Privacy Policy

Information We Collect

The information we collect depends on how you interact with REGO.

Identity and Contact Information

Examples: Name, title, business email, telephone number, mailing address, login identifier.

Primary purposes: Account creation, customer service, authentication, communications, application processing.

Retention criteria: Duration of the business relationship and thereafter as reasonably necessary for legal, security, recordkeeping and dispute purposes.

Business and Account Information

Examples: Company name, type of business, years in business, locations, billing and shipping information, customer number, authorized users, account roles.

Primary purposes: Customer qualification, account administration, fulfillment, customer support and business operations.

Retention criteria: Duration of the customer relationship plus applicable business and legal retention periods.

Application and Compliance Information

Examples: Federal Tax ID/EIN, resale certificates, tax-exemption information, business licenses, corporate information and uploaded PDFs, images or other documents.

Primary purposes: Verify business identity, establish wholesale eligibility, validate tax status, prevent fraud and process customer applications.

Retention criteria: While an application is pending and afterward for the period reasonably necessary for tax, compliance, audit, fraud-prevention, legal and business-record requirements.

Credit and Financial Information

Examples: Trade references, bank references, credit information, payment terms, account balances, payment information and credit-related documentation.

Primary purposes: Evaluate and administer commercial credit, verify references, process payments, manage receivables and prevent fraud.

Retention criteria: As required for the credit relationship, accounting, tax, legal, audit and dispute-resolution purposes.

Transaction and Commercial Information

Examples: Products viewed or purchased, carts, orders, invoices, returns, quantities, pricing, purchase history and communications regarding transactions.

Primary purposes: Provide products and services, fulfill orders, pricing, customer support, analytics and account management.

Retention criteria: In accordance with applicable accounting, tax, commercial and legal recordkeeping requirements.

Device and Usage Information

Examples: IP address, browser and device characteristics, referring pages, pages viewed, timestamps, cookie identifiers, security events and diagnostic information.

Primary purposes: Operate and secure the Services, diagnose problems, prevent abuse and understand website usage.

Retention criteria: According to security, analytics and operational retention requirements.

Communications

Examples: Emails, support requests, messages, form submissions, call notes and marketing preferences.

Primary purposes: Respond to requests, provide service, maintain business records and communicate about REGO products and services.

Retention criteria: For the duration reasonably necessary for the communication, relationship and related legal requirements.

Derived and Document-Processing Information

Examples: Data extracted from uploaded documents, validation results, duplicate indicators, confidence indicators, application status and other information produced by automated processing.

Primary purposes: Accelerate application processing, identify incomplete or inconsistent information, support verification and assist authorized REGO personnel.

Retention criteria: Generally retained with the underlying application or account information to which it relates.

Some submitted documents may contain information about owners, officers, employees, accounts-payable personnel, trade references or other individuals associated with a business. If you provide information about another person, you represent that you are authorized to provide it to REGO for the applicable business purpose.

Sources of Information

We collect information directly from applicants, customers, authorized users and website visitors. We may also receive information from authorized representatives, trade references, bank references, commercial credit-information providers, authentication providers, service providers, public or commercial business records and other sources permitted by law.

How We Use Information

REGO may use information to operate and secure our websites and customer accounts; authenticate users; process applications for wholesale accounts; verify business and tax information; review resale certificates; evaluate commercial credit; contact trade or bank references; establish and administer customer accounts; calculate pricing; process and fulfill orders; provide invoices and account information; communicate with customers; prevent fraud and misuse; comply with tax, accounting and legal requirements; investigate disputes; enforce agreements; improve our services; and perform other functions reasonably necessary to operate REGO’s wholesale business.

We may also use aggregated or de-identified information for analytics, service improvement, forecasting and business planning where the information is not reasonably capable of being associated with an identifiable individual.

AI-Assisted and Automated Document Processing

REGO may use automated technologies, including optical character recognition, machine-learning and artificial-intelligence-assisted tools, to help process customer applications and documents.

For example, these systems may assist REGO in extracting information from a resale certificate or other submitted document, classifying a document, identifying missing or inconsistent information, comparing submitted information with application fields, detecting possible duplicates, or summarizing information for review.

These tools are used to assist REGO’s business processes. Applicants remain responsible for confirming the accuracy of information submitted to REGO.

REGO does not use generative AI alone to make final decisions concerning approval of a REGO customer account or extension of commercial credit. Material account and credit decisions are made or controlled through authorized REGO personnel and applicable business rules.

REGO requires service providers that process customer application documents and extracted application information on our behalf to use that information only for authorized services and subject to applicable contractual, security and confidentiality restrictions. REGO does not authorize such providers to use customer application documents or extracted application information to train general-purpose artificial intelligence models for their own purposes.

How We Disclose Information

We may disclose information to service providers and other parties where reasonably necessary to operate our business.

These recipients may include cloud hosting and infrastructure providers; authentication and account-security providers; secure file-storage providers; AI, OCR and document-processing providers; business software, ERP and database providers; payment and banking providers; communications and customer-support providers; analytics and security providers; professional advisers such as attorneys, accountants and auditors; and other contractors providing services to REGO.

