MEP Central Privacy Policy
Effective Date: 1/1/2025
Last Updated: 10/15/2025
Introduction
MEP Central ("we," "us," "our," or "MEP Central") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and related services (collectively, the "Platform").
Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform.
This Privacy Policy is incorporated into and subject to our Terms of Use and Terms and Conditions.
Table of Contents
- Information We Collect
- How We Use Your Information
- How We Share Your Information
- Cookies and Tracking Technologies
- Third-Party Services
- Data Security
- Data Retention
- Your Privacy Rights and Choices
- Children's Privacy
- State-Specific Privacy Rights
- International Users
- Changes to This Privacy Policy
- Contact Us
1. Information We Collect
We collect information that you provide directly to us, information collected automatically, and information from third-party sources.
1.1 Information You Provide to Us
Account Registration Information:
- Full name
- Email address
- Phone number
- Password
- Username
- Mailing address and shipping addresses
- Billing address
- Business name and tax ID (for business accounts)
- Professional license information (for contractor accounts)
Transaction Information:
- Payment card information (processed by third-party payment processors)
- Purchase history and order details
- Shipping and delivery preferences
- Return and refund information
- Communication preferences
Seller Information (for Supplier Accounts):
- Business registration and licensing documents
- Banking and payout information
- Tax identification numbers
- Business contact information
- Product catalog and inventory data
- Fulfillment capabilities and shipping rates
- Business Central or ERP integration credentials
User-Generated Content:
- Product reviews and ratings
- Questions and answers
- Photos and videos
- Comments and feedback
- Messages to sellers or customer support
- Profile information and preferences
Communications:
- Customer service inquiries and correspondence
- Survey responses and feedback
- Marketing preferences and subscriptions
- Communications with sellers
Technical Support Information:
- Device information and system logs
- Error reports and diagnostic data
- Screenshots or recordings (when you provide them for support)
1.2 Information Collected Automatically
When you access or use the Platform, we automatically collect:
Device and Usage Information:
- IP address
- Browser type and version
- Operating system
- Device identifiers (mobile device ID, advertising ID)
- Screen resolution and device settings
- Referring and exit pages
- Pages viewed and links clicked
- Time and date of access
- Time spent on pages
- Search queries and terms
Location Information:
- Approximate location based on IP address
- Precise location (if you grant permission on mobile devices)
- Shipping and billing address locations
Cookies and Similar Technologies:
- Cookies, web beacons, pixel tags, and similar tracking technologies
- Session cookies and persistent cookies
- Analytics and advertising cookies
- (See Section 4 for details)
Transactional Data:
- Items viewed, searched, and purchased
- Shopping cart contents
- Wishlist and saved items
- Browsing history on the Platform
- Click patterns and navigation paths
1.3 Information from Third-Party Sources
We may receive information about you from:
Payment Processors:
- Payment verification and transaction data
- Fraud detection information
- Chargeback and dispute information
Shipping Carriers:
- Delivery status and tracking information
- Address verification data
- Delivery confirmation
Business Partners:
- Marketing partners and affiliates
- Verification services (identity, business, credit)
- Data enrichment services
Social Media:
- Information you choose to share when connecting social media accounts
- Public profile information (if you link accounts)
Business Central and ERP Systems:
- Product catalog and inventory synchronization
- Order and fulfillment data
- Customer account information (for business customers)
Public Sources:
- Business registration databases
- Professional licensing records
- Publicly available information
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 Provide Platform Services
- Create and manage your account
- Process transactions and orders
- Facilitate communication between buyers and sellers
- Provide customer support
- Send transactional notifications (order confirmations, shipping updates, etc.)
