Privacy Policy

Introduction and scope

SupplementQuotes LLC ("SQ," "we," "us," or "our") operates the SupplementQuotes business-to-business marketplace at supplementquotes.com. This Privacy Policy describes how SQ collects, uses, discloses, retains, and protects personal information in connection with its website, accounts, requests for quotations (RFQs), manufacturing quotes, orders, payments, and support services. It applies to customers, manufacturers, business representatives, and visitors who interact with SQ. This Policy should be read together with applicable platform agreements and notices. Effective date: October 10, 2026.

1. Categories of information collected

SQ may collect the following categories of information when reasonably necessary to operate its marketplace, provide services, verify participating businesses, process requests and orders, maintain security, and comply with applicable obligations.

Account and contact information: Names, business email addresses, business telephone numbers, account credentials or authentication identifiers, and account-related contact information.

Business and manufacturer verification information: Legal and trade names, business and facility addresses, primary contacts, manufacturing capabilities, certifications, business registration or other verification documents, and related review records.

Marketplace and product information: Requests for quotations (RFQs), product formulas and specifications, packaging and labeling files, quotations, counteroffers, order documentation, approvals, and related transaction records.

Communications: Messages, support requests, notices, and communications exchanged through the platform or other authorized business channels.

Payment and financial transaction information: Payment status, invoices, transaction references, amounts, refunds, payout details or verification records where actually handled by SQ. Payment processors may collect additional financial information directly under their own terms and privacy notices. SQ does not intend to store complete sensitive payment credentials.

Technical and usage information: IP addresses, browser and device details, access and security logs, and website usage or cookie-related information to the extent actually collected by SQ or its authorized providers.

2. How SupplementQuotes uses collected information

SQ may use information collected as described in Section 1 for the following legitimate marketplace and business purposes, subject to applicable law, the governing agreements, and the actual functionality of the Platform.

Accounts and verification: Create and administer accounts, authenticate users, evaluate and verify manufacturers, manage eligibility, and maintain accurate business records.

RFQs and manufacturing transactions: Receive and process RFQs, disclose authorized request information to eligible manufacturers, facilitate quotations and counteroffers, document acceptance, administer orders, coordinate production-related communications, and maintain transaction histories.

Payments and administration: Generate invoices, record payment and refund status, coordinate authorized payment processing and manufacturer remittances, reconcile transactions, investigate payment issues, and meet accounting and recordkeeping requirements.

Support and operational communications: Respond to inquiries, provide customer and manufacturer support, send order-related and administrative notices, and address complaints and disputes.

Safety, security, and compliance: Protect accounts and the Platform, detect and investigate fraud or misuse, enforce applicable agreements, respond to lawful requests, and comply with legal and regulatory obligations.

Platform improvement: Analyze operational performance and service usage, troubleshoot issues, and improve reliability and user experience using information appropriate to those purposes and subject to the safeguards in this Policy.

Limits on confidential information: SQ will not use Customer formulas, proprietary product specifications, trade secrets, or other confidential business information for unrelated advertising, competitive advantage, or another unauthorized commercial purpose. Authorized use and sharing for quoting, manufacturing, order administration, support, and legal compliance remain permitted under applicable agreements and confidentiality safeguards.

Marketing and optional purposes: Any marketing use of personal information, or other processing requiring separate notice or consent, must comply with applicable law and the choices and consents actually offered to users. This section does not itself authorize unrestricted marketing or the sale of personal information.

3. Sharing information with approved manufacturers

Authorized RFQ access. SQ may disclose information reasonably necessary to evaluate and fulfill a Customer RFQ—including product formulas, ingredient specifications, quantities, packaging and labeling requirements, testing needs, and related project materials—only to Manufacturers approved by SQ, authorized to view that particular RFQ, and bound by applicable confidentiality obligations. Approval as a Manufacturer does not itself authorize access to every RFQ.

Restricted and targeted requests. Access to private or targeted RFQs will be limited to the Manufacturers designated or otherwise authorized for those requests. SQ will apply the applicable RFQ access rules and will not intentionally expose a Customer’s confidential project materials to Manufacturers without the requisite authorization.

