This Privacy Policy explains exactly what personal information Suplink Tech Corp collects from you, how we use it, who we share it with, how we protect it, and what rights you have under U.S. federal and state privacy laws.
This Privacy Policy is published by SUPLINK TECH X CORP, a registered U.S. corporation operating under the trade name Suplink Tech Corp. Our registered business address is 154 Magic Oaks Drive, Spring, Texas 77388, United States. Our EIN is 42-1869315 and our registration number is 1574837090002.
We operate the website suplinktechcorp.com (the "Site"), through which we sell garage door parts and hardware — including springs, cables, rollers, hardware kits, and opener components — exclusively to customers in the United States. Our customer service team is available Monday through Friday, 9:00 AM to 5:00 PM Eastern Time, at info@suplinktechcorp.com or (386) 359-9755.
As the operator of this Site and the seller of goods through it, Suplink Tech Corp is the "data controller" for the personal information we collect from you. This means we determine the purposes and means by which your personal data is collected, stored, used, and shared. We take this responsibility seriously and are committed to protecting your privacy in full compliance with applicable U.S. federal and state laws.
We collect personal information that you voluntarily provide to us when you browse our Site, create an account, place an order, contact customer service, subscribe to our email list, or otherwise interact with us. This includes:
When you visit our Site, certain technical and behavioral information is automatically collected through cookies, log files, and similar tracking technologies — even if you do not make a purchase. This includes:
We may receive information about you from third-party sources, which we combine with information we already hold about you. These sources include:
We use your name, address, contact information, and payment details to process your purchase, charge your payment method, generate and send an order confirmation, pick and pack your items, ship your order with the correct carrier and address, and send you a tracking number. This is the primary reason we collect your personal data, and it is necessary to complete your purchase contract with us.
We use your contact information, order history, and communication history to respond to your questions, process return or refund requests, investigate damaged or missing shipments, resolve order disputes, and provide follow-up assistance. Support communications may be logged and retained for quality assurance and legal compliance purposes.
We use automatically collected data — including your IP address, device type, browser, and browsing behavior — to operate and improve our website. This includes diagnosing technical errors, improving page loading speed, testing new features, understanding which products are most viewed, and improving our checkout process to reduce cart abandonment and improve conversions.
With your consent or where permitted by law, we use your email address and behavioral data to send you promotional emails, product announcements, discount offers, and newsletters. We also use your data to serve you targeted advertisements on platforms such as Google and Meta. You may opt out of marketing emails at any time using the unsubscribe link in any email we send. Opting out of marketing does not affect transactional emails related to your orders.
We use your personal information to comply with applicable laws and regulations, including tax reporting and remittance obligations, fraud prevention and detection, responding to lawful requests from government authorities, enforcing our Terms of Service, and protecting the rights, property, and safety of our business, customers, and the public. We retain records as required by applicable law and delete them in accordance with our data retention schedule.
These cookies are required for the basic functioning of our website and cannot be disabled. They include cookies that maintain your shopping cart session, remember your login state if you have an account, enable the checkout process, apply security tokens to prevent cross-site request forgery (CSRF), and store your cookie consent preference. Without these cookies, our Site would not function. They do not track you for advertising purposes and do not require your consent.
These cookies collect anonymous or pseudonymous data about how visitors use our Site, such as which pages are visited most often, how long users spend on each page, what errors occur, and how users navigate through the checkout process. We use Google Analytics 4 (GA4) for this purpose. The data is aggregated and does not identify individual users. These cookies help us improve our website's performance and user experience.
Functional cookies remember your preferences and personalize your experience on our Site. They may remember your recently viewed products, your preferred currency display, language preferences, or whether you have dismissed a notification or popup. These cookies improve usability but are not strictly essential for the Site to operate.
These cookies are set by our advertising partners — including Google Ads and Meta Ads — to build a profile of your interests based on your browsing behavior and to show you relevant advertisements on other websites and platforms. They track whether you clicked on one of our advertisements, what products you viewed, and whether you completed a purchase after clicking an ad. These cookies may share data with third-party advertising networks. You may opt out of interest-based advertising through your browser settings or through the NAI opt-out tool at optout.networkadvertising.org.
If our Site includes social sharing buttons or embedded content from platforms such as Facebook, Instagram, Pinterest, or YouTube, those platforms may set their own cookies on your device when you interact with that content. We do not control these third-party cookies. Please review the privacy policy of each social media platform for details on how they use cookies and track your activity.