- Process returns and refunds
- Manage seller accounts and payouts
- Synchronize data with Business Central and other business systems
2.2 Improve and Personalize the Platform
- Personalize your experience and recommend relevant products
- Remember your preferences and settings
- Analyze usage patterns and trends
- Conduct research and analytics
- Test new features and functionality
- Improve Platform performance and user experience
- Develop new products and services
2.3 Marketing and Communications
- Send promotional emails and newsletters (with your consent)
- Display targeted advertising
- Provide special offers and promotions
- Conduct surveys and request feedback
- Announce new products, features, or services
- Send service announcements and updates
2.4 Safety, Security, and Legal Compliance
- Detect and prevent fraud, abuse, and security incidents
- Verify identity and authenticate users
- Enforce our Terms of Use and Terms and Conditions
- Protect against malicious, deceptive, or illegal activity
- Comply with legal obligations and respond to legal requests
- Protect the rights, property, and safety of MEP Central, users, and others
- Resolve disputes and enforce agreements
- Maintain accurate business and financial records
2.5 Business Operations
- Manage seller relationships and partnerships
- Process payments and manage accounts receivable
- Calculate and pay referral commissions
- Generate analytics and business intelligence
- Maintain quality control and performance metrics
- Conduct audits and financial reporting
- Manage business risks and strategic planning
3. How We Share Your Information
We share your information in the following circumstances:
3.1 With Sellers
When you place an order, we share relevant information with the seller, including:
- Your name and shipping address
- Contact information (phone number, email)
- Order details and product selections
- Delivery instructions
Sellers are independent businesses and are responsible for protecting the information you share with them. We encourage you to review sellers' privacy practices.
3.2 Service Providers and Business Partners
We share information with third-party service providers who perform services on our behalf:
Payment Processing:
- Credit card processors and payment gateways
- Fraud detection and prevention services
- ACH and bank transfer providers
Shipping and Fulfillment:
- Shipping carriers (UPS, FedEx, USPS, freight carriers)
- Address verification services
- Warehouse and logistics providers
Technology Services:
- Cloud hosting providers (Microsoft Azure)
- Database management services
- Content delivery networks (CDN)
- Email service providers
- SMS and communication platforms
- Analytics and business intelligence tools
Marketing and Advertising:
- Email marketing platforms
- Advertising networks and platforms
- Social media advertising services
- Marketing analytics providers
Business Systems Integration:
- Microsoft Business Central
- ERP system connectors
- API integration partners
Professional Services:
- Legal counsel and advisors
- Accounting and financial services
- Business consultants
- Customer support providers
3.3 Business Transfers
If MEP Central is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. You will be notified via email and/or prominent notice on the Platform of any change in ownership or use of your information.
3.4 Legal Requirements and Protection of Rights
We may disclose your information when required by law or when we believe disclosure is necessary to:
- Comply with legal obligations, court orders, or legal processes
- Respond to lawful requests from government authorities
- Enforce our Terms of Use, Terms and Conditions, or other agreements
- Protect the rights, property, or safety of MEP Central, our users, or others
- Prevent or investigate fraud, security issues, or illegal activity
- Defend against legal claims
3.5 With Your Consent
We may share your information with third parties when you provide explicit consent or direct us to do so.
3.6 Aggregated and De-Identified Information
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This includes:
- Market research and industry reports
- Platform usage statistics
- Trend analysis and benchmarking
- Product performance data
3.7 Public Information
Information you choose to make public is accessible to other users and the public:
- Product reviews and ratings
- Public profile information
- Questions and answers on product pages
- Photos and videos you upload to public areas
4. Cookies and Tracking Technologies
4.1 What Are Cookies?
Cookies are small text files stored on your device that help websites remember information about your visit. We use cookies and similar technologies (web beacons, pixels, local storage) to enhance your experience on the Platform.