Customer and account information. Approved Manufacturers authorized for a request see, with the request, the Customer’s company name (or, where none was given, the account email address), the name and title of the person who signed the request, its business telephone number, and its ship-to address, so they can quote freight and coordinate. Payment credentials, sensitive account data, and other information not necessary to prepare a quote will not be routinely disclosed to Manufacturers. Such information may be shared when reasonably necessary for an authorized order, production coordination, shipment, complaint, recall, or other legitimate transaction purpose, subject to applicable permissions and safeguards.

Limits on Manufacturer use. Manufacturers may use disclosed information only to evaluate and perform authorized SQ transactions, and may not use Customer formulas or confidential information for unrelated commercial purposes, independent product development, solicitation, or disclosure outside permitted confidentiality arrangements. Manufacturer access and duties are further governed by the Manufacturer Platform Agreement and separately accepted Manufacturer NDA.

4. Protection of customer formulas and confidential business information

Confidential materials. SQ treats nonpublic Customer formulas, ingredient quantities, proprietary specifications, manufacturing instructions, artwork, and other confidential business information submitted through the Platform as confidential, whether or not each item is individually labeled confidential.

Purpose-limited access. SQ will limit access to personnel who require the information for legitimate platform administration and to approved Manufacturers authorized for the relevant RFQ or accepted order. Service providers may access such information only to the extent reasonably necessary to perform authorized services and subject to appropriate contractual and technical safeguards.

Prohibited unrelated use. SQ will not use Customer confidential formulas or proprietary materials to develop competing products, provide an affiliated Manufacturer with an unfair competitive advantage, or conduct unrelated commercial activities without appropriate authorization. Manufacturers are separately restricted under their applicable Platform Agreement and NDA.

Access controls and sharing. SQ will use reasonable role-based access restrictions and other safeguards suited to the sensitivity of the information. Sharing with approved Manufacturers is governed by Section 3; targeted RFQs are not made generally available to all registered Manufacturers.

Continuing protection. Confidentiality and restricted-use protections continue after an RFQ closes, a quote is declined, an order ends, or an account is closed, in accordance with applicable agreements and law. Trade secrets remain subject to applicable trade-secret protections for as long as they qualify.

4A. AI Formula Helper — Conversations, Drafts, and Service Providers

If a customer uses the AI Formula Helper, SQ may process the prompts, chat messages, formulation concepts, ingredient information, generated responses, saved drafts, and associated account, usage, and security metadata needed to provide the feature, support RFQ preparation, enforce rate limits, and maintain security. Conversations and saved drafts are stored with the customer’s account. The customer can see their own; authorized SQ administrators can also read them, for support, security, and improving the feature.

To generate each response, the customer’s message, the conversation so far, the current draft sheet, and any files attached on that turn are sent to SQ’s AI model provider. SQ does not send the customer’s name, email address, or account identifiers with them. SQ does not store attached files; the notes the assistant makes about them are saved with the conversation. Under the provider’s published terms for its developer platform, content sent this way is not used to train the provider’s models, and the provider states that it may retain inputs and outputs for up to 30 days to provide the service and identify abuse. SQ does not promise end-to-end secrecy or that the provider retains nothing.

SQ will not authorize unrelated advertising, competitive product development, or affiliated-manufacturer advantage from confidential AI conversations or formula drafts. Access and sharing for RFQ creation or authorized manufacturing remain governed by the customer’s actions, access controls, applicable NDA, and platform agreements. SQ keeps Formula Helper conversations and drafts for as long as the customer’s account is open; there is no separate automatic deletion period. When an account is closed or deletion is requested, they are handled under Sections 10 and 11.

5. Payment information and payment processing

Authorized payment channels. SQ may facilitate Customer deposits, final balances, refunds, and Manufacturer remittances using authorized payment services, including Stripe-supported ACH arrangements and approved bank wires, only to the extent supported by the actual integration, applicable law, and provider agreements.

Payment-related records. SQ may receive and retain transaction amounts, invoices, payment and payout status, payment references, limited bank-account identifiers or verification information, and records reasonably necessary to reconcile transactions, investigate fraud, respond to disputes, process refunds, and meet accounting or legal obligations. The exact data available to SQ depends on the payment method and configuration.

