Privacy Policy
Terms version 2026-10-27 · updated Oct 29 · California law
Effective on posting. BuyiMax Inc. collects the personal information of Buyers' Users and contacts only to run BuyiMax Wholesale and our sales to them; we do not sell or share it for cross-context advertising, and we give the rights below to everyone, whether or not a privacy law requires them. This policy is our notice at collection, linked wherever we collect.
1. What we collect, where from, and why.
- Identifiers and contact details: Name, job title, business email, phone, WhatsApp number. Source: The User; the owner who invites them. Purpose: Accounts, orders, messages, support
- Company and tax records: Legal name, DBA, business type, address, website, tax ID, resale certificate number, state, expiry and file. Source: The Buyer; state permit look-ups. Purpose: Approving Buyers, sales tax, invoices
- Account and security data: Sign-in email, password (stored only as a hash), two-step and passkey data, sign-in times, IP address, browser and device data. Source: The User's use of the Site. Purpose: Sign-in, security, fraud prevention, audit
- Commercial records: Carts, orders, offers, quotes, requests, bids, invoices, payments, credit, returns, ship-to addresses, labels, tracking. Source: The Buyer's use of the Site; carriers. Purpose: Selling, shipping, accounting, returns
- Payment data: Last four digits and type of a saved card or bank account, payment references, PayPal email on a payment. Source: The User; our payment processors. Purpose: Taking and matching payments, refunds
- Communications: Messages to and from us, emails and WhatsApp messages sent, delivery and read receipts, unsubscribes. Source: The User; our messaging providers. Purpose: Answering, order updates, offers the User agreed to receive
A tax ID or resale certificate of a sole proprietor may be sensitive personal information. We use sensitive personal information only to approve the Buyer, meet tax law and secure accounts, never to infer anything about a person.
2. Who receives it. Our service providers, under contracts that limit their use to serving us: cloud hosting and email delivery (Amazon Web Services); WhatsApp messaging (Meta Platforms); card and bank payments (Stripe); PayPal, when a Buyer pays with it; shipping labels, address checks and tracking (EasyPost and the carriers it uses); bot protection on forms (Cloudflare); and our own operations system. Also professional advisers, authorities when the law requires or to protect rights and safety, and a buyer of our business, under the same protections. We do not disclose personal information to third parties for their own marketing.
3. Keeping it. Account, order, payment and tax records: 7 years after the Buyer's last transaction, or longer where tax or other law requires. Audit and security records: 7 years. Messages: as long as the order or account they concern. Session data: until sign-out or expiry. We then delete or de-identify it.
4. Security. We encrypt data in transit, encrypt tax IDs and certificate files at rest, limit staff access by role, require two-step sign-in for staff, and log access to sensitive records. No system is perfectly secure; if a breach affects personal information, we notify as the law requires.
5. Your rights. A User or contact may ask us to: tell them what personal information we hold and how we use and disclose it; give them a copy; correct it; or delete it, subject to what the law lets us keep (for example tax and transaction records). We do not sell or share personal information, so there is nothing to opt out of; we honor Global Privacy Control signals all the same. We will not treat anyone differently for using these rights.
6. How to ask. Email wholesales@buyimax.com. We confirm receipt within 10 business days and answer within 45 days, or tell you within that time if we need up to 45 more. We verify the request against the account details we hold. An authorized agent must show your signed permission.
7. Cookies and tracking. The Site uses only the cookies it needs to work: the session cookie, a security (CSRF) cookie and a passkey sign-in cookie. The bot-protection check on some forms may set its own cookie. We use no advertising or analytics cookies and no cross-site tracking, so we do not respond differently to Do Not Track signals.
8. Business users only. The Site is for businesses and is not directed to anyone under 18; we do not knowingly collect personal information from children.
9. Where it is kept. In the United States.
10. Changes. We post each new version here with its date; for a material change we tell Users on the Site or by email before it takes effect.
11. Contact. BuyiMax Inc., Garden Grove, California; wholesales@buyimax.com.