Privacy policy

What we collect

The contact information you give us at checkout or on your account: name, email, and phone if you add one. We use it to create your pickup order, send order-status emails, and keep your order history. We do not sell customer data, and we do not buy data about you from anyone.

Payments

Payment is processed by Stripe. Your card details go directly to Stripe and never touch our servers; we never see or store your full card number. Stripe sets its own cookies inside its payment form on the checkout page for fraud prevention, under Stripe's privacy policy.

Cookies

We set three kinds of cookies. Sign-in cookies keep you signed in to your account; the site cannot have accounts without them. Two shop cookies help you browse: one holds the zip code your internet connection suggests, for a day, so the store picker can start near you, and one remembers the department or search you last viewed in the catalog, for 30 minutes. An analytics cookie holds an anonymous ID so we can count visits and find broken pages. Analytics runs on our own domain, is never shared with ad networks, and stops collecting when your browser sends a Do Not Track or Global Privacy Control signal. To turn it off yourself, choose “Don't count my visits” at the bottom of any page: analytics then doesn't load in that browser until you turn it back on. We use no advertising or cross-site tracking cookies.

Stored in your browser

Your cart, your chosen pickup store, and small preferences (like a dismissed banner) are saved in your browser's own storage so they survive a page reload. They stay on your device.

Email

We email you about orders you place: confirmation, ready for pickup, and similar status updates. Marketing email goes only to people who opt in: deals, and reminders about a checkout you didn't finish, if you tick the box for them at checkout or turn on Deals and news on your account page, and a back-in-stock email when you ask for one. Every marketing email says it is one and has an unsubscribe link, and unsubscribing takes effect immediately.

Deleting your account

You can delete your account from your account page; it asks for your password first. That removes your sign-in, your profile and saved details, your back-in-stock requests, any email change still pending, and your place on the game leaderboard. A discount code made just for you is switched off.

Some records stay. Your orders are kept as records of the sale, with the name, email and phone you gave on them, and their receipt links keep working. So does the log of which order emails we sent you, though the message text itself is cleared within 90 days. Your email address stays on our do-not-email list so marketing never resumes by mistake, reviews you published stay under the name you gave, messages you sent through the contact page are kept, and the deletion itself is logged with the address. To have any of these removed as well, write to us at the address below.

Who we share with

Only the service providers that run the site: Stripe (payments), our database and hosting providers, our analytics tool, and our email delivery service. Each receives only what it needs to do its job. Nothing is shared for advertising.

Questions

Ask us anything about your data, or request a copy or deletion of it: email surplus@repcolite.com, use the contact page, or write to Painter Surplus, 473 W. 17th Street, Holland, MI 49423.