4.2 Types of Cookies We Use
Essential Cookies (Required):
- Authentication and account access
- Shopping cart functionality
- Security and fraud prevention
- Load balancing and performance
- These cookies are necessary for the Platform to function and cannot be disabled
Functional Cookies (Optional):
- Remember your preferences and settings
- Language and location preferences
- Display preferences and customization
- Previously viewed items
Analytics Cookies (Optional):
- Understand how visitors use the Platform
- Measure Platform performance
- Identify popular products and features
- Improve user experience
- We use Google Analytics, Microsoft Clarity, and similar services
Advertising Cookies (Optional):
- Deliver relevant advertisements
- Track ad campaign effectiveness
- Limit the number of times you see an ad
- Measure conversion rates
- We use Google Ads, Facebook Pixel, and similar services
Social Media Cookies (Optional):
- Enable social media sharing
- Track social media referrals
- Display social media content
- Platforms include Facebook, LinkedIn, Twitter, Instagram
4.3 Third-Party Cookies
Third-party services may set their own cookies on your device. We do not control these cookies. Please review the privacy policies of these third parties:
- Google (Analytics, Ads)
- Facebook (Pixel, Ads)
- Microsoft (Clarity, Advertising)
- Payment processors
- Shipping carriers
4.4 Managing Cookies
Browser Settings: You can control cookies through your browser settings:
- Block all cookies
- Block third-party cookies
- Delete cookies after each session
- Receive notifications when cookies are set
Note: Blocking essential cookies will prevent you from using certain Platform features.
Opt-Out Tools:
- Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
- Network Advertising Initiative: https://optout.networkadvertising.org/
- Digital Advertising Alliance: https://optout.aboutads.info/
Do Not Track: Some browsers have "Do Not Track" features. We currently do not respond to Do Not Track signals, but we honor your cookie preferences.
4.5 Mobile Device Tracking
On mobile devices, you can:
- Reset your advertising identifier
- Opt out of personalized advertising
- Limit ad tracking in device settings
- Disable location services
5. Third-Party Services
5.1 Third-Party Links
The Platform may contain links to third-party websites, services, or content. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
5.2 Third-Party Integrations
We integrate with various third-party services:
Payment Processing:
- Stripe, PayPal, or other payment processors
- These services collect payment information directly
- We do not store complete credit card numbers
Shipping Services:
- Integration with carrier APIs for tracking and rates
- Address validation services
Business Systems:
- Microsoft Business Central ERP integration
- API connections for inventory and order management
Communication Services:
- Email service providers (for transactional and marketing emails)
- SMS providers (for order notifications)
Social Media:
- Social login and sharing features
- Social media advertising platforms
Each third-party service has its own privacy policy and data practices. We are not responsible for how these services collect or use your information.
5.3 Seller Privacy Practices
Sellers on our Platform are independent businesses with their own privacy practices. When you purchase from a seller, your information is shared with that seller. We encourage sellers to maintain strong privacy protections, but we are not responsible for their data practices.
6. Data Security
6.1 Security Measures
We implement reasonable technical, administrative, and physical security measures to protect your information from unauthorized access, use, alteration, and disclosure:
Technical Safeguards:
- Encryption of data in transit (TLS/SSL)
- Encryption of sensitive data at rest
- Secure cloud hosting on Microsoft Azure
- Regular security assessments and penetration testing
- Intrusion detection and prevention systems
- Firewalls and access controls
- Multi-factor authentication options
Administrative Safeguards:
- Employee training on data protection
- Limited access to personal information (need-to-know basis)
- Confidentiality agreements with employees and contractors
- Background checks for employees with data access
- Incident response and breach notification procedures
Physical Safeguards:
- Secure data center facilities
- Physical access controls
- Environmental controls and monitoring
6.2 Payment Security
- Payment information is processed by PCI-DSS compliant payment processors
- We do not store complete credit card numbers on our servers
- Payment card data is tokenized for secure storage
- All payment transactions are encrypted
6.3 Account Security
You are responsible for:
- Maintaining the confidentiality of your password
- Restricting access to your account
- Notifying us immediately of unauthorized access
- Using strong, unique passwords
- Logging out of your account when finished
6.4 Security Limitations
No security system is perfect. While we strive to protect your information, we cannot guarantee absolute security. Risks include:
- Transmission of data over the internet is not completely secure
- Unauthorized access, hacking, or data breaches may occur
- Human error or technical failures may compromise security
- Third-party service providers may experience breaches
In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
7. Data Retention
7.1 How Long We Keep Your Information
We retain your information for as long as necessary to:
- Provide Platform services
- Maintain your account
