GOOD STUFF DISTRIBUTOR INC.

PRIVACY POLICY

Effective Date: May 21, 2026

Good Stuff Distributor Inc. (“Good Stuff,” “Company,” “we,” “us,” or “our”) respects the privacy of customers, prospective customers, vendors, brand partners, website visitors, account users, delivery contacts, and other individuals who interact with our websites, ordering portals, customer onboarding tools, communications, product information, delivery operations, and related services (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, retain, and protect information in connection with our Services, including information submitted through goodstuffdist.com, linked ordering or customer portals, vendor/customer forms, email, telephone, text communications, and third-party platforms used to support our wholesale distribution business.

This Policy is designed for a wholesale food distribution business and should be reviewed against Good Stuff’s actual technology stack, analytics tools, payment processors, and customer onboarding practices before publication.

1. Overview

Good Stuff is a wholesale distributor serving food service, retail, grocery, cafe, restaurant, hotel, catering, and related commercial customers. In operating our business, we may collect information about customers, vendors, delivery locations, purchasing history, payment activity, authorized account users, and communications necessary to provide wholesale distribution services.

We do not intend to make customer-specific pricing, purchasing information, or vendor/customer lists publicly available. We may use aggregated, de-identified, or anonymized information to evaluate business performance, improve our product selection, analyze demand, plan delivery routes, manage inventory, and improve our Services.

2. Contact Information

If you have questions, requests, concerns, or complaints regarding this Privacy Policy or Good Stuff’s privacy practices, please contact us at:

Good Stuff Distributor Inc.
Attn: Privacy / Legal
131 W. Harris Avenue
South San Francisco, CA 94080
Phone: (415) 647-6617
Email: info@goodstuffdist.com

3. Scope and Consent

By accessing or using the Services, submitting information to us, creating an account, requesting customer or vendor onboarding, placing orders, communicating with us, or otherwise providing information to Good Stuff, you acknowledge that we may collect, use, disclose, and retain information as described in this Privacy Policy.

This Privacy Policy applies to information collected online and offline in connection with the Services. It does not apply to third-party websites, applications, or services that we do not own or control, even if linked from our website or used in connection with ordering, payments, logistics, or customer onboarding.

4. Information We Collect

We may collect the following categories of information, depending on how you interact with us:

Personal identifiers and contact information, including name, business email address, mailing address, billing address, delivery address, phone number, account login information, professional title, and authorized user information.

Commercial and business information, including company name, resale certificate or seller’s permit information, tax documentation, business type, customer/vendor status, products ordered or supplied, order history, invoices, statements, payment status, delivery details, product preferences, returns, credits, account notes, and communications regarding orders, products, deliveries, or disputes.

Payment and transaction information, including limited payment-related details submitted through third-party payment processors, account status, ACH or card payment confirmations, credit references, billing instructions, and related payment activity. Good Stuff does not need to store full payment card numbers where payments are handled through third-party processors.

Website, device, and usage information, including IP address, browser type, device type, operating system, referring pages, pages visited, timestamps, interactions with emails or website features, cookies, pixels, analytics identifiers, and similar technical data.

Communications and support information, including emails, text messages, form submissions, customer service requests, vendor inquiries, feedback, survey responses, uploaded documents, photographs or product information submitted by vendors, and other content voluntarily provided to us.

Delivery and logistics information, including delivery addresses, receiving hours, route information, proof of delivery, contact names, special delivery instructions, and information needed to coordinate refrigerated or time-sensitive deliveries.

Sensitive information. We do not seek to collect sensitive personal information except where necessary for legitimate business, legal, tax, fraud-prevention, safety, payment, or compliance purposes.

5. Sources of Information

We collect information directly from you; from your company, employees, representatives, authorized account users, vendors, buyers, brokers, brand partners, payment processors, ordering portals, accounting and logistics systems, analytics providers, public sources, and other third parties; and automatically through cookies, pixels, analytics tools, server logs, and similar technologies when you use our website or Services.

