Privacy Policy

Effective July 13, 2026

1. Scope

This Privacy Policy explains how WholesalePepClub collects, uses, discloses, retains, and protects information through WholesalePepClub.com, its wholesale application, member portal, catalog, order workflow, and related communications.

2. Information we collect

We may collect information you provide directly, including:

  • Customer and contact names, phone numbers, email addresses, and login information.
  • Legal business name, DBA or trade name, brand name, business and entity type, state of registration, EIN, website, and business-verification information.
  • Billing, shipping, and optional physical-business addresses.
  • Completed Forms W-9 and associated taxpayer-identification information.
  • Catalog selections, order quantities, service requests, communications, and order history.
  • Uploaded label artwork, logos, brand files, and laboratory-testing requests.
  • Technical information such as device, browser, IP address, timestamps, security events, and portal activity when production analytics and security logging are enabled.

3. How we use information

We use information to review and verify wholesale applications; approve, administer, and secure accounts; display the catalog; receive and review orders; coordinate shipping, payment instructions, custom labels, and laboratory testing; communicate with customers; prevent fraud and misuse; maintain business and tax records; enforce our terms; and comply with legal obligations.

4. Sensitive business and tax information

Forms W-9, EINs, taxpayer-identification information, and identity-verification records are treated as restricted information. Access should be limited to authorized personnel and service providers with a legitimate business, accounting, tax, security, or legal need. We do not use W-9 information for advertising. IRS guidance requires confidentiality for taxpayer-identification information obtained on Form W-9 and limits its use to tax-law compliance.

5. How information may be disclosed

We may disclose information to service providers that support hosting, authentication, secure storage, order operations, email, shipping, accounting, file processing, and security; to laboratories or production partners when needed to fulfill an accepted service; to professional advisers; in connection with a business transaction; or when required to comply with law, protect rights and safety, investigate fraud, or enforce agreements. We do not sell personal information for money.

6. Google Sheets, Firebase, Netlify, and other providers

The production portal may use Google Workspace or Google Sheets for designated catalog and operational information, Firebase for authentication and database services, and Netlify for website hosting, delivery, and secure server functions. Information handled by these providers is also subject to their applicable terms, security practices, and privacy notices. The final production configuration will determine the precise data shared with each provider.

7. Cookies and similar technologies

We may use cookies or local storage that are necessary for authentication, session continuity, preferences, fraud prevention, and security. If nonessential analytics or advertising technologies are introduced, this policy and any required consent controls will be updated before those technologies are enabled.

8. Retention

We retain information only for as long as reasonably necessary for application review, account administration, order fulfillment, tax and accounting obligations, dispute resolution, fraud prevention, security, and legal compliance. Retention periods may differ by record type. Unneeded information should be securely deleted or de-identified when legally and operationally appropriate.

9. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. Planned production controls include authenticated access, restricted administrator permissions, encrypted transmission, secure provider storage, and separation of public catalog data from private application and tax records. No system is completely secure, and we cannot guarantee absolute security.

10. Your choices and privacy requests

Subject to applicable law, you may request access to, correction of, or deletion of certain information, or ask questions about our practices. Some records may be retained when required for tax, accounting, fraud-prevention, contractual, or legal purposes. Send requests to hello@wndcreative.com. We may need to verify your identity and authority before completing a request.

11. State privacy rights

Residents of certain U.S. states may have additional rights regarding access, correction, deletion, portability, or certain disclosures and processing. WholesalePepClub will evaluate verified requests under the law applicable to the requester and the business. The final policy should be reviewed against the business’s size, revenue, data volume, locations, and actual production practices before launch.

12. Children

The portal is a business-to-business service and is not directed to children under 13. We do not knowingly collect personal information from children through the wholesale application.

13. Changes to this policy

We may update this policy to reflect changes in the portal, service providers, legal requirements, or business practices. The effective date at the top will identify the latest version.

14. Contact

Privacy questions and requests may be sent to hello@wndcreative.com. A mailing address, final operating legal entity, and any jurisdiction-specific notices should be added during attorney review before public launch.