Privacy Policy

Last Updated: March 9, 2026

This Privacy Policy explains how D&H Distributing ("D&H," "we,"or "us") may collect, use, disclose, retain, protect, and otherwise process your personal information, including "personal information," "sensitive personal information,"or "personally identifying information" as defined under applicable data protection laws in effect as of the policy's effective date.

This Privacy Policy applies to D&H's websites, applications, electronic resources, distribution center interactions, customer service communications, products, services, and other technologies that you may use. It also explains the privacy rights available to you and how you may exercise those rights.

Accountability

We are responsible for the personal information we collect and use. We have appointed a Privacy Officer to ensure that we comply with this Privacy Policy and applicable privacy laws, including PIPEDA, Alberta and British Columbia PIPA, and Quebec's Law 25.

Contact:
Privacy Officer
Email: privacy@dandh.com
Toll-free number: 888-325-1247

What Personal Information D&H Collects

Personal information is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual, household, or employee.

We may collect the following categories of personal information, including but not limited to:

Identifiers, such as name, email address, telephone number, mailing address, and IP address.
Sensitive personal information, such as government-issued identifiers and financial information.
Commercial information, including records of products or services purchased, transaction details, and preferences.
Internet or other electronic activity information, such as browsing history, search history, and device or usage information.
Geolocation data, where enabled through your device or browser settings.
Professional or employment-related information, such as employment history or job-related information, if you apply for a position or partnership with us.
Any other information that you choose to voluntarily provide.

How D&H Collects Personal Information

Directly From You

D&H may collect personal information that you provide directly to us through our websites, mobile applications, email communications, electronic data interchange (EDI), product or service ordering channels, and other interactions with us. This may include information provided when you register as a customer, place orders for products or services, participate in promotions, apply for employment or partnership opportunities, or use applications installed on your device.

When you interact with D&H, we may collect personal information necessary to establish, administer, and process your account or your organization's relationship with us. This information may include, without limitation, your name, job title, company or organization name, telephone number, contact details (such as email address, sold-to address, shipping address, and billing address), IP address, account name, authentication credentials, and payment information.

We may also collect information when you create a username or password, place orders, submit applications or inquiries, or otherwise voluntarily provide information to us in the course of your interactions with D&H.

Automatically Collected from Your Use of our Services

D&H may automatically collect certain personal information for legitimate business purposes, including providing customer support, managing and delivering our services, processing payments, complying with legal and regulatory obligations, and marketing our products and services.

When you visit our websites, we may automatically collect information such as the pages you access, the website from which you navigated, and the type of browser or device you use. This information is collected in an aggregated or de identified form where possible and is used to analyze website performance, enhance functionality, improve user experience, and for statistical and operational purposes.

In addition, D&H may use cookies and similar tracking technologies to help operate, optimize, and personalize our websites and services. These technologies allow us to recognize your browser or device, remember preferences, and provide content tailored to your interests.

Personal Information Collected from Other Sources

D&H may collect personal information from publicly available sources, including, without limitation, publicly accessible websites and databases, government or regulatory sources, and news or media publications.

In addition to using identifiable personal information for legitimate business purposes, we may use anonymized, aggregated, or de identified information for analytics, research, and statistical purposes. Such information does not identify and cannot reasonably be used to identify any individual.

We may also obtain personal information from third-party organizations that lawfully collect or provide data and are authorized to share such information with us. These third parties may include service providers that assist us in verifying information or supporting our business operations.

In addition, D&H may collect personal information through video surveillance systems located at our offices and distribution centers. Video