If you provide information about another person or company representative, you are responsible for having the authority or consent necessary to provide that information to us.

6. Cookies, Analytics, and Similar Technologies

We may use cookies, web beacons, pixels, embedded scripts, server logs, and analytics tools to operate the website, remember preferences, authenticate users, improve functionality, understand website traffic, measure performance, secure the Services, and support marketing or customer communications.

Your browser may allow you to block, delete, or receive warnings about cookies. If you disable cookies, certain website or portal features may not function properly. We do not guarantee that our systems will respond to all browser-based “Do Not Track” signals, but we will honor legally required opt-out preference signals where applicable.

7. How We Use Information

We may use information to: provide and improve the Services; create, administer, and secure accounts; process customer onboarding and vendor onboarding; evaluate customer eligibility; process orders, invoices, payments, credits, returns, and statements; coordinate product availability, deliveries, routing, and logistics; communicate with customers, vendors, and business contacts; respond to inquiries and support requests; maintain business records; verify identity and prevent fraud; protect our rights, property, personnel, customers, vendors, and systems; comply with tax, accounting, food distribution, safety, and legal obligations; analyze purchasing trends, inventory needs, website use, and business performance; send administrative, service, promotional, or product-related communications; and pursue other lawful business purposes described at the time of collection.

We may create aggregated, anonymized, or de-identified data and use or disclose that data for any lawful purpose, provided it does not reasonably identify you or your company.

8. How We Disclose Information

We may disclose information to service providers and contractors who support our operations, including website hosting providers, ordering portal providers, payment processors, accounting and ERP providers, route planning and logistics vendors, email and communication providers, analytics providers, IT support providers, customer relationship management providers, professional advisors, insurers, auditors, and legal counsel.

We may disclose information to customers, vendors, brokers, brand partners, carriers, delivery contacts, and other business counterparties as reasonably necessary to process orders, coordinate deliveries, resolve account issues, manage product availability, administer vendor programs, support payments, or operate the wholesale distribution relationship.

We may disclose information in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction involving all or part of our business.

We may disclose information where we believe in good faith that disclosure is necessary to comply with law, regulation, subpoena, court order, governmental request, tax or accounting obligation, food safety or recall obligation, fraud prevention, security protection, enforcement of our agreements, or protection of the rights, safety, or property of Good Stuff, our customers, vendors, personnel, or others.

We do not sell customer lists as a standalone product. If Good Stuff engages in conduct that constitutes a “sale” or “sharing” of personal information under applicable California law, we will provide legally required notices and opt-out mechanisms.

9. Third-Party Platforms and Links

Our website may link to or integrate with third-party platforms, including ordering portals, customer onboarding tools, payment processors, vendor forms, analytics tools, social media platforms, and websites operated by vendors or partners. These third parties may collect information according to their own privacy policies and terms. Good Stuff is not responsible for the privacy practices, security, or content of third-party websites or services that we do not control.

Before submitting information through a third-party service, you should review that service’s privacy policy and terms.

10. Payment and Financial Information

Payments, ACH transactions, credit card transactions, and related financial services may be handled by third-party payment processors or financial technology providers. Those providers may collect, store, and process payment information according to their own privacy policies and security practices. Good Stuff may receive transaction confirmations, account status information, limited payment identifiers, and related information needed to administer accounts, invoices, credits, and payment disputes.

11. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect information in our possession against unauthorized access, loss, misuse, alteration, and disclosure. However, no website, network, transmission, database, or storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorized use of your account or information.

12. Data Retention

We retain information for as long as reasonably necessary to provide the Services, maintain business records, administer customer and vendor relationships, comply with legal, tax, accounting, food safety, recall, insurance, dispute resolution, and regulatory obligations, enforce agreements, prevent fraud, and protect our rights. Retention periods vary depending on the nature of the information and the purpose for which it is used.

13. Your Choices

You may unsubscribe from promotional emails by using the unsubscribe instructions in those messages or by contacting us. We may still send non-promotional communications, including service messages, order confirmations, delivery communications, account notices, payment notices, legal notices, and policy updates.