Sensitive payment credentials. Customer bank credentials and authentication details are collected and processed through approved payment-provider interfaces and are not stored in SQ application databases. Payout details that manufacturers add to their accounts are stored by SQ; bank account numbers are encrypted and can be read only by authorized administrators, with each access logged. SQ does not represent that it never receives bank information; any bank details it receives directly for approved wire transfers or verification must be protected and handled according to the applicable security requirements.

Payment providers and banks. Stripe, financial institutions, and other authorized payment providers may process payment information under their own privacy notices and applicable terms. SQ may disclose information reasonably necessary to authenticate accounts, complete transactions, comply with legal requirements, prevent fraud, or resolve payment disputes.

6. Third-party service providers and information sharing

Authorized providers. SQ may disclose information to third-party service providers as reasonably necessary to host, operate, maintain, secure, troubleshoot, support, and improve the Platform, process authorized payments, and provide related marketplace services. Such providers may include website hosting, database and authentication, payment processing, communications, fraud prevention, cybersecurity, customer support, and technical development services.

Limited purpose and access. SQ will seek to share only information reasonably appropriate to the services performed and restrict access according to the provider’s role and legitimate need to know. Provider access does not grant a right to independently commercialize Customer or Manufacturer information.

Confidentiality and security safeguards. SQ will use appropriate contractual, confidentiality, and security safeguards with providers, taking account of the nature of the information and the provider’s function. Customer formulas, trade secrets, proprietary specifications, and other confidential business information may not be used for unrelated commercial purposes without appropriate authorization.

Provider processing and disclosures. Providers may process information on SQ’s behalf or, where applicable, as independent service providers subject to their own privacy notices and legal obligations. SQ will disclose relevant categories of recipients and material processing practices as required by applicable law. SQ remains responsible for obligations imposed on it by law and its own agreements.

7. Cookies, similar technologies, and website analytics

Essential technologies. SQ may use cookies, local storage, session identifiers, and similar technologies reasonably necessary to authenticate users, maintain sessions, protect accounts, prevent abuse, remember operational preferences, and provide core website functionality.

Analytics and performance. Where implemented, SQ may use analytics technologies to understand aggregate and individual website interactions, measure traffic and technical performance, identify errors, and improve the Platform. The specific providers, the cookies they set, and the choices available are described at the end of this Section.

Optional technologies and user choices. SQ will provide notices, consent mechanisms, opt-out options, or other controls for nonessential analytics and advertising technologies where required by applicable law. SQ will not describe a cookie as essential solely because it benefits marketing or measurement.

Advertising technology restrictions. If SQ implements advertising pixels, conversion tracking, or retargeting, it will review the information transmitted and applicable legal requirements before enabling them. SQ will not intentionally send confidential Customer formulas, RFQ contents, proprietary specifications, or sensitive account information to advertising or analytics providers.

No cookie is required to use this site. Your sign-in session is held in your browser’s local storage, not in a cookie, so refusing cookies entirely does not stop you signing in or using the platform. The only cookies this site sets are the analytics and session-replay cookies described below, and whether they are set depends on where you are and what you choose, as the next paragraph explains.

Your choice. Where the law requires us to ask before anything happens, which includes the European Economic Area, the United Kingdom and Switzerland, nothing is fetched, set or stored until you answer the bar at the foot of the page. Everywhere else, analytics starts when the page loads, and the bar tells you so and offers an immediate opt out. Either way, opting out loads nothing further and removes any analytics cookies an earlier visit left behind, and you can change or withdraw your answer at any time with the Cookie settings link in the footer.

Analytics. Subject to your choice above, we use Google Analytics 4 to understand how many people visit, which pages they read, and where they arrive from. This is measured in aggregate and is not used to identify you personally. It sets two cookies: _ga and _ga_VPYV99PVDX, each lasting up to two years.

Session replay. We partner with Microsoft Clarity to capture how visitors use and interact with our public pages through behavioural metrics, heatmaps, and session replay, so that we can improve the site. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of pages and online activity. We also use this information for site optimisation and for fraud and security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

The cookies Clarity sets. _clck, which lasts about a year and links repeat visits so the same person is not counted as several, and _clsk, which lasts one day and groups the pages of a single visit. Microsoft may set further cookies on its own clarity.ms domains.

