to third-party websites, applications, and services that are not owned, operated, or controlled by RS. These third-party services may include external retailers, payment processors, advertisers, analytics providers, and other business partners.

Third-Party Websites, Apps, and Services

Our platforms may provide links to external websites or applications for convenience, reference, or additional functionality. When you click on a third-party link, you will be redirected to a site or service governed by its own privacy policies and terms of use. RS does not control or endorse the privacy practices of these third parties and is not responsible for how they collect, use, or protect your personal information.

Social Media Integrations

RS may integrate with social media platforms (e.g., Facebook, Instagram, X, LinkedIn) to facilitate login authentication, content sharing, and promotional activities. If you interact with RS through social media features, such as liking, sharing, or commenting on content, those interactions may be subject to the privacy policies of the respective social media platform. Additionally, if you use social login features (e.g., signing in with Google, Apple, or Facebook), RS may receive certain account information from those providers based on your settings and permissions.

Disclaimer on Third-Party Privacy Policies

This Privacy Policy applies only to RS and does not extend to third-party websites, applications, or services linked to or integrated with our platforms. We encourage you to review the privacy policies of any third-party service before providing personal information, as their data collection, usage, and security practices may differ from ours. RS disclaims any liability for the privacy practices or content of third-party entities.

If you have any concerns about how your personal information is handled by third-party services linked to RS, please contact the respective third party directly for more information.

Certain U.S. states provide residents with specific privacy rights regarding their personal information. RS complies with applicable state privacy laws and provides the following disclosures and rights for residents of California, Colorado, Connecticut, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Montana, Oregon, Texas, Utah, Virginia, and Nevada.

California Residents

California Consumer Privacy Act (CCPA) Disclosures

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and other California privacy laws. This section provides details about the categories of personal information RS collects, the sources of that information, our business purposes for collecting and sharing data, and your rights under California law.

Categories of Personal Information Collected
We collect personal information that falls into the following categories as defined by the CCPA:

• Identifiers (e.g., name, email, phone number, IP address)
• Commercial information (e.g., purchase history, transaction details)
• Internet and network activity (e.g., browsing behavior, interactions with our website)
• Geolocation data (e.g., approximate or precise location from your device)
• Employment and education information (for applicants and business interactions)
• Inferences drawn from personal information to create consumer profiles
• Audio, electronic, visual, or similar information (e.g., customer service call recordings)

Sources of Personal Information
We collect personal information from:

• Direct interactions (e.g., account registrations, purchases, customer service inquiries)
• Automated technologies (e.g., website cookies, analytics tracking)
• Third-party service providers (e.g., payment processors, advertising partners)
• Publicly available sources (e.g., government records, business directories)

Business or Commercial Purposes for Collection and Sharing
We collect, use, and share personal information for purposes such as:

• Providing and improving our products and services
• Processing transactions and fulfilling orders
• Personalizing marketing and advertising efforts
• Fraud detection, security monitoring, and compliance with legal obligations
• Research, analytics, and business operations

Data Retention Policies
Personal information is retained only for as long as necessary to fulfill the purposes for which it was collected, as required by law, or as needed for legitimate business interests. For more details, see the “How Long Does RS Retain Your Personal Information?” section of this Privacy Policy.

Sale and Sharing of Personal Information for Cross-Context Behavioral Advertising
RS may engage in cross-context behavioral advertising, which involves sharing certain personal information with advertising partners to deliver targeted advertisements. Under the CCPA, this may be considered the "sale" or "sharing" of personal information. You have the right to opt out of such activities by using the methods described below.

Your Rights Under the CCPA

As a California resident, you have the right to:

• Access the personal information we have collected about you.
• Correct inaccurate personal information.
• Request deletion of personal information, subject to certain exceptions.
• Opt out of the sale or sharing of personal information for targeted advertising.
• Limit the use of sensitive personal information, where applicable.
• Receive notice of data collection and sharing practices.

