Who controls your information
NEPA Tool Plug & Supply Co., trading as NEPA Tool Plug & Supply Co., [to be confirmed]. Privacy questions: jctoolsupply@gmail.com.
What we actually collect
This list is written from the actual database behind this site, not from a template.
- Account: email address, name if you give one, phone if you give one, marketing opt-in choice, and the date your welcome code was issued.
- Orders: email, name, whether the order is pickup or shipping, shipping name and address, items ordered, prices, discounts, promo code used, order status, and the payment reference returned by Stripe. We never receive or store your full card number.
- Reviews and questions: display name, rating, review text, and whether the order is a verified purchase.
- Saved items and alerts: wishlist items tied to your account, and the email address you give for a back-in-stock alert.
- AI assistant: the messages you send to the Tool Desk, the replies it gives, the sources it used, and a session identifier. If you are signed in, the conversation is linked to your account.
- Support and escalations: the question, any contact information you provide, and the resolution.
- Policy acceptance: the exact policy versions you accepted at checkout and when.
What we do not collect
No advertising identifiers, no third-party ad pixels, no cross-site tracking, no behavioural profiling, no data brokers, and no sale of personal information.
Who processes it for us
| Processor | Purpose | What it receives |
|---|---|---|
| Our hosting and database provider | Site hosting, accounts, orders, storage | Everything above |
| Stripe | Payment processing | Name, email, card details, billing and shipping address |
| Our AI provider | Powering the Tool Desk assistant | The text of your chat messages |
| Our email provider | Sending order and account email | Recipient email and message content |
| Google Search Console | Search performance measurement | No customer data |
Why we are allowed to hold it
To perform the contract when you order, to comply with tax and accounting law, and for our legitimate interest in operating and securing the shop. Marketing email is sent only with your opt-in.
How long we keep it
Order and tax records are kept for at least seven years as required by law. Account records are kept while your account is open. AI chat transcripts are kept for operational review and then deleted on the retention schedule set in the admin dashboard. Suppression records for bounced or unsubscribed addresses are kept indefinitely so we do not email you again.
Your choices
You can request a copy of your information, a correction, or deletion of your account by emailing jctoolsupply@gmail.com. We will respond within 30 days. Deletion does not remove records we must keep for tax and accounting purposes. You can unsubscribe from marketing email at any time using the link in any marketing message; transactional order email cannot be turned off while an order is active.
Children
This site is not directed to children under 13, and we do not knowingly collect their information.
Security
Access to customer data is restricted by role. Cost, supplier, and internal pricing fields are blocked at the database level for everyone except signed-in staff with inventory permission. Payment card data never touches our servers.
Changes
We update this policy as our systems change. The effective date above always reflects the current version, and every prior version is retained.