Depending on the type of cookie, the information collected may include: your IP address, unique device and browser identifiers, session ID, pages visited and time spent, products viewed and added to cart, purchase history, referral source (e.g., which Google search or Facebook ad brought you to our Site), geographic location at the city or state level, and demographic inferences made by third-party advertising platforms based on your browsing behavior across the web.
You have the right to accept or reject non-essential cookies. You can manage your cookie preferences in the following ways:
In addition to cookies, we and our partners may use web beacons (also called tracking pixels), pixel tags, and similar technologies embedded in our web pages and emails. When you open an email from us, a tracking pixel may notify us that the email was opened and which links you clicked. We may also use server-side analytics and event tracking to monitor purchases and conversions. These technologies work alongside cookies to provide a complete picture of how users interact with our Site and marketing campaigns.
We do not sell your personal information to third parties for monetary compensation. We share your information only in the following limited circumstances:
We implement a layered approach to data security designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:
Important Limitation: No security system is impenetrable. While we take commercially reasonable precautions to protect your data, we cannot guarantee absolute security. In the unlikely event of a data breach that affects your personal information, we will notify affected customers and relevant authorities in accordance with applicable state breach notification laws.
Our website, products, and services are intended exclusively for adults aged 18 and older. We do not knowingly collect, solicit, or process personal information from children under the age of 13. Our Site is not directed to children and we do not knowingly allow children to create accounts, place orders, or subscribe to our mailing list.
We comply with the Children's Online Privacy Protection Act (COPPA), which prohibits the collection of personal information from children under 13 without verifiable parental consent. We do not have actual knowledge of collecting information from anyone under 13 years of age.
If you are a parent or guardian and believe that your child under the age of 13 has provided us with personal information without your consent, please contact us immediately at info@suplinktechcorp.com. We will promptly delete any such information from our records upon verification of your request.
Depending on your state of residence, you may have the following rights regarding your personal information. We honor these rights for all U.S. customers regardless of state, to the extent practicable.
You have the right to request that we disclose what personal information we have collected about you over the past 12 months, including the categories of information, the sources from which it was collected, the business purpose for collecting or sharing it, the categories of third parties with whom we shared it, and the specific pieces of personal information we hold about you.
You have the right to request that we delete personal information we have collected from you. We will honor deletion requests subject to exceptions permitted by law — for example, we may retain information necessary to complete a transaction you have requested, detect and prevent fraud, comply with legal obligations (such as tax records), or exercise our legal rights.
You have the right to request that we correct inaccurate personal information we hold about you. You may update your account information directly in your account settings, or submit a correction request to us via email. We will process correction requests and notify you of the outcome within 45 days.
You have the right to direct us to stop "selling" or "sharing" your personal information with third parties for cross-context behavioral advertising purposes. We honor this right via our "Do Not Sell or Share My Personal Information" option. See Section 9 for details on how to exercise this right.
Under California law (CPRA), you have the right to limit our use and disclosure of your sensitive personal information to only what is necessary to perform the services you requested. We collect sensitive information such as payment card data only for the purpose of processing your purchase. We do not use sensitive personal information for any secondary purposes such as advertising profiling or inferring characteristics about you.
We will not discriminate against you for exercising any of your privacy rights. This means we will not deny you goods or services, charge you a different price, provide you a different level or quality of service, or penalize you in any way for submitting a privacy request or opting out of data sharing.
Where technically feasible, you have the right to request a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON), so that you can transmit it to another service provider. This right applies to data you have actively provided to us, such as account information and order history.
We use automated fraud detection systems to screen orders. These systems may result in an order being flagged, held, or cancelled without human review. If your order is declined or cancelled due to an automated decision, you may contact us to request human review of that decision. We do not use automated decision-making for credit or loan decisions, insurance pricing, or similar high-stakes determinations.
Several state laws — including those in Colorado, Connecticut, Virginia, and others — give you the right to opt out of the processing of your personal data for the purpose of targeted advertising. Targeted advertising means showing you ads based on your personal information collected from activity across multiple unaffiliated websites, apps, or services. You can exercise this right by adjusting your cookie preferences in your browser, using platform-level ad preference tools (Google, Meta), or contacting us directly.
To exercise any of the rights listed above, please submit your request by:
We will verify your identity before processing your request and will respond within 45 days. If we need more time, we will notify you of the extension. We do not charge a fee for privacy requests unless they are excessive or repetitive. We may deny requests that we cannot verify or that conflict with legal requirements.
Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and similar laws in other states, certain data-sharing practices — such as sharing your browsing and purchase data with advertising platforms like Google and Meta for the purpose of showing you targeted advertisements — may qualify as a "sale" or "sharing" of personal information, even if no money changes hands.