Non-Discrimination Policy

RS does not discriminate against individuals who exercise their privacy rights. This means we will not deny you goods or services, charge different prices, or provide a different level of service based on your decision to exercise these rights.

How to Submit a Request & Verification Process

To exercise your rights under the CCPA, you may submit a request through one of the following methods:

• Email – Send your request to [email protected].
• Phone – Call our customer service team.

To protect your personal information, we may need to verify your identity before processing requests. This may require confirming information associated with your account or previous transactions. If we cannot verify your identity, we may deny your request or request additional documentation.

California “Shine the Light” & Minors’ Data Protection

California residents may request details about personal information shared with third parties for direct marketing purposes under California's “Shine the Light” law. Additionally, if you are under 18 and have posted content on RS’s platforms, you may request removal of that content, subject to legal and business limitations.

Colorado, Connecticut, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Montana, Oregon, Texas, Utah, and Virginia Residents

Residents of these states have privacy rights similar to those under the CCPA, including the right to:

• Access, correct, and delete personal information.
• Opt out of the sale or sharing of personal information for targeted advertising.
• Appeal denied privacy requests.

Each state's privacy law has unique provisions and requirements. If you are a resident of any of these states and wish to exercise your privacy rights, please contact us through the methods outlined in this Privacy Policy.

Nevada Residents

Under Nevada law, residents have the right to opt out of the sale of personal information to third parties. Nevada residents may submit an opt-out request by contacting us at [email protected].

If you have questions about your state-specific privacy rights, please contact us for further assistance.

RS may offer loyalty programs, rewards programs, and other financial incentives that provide benefits such as discounts, promotions, exclusive offers, and store credits to participants. Participation in these programs may require the collection and use of certain personal information.

Categories of Personal Information Collected for Loyalty Programs

When you enroll in an RS loyalty or financial incentive program, we may collect and use the following personal information:

• Identifiers – Name, email address, phone number, and account details.
• Transaction History – Purchase records, order frequency, and engagement with promotions.
• Demographic Information – Preferences, interests, and participation in special offers.
• Device and Online Activity – How you interact with our website, loyalty accounts, and promotional content.
• Marketing Preferences – Communication preferences and promotional engagement.

This information is used to administer and personalize loyalty program benefits, analyze participation trends, and improve our promotional offerings.

Financial Incentives and Eligibility Criteria

RS may provide financial incentives to customers in exchange for their participation in loyalty programs or for the collection of personal information. These incentives may include:

• Discounts on purchases.
• Reward points or store credit for future purchases.
• Exclusive offers and early access to promotions.
• Personalized discounts based on shopping behavior.

The value of these incentives is based on an analysis of the personal information collected and its estimated benefit to RS. Participation in these programs is voluntary, and eligibility criteria may vary based on program terms and conditions.

Opt-In and Opt-Out Options

You may opt in to RS loyalty programs by enrolling through our website, mobile app, or customer service channels. By opting in, you agree to the collection and use of your personal information as outlined in the program’s terms.

You may opt out at any time by:

• Logging into your RS account and updating your program preferences.
• Contacting customer support to request removal from a loyalty program.
• Unsubscribing from promotional communications related to the program.

Opting out may result in the forfeiture of accumulated rewards, discounts, or benefits. RS reserves the right to modify, suspend, or terminate any loyalty or financial incentive program at its sole discretion.

For more details on specific loyalty program terms, please refer to the program’s official rules or contact RS customer support.

If you have any questions, concerns, or requests related to this Privacy Policy, your personal information, or your privacy rights, you may contact RS using the following methods:

• Email: Send your privacy-related inquiries to [email protected]
• Phone: Call our customer service team at 855-838-1010
• Mailing Address:
  Attention: RestaurantSupply.com Legal Team
  Restaurant Supply, LLC.
  13031 US Hwy 19 N,
  Clearwater, FL 33764

We will respond to privacy-related inquiries and requests within the timeframes required by applicable laws. If additional verification is needed to process your request, we will notify you accordingly.