Privacy Policy
Last Updated: April 2026
This Privacy Policy (“Policy”) describes how Catholic Purchasing Services Inc. (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you access or use our website, products, and services (collectively, the “Service”).
This Policy applies to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual (“Personal Data”). In a business-to-business (“B2B”) context, this typically includes business contact details (such as name, work email, and work phone) and information related to orders and account administration.
By using the Service, you acknowledge you have read and understood this Policy.
1) WHO WE ARE / CONTACT INFORMATION
Catholic Purchasing Services Inc.
Newton, MA 02458
Email: Service@catholicpurchasing.org
Privacy Page: http://www.catholicpurchasing.org/privacy-policy
2) DEFINITIONS
“Account” means an account created to access or use portions of the Service.
“Business Contact Data” means business-related Personal Data such as name, work email, work phone, job title, and organization name.
“Cookies” are small data files placed on your device to support site functionality and remember certain information.
“Device” means any device used to access the Service (e.g., computer, phone, tablet).
“Service Provider” means a vendor that processes information on our behalf (e.g., hosting, analytics, customer support tools).
“Usage Data” means data collected automatically when you use the Service (e.g., IP address, browser type, pages visited).
“You” means the individual using the Service or, where applicable, the business or organization on whose behalf the Service is used.
3) INFORMATION WE COLLECT
A. Information You Provide Directly
Depending on how you use the Service, we may collect:
• Business Contact Data (e.g., name, work email, work phone, organization, job title)
• Account credentials (e.g., username, password, security questions or authentication details)
• Order and fulfillment information (e.g., products ordered, quantities, shipping address, delivery instructions)
• Billing and invoicing information (e.g., billing address, invoice contacts, purchase order numbers, tax exemption information if provided)
• Customer support and communications (e.g., emails or messages you send us, request details, feedback)
• Any other information you choose to provide through forms, emails, or account settings
Payment Note: We do not accept payment by credit card. We may collect and process payment-related information needed to complete payment by invoice, ACH, check, or other B2B payment methods you use with us (for example, remittance details or bank account information if you choose ACH).
B. Information Collected Automatically (Usage Data)
When you access the Service, we may collect Usage Data such as:
• IP address
• Browser type/version and device identifiers
• Pages viewed and actions taken on the Service
• Date/time and duration of visits
• Referring URLs and general diagnostic information
C. Information From Third Parties
We may receive information from:
• Your organization (e.g., when an administrator creates your Account or assigns permissions)
• Service Providers that support our operations (e.g., shipping carriers confirming delivery status)
• Identity providers (e.g., single sign-on)
4) COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to operate the Service and, where used, to understand and improve performance.
A. Types of Cookies We May Use
• Strictly Necessary Cookies: required for core functions such as login, security, and site navigation
• Functional Cookies: remember preferences and settings
• Analytics Cookies: help us understand site usage and improve performance
B. Your Choices
You can control cookies through your browser settings. If you disable cookies, some features of the Service may not function properly.
Where required by law, we also honor legally recognized opt-out signals (such as the Global Privacy Control) for certain opt-outs. [CO-1]
5) HOW WE USE PERSONAL DATA
We may use Personal Data to:
• Provide, operate, maintain, and secure the Service
• Create and administer Accounts, including authentication and access control
• Process and fulfill orders, including shipping, returns, and customer service
• Provide invoices, manage accounts receivable, and support B2B payment workflows (without credit card processing)
• Communicate with you about transactions, Service updates, security notices, and support requests
• Send marketing communications where permitted by law (you can opt out of marketing at any time)
• Detect, prevent, and investigate security incidents, fraud, and misuse of the Service
• Improve the Service, including troubleshooting, analytics, and feature development
• Comply with legal obligations and enforce our terms or agreements
• Evaluate or complete business transactions such as a merger, acquisition, financing, or sale of assets
6) HOW WE DISCLOSE / SHARE PERSONAL DATA
We may disclose Personal Data in the following circumstances:
A. Service Providers
We may share Personal Data with Service Providers that help us operate the Service (such as website hosting, IT support, analytics, customer support tools, and shipping/fulfillment vendors). Service Providers are authorized to use Personal Data only as necessary to provide services to us.