We do engage in these types of data-sharing practices through our use of Google Ads, Google Analytics, Meta Pixel, and similar advertising tools. If you are a California resident or a resident of another state with similar laws, you have the right to opt out of this sharing.
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce our agreements. The following outlines our general retention schedule:
| Data Type | Retention Period | Reason |
|---|---|---|
| Order & Transaction Records | 7 years | Tax and financial compliance requirements |
| Account Information | Duration of account + 2 years after deletion | Customer service and dispute resolution |
| Email Marketing Data | Until unsubscribe + 30 days | Consent management and suppression list |
| Customer Support Communications | 3 years | Dispute resolution and quality assurance |
| Analytics & Behavioral Data | 14 months (Google Analytics default) | Website performance and improvement |
| Fraud & Security Logs | 5 years | Fraud prevention and legal protection |
All payments on our Site are processed by third-party payment processors — including Shopify Payments (powered by Stripe) and PayPal — that are independently PCI DSS Level 1 compliant. When you enter your payment card details at checkout, that information is transmitted directly and securely to the payment processor and is never stored on our servers.
We receive only a transaction token, the last four digits of your card, the card type, and the billing ZIP code. We use this limited information to identify your payment method and process refunds if necessary. We do not have access to your full card number, CVV, or card expiration date at any time.
Each payment processor operates under its own privacy policy and terms. For details on how they handle your payment data, please review:
• Shopify Payments / Stripe: stripe.com/privacy
• PayPal: paypal.com/privacy
Our Site may contain links to third-party websites, including carrier tracking portals (UPS, FedEx, USPS), social media platforms, manufacturer websites, and other external resources. These links are provided for your convenience and informational purposes only.
We do not control these third-party websites and are not responsible for their content, privacy practices, or data collection activities. When you click a link that takes you to a third-party website, that website's privacy policy — not ours — governs how your information is collected and used. We strongly encourage you to review the privacy policy of any third-party website you visit before providing your personal information.
We work with the following advertising and analytics partners. Each partner has its own privacy policy and data practices:
We send order confirmations, shipping notifications with tracking numbers, delivery confirmations, refund notifications, and customer service responses. These emails are sent regardless of your marketing preferences because they are necessary to complete your purchase.
With your consent, we may send promotional emails, product announcements, discount codes, and newsletters. You may opt out at any time using the "Unsubscribe" link in any marketing email. Opting out of marketing emails will not affect transactional emails.
We comply with the CAN-SPAM Act for all commercial email communications. All marketing emails include a clear and functional unsubscribe mechanism, our physical mailing address, and accurate sender identification. We process unsubscribe requests within 10 business days. We do not use deceptive subject lines or sender names.
As a user of our Site, you are responsible for the following:
Where Your Data is Stored: Our website is hosted on Shopify's cloud infrastructure, which operates data centers primarily located in the United States. Customer data — including order records, account information, and transaction history — is stored on Shopify's secure servers. Our email communications and support records may also be stored with our third-party email service providers, which operate servers in the United States.
Data Transferred Outside the U.S.: While our primary operations and customer base are in the United States, some of our third-party service providers — such as Google and Meta — may process data on servers located in other countries. By using our Site, you acknowledge and consent to such transfers where applicable. We ensure that any such transfers are conducted under appropriate data protection safeguards.
Data Breach Notification: In the event of a security breach that compromises personal information, we will notify affected individuals and applicable state regulators in accordance with the breach notification laws of the applicable U.S. state(s). Most state laws require notification within 30 to 90 days of discovering a breach. Notifications will be sent to the email address on file and may also be posted on our website.
State Breach Notification Laws: We comply with breach notification requirements in all applicable states, including California (California Civil Code § 1798.82), Texas (Business & Commerce Code § 521.053), Florida (Florida Statute § 501.171), New York (SHIELD Act), and all other applicable state statutes. The required content and timing of notifications vary by state.
We engage in behavioral advertising (also called interest-based advertising or retargeting). This means we use information about your browsing behavior — including your visits to our Site, products you viewed, items added to your cart, and purchases — to show you relevant advertisements when you visit other websites, social media platforms, and apps.
For example, if you visit a product page on our Site but don't purchase, you may later see an advertisement for that product on Facebook, Instagram, YouTube, or websites in the Google Display Network. This is done through the use of tracking cookies, pixels, and device identifiers that link your browsing activity on our Site to advertising platforms.
Transparency and Opt-Out: We are required by Google Shopping Ads policies and applicable privacy laws to be fully transparent about this practice. You may opt out of behavioral advertising by disabling advertising cookies in your browser, visiting optout.networkadvertising.org or optout.aboutads.info, adjusting your preferences in your Google Ads or Facebook account, or contacting us to request opt-out.
