Privacy Policy

Identifiers and business contact details: name, employer, job title, work email, phone, shipping and billing addresses, and account or customer number.

Commercial information: quote requests, part numbers and quantities, order and invoice history, payment method type and status, freight and delivery records, warranty and RMA history, and correspondence with our team.

Financial and compliance information: resale or tax exemption certificates, credit and trade references you ask us to contact, and export-compliance details such as end user and end use where a shipment requires them.

Technical and usage information collected automatically: IP address, browser and device type, operating system, referring URL, pages viewed, time on page, interaction events, and an approximate city-level location derived from IP.

Information from others: payment confirmations from our processor, tracking and delivery events from carriers and brokers, and references you nominate.

We do not seek sensitive personal information as defined by California law, no government identifiers, precise geolocation, biometrics, health, racial or ethnic origin, religion, union membership, sexual orientation, or contents of your private communications. Do not send it to us. If it reaches us inside a document you supply, we use it only to complete the transaction it relates to.

This site is not directed at children. We do not knowingly collect information from anyone under 18 and do not knowingly sell or share the information of anyone under 16.

To quote, process, and fulfil orders: sourcing, pricing, invoicing, arranging freight and customs clearance, and handling warranty and RMA claims.

To run the customer relationship: answering enquiries, supporting your account, keeping a record of dealings with your company, and assessing credit where you have applied for terms.

To meet legal obligations: tax and accounting records, export control and sanctions screening, and responding to lawful requests.

To operate, secure, and improve the website and our systems, including detecting fraud, abuse, and security incidents.

To send operational and stock-availability email where you asked for it or where it relates to business you have already done with us. Every such message carries an unsubscribe link, and unsubscribing does not stop transactional messages about an open order.

We do not use your personal information to train machine-learning models, and we do not use automated decision-making technology to make significant decisions about you. Credit and compliance decisions are made by people.

Where the GDPR or UK GDPR applies, we process personal data to perform a contract with you or take steps at your request before entering one; for our legitimate interests in operating, securing, and developing a B2B distribution business, balanced against your rights; to comply with legal obligations; and, where required, on consent, which you may withdraw at any time without affecting prior processing.

Service providers acting on our instructions and bound to confidentiality: website and database hosting, product analytics, email delivery, payment processing, freight carriers and customs brokers, and our accounting, insurance, and IT providers.

Where the law requires or permits: regulators, law enforcement, and courts under a valid legal process; our professional advisers; and, in a merger, acquisition, financing, or sale of assets, the counterparty and its advisers under confidentiality.

We have not sold personal information or shared it for cross-context behavioral advertising in the preceding twelve months, and we do not do so now. We do not disclose personal information to data brokers.

The site sets strictly necessary cookies so it works, and uses PostHog product analytics to understand aggregate usage: which pages get read, where visitors arrive from, and where people drop off. PostHog sets its own cookies to recognize a returning browser, and our PostHog data is hosted in the United States.

Analytics are consent-gated. If you are in the EEA, the UK, or Switzerland, nothing analytics-related loads until you press Accept on our cookie banner, the banner appears before any analytics cookie is written. Elsewhere, analytics run unless you press Reject, and you can change your mind at any time using Cookie settings in the site footer, which re-opens the banner.

If your browser sends a Global Privacy Control signal, we treat it as a standing opt-out and analytics do not load at all, regardless of any earlier choice. Browser Do Not Track signals have no agreed standard and we do not act on them.

We do not run advertising pixels, cross-site retargeting, or ad-network tags on this site. A full list of the cookies used is on our Cookie Notice.

Quote and enquiry records where no order followed: up to three years from last contact, so we can honor prior pricing and pick a conversation back up.

Order, invoice, warranty, RMA, and export-compliance records: a minimum of five years from the transaction, and longer where tax, customs, or export-control law requires it or where a claim is open.

Marketing contact records: until you unsubscribe, plus a permanent suppression entry holding only what is needed to keep you unsubscribed.

Website analytics: event-level data up to two years, aggregate reporting indefinitely. Server logs rotate on a short rolling cycle.

When a retention period ends we delete the record or de-identify it so it can no longer be linked to you.

We are based in the United States and our systems and providers are principally US-hosted. If you contact us from outside the US, your information is transferred to and processed in the US, where data-protection law differs from your own.

Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on an appropriate safeguard: the European Commission's standard contractual clauses with the UK addendum where applicable, or a recipient's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions. Ask us and we will tell you which applies to a given transfer.

We use TLS in transit, encryption at rest with our hosting providers, role-based access control, multi-factor authentication on administrative accounts, and least-privilege limits on who can see customer records.

No system is perfectly secure. If a breach affects your personal information we will notify you and the relevant regulator within the timeframes the applicable law requires.

Depending on where you live you may have the right to know what we hold and why, get a copy in a portable format, correct it, delete it, opt out of sale, sharing, targeted advertising, or profiling with legal effects, limit the use of sensitive personal information, and not be treated worse for exercising any of it.

These rights are recognized in the United States under the comprehensive privacy laws of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island, and outside it under the GDPR and UK GDPR. Which of them you get depends on your residence.

California specifics: you may request the categories and specific pieces of personal information we collected, the sources, the business purpose, and the categories of third parties we disclosed it to, including for periods beginning on or after 1 January 2022. We do not sell personal information or share it for cross-context behavioral advertising, so there is no “Do Not Sell or Share” transaction to opt out of, and we do not use sensitive personal information for purposes that trigger the right to limit.

To exercise a right, email contact@globalitdistributors.com with “Privacy request” in the subject line, or call 702-941-3468. Give us enough detail to find your records. We verify identity before acting, for a business contact that usually means replying from the work email on file, and we respond within 45 days, extendable once by a further 45 days with notice. An authorized agent may act for you with written permission we can verify.

If we refuse a request you may appeal by replying to our decision or emailing contact@globalitdistributors.com with “Privacy appeal” in the subject line. We will review and give you a written answer with our reasoning within 45 days (60 where the law allows). If we deny the appeal we will tell you how to complain to your state attorney general, the California Privacy Protection Agency, or your supervisory authority.

We update this policy when our practices or the law change, and the date at the top changes with it. Material changes are flagged on the website before they take effect.

Global IT Distributors, Inc., Las Vegas, Nevada, USA, contact@globalitdistributors.com · 702-941-3468.