What is never recorded. Session replay is switched off inside the signed-in platform, and the quote request form is marked as not to be recorded even before you sign in. Your product requests, formulas, quotes, purchase orders, messages, uploaded documents and payment records are not captured by any analytics or replay tool. Microsoft Clarity also masks what you type into form fields on our public pages.

Consent. For visitors in the European Economic Area, the United Kingdom and Switzerland, Microsoft Clarity defaults to a denied consent state and collects only cookieless data unless and until consent is given.

Typefaces. Our typeface is served by Google Fonts, so Google receives your IP address when a page loads. No cookie is set by this. Everything else the site needs is served from our own domain.

Your choices. Use the Cookie settings link in the footer to change or withdraw your answer at any time. You can also block or delete cookies through your browser settings, and nothing on this site depends on them. If you would like us to exclude your activity from analytics entirely, email info@supplementquotes.com and we will do so.

8. Advertising and marketing communications

Business communications. SQ may use business contact details and account information to send service notices, platform announcements, educational updates, and relevant promotional communications about its marketplace, subject to applicable law and user preferences. Transactional and legally required notices may be sent independently of marketing preferences where permitted.

Marketing choices. Where required, SQ will obtain consent before sending promotional messages or using nonessential marketing technologies. Marketing emails will provide an appropriate unsubscribe method, and SQ will honor valid opt-out requests in accordance with applicable law. Opting out of promotional messages does not necessarily stop necessary account, order, or security notices.

Advertising measurement. SQ may use website analytics, campaign attribution, and advertising conversion tools where legally permitted and subject to required disclosures, consent, or opt-out mechanisms. Any use of personalized advertising or retargeting must be assessed against the actual technologies deployed and applicable privacy requirements.

Protected customer information. SQ will not intentionally use customer formulas, confidential RFQs, proprietary manufacturing specifications, or similar trade-secret information to develop marketing audiences, generate advertising content, or disclose information to advertising partners without appropriate authorization. Access and disclosure remain subject to the confidentiality restrictions elsewhere in this Policy and applicable agreements.

9. Information security and access safeguards

Security program. SQ will maintain reasonable technical and organizational measures appropriate to the nature, sensitivity, and volume of information it handles, including personal information, proprietary product formulas, confidential RFQs, and transaction records.

Access restrictions and authentication. SQ will use role-based access permissions and appropriate authentication controls to limit access to customer formulas, specifications, RFQs, and related records to personnel, approved manufacturers, and service providers with an authorized need to know. Permissions reflect RFQ visibility and manufacturer approval status.

Data transmission and provider safeguards. SQ will use encrypted transmission where appropriate and assess relevant security safeguards offered by its hosting, database, payment, and other service providers. SQ will seek to limit access to information according to operational need and applicable confidentiality commitments.

Suspected unauthorized access. SQ will maintain procedures appropriate to its operations for identifying, assessing, containing, and responding to suspected unauthorized access or disclosure. Notification duties are addressed in Section 16.

No absolute guarantee. No website, transmission method, or information system can be guaranteed completely secure. SQ does not promise absolute security or protection against every unauthorized act.

Administrative account access. To give fast, accurate support, authorized SQ administrators may access an account in further detail, including viewing the platform exactly as that account sees it and, where necessary, operating it on the account holder’s behalf, to answer questions, troubleshoot problems, administer orders, investigate suspected fraud or abuse, or keep the platform secure. This access is limited to authorized staff, every instance is logged, and administrative access is monitored by automatic security alerts. Account holders do not receive an individual notification each time this occurs.

10. Retention of information and secure disposal

Retention principles. SQ retains personal information, account details, RFQs, formulas, quotes, order records, communications, and related business records only for as long as reasonably necessary for the purposes described in this Policy, including operating accounts, administering quotes and manufacturing orders, fulfilling contractual obligations, maintaining transaction history, and providing support.

Legal and legitimate business needs. SQ may retain records for longer periods when reasonably required for applicable tax, accounting, regulatory, recordkeeping, fraud prevention, dispute resolution, enforcement of agreements, or other lawful business purposes. Retention periods may differ by record category and relevant legal obligations; this Policy does not establish a universal deletion deadline.