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Prevent fraud and abuse
- Fulfill legitimate business purposes
7.2 Retention Periods
Account Information:
- Active accounts: Retained while your account is active
- Inactive accounts: May be deleted after prolonged inactivity (typically 3+ years)
- Closed accounts: Retained for 7 years for legal and accounting purposes
Transaction Records:
- Order and payment history: 7 years (tax and accounting requirements)
- Invoice and financial records: 7 years
- Shipping and delivery records: 3 years
Communications:
- Customer service records: 3 years
- Marketing communications: Until you unsubscribe, then 30 days
Technical Data:
- Server logs and analytics: 18-24 months
- Cookies: As specified in cookie settings (typically 30 days to 2 years)
Legal Holds:
- Information subject to legal proceedings or investigations is retained until resolution
7.3 Deletion and Anonymization
When retention periods expire:
- Personal information is deleted or anonymized
- Backup copies are deleted according to backup retention schedules
- Some information may be retained in anonymized form for analytics
8. Your Privacy Rights and Choices
8.1 Access and Update Your Information
You have the right to:
- Access your personal information
- Update or correct inaccurate information
- Download a copy of your data
How to exercise: Log into your account and visit your profile settings, or contact us at privacy@mepcentral.com
8.2 Delete Your Account and Information
You may request deletion of your account and personal information.
How to request: Contact us at privacy@mepcentral.com
Important notes:
- Some information may be retained for legal or legitimate business purposes
- Transaction records may be retained for tax and accounting requirements
- Information shared with sellers or third parties may be subject to their retention policies
- Deletion may take up to 30 days to complete
8.3 Marketing Communications
You can control marketing communications:
Email Marketing:
- Unsubscribe link in every marketing email
- Update email preferences in account settings
- Contact us to opt out: privacy@mepcentral.com
Note: You will still receive transactional emails (order confirmations, shipping notifications) even if you opt out of marketing.
SMS/Text Messages:
- Reply STOP to opt out
- Update SMS preferences in account settings
Phone Calls:
- Request to be added to our Do Not Call list
- We do not make unsolicited sales calls
8.4 Cookie Preferences
Manage cookies through:
- Browser settings
- Cookie consent banner on first visit
- Account settings (for logged-in users)
8.5 Targeted Advertising
Opt out of targeted advertising:
- Adjust cookie preferences
- Use industry opt-out tools (DAA, NAI)
- Reset advertising ID on mobile devices
- Use browser privacy settings
8.6 Location Data
Control location sharing:
- Deny location permissions in browser or device settings
- We will use approximate location based on IP address if precise location is denied
8.7 Object to Processing
You may object to certain uses of your information:
- Direct marketing
- Profiling for personalized content
- Data sharing with specific third parties
How to object: Contact privacy@mepcentral.com
9. Children's Privacy
9.1 Age Restriction
The Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.
9.2 Parental Notice
If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@mepcentral.com. We will delete the information as required by law.
9.3 Age Verification
By using the Platform, you represent that you are at least 18 years old.
10. State-Specific Privacy Rights
10.1 California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to Know: You can request information about:
- Categories of personal information collected
- Sources of personal information
- Business purposes for collection
- Categories of third parties with whom we share information
- Specific pieces of personal information we have about you
Right to Delete: Request deletion of your personal information (subject to exceptions)
Right to Opt-Out of Sale/Sharing: California residents can opt out of the "sale" or "sharing" of personal information
- We do not "sell" personal information for monetary consideration
- We may "share" information for targeted advertising purposes
- Opt out by clicking "Do Not Sell or Share My Personal Information" or contacting us
Right to Correct: Request correction of inaccurate personal information
Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information in ways that trigger this right
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Authorized Agent: You may designate an authorized agent to make requests on your behalf
How to Exercise Your Rights:
- Email: privacy@mepcentral.com
- Phone: [Phone Number]
- Online form: [URL]
- We will verify your identity before processing requests
- Response time: 45 days (may extend 45 additional days)
Shine the Light Law: California residents may request information about disclosure of personal information to third parties for direct marketing purposes
10.2 Virginia Privacy Rights (VCDPA)
Virginia residents have the right to:
- Confirm whether we process your personal data
- Access your personal data
- Correct inaccuracies in your personal data
- Delete your personal data
- Obtain a copy of your personal data
- Opt out of targeted advertising, sale of personal data, or profiling
10.3 Colorado Privacy Rights (CPA)
Colorado residents have similar rights to Virginia residents, plus:
- Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects
10.4 Connecticut Privacy Rights (CTDPA)
Connecticut residents have rights similar to Virginia residents.
