Privacy Policy

GP Craft Inc. (“GP Craft,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.gpgloves.com), place orders through our online store, purchase through our third-party sales channels (including TikTok Shop, eBay, and Amazon), or interact with us as a wholesale, government (B2G), or e-commerce customer.

We only collect personal data necessary for the purposes described in this policy and do not use it for unrelated purposes. We regularly review our data collection practices to ensure compliance with this principle. All employees and contractors with access to personal data receive privacy and security guidance appropriate to their role. We maintain internal accountability measures to ensure compliance with this policy and applicable law.

Scope and Jurisdiction

This policy is designed to comply with applicable U.S. laws, including the California Online Privacy Protection Act (CalOPPA), the Children’s Online Privacy Protection Act (COPPA), the CAN-SPAM Act, and the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA). Where GP Craft processes personal data of individuals in the European Union or United Kingdom, we also apply the principles of the General Data Protection Regulation (GDPR) as a matter of good practice.

Personal data collected through our website or sales channels may be transferred to, stored, and processed in the United States, where GP Craft is based. Where cross-border transfers occur, we use appropriate safeguards (such as contractual protections with our processors) to help ensure your data remains protected.

This policy applies to:

Visitors to www.gpgloves.com

B2B wholesale customers and prospective customers

Government (B2G) procurement contacts and contracting officers

Buyers through our e-commerce storefronts (TikTok Shop, eBay, Amazon, and our independent site)

Suppliers, vendors, and business partners who submit information to us

Information We Collect

Depending on how you interact with GP Craft, we may collect:

Identity and contact information: name, company name, job title, mailing/shipping address, billing address, email address, phone number

Transaction information: order history, purchase orders, quotes, invoices, payment method details (processed via secured third-party payment processors), tax-exemption or resale certificates, and government contract/solicitation identifiers where applicable

Account information: login credentials for our website or e-commerce storefronts, communication preferences

Business/procurement information: for B2G buyers, information required for government contracting compliance (e.g., SAM.gov registration details, solicitation numbers, NAICS codes)

Technical/browsing data: browser type, device type, operating system, IP address, pages viewed, referring URLs, and similar analytics data collected automatically via cookies and similar technologies

Communications: records of inquiries, support requests, and correspondence with our sales, customer service, or accounting teams

How We Use Your Information

We use the information we collect to:

Process and fulfill orders, quotes, and government solicitations

Set up and manage wholesale, distributor, or B2G accounts

Provide customer service and respond to inquiries

Process payments, issue invoices, and manage accounts receivable

Communicate with you about your orders, account, or business relationship

Send marketing communications where you have opted in (and allow you to opt out at any time)

Improve our website, products, and services

Comply with legal, tax, accounting, and government contracting obligations

Detect, investigate, and prevent fraud or unauthorized transactions

Legal Basis for Processing (where GDPR applies)

Where GDPR principles apply, we process personal data on the following grounds:

Consent (e.g., marketing communications)

Contractual necessity (e.g., fulfilling an order or wholesale agreement)

Legal obligation (e.g., tax and government contracting recordkeeping)

Legitimate interests (e.g., fraud prevention, business operations)

Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, and government contracting recordkeeping requirements. Typical retention periods include:

Third-Party Service Providers

We may share information with trusted third parties who perform services on our behalf, including:

Payment processing

Order fulfillment and shipping/logistics

E-commerce platform operation (TikTok Shop, eBay, Amazon — each of which has its own privacy policy governing transactions made on their platforms)

CRM and sales operations tools (e.g., HubSpot)

Website hosting and IT services

Marketing and analytics platforms

Accounting and legal services

These providers are only permitted to use your information as necessary to provide services to GP Craft and are expected to maintain the confidentiality and security of your data.

Note on third-party marketplaces: If you purchase from GP Craft through TikTok Shop, eBay, or Amazon, that platform’s own privacy policy also applies to information collected during your transaction there.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience, remember shopping cart contents, and analyze site traffic. A cookie notice is displayed on first visit to obtain consent where required. You may manage cookie preferences through your browser settings.

Do we use advertising cookies? Yes. We may use services such as Google Ads/Analytics, which use cookies (including third-party cookies) to serve relevant ads and measure ad performance based on your visits to our site and other sites. You can manage ad preferences through Google’s Ad Settings, opt out via the Network Advertising Initiative opt-out page, or use the Google Analytics Opt-out Browser Add-on.

Do Not Track: We honor Do Not Track (DNT) browser signals to the extent required by applicable law.

Children’s Privacy

GP Craft’s products and services are intended for business customers and adult consumers. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will delete it promptly. Parents or guardians who believe their child’s information has been collected may contact us at the address below.

Data Security

We use SSL encryption, access controls, and other reasonable administrative, technical, and physical safeguards to protect personal information. Payment card data is handled through PCI-compliant third-party payment processors and is not stored on our own systems in full.

In the event of a data breach affecting your personal information, we will notify affected individuals via email and/or website notice within 72 hours of becoming aware of the breach, consistent with applicable law.

Your Privacy Rights

Depending on your location, you may have the right to:

Know what personal information we collect, use, and disclose

Access a copy of your personal information

Correct inaccurate personal information

Request deletion of your personal information

Opt out of the sale or sharing of personal information (GP Craft does not sell personal information)

Restrict or object to certain processing

Data portability

Withdraw consent at any time

Lodge a complaint with a relevant supervisory or regulatory authority

To exercise any of these rights, contact us at info@gpcraftinc.com.

CalOPPA Compliance

Consistent with CalOPPA, GP Craft agrees to the following:

Visitors may browse our site anonymously

A link to this Privacy Policy is available on our homepage and on relevant order/checkout pages

Users will be notified of material changes to this policy via the “Last Updated” date and, where appropriate, direct notice

Users may update or correct their personal information by emailing info@gpcraftinc.com, calling us, or submitting a support request

CAN-SPAM Act Compliance

We collect email addresses to send order confirmations, respond to inquiries, and — where you have opted in — send marketing communications. In accordance with the CAN-SPAM Act, we:

Do not use false or misleading subject lines or sender information

Identify marketing messages as advertisements where applicable

Include our physical business address in marketing emails

Honor opt-out/unsubscribe requests promptly

Provide an unsubscribe link in every marketing email

To unsubscribe at any time, click the unsubscribe link in any marketing email, or contact info@gpcraftinc.com.

Government (B2G) Procurement Notice

For customers and contracting officers engaging with GP Craft through federal, state, or local government procurement channels (including solicitations submitted through intermediaries), information provided in connection with a bid, quote, or contract (e.g., SAM.gov registration data, pricing, product certifications) is retained and used solely for purposes of contract performance, compliance, and recordkeeping as required by the applicable procurement regulations, and is not used for unrelated marketing purposes without separate consent.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this page reflects the most recent revision. Material changes will be communicated via website notice or, where appropriate, direct email.

Contact Us

For questions or concerns about this Privacy Policy or to exercise your privacy rights, contact:

GP Craft Inc.

436 Cloverleaf Dr, Baldwin Park, CA 91706

Email: info@gpcraftinc.com

Website: www.gpgloves.com

This document is a template drafted for GP Craft Inc.’s general business use and does not constitute legal advice. We recommend legal review before publication, particularly to confirm applicability of CCPA/CPRA thresholds, any state-specific privacy laws relevant to your customer base, and government contracting data-handling requirements.