Privacy Policy

1. Information you give us

• Account details - your name, email address, and business name.
• Order details - shipping and billing address, phone number, the items you order, and a note to the purveyor if you add one.
• Payment details - handled by our payment processor. We receive confirmation of a payment and limited card details such as the brand and last four digits. We do not receive or store your full card number.
• Tax and exemption documents - any resale or exemption certificate you send us.
• Messages - what you send us by email or through the site, including information you give us about a problem with an order.

Information from others. We also receive information from purveyors and carriers about your orders, such as shipping and tracking events and delivery confirmations, and from people in your business who order on your account.

2. Information we collect automatically

When you use the site we collect your IP address, browser and device information, the pages you view, and how you arrived, including any referral or campaign identifiers in the link you followed.

We use cookies and similar technologies to keep you signed in, keep your cart, protect the site from abuse, understand how the site is used, and measure our advertising. Some are strictly necessary and the site will not work without them; others are for analytics and advertising. We do not currently respond to browser Do Not Track signals. Most browsers let you block or delete cookies. Blocking them may stop parts of the site, including sign-in and the cart, from working.

3. How we use information

• To create and maintain your account and sign you in.
• To process, ship, and support your orders.
• To send order, shipping, and account emails.
• To send marketing emails, where you have not opted out.
• To provide customer service and resolve problems with an order, including product, food-safety, and recall issues.
• To keep the site secure and prevent fraud and abuse.
• To understand how the site is used and improve it.
• To measure our advertising, as described in Section 5.
• To meet legal, tax, and record-keeping obligations.

4. Who we share information with

We do not sell your personal information. We share it with service providers who help us run Rico Direct, and only for that purpose:

• Purveyors - the details needed to prepare and ship your order, and to investigate a problem with it.
• Stripe - payment processing.
• UPS and other carriers - shipping labels, tracking, and delivery.
• Postmark - sending account and order email.
• Constant Contact, Klaviyo, and Attio - marketing email and customer records.
• Google (Tag Manager, Analytics, Ads) - site analytics and advertising measurement.
• Cloudflare, Fly.io, Sentry, and Logflare - hosting, site protection, error monitoring, and logging.

AI assistants you connect. Rico Direct makes a set of tools available to AI assistants that support them, so an assistant running in your browser can search the catalog, manage your cart, and place an order on your behalf. It acts through your own signed-in session and can reach the same information about your account that you can. We record the actions an assistant takes on your account. We do not choose or control which assistant you use, and anything it sends on to its own provider is covered by that provider's privacy policy rather than this one. If you are not signed in, an assistant can only search and view products.

We may use information that has been aggregated or de-identified, so it no longer identifies you, to understand demand and report on the business, and we may share it with partners.

We may also disclose information where the law requires it, to protect our rights or the safety of others, to respond to a food-safety or recall matter, or as part of a sale or transfer of the business.

5. Advertising measurement

We use Google Ads and Google Analytics to see which of our ads lead people to create an account and place an order. When you arrive from a Google ad, these tools set cookies and record a click identifier, which we store with your account. When you create an account or place your first order, we share your email address with Google in hashed form (converted into a code that cannot be read back as your address), together with that click identifier and, for your first order, the order date, value, and order number. Google uses this to match the activity to its ad records and report back to us on ad performance. We do not share payment details with Google, and we do not sell your personal information.

You can manage how Google uses your information for advertising at myadcenter.google.com, and opt out of Google Analytics at tools.google.com/dlpage/gaoptout. You can also ask us not to include your information in this measurement by writing to [email protected].

6. Food-safety and health information

If you report that a product caused illness, an allergic reaction, or injury, you may give us health information about you or another person. We use it only to investigate and resolve the report, protect health and safety, handle a recall, and meet legal and insurance obligations. We share it only as needed for those purposes, for example with the purveyor, the carrier, our insurers and advisers, or public-health and food-safety authorities. We do not use it for marketing.

7. Marketing email

If you receive marketing email from us, every message includes an unsubscribe link, and you can change your preferences in your account settings. Opting out of marketing does not stop order, shipping, or account emails, which we need to send to fulfill your orders.

8. How long we keep information

We keep account and order records for as long as your account is active and afterwards as needed to complete orders, handle claims and recalls, resolve disputes, and meet our legal, tax, and accounting obligations.

9. Your choices and rights

You can update your account details and email preferences when signed in.

You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to [email protected]. We will respond within 45 days and tell you if we need more time. We may ask you to confirm your identity before we act on a request, particularly a request to delete. When we delete information at your request, we also ask the service providers listed in Section 4 to delete it. Some information must be kept to meet legal, tax, and record-keeping obligations, and we will tell you if that applies to your request.

Depending on where you live, state privacy laws may give you additional rights. We honor the requests described in this section regardless of where you live.

10. Security

We use reasonable technical and organizational measures to protect the information we hold, including encrypted connections and restricted internal access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

Rico Direct is a wholesale service for businesses. It is not directed to children, and we do not knowingly collect personal information from them.

12. Where information is held

We operate in the United States and store information there. If you use the site from outside the United States, your information will be transferred to and processed in the United States.

13. Other sites

The site links to sites we do not control. This policy does not apply to them, and we are not responsible for their practices.

14. Changes to this policy

We may update this policy. We will post the revised version with a new "last updated" date and, if the change is significant, let you know through the site or by email.

15. Contact