Confidential formulas and restricted access. While retained, customer formulas, specifications, and other confidential RFQ materials remain subject to the access restrictions and confidentiality protections described in this Policy and applicable agreements. Closing an RFQ, ending an order, or terminating an account does not automatically eliminate records that SQ must lawfully or reasonably retain.

End-of-retention handling. When information is no longer reasonably necessary and no applicable retention requirement or lawful basis for continued retention applies, SQ will delete, de-identify or anonymize, or securely archive the information as appropriate to its systems and obligations. Backup copies may remain temporarily under established backup cycles and security controls.

11. Account closure and deletion requests

Request and verification. Customers and manufacturers may request closure of their SupplementQuotes accounts and deletion of eligible personal information through the privacy contact method designated by SQ. Before acting, SQ may take reasonable steps to verify the requester’s identity, account ownership, or authority to act for a business, consistent with applicable law.

Evaluation and fulfillment. SQ will assess requests under applicable privacy laws and its documented retention practices. Where deletion is required or appropriate, SQ will delete or de-identify eligible information within applicable timeframes and will communicate the outcome and any relevant limitations to the requester.

Lawful retention exceptions. Account closure does not automatically erase every RFQ, quote, formula, message, or transaction record. SQ may retain information as necessary or permitted for completed orders, accounting and tax obligations, regulatory requirements, payment disputes, contractual claims, fraud prevention, platform security, or other lawful purposes. Any retained confidential formulas or specifications remain protected under applicable confidentiality and access restrictions.

Service providers and copies. Where applicable and feasible, SQ will communicate qualifying deletion instructions to relevant service providers. Information in backups or archives may remain temporarily until normal deletion cycles, subject to appropriate restrictions and legal requirements.

12. Access to and correction of personal information

Account information and updates. Customers and manufacturers may review and update information made editable through their SupplementQuotes account dashboards. Availability of particular dashboard fields depends on actual platform functionality.

Verified requests. Individuals may request access to or correction of eligible personal information maintained by SQ through the designated privacy contact method. SQ may take reasonable steps to verify the requester’s identity and, where someone acts for a business or another person, their authority before responding.

Review and response. SQ will evaluate requests under applicable law and respond within applicable legal timeframes. Where a request is valid, SQ will provide access or correct inaccurate information as required or appropriate, taking account of the nature and purpose of the records.

Confidentiality and lawful limitations. SQ may deny, limit, or redact access where permitted by law to protect another person’s privacy, another party’s confidential formulas or trade secrets, platform security, or other legally protected interests. A request to correct account details does not necessarily authorize modification of historical quotes, executed orders, invoices, or audit records.

13. U.S. state privacy rights

Applicable rights. Depending on the individual’s state of residence, the nature of the information, SQ’s activities, and the applicability of particular laws, eligible individuals may have rights to request access to, correction of, or deletion of personal information, and to opt out of certain data uses or disclosures where required by applicable U.S. state privacy laws. This section does not represent that every right applies in every state or to every type of information.

Requests and verification. SQ will provide an appropriate method for submitting qualifying privacy requests, take reasonable steps to verify identity or authorized representation, and respond within timeframes required by applicable law. SQ may apply legally permitted exceptions, including for security, fraud prevention, legal compliance, completed transactions, and the rights and confidential information of other parties.

Opt-outs and appeals. Where applicable law requires opt-out rights relating to targeted advertising, certain profiling, or sale or sharing of personal information, SQ will provide the required notices and mechanisms. Where applicable law requires an appeal of a denied privacy request, SQ will make an appeal process available. SQ will not describe a data practice as a “sale” or “sharing” without evaluating the relevant statutory definitions and actual operations.

14. International visitors and cross-border processing

U.S.-focused marketplace. SupplementQuotes LLC primarily serves customers and manufacturers in the United States. Individuals outside the United States may be able to visit the website or submit inquiries where permitted. SQ may restrict account registration, manufacturer participation, RFQs, quotes, payment methods, or transactions in particular countries or regions, including where compliance, operational, payment, or legal requirements make service unavailable. Website accessibility does not mean SQ offers services in every country.