What is a Cookie? A cookie is a small text file that a website places on your device (computer, smartphone, or tablet) when you visit it. Cookies are stored in your browser and allow a website to recognize your device and remember information about your visit. Cookies cannot run programs or deliver viruses to your computer. They are not software — they are data files.
Session Cookies vs. Persistent Cookies: Session cookies are temporary — they exist only during your active browser session and are automatically deleted when you close your browser. They are used to maintain your shopping cart and login state during a single visit. Persistent cookies remain on your device for a set period of time (from days to years) and are used to remember your preferences across multiple visits, enable retargeting advertising, and track long-term behavioral patterns.
First-Party vs. Third-Party Cookies: First-party cookies are set directly by our website (suplinktechcorp.com) and can only be read by our website. They are primarily used for essential site functions and remembering your preferences. Third-party cookies are set by external companies — such as Google, Meta, or other advertising networks — through code embedded on our website. These cookies can be read by those third parties on other websites, which is how cross-site behavioral advertising is enabled.
Specific Cookies We Use Include:
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| _session_id | Shopify | Essential | Maintains shopping cart and checkout session | Session |
| _shopify_y | Shopify | Analytics | Shopify analytics — unique visitor identifier | 1 year |
| _ga | Google Analytics | Analytics | Distinguishes unique users for analytics reporting | 2 years |
| _gid | Google Analytics | Analytics | Distinguishes users — refreshed daily | 24 hours |
| _fbp | Meta (Facebook) | Advertising | Facebook Pixel — tracks conversions and enables retargeting | 3 months |
| _gcl_au | Google Ads | Advertising | Google Ads conversion tracking — links ad clicks to purchases | 3 months |
The full list of cookies used on our Site may vary as we update our technology stack. For the most current list, you may use a browser cookie inspection tool (such as your browser's developer tools) to view all cookies set on your device when visiting our Site.
Some browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that they not track your browsing activity. Currently, there is no uniform industry standard or legal requirement in the United States for how websites must respond to DNT signals, and our Site does not currently respond to DNT signals from browsers.
However, we do honor the Global Privacy Control (GPC) signal — a newer browser-level privacy preference mechanism that is legally recognized under the California CCPA/CPRA and Colorado CPA. If your browser sends a GPC signal to our Site, we will treat it as a valid opt-out of the sale or sharing of your personal information for cross-context behavioral advertising purposes, where technically feasible.
To enable GPC in your browser, you may install the GPC browser extension available at globalprivacycontrol.org or use a browser that natively supports it (such as Brave or Firefox with certain settings).
As a U.S.-based e-commerce retailer, we collect and process personal information from customers across all 50 states. The personal information we collect through orders is used solely to fulfill those orders, provide customer service, comply with applicable tax and legal obligations, and (with consent) send marketing communications. We do not build or sell consumer profiles to data brokers or third-party list aggregators.
The categories of personal information we collect from customers include: identifiers (name, email, phone, IP address), commercial information (purchase history, products viewed), financial information (card type and last four digits), Internet or network activity (browsing behavior on our Site), and geolocation data (approximate location from IP address). We do not collect biometric data, precise geolocation, health data, or government ID numbers from customers.
All customer personal information is handled with care, stored securely, and shared only as described in this Privacy Policy. We maintain a commitment to data minimization — meaning we collect only the information that is reasonably necessary to provide our services and comply with our legal obligations.
The following is a state-by-state overview of the major U.S. consumer privacy laws that may apply to your personal information and the rights you have under each:
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), is the most comprehensive state privacy law in the U.S. California residents have the right to: know what personal information is collected about them; delete their personal information; correct inaccurate personal information; opt out of the sale or sharing of their personal information; limit the use of their sensitive personal information; and not be discriminated against for exercising these rights. The CPRA also created the California Privacy Protection Agency (CPPA) to enforce the law and issue regulations. We honor all CCPA/CPRA rights for California residents. To exercise your rights, contact us at info@suplinktechcorp.com.
The Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, grants Texas residents rights to access, delete, correct, and obtain a copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. As a Texas-headquartered business, we take our obligations under the TDPSA very seriously. Texas residents may appeal a denial of their privacy request by contacting the Texas Attorney General. To submit a request, email info@suplinktechcorp.com.
The Florida Digital Bill of Rights (FDBR), effective July 1, 2024, applies to large businesses that process personal data of at least 100,000 Florida consumers or derive more than 50% of global revenue from selling personal data. Florida consumers have rights to access, delete, correct, and obtain a copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and profiling. We honor these rights for Florida consumers regardless of whether we meet the statutory threshold.