You may request correction or deletion of certain information by contacting us. We may decline or limit requests where retention is required or permitted for legitimate business, legal, accounting, tax, security, fraud-prevention, food safety, recall, dispute resolution, or compliance purposes.

14. California Privacy Notice

This section applies to California residents to the extent required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and related regulations (“CCPA”). Depending on whether Good Stuff meets statutory thresholds and on the nature of the information involved, California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit use and disclosure of sensitive personal information, and not be discriminated against for exercising privacy rights.

Categories collected. In the preceding 12 months, we may have collected identifiers; commercial information; internet or network activity; geolocation or delivery-related information; professional or employment-related information in a business contact context; audio, electronic, or similar communications where calls or messages are recorded or retained; and inferences drawn from account activity or preferences.

Business or commercial purposes. We collect and use these categories for the purposes described in this Policy, including wholesale account administration, ordering, deliveries, invoicing, payments, fraud prevention, customer service, vendor management, analytics, marketing, compliance, and protection of our rights and systems.

Disclosure. We may disclose these categories to service providers, contractors, payment processors, technology providers, logistics and delivery support providers, professional advisors, business counterparties, and governmental or legal authorities as described in this Policy.

Sale or sharing. Good Stuff does not knowingly sell personal information in the traditional sense of exchanging it for money. Certain analytics, advertising, or tracking technologies may be considered “sharing” or a “sale” under California law depending on configuration. If applicable, Good Stuff will provide legally required opt-out mechanisms, including a “Do Not Sell or Share My Personal Information” link or equivalent process.

Sensitive personal information. Good Stuff does not use sensitive personal information for purposes that require a right to limit, unless disclosed at collection or otherwise required by law.

Requests. California residents may submit privacy requests by contacting us at info@goodstuffdist.com or (415) 647-6617. We may need to verify your identity and authority before processing a request. Authorized agents may submit requests where permitted by law, subject to verification and proof of authorization.

15. Children’s Privacy

The Services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we collected such information without appropriate consent, we will take reasonable steps to delete it.

16. Users Outside the United States

Good Stuff is based in the United States. If you access the Services from outside the United States, you understand that information may be processed and stored in the United States and other jurisdictions where privacy laws may differ from those in your location.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be identified by an updated effective date. Changes are effective when posted unless otherwise stated. Your continued use of the Services after an updated Policy is posted means you acknowledge the updated Policy.

18. Publication Notes / Items to Confirm Before Posting

Before publication, Good Stuff should confirm: (1) the correct privacy contact email; (2) the payment processor(s) used; (3) whether any analytics or advertising cookies are used; (4) whether Good Stuff meets CCPA/CPRA applicability thresholds; (5) whether it uses any SMS marketing platform; (6) whether calls are recorded; (7) whether a “Do Not Sell or Share” link or cookie preference tool is needed; and (8) whether any website footer links need to be updated to include this Policy.

Appendix A – Summary of Personal Information Categories

Category	Examples	Purposes
Identifiers	Names, business contact details, account credentials, delivery contacts, tax/resale certificate identifiers where applicable.	Account setup, ordering, delivery, invoicing, communication, fraud prevention, compliance.
Commercial Information	Products ordered or supplied, account history, invoices, payments, credits, returns, preferences.	Wholesale services, customer/vendor administration, analytics, inventory and delivery planning.
Internet/Network Activity	IP address, browser/device data, pages viewed, portal activity, cookie or analytics data.	Website operation, security, analytics, authentication, service improvement.
Geolocation/Delivery Information	Delivery address, route details, receiving instructions, approximate location from IP/device where applicable.	Delivery coordination, logistics, proof of delivery, customer support.
Professional/Business Contact Information	Job title, company, authorized user status, business role.	Business relationship management, account access, communications.
Communications	Emails, forms, messages, support requests, account notes.	Customer service, dispute resolution, recordkeeping, quality assurance.