Privacy Policy

Last updated May 29, 2026

This Privacy Policy describes how HS Wholesale (“HSW,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you visit our website www.hswsupply.com (the “Website”) or otherwise use any of our related services, sales, marketing, or events (collectively, the “Services”). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this Privacy Policy or our practices with regard to your personal information, please contact us at customerservice@hswsupply.com.

Please read this Privacy Policy carefully, as it will help you understand what we do with the information that we collect. If there are any terms in this Privacy Policy that you do not agree with, please discontinue use of our Services immediately.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE USE YOUR INFORMATION?
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
6. HOW LONG DO WE KEEP YOUR INFORMATION?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO-NOT-TRACK FEATURES
11. YOUR UNITED STATES STATE PRIVACY RIGHTS
12. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
13. DO WE MAKE UPDATES TO THIS NOTICE?
14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short:  We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Website, place or request an order, express an interest in obtaining information about us or our products and Services, participate in activities on the Website, or otherwise contact us. The personal information we collect depends on the context of your interactions with us and the Website, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Identifiers and contact data such as your first and last name and, where applicable, the name of your business or organization.
• Contact details such as your billing and shipping addresses, email address, and telephone number.
• Account credentials such as your username and password and similar security information used for authentication and account access.
• Business and verification information such as your business license, reseller or resale certificate, tax identification number, and any tobacco, vapor, or other regulatory license or permit you provide to establish purchasing eligibility.
• Transaction and order information such as your purchase and order history, products viewed or purchased, and customer service communications.
• Payment information such as payment card or bank account information used to complete a purchase. Payment data is collected and processed by our third-party payment processors, and we do not store full payment card numbers on our systems.
• Age-verification information such as your date of birth or other information used to confirm that you meet the minimum age requirement to purchase age-restricted products.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short:  Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Website.

We automatically collect certain information when you visit, use, or navigate the Website. This information does not necessarily reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Website, as well as other technical information. This information is primarily needed to maintain the security and operation of our Website and for our internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies, as described below.

2. HOW DO WE USE YOUR INFORMATION?

In Short:  We process your information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

We use the personal information collected through our Website for a variety of business purposes described below:

• To create and manage your account and to facilitate account login and authentication.
• To process, fulfill, and manage your orders, payments, returns, and exchanges.
• To verify your age, identity, and purchasing eligibility for age-restricted and regulated products.
• To respond to your inquiries, provide customer support, and resolve disputes.
• To send you administrative information, such as order confirmations, changes to our terms and policies, and other transactional communications.
• To send you marketing and promotional communications where permitted by law and consistent with your preferences. You can opt out of our marketing emails at any time (see “What Are Your Privacy Rights?” below).
• To request feedback and to contact you about your use of our Website.
• To protect our Services, including for fraud monitoring and prevention, and to maintain the safety, security, and integrity of our Website.
• To enforce our terms, conditions, and policies, and to comply with applicable legal and regulatory obligations, including recordkeeping and reporting requirements applicable to regulated products.
• For data analysis, identifying usage trends, and improving our Website, products, and Services.

3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?

In Short:  We share information to provide our Services, to comply with laws, to protect your and our rights, or to fulfill business obligations. We do not sell your personal information for money.

We may process or share your data that we hold based on the following legal bases:

• Consent: We may process your data if you have given us specific consent to use your personal information for a specific purpose.
• Legitimate Interests: We may process your data when it is reasonably necessary to achieve our legitimate business interests.
• Performance of a Contract: Where we have entered into a contract with you, we may process your personal information to fulfill the terms of our contract.
• Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, such as in response to a court order or a subpoena, including in response to public authorities to meet national security or law enforcement requirements.
• Vital Interests: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, illegal activities, or as evidence in litigation in which we are involved.

More specifically, we may need to process your data or share your personal information in the following situations:

• Vendors and Service Providers. We share personal information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work — for example, payment processing, order fulfillment and shipping, age and identity verification, data hosting and storage, email delivery, customer support, marketing, and analytics. We require these parties to use personal information only as necessary to provide their services to us.
• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

We do not sell your personal information in exchange for monetary consideration. To the extent that our use of certain online advertising and analytics technologies (such as cookies and pixels) is considered a “sale” or “sharing” of personal information, or processing for “targeted advertising,” under applicable state privacy laws, you may opt out as described in the “Your United States State Privacy Rights” section below.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short:  We may use cookies and similar tracking technologies to collect and store your information.

We use cookies and similar tracking technologies (such as web beacons and pixels) to access or store information, operate and secure the Website, remember your preferences, analyze how the Website is used, and support marketing and advertising. Cookies are small data files placed on your device.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies or to reject cookies. If you choose to remove or reject cookies, this could affect certain features or services of our Website. To opt out of interest-based advertising by participating advertisers, you may visit http://www.aboutads.info/choices/ or http://optout.networkadvertising.org/. We also honor recognized opt-out preference signals, such as the Global Privacy Control (GPC), where required by applicable law.