The Virginia Consumer Data Protection Act (CDPA), effective January 1, 2023, gives Virginia residents the right to access, delete, correct, and obtain a portable copy of their personal data. Consumers also have the right to opt out of targeted advertising, the sale of personal data, and profiling used in furtherance of decisions that produce legal or similarly significant effects. Virginia consumers may appeal denied privacy requests. We respond to requests within 45 days and allow 60-day extensions with notice.
The Colorado Privacy Act (CPA), effective July 1, 2023, grants Colorado residents similar rights to access, delete, correct, and port their personal data, and to opt out of targeted advertising, the sale of personal data, and profiling. The Colorado CPA explicitly requires businesses to recognize the Global Privacy Control (GPC) browser signal as a valid opt-out. We honor GPC signals for Colorado residents.
The Connecticut Data Privacy Act (CTDPA), effective July 1, 2023, provides Connecticut residents with rights to access, delete, correct, and obtain a portable copy of personal data, and to opt out of targeted advertising, data sales, and certain profiling activities. Connecticut residents may submit complaints to the Connecticut Attorney General if their rights are denied. We respond to consumer requests within 45 days.
We commit to honoring the privacy rights of residents of all states with enacted privacy laws, and to monitoring and updating our practices as new state laws take effect. All states not listed above may have general data protection obligations under consumer protection statutes, breach notification laws, or sector-specific regulations (e.g., financial or health data) that we also comply with.
We do not collect, transmit, or store full credit card numbers, debit card numbers, bank account numbers, CVV codes, or card expiration dates on our systems. All payment information is captured directly by our PCI DSS Level 1 compliant payment processors (Shopify Payments/Stripe and PayPal) through encrypted, secure channels.
The only financial data we retain is the last four digits of your card number, the card brand (Visa, Mastercard, etc.), and your billing ZIP code. This limited data is used solely to identify your payment method and process refunds when necessary.
If you suspect that your payment information has been compromised in connection with a transaction on our Site, please contact us immediately at info@suplinktechcorp.com and notify your bank or card issuer. We will cooperate fully with any investigation.
To protect our business and our customers from fraudulent orders, unauthorized transactions, and abuse, we collect and use certain information specifically for fraud detection and prevention purposes. This includes your IP address, device fingerprint, browser type, order history, billing and shipping address matching, velocity checks (number of orders placed in a short period), and signals provided by third-party fraud screening services integrated into our checkout process.
Fraud-related data is processed through automated systems that assign a risk score to each order. Orders exceeding a certain risk threshold may be flagged for manual review or automatically declined. We retain fraud-related records for up to 5 years to support investigations and prevent repeat fraud.
We do not use fraud-prevention data for advertising or marketing purposes. This data is used exclusively to protect the integrity of our transactions and comply with our obligations to our payment processors and financial institutions.
In the event that Suplink Tech Corp (SUPLINK TECH X CORP) undergoes a merger, acquisition, sale of all or substantially all of its assets, corporate reorganization, bankruptcy, dissolution, or other similar business transaction, your personal information may be transferred to the acquiring or successor entity as part of that transaction.
Before any such transfer takes place, we will provide you with notice via a prominent notice on our website and/or an email to the address on file if the transfer results in a material change to how your personal information is handled or if the new entity's privacy policy is substantially different from ours.
You will retain all rights granted to you under this Privacy Policy with respect to your personal information, including any rights to access, delete, or opt out that may be available to you under applicable law. The acquiring entity will be required to honor this Privacy Policy or provide you with meaningful notice of any changes and an opportunity to exercise your rights.
Suplink Tech Corp reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our business operations. When we make material changes, we will update the Effective Date and Last Updated Date at the top of this page.
For material changes — meaning changes that significantly affect how we collect, use, or share your personal information — we will provide more prominent notice, such as an email notification to customers with an active account or a banner on our homepage. For non-material updates (such as clarifications or formatting changes), we will update the date and the revised policy will take effect immediately upon publication.
Your continued use of our website and services after a policy update constitutes your acceptance of the revised terms. We recommend bookmarking this page and reviewing it periodically, especially if you are a regular customer. If you disagree with any changes, you may contact us or discontinue use of our services.
If you have any questions, concerns, or complaints about this Privacy Policy, our data practices, or your privacy rights, please contact our Privacy Team using the information below. We respond to all privacy-related inquiries within one business day and to formal privacy requests within 45 days.
Please click Accept Cookies to continue to use the site.