Concordia Supply Privacy Policy

Effective Date: September 24, 2026

Last Updated: October 2, 2026

Concordia Supply Co., Inc. ("Concordia Supply," "we," "us," or "our") operates concordiasupply.com (the "Site"). This Privacy Policy explains what personal information we collect, how we use it, who we disclose it to, and the choices and rights you have. It applies to information we collect through the Site, by phone, by email, by text message, through live chat, and through our other interactions with you, including when you shop on behalf of a church or ministry.

This Privacy Policy serves as our notice at collection for California residents.

1. Information We Collect

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: name, email address, postal address, phone number, account username, IP address, and cookie or device identifiers.
• Customer records: billing and shipping addresses, the name of the church or organization you purchase for, church billing and account terms, and limited payment information (such as card type and the last four digits of a card). We do not store full payment card numbers. Payments are processed by our payment processors.
• Commercial information: products viewed, added to cart, or purchased; order history; wishlists; Autoship subscriptions; rewards activity; returns; catalog and quote requests; and product reviews.
• Tax exemption information: tax exemption certificates and related organization details you provide so we can apply tax exemptions to your orders.
• Internet and electronic activity: pages viewed, links clicked, searches, time on site, referring websites, browser and device information, and recordings of how you interact with the Site (see "Session Recording" in Section 5).
• Approximate location: general location derived from your IP address.
• Communications: the content of emails, phone calls, text messages, live chat conversations, surveys, and other messages you send us.
• Inferences: preferences and interests we derive from the information above, used for product recommendations and marketing.

Sensitive personal information. When you create an account, we collect your login credentials, which are used only to give you secure access to your account. We do not use or disclose sensitive personal information for purposes other than those permitted by California law, and we do not use it to infer characteristics about you.

2. Sources of Personal Information

We collect personal information from:

• You directly: when you create an account, place an order, request a catalog or quote, submit a tax exemption certificate, join our rewards program, sign up for emails or text messages, write a review, contact us, or use live chat.
• Google: if you choose to sign in with Google, we receive your name and email address from Google and use them to sign you in or create your account.
• Automatically: through cookies, pixels, scripts, and similar technologies when you use the Site (see Section 5).
• Service providers: such as payment processors, shipping carriers, and platforms that help us operate the Site.
• Data partners: partners who use cookies and similar technologies to associate your visits to our Site with your email address. This may allow us to send you marketing emails even if you did not give us your email address directly on the Site.
• Advertising partners and social media platforms: such as information about how you responded to our ads.
• Marketing list providers: we may obtain contact information for churches and ministry leaders from commercially available marketing lists.

3. How We Use Personal Information

We use personal information to:

• Process and fulfill orders, including shipping, returns, Autoship, and church billing
• Create and manage your account
• Apply tax exemptions and meet tax, accounting, and recordkeeping obligations
• Provide customer service, including through phone, email, text message, and live chat
• Operate our rewards program and publish product reviews
• Send order updates and other transactional messages
• Send marketing emails and, if you opt in, marketing text messages about products, promotions, and events
• Show you personalized product recommendations and site search results
• Deliver and measure advertising on other websites and platforms
• Analyze and improve the Site, including through analytics and session recording
• Keep the Site fast, secure, and reliable, and detect and prevent fraud
• Comply with legal obligations and enforce our terms and rights

4. Text Messages

If you opt in to receive text messages from us, we will send recurring marketing and informational messages to the mobile number you provide. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time or HELP for help. Consent to receive text messages is not a condition of purchase.

We do not sell or share your mobile phone number or text messaging opt-in consent with third parties for their own marketing purposes.

5. Cookies and Tracking Technologies

We and our partners use cookies, pixels, scripts, and similar technologies on the Site. They fall into these categories:

• Necessary: required for the Site to work, including your cart, checkout, login, security, and remembering your privacy choices. These cannot be turned off.
• Functional: enable features such as live chat, site search, and email and text signup forms.
• Analytics: help us understand how visitors use the Site, including session recording.
• Advertising: allow advertising and data partners to deliver and measure ads, build audiences, and associate your activity with your email address.

Your choices. When you first visit the Site, our cookie banner asks for your consent before we use non-essential cookies. You can accept, decline, or choose by category, and you can change your choices at any time using the Cookie Settings link on the Site. Declining some categories may affect how certain features work.

Session recording. We use analytics tools that record how visitors interact with the Site, such as mouse movements, clicks, scrolling, and pages visited, so we can improve usability and fix problems. We configure these tools to mask information you type into form fields. Session recording runs only if you consent to analytics cookies.

Live chat. If you use live chat, your conversation is recorded and stored by our chat provider so we can respond to you and keep records of customer service interactions. By using live chat, you consent to this recording.

Global Privacy Control. We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we treat it as a request to opt out of the sale and sharing of your personal information for that browser.

Do Not Track. Because there is no common standard for "Do Not Track" browser signals, we do not currently respond to them. We do honor GPC signals as described above.

6. How We Disclose Personal Information

Service providers. We disclose personal information to service providers that process it on our behalf under contracts that limit how they may use it. These include providers of:

• E-commerce platform and website hosting
• Business management and accounting (ERP) systems
• Payment processing
• Sales tax calculation
• Shipping and fulfillment
• Email and text message marketing
• Rewards and product reviews
• Live chat
• Site search and product recommendations
• Analytics and session recording
• Website performance and delivery
• Cookie consent management
• IT, security, and customer support tools

Advertising and data partners. We disclose certain personal information to advertising platforms and data partners, as described in Section 7.