10.5 Other State Privacy Rights
Residents of states with comprehensive privacy laws have rights similar to those described above. Contact us to exercise your rights.
10.6 How to Exercise State-Specific Rights
Submit a Request:
- Email: privacy@mepcentral.com
- Phone: [Phone Number]
- Online form: [URL]
Verification Process: We will verify your identity using information we have on file or by requesting additional verification information.
Appeal Process: If we deny your request, you have the right to appeal. Contact us to initiate an appeal.
11. International Users
11.1 United States Operations
MEP Central operates primarily in the United States. The Platform is hosted on servers located in the United States. By using the Platform, you consent to the transfer of your information to the United States.
11.2 International Data Transfers
If you access the Platform from outside the United States:
- Your information will be transferred to and processed in the United States
- The United States may have different data protection laws than your country
- We implement appropriate safeguards for international transfers
11.3 European Economic Area (EEA) Users
If you are located in the EEA, you may have additional rights under the General Data Protection Regulation (GDPR):
- Right of access, rectification, erasure, and data portability
- Right to restrict or object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing:
- Performance of a contract (to provide Platform services)
- Legitimate interests (to improve services, prevent fraud)
- Consent (for marketing communications and optional features)
- Legal obligations (to comply with laws)
Data Protection Officer: For GDPR inquiries, contact: dpo@mepcentral.com
11.4 Other International Users
Users in other countries may have privacy rights under local laws. Contact us to inquire about your rights.
12. Changes to This Privacy Policy
12.1 Updates
We may update this Privacy Policy from time to time to reflect:
- Changes in our practices
- Changes in applicable laws
- New features or services
- Feedback from users
12.2 Notice of Changes
When we make material changes, we will notify you by:
- Updating the "Last Updated" date at the top of this policy
- Sending an email to the address associated with your account
- Posting a notice on the Platform
- Displaying a pop-up notification when you log in
12.3 Continued Use
Your continued use of the Platform after changes to this Privacy Policy constitutes acceptance of the updated policy. If you do not agree with changes, please discontinue use of the Platform.
12.4 Review Regularly
We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
MEP Central Privacy Team
[Street Address]
Houston, TX [Zip Code]
Email: privacy@mepcentral.com
Phone: [Phone Number]
Hours: Monday-Friday, 8:00 AM - 5:00 PM Central Time
For California Requests: california-privacy@mepcentral.com
For GDPR Inquiries: dpo@mepcentral.com
General Customer Support:
Email: support@mepcentral.com
Phone: [Phone Number]
Summary of Key Points
✓ We collect information you provide, information collected automatically, and information from third parties
✓ We use information to provide services, improve the Platform, and communicate with you
✓ We share information with sellers, service providers, and as required by law
✓ We use cookies and tracking technologies (you can manage preferences)
✓ We implement security measures to protect your information
✓ You have rights to access, update, delete, and control your information
✓ We retain information as long as necessary for legitimate purposes
✓ State-specific privacy rights apply (California, Virginia, Colorado, Connecticut, etc.)
✓ The Platform is not for children under 18
✓ We may update this policy; we will notify you of material changes
By using MEP Central, you acknowledge that you have read and understood this Privacy Policy.
Last Updated: 10/15/2025
Version: 1.0
MEP Central - Your Complete MEP Supply Solution