B. Business Transfers
If we are involved in a merger, acquisition, reorganization, or sale of some or all assets, Personal Data may be transferred as part of that transaction, subject to appropriate confidentiality protections.
C. Legal, Safety, and Security
We may disclose Personal Data to comply with law or legal process, to respond to lawful requests from public authorities, or to protect rights, safety, and security (including investigating fraud or security incidents).
D. With Your Direction or Consent
We may disclose Personal Data when you request or consent to the disclosure.
We do not knowingly sell Personal Data in exchange for money.
7) DATA RETENTION
We retain Personal Data for as long as reasonably necessary for the purposes described in this Policy, including:
• Maintaining Accounts
• Completing transactions and fulfilling orders
• Keeping records for accounting, tax, audit, and compliance purposes
• Resolving disputes and enforcing agreements
• Maintaining security logs and preventing fraud
Retention periods vary by record type and legal requirements. When we no longer need Personal Data, we take reasonable steps to delete or de-identify it.
8) DATA SECURITY
We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. We encourage you to use strong passwords and protect your Account credentials.
9) INTERNATIONAL TRANSFERS
If you access the Service from outside the United States, your information may be processed and stored in the United States or other jurisdictions where we or our Service Providers operate. We take steps intended to ensure an adequate level of protection consistent with applicable law.
10) YOUR PRIVACY RIGHTS AND CHOICES (U.S.)
A. Marketing Emails
You may opt out of marketing emails at any time by using the “manage preferences” link in our emails or by contacting us. Transactional and service communications (e.g., invoices, order confirmations, security notices) may still be sent.
B. State Privacy Rights (Where Applicable)
Depending on your state of residence and applicable law, you may have certain rights regarding your Personal Data. These may include the right to access, correct, delete, or obtain a copy of Personal Data, and to opt out of certain processing such as targeted advertising. [CA-1]
To submit a request, email service@catholicpurchasing.org. We may need to verify your identity before fulfilling a request.
11) CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)
This section applies to California residents to the extent the CCPA/CPRA applies to our processing, including in some B2B contexts. [B2B-1][CA-1]
A. Categories of Personal Information We Collect
In the past 12 months, we may have collected the categories described in Section 3 (Business Contact Data, order and fulfillment data, billing/invoicing data, customer support communications, and Usage Data). [CA-1]
B. Purposes of Collection and Use
We use these categories for the purposes described in Section 5. [CA-1]
C. Disclosures
We may disclose Personal Data to Service Providers and other parties as described in Section 6. [CA-1]
D. Your Rights (California Residents)
Subject to legal limitations, California residents may have rights to:
• Know/access the Personal Data we collected, used, or disclosed
• Delete Personal Data (with certain exceptions)
• Correct inaccurate Personal Data
• Not be discriminated against for exercising privacy rights [CA-1]
E. Exercising Your Rights
Submit requests by:
• Email: Service@catholicpurchasing.org
12) DO NOT TRACK SIGNALS
Some browsers offer “Do Not Track” signals. Because there is no consistent industry standard for DNT, we do not respond to DNT signals.
13) CHILDREN’S PRIVACY
The Service is intended for business use and is not directed to children under 13. We do not knowingly collect Personal Data from children under 13. If you believe a child has provided Personal Data to us, contact us and we will take appropriate steps to delete it.
14) LINKS TO THIRD-PARTY WEBSITES
The Service may include links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.
15) CHANGES TO THIS POLICY
We may update this Policy from time to time. The “Last Updated” date above indicates when the Policy was last revised. If required by law, we will provide additional notice of material changes.
16) CONTACT US
If you have questions about this Policy or our privacy practices, contact us:
Email: Service@catholicpurchasing.org
Web: http://www.catholicpurchasing.org/contact-us
Mail: Catholic Purchasing Services Inc., Newton, MA 02458