Legal and business reasons. We may also disclose personal information:

• To comply with law, legal process, or government requests
• To protect the rights, property, or safety of Concordia Supply, our customers, or others
• In connection with a merger, acquisition, financing, or sale of all or part of our business

7. Advertising and "Sale" or "Sharing" Under California Law

We do not sell your personal information for money. Like most online retailers, we work with advertising platforms and marketing partners to show our ads to people who may be interested in our products, to measure whether our ads are working, and to send marketing emails. If you consent to advertising cookies, these partners collect information through cookies and similar technologies on our Site. California law defines "sale" and "sharing" broadly enough to include these activities, so we describe them here.

In the past 12 months, we disclosed the following categories of personal information for these purposes:

• Identifiers, such as email address, IP address, and cookie or device IDs
• Browsing activity on our Site, such as pages viewed
• Commercial information, such as products viewed and purchased

We disclosed this information to:

• Advertising and social media platforms
• Marketing data partners that match website visitors to email addresses so we can send them marketing emails

How to opt out. You can opt out of the sale and sharing of your personal information by:

• Clicking the "Do Not Sell or Share My Personal Information" link at the bottom of any page on the Site
• Enabling a Global Privacy Control signal in your browser
• Contacting us using the details in Section 15

You may also opt out of email matching by one of our data partners directly at https://app.retention.com/optout.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

8. Notice of Financial Incentive

We offer programs that provide benefits in exchange for personal information:

• Rewards program: members earn rewards for creating an account, making purchases, writing product reviews, and taking part in other occasional promotions. Rewards can be redeemed for store credit and other available options. To participate, we collect your name, email address, account information, purchase history, the reviews you submit, and your rewards activity.
• Email signup offers: we may offer a discount or other promotional offer when you sign up for marketing emails. To participate, we collect your email address and may collect your name.
• Text message signup offers: we may offer a discount or other promotional offer when you opt in to marketing text messages. To participate, we collect your mobile phone number.

Opting in and out. You join these programs by signing up through the Site. You can leave the rewards program at any time by contacting us. You can unsubscribe from marketing emails at any time using the link in any email, and you can stop text messages by replying STOP.

Value of your data. We estimate the value of the personal information collected through these programs as roughly equal to the value of the discounts and rewards we provide. We base this estimate on the expenses related to offering the programs and the revenue we reasonably expect from members' purchases.

Participation is voluntary, and you will not be treated differently for declining to participate.

9. How Long We Keep Personal Information

We keep personal information for as long as we have a business or legal reason to do so. To decide how long that is, we consider:

• Whether we have an ongoing relationship with you or the church or organization you buy for
• Whether we need the information to process orders, returns, Autoship, church billing, tax exemptions, or rewards
• Tax, accounting, and recordkeeping requirements
• Whether we need the information to resolve disputes, prevent fraud, or enforce our agreements
• Whether you have asked us to delete it

Because many churches and ministries purchase from us over many years, we generally retain order history, account information, and tax exemption records on an ongoing basis in our business systems. Marketing contact information is kept until you unsubscribe, after which we keep only what we need to honor your opt-out. Analytics data and session recordings are kept according to the retention settings of our analytics providers.

If you ask us to delete your personal information, we will do so, except where we are permitted or required by law to keep it. If deletion isn't immediately possible, for example because the information is stored in backup archives, we will securely store it and isolate it from further use until it can be deleted.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• Know and access the categories and specific pieces of personal information we have collected about you, the sources, the purposes for collecting, selling, or sharing it, and the categories of third parties we disclose it to
• Delete personal information we have collected from you, subject to certain exceptions
• Correct inaccurate personal information
• Opt out of the sale or sharing of your personal information and of targeted advertising
• Receive a copy of your personal information in a portable format
• Not be discriminated against for exercising these rights

How to submit a request. Email [email protected] or call 1-800-521-0751. To opt out of sale or sharing, you can also use the "Do Not Sell or Share My Personal Information" link or a GPC signal. You can update much of your account information yourself on your account settings page.

Verification. To protect your information, we will verify your identity before fulfilling requests to know, delete, or correct. This usually means matching information you provide with information we have on file. Opt-out requests do not require verification.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require proof of the agent's authorization and may ask you to verify your identity directly.

Response time. We will respond within 45 days. If we need more time (up to an additional 45 days), we will let you know. We do not charge for requests unless they are excessive or repetitive.

Appeals. If we deny your request, you may appeal by emailing [email protected] with "Privacy Request Appeal" in the subject line. We will respond within the time required by applicable law. If you are unsatisfied with our response, you may contact your state's Attorney General.

California "Shine the Light." California residents may also request information about our disclosure of personal information to third parties for their direct marketing purposes by contacting us as described above.

11. Children's Privacy

The Site is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encrypted connections (SSL/TLS) and access controls. Payment card information is processed by PCI-compliant payment processors, and we do not store full card numbers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Links to Other Websites

The Site may link to websites and services we do not operate. This policy does not apply to them, and we encourage you to review their privacy policies.

14. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last Updated" date. If we make material changes, we will provide additional notice as appropriate.

15. Contact Us

Concordia Supply Co., Inc.
11810 Jersey Blvd
Rancho Cucamonga, CA 91730
Email: [email protected]
Phone: 1-800-521-0751