Special online pricing is live sitewideFree delivery on your first Manhattan order.See the bags

Privacy

What this site collects, where it sits, and who else sees it.

This policy has not been reviewed by a lawyer. It is an honest description of what the site does, written by reading the code that runs it.

What we collect

  • Account details: your name, company, phone and email when you register or apply for a trade account.
  • Orders: what you bought, the price charged, and the delivery or pickup details for that order.
  • Addresses you save for delivery, and the ZIP you type into the delivery checker.
  • Trade applications: company details, trade references, and the documents you upload.
  • Inquiries sent from a service page: the fields on that form.
  • A one-way hash of your network address on the signup and inquiry forms, used only to stop one source from flooding us. We do not store the address itself.

Where it is stored and who processes it

  • Our database and sign-in (Supabase). Accounts, orders, addresses, applications and inquiries live in our own hosted database with row-level access rules, so one account cannot read another's records.
  • Card payments (Stripe). Payment is taken in Stripe's own hosted checkout. Card numbers never touch this site's servers and we never see or store them. We receive back the amount, the result, the card brand and last four digits, and Stripe's own fraud signals for the order.
  • Transactional email (Resend). Order confirmations, pick slips, trade account mail and inquiry confirmations are sent through Resend, which handles your email address and the contents of that message.
  • Shipping quotes (Shippo). For destinations outside our own delivery zones we send the destination address to a rating service to get carrier prices.
  • Analytics (Google Analytics 4). Yes, this is running. It records the pages visited and standard visit information. It is switched off entirely on account and admin pages, and we do not send your name, email or order details to it.

Trade account documents

A W-9 or a tax exemption certificate you upload goes into a private storage bucket. It is not public and is not served from a guessable link. Only the account that uploaded it and our own office staff can open it. We use those documents for one thing: deciding your pricing tier, your terms and whether tax exemption applies.

What we do not do

We do not sell your information, we do not rent our customer list, and we do not send marketing email from this site. The email you get from us is about an order, an inquiry or your account.

How long we keep it

Orders and invoices are kept as business records. Account details are kept while the account is open.

[PLACEHOLDER : needs Shawn] The retention period the business actually wants for closed accounts and old order records, and how long trade documents are kept after a decision.

Asking us about your data

Call (212) 535-8400 or use the contact page and ask for a copy of what we hold, a correction, or deletion. We will keep what we are required to keep for tax and accounting and remove the rest.

First Avenue Supply House, 1587 First Avenue, New York, NY 10028.