Processing locations and service providers. Information submitted to SQ may be stored, accessed, or otherwise processed in the United States and in other countries where SQ or its authorized service providers operate. Privacy and data-protection laws in those locations may differ from those in the visitor’s home jurisdiction. SQ will use appropriate contractual, technical, and organizational safeguards as required by applicable law.

Applicable international protections. If SQ becomes subject to international data-protection or cross-border transfer requirements, it will assess and implement legally required notices, lawful grounds for processing, transfer mechanisms, user rights, and other safeguards before undertaking the relevant processing or expansion. This statement does not represent that SQ presently offers services in every foreign jurisdiction or has implemented a particular transfer mechanism.

15. Children’s privacy and minimum age

Adult business accounts. SupplementQuotes is a business-to-business marketplace. Accounts and marketplace services are intended for individuals who are at least 18 years old and are acting on their own behalf as a business operator or as an authorized representative of a business. SQ does not knowingly permit individuals under 18 to create marketplace accounts.

Information concerning children. SQ does not direct its services to children under 13 and does not knowingly collect personal information directly from them. If SQ learns that it collected personal information from a child under 13 without any legally required parental authorization, SQ will take appropriate steps to delete the information and otherwise comply with applicable law, subject to any legally required retention.

Reporting and review. A parent, guardian, or other person who believes SQ has collected information from a child may contact SQ using the privacy contact method designated in this Policy. SQ may request information reasonably necessary to assess and respond to the report.

16. Security incidents and breach notifications

Investigation and response. When SQ becomes aware of a suspected unauthorized access, disclosure, loss, or other security incident involving information it handles, SQ will assess the circumstances, investigate as appropriate, and take reasonable measures to contain the incident, mitigate harm, preserve relevant evidence, and remediate identified weaknesses. A suspected event is not necessarily a legally reportable data breach.

Notices when required. SQ will notify affected individuals, relevant regulators, service providers, or other parties when required by applicable law or binding contractual obligations. Whether notice is required, its timing, method, and content will be determined by the type of information affected, applicable legal requirements, and the facts of the incident. SQ may provide additional voluntary notices when appropriate and legally permitted.

Confidential marketplace information. SQ will consider the sensitivity of affected customer formulas, RFQs, manufacturer documents, and account or transaction records when assessing incidents and coordinating with relevant manufacturers or service providers. Access to incident-related details will be limited as appropriate to support investigation and response.

17. Changes to this Privacy Policy

SupplementQuotes LLC ("SQ") may revise this Privacy Policy as its marketplace services, technology, business practices, or legal obligations change. SQ will post the updated Privacy Policy on its website and identify the updated effective date or last-updated date so users can review the current version.

For material changes to the way SQ collects, uses, or shares personal information, SQ will provide additional notice when appropriate or required by applicable law. Depending on the nature of the change and legal requirements, notice may be provided through the platform, by email, or through another reasonable communication channel. SQ will seek affirmative consent where applicable law requires it before implementing a change.

An update to this Privacy Policy does not, by itself, retroactively authorize uses or disclosures of customer formulas, confidential RFQs, proprietary specifications, or other protected information that were previously prohibited by applicable confidentiality commitments. Any such use or disclosure requires appropriate authorization and compliance with applicable agreements and law.

Users are encouraged to review the current Privacy Policy periodically. This section does not override any separate contractual amendment or notice requirements in SQ’s agreements.

18. Privacy inquiries and requests

Privacy contact. Customers, manufacturers, and website visitors may submit questions about this Privacy Policy, requests to access, correct, or delete eligible personal information, and other privacy-related concerns by emailing info@supplementquotes.com.

Business mailing address. SupplementQuotes LLC may also receive privacy correspondence at its official business mailing address: 2630 North Ogden, Suite 106, Mesa, AZ 85215.

Request handling. SQ may verify the identity or authority of the person making a request and may request information reasonably necessary to locate relevant records. SQ will respond within periods required by applicable law, subject to lawful exceptions and protections for third-party confidential information. SQ will not request sensitive passwords or full payment credentials by ordinary email.