For credit applications, we may disclose or request relevant information from trade references, bank references, commercial credit-information providers and similar parties when authorized by the applicant or otherwise permitted by law.

We may disclose information where reasonably necessary to comply with law, legal process or governmental requests; protect REGO, our customers or others; investigate fraud or security incidents; enforce agreements; establish or defend legal claims; or complete a corporate transaction such as a merger, acquisition, financing, restructuring or sale of assets.

Service providers handling information for REGO are expected to process information for authorized purposes and subject to appropriate confidentiality and security requirements.

Sale, Sharing and Advertising

REGO does not sell customer applications, tax identifiers, resale certificates, credit information, trade-reference information or uploaded customer documents.

REGO does not sell personal information for monetary compensation.

Our websites may use analytics, advertising or similar technologies. Under certain state privacy laws, disclosure of online identifiers or website activity to advertising partners may be treated as a “sale,” “sharing,” or use for targeted advertising even where no money changes hands.

Where applicable law provides a right to opt out of such activity, REGO will provide an appropriate privacy-choice mechanism and honor legally recognized opt-out preference signals as required.

Information submitted as part of a customer or credit application is not used for targeted advertising.

Cookies and Similar Technologies

REGO and our service providers may use cookies, pixels, tags, local storage and similar technologies to operate our websites, maintain sessions, remember preferences, provide security, measure performance and understand how our Services are used.

Some cookies are necessary for website and account functionality. Others may support analytics or advertising.

Where required by applicable law, REGO provides controls relating to optional cookies and similar technologies.

Authentication and Account Security

REGO may use third-party identity and authentication providers to authenticate customer users, verify email addresses, recover accounts and protect login sessions.

Authentication providers may manage credentials on REGO’s behalf. REGO generally does not need to receive or store the password used by an external authentication provider.

Authentication alone does not guarantee approval for a REGO wholesale account. Access to customer information and commercial features is separately subject to REGO account approval, authorization and account permissions.

Data Security

REGO maintains administrative, technical and physical safeguards designed to protect information against unauthorized access, alteration, loss, misuse or disclosure.

Customer onboarding documents are intended to be maintained in private, access-controlled storage rather than public website-media systems. Safeguards may include encryption during transmission and storage, restricted access based on business need, malware scanning, short-lived authorized document access, authentication controls, security monitoring and access logging.

No method of transmission or storage can be guaranteed to be completely secure. Accordingly, REGO cannot guarantee absolute security.

Data Retention

REGO retains information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to maintain customer accounts, administer commercial relationships, satisfy tax and accounting obligations, maintain transaction records, evaluate or document credit decisions, prevent fraud, resolve disputes, enforce agreements and comply with law.

Retention periods may therefore differ by category of information.

When information is no longer reasonably required, REGO may delete, destroy or de-identify it in accordance with applicable retention and deletion procedures.

Privacy Rights

Depending on your state of residence and applicable law, you may have rights concerning personal information about you. These may include rights to request access to or disclosure of personal information, correct inaccurate information, request deletion, receive a portable copy of certain information, opt out of certain sales or sharing, opt out of targeted advertising, limit certain uses of sensitive personal information, or opt out of certain profiling or automated decision-making activities.

These rights are subject to the scope, applicability, exemptions and verification requirements of applicable law. Certain business records may need to be retained despite a deletion request because of tax, accounting, transactional, fraud-prevention, legal or contractual obligations.

To submit a privacy request, contact REGO at contact@regotrading.com or use the privacy-request mechanism made available on our website.

We may need to verify your identity and authority before processing certain requests. Authorized agents may submit requests where permitted by applicable law and subject to appropriate verification.

If applicable law gives you a right to appeal a decision concerning a privacy request, you may submit an appeal through the same contact method and identify the request as a “Privacy Appeal.”

REGO will not unlawfully discriminate against an individual for exercising an applicable privacy right.

Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe link included in those messages.

Opting out of promotional communications does not prevent REGO from sending transactional or relationship communications such as account notices, application requests, order confirmations, delivery information, invoices or security notices.

If REGO offers SMS messaging, participation is also subject to the applicable mobile messaging terms and consent requirements.

Information About Children

REGO’s Services are intended for businesses and authorized adult business representatives. They are not directed to children, and REGO does not knowingly solicit personal information from children through customer-account or wholesale-application processes.

Processing in the United States

REGO is based in the United States. Information may be processed and stored in the United States and in other locations in which REGO or its service providers operate, subject to applicable contractual and legal protections.

Third-Party Websites

Our Services may link to websites operated by other companies. REGO is not responsible for the privacy practices of third-party websites that we do not control. You should review the privacy notice of the applicable third party.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, business practices or legal requirements.

When we make material changes, we will update the “Last Updated” date and provide additional notice where required by applicable law.

Contact REGO

Questions about this Privacy Policy or REGO’s privacy practices may be directed to:

REGO Trading Inc.
200 Liberty Street
Metuchen, NJ 08840
Email: contact@regotrading.com
Phone: (732) 603-7346