5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short:  We store and process your information in the United States.

Our servers and facilities are located in the United States. If you are accessing our Website from outside the United States, please be aware that your information may be transferred to, stored, and processed by us and by those third parties with whom we may share your personal information (see “Will Your Information Be Shared With Anyone?” above) in the United States and other countries.

If you are a resident in the European Economic Area (EEA) or the United Kingdom (UK), please note that these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. We will, however, take all necessary measures to protect your personal information in accordance with this Privacy Policy and applicable law.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short:  We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). Generally, we retain your account and transaction information for the duration of your relationship with us and for a period of up to seven (7) years thereafter to satisfy our tax, accounting, recordkeeping, and legal obligations, including those applicable to the sale of regulated products, or for a longer period where required by law.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short:  We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. These measures may include encryption of data in transit, access controls, and the use of reputable third-party service providers for payment processing and data hosting. However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. You should access the Services within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short:  We do not knowingly collect data from or market to anyone under 21 years of age.

Our Website and products are intended only for adults who are at least 21 years of age. We do not knowingly solicit data from or market to anyone under 21 years of age, and we do not knowingly sell products to anyone under the legal minimum age. By using the Website, you represent that you are at least 21 years of age. If we learn that personal information from a person under 21 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

In addition, in accordance with the U.S. Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect or solicit personal information from children under 13 years of age. If you become aware of any data we may have collected from a child under 13, or from any individual under 21, please contact us at customerservice@hswsupply.com.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short:  You may review, change, or terminate your account at any time, and you may opt out of marketing communications.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided below. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and/or comply with applicable legal requirements.

Opting out of email marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list. However, we may still communicate with you — for example, to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

If you are a resident in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. However, as described above and in the section below, we do recognize and honor the Global Privacy Control (GPC) and similar opt-out preference signals where we are required to do so under applicable law. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

11. YOUR UNITED STATES STATE PRIVACY RIGHTS

In Short:  Residents of certain U.S. states may have additional rights regarding their personal information.

A number of U.S. states have enacted comprehensive consumer privacy laws. Depending on your state of residence and subject to certain exceptions, you may have some or all of the following rights with respect to your personal information. As of the “Last updated” date above, states with such laws in effect include California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. The specific rights available to you, and any exceptions, depend on the law of your state.

• Right to Access / Know. The right to know whether we are processing your personal information and to access that information.
• Right to Correct. The right to request that we correct inaccuracies in your personal information.
• Right to Delete. The right to request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Data Portability. The right to obtain a copy of the personal information you previously provided to us in a portable format.
• Right to Opt Out. The right to opt out of the “sale” of your personal information, the “sharing” or processing of your personal information for targeted (cross-context behavioral) advertising, and certain profiling that produces legal or similarly significant effects.
• Right to Limit Use of Sensitive Information. Where we process sensitive personal information, the right to limit its use and disclosure, or to provide or withhold consent, as required by your state’s law.
• Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights.

How to exercise your rights. You may submit a request to exercise these rights by contacting us at customerservice@hswsupply.com or by using the contact information provided at the end of this Privacy Policy. We will need to verify your identity before responding to your request, which may require you to provide information that matches information we have on file. You may also designate an authorized agent to make a request on your behalf, subject to our verification of the agent’s authority. We honor recognized opt-out preference signals, such as the Global Privacy Control (GPC), for opt-out-of-sale/sharing requests where required by applicable law.

Appeals. If we decline to take action on your request and your state provides a right to appeal, you may appeal our decision by contacting us at customerservice@hswsupply.com with the subject line “Privacy Rights Appeal.” We will respond within the time period required by applicable law. If your appeal is denied, you may contact your state Attorney General to submit a complaint.

Please note that many state privacy laws apply only to personal information processed about individuals acting in a personal or household context and may not apply to information we process about you in a business-to-business or employment context. We will honor verified requests to the extent required by the law applicable to you.

12. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short:  Yes. If you are a resident of California, you are granted specific rights regarding access to and control of your personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).

If you are a California resident, you have the rights described in the “Your United States State Privacy Rights” section above, including the right to know and access the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it; the right to request deletion; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right not to be discriminated against for exercising your rights. You may exercise these rights by contacting us at customerservice@hswsupply.com.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes, and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

If you are under 18 years of age, reside in California, and have a registered account with the Website, you have the right to request removal of unwanted data that you publicly post on the Website. To request removal of such data, please contact us using the contact information provided below, and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Website, but please be aware that the data may not be completely or comprehensively removed from all our systems (for example, backups).

13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short:  Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Last updated” date, and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at customerservice@hswsupply.com or contact us by post at:

HS Wholesale

511 S. Vista Ave.

Addison, IL 60101

United States

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances. To request to review, update, or delete your personal information, please contact us at customerservice@hswsupply.com or by using the contact information provided above. We will respond to your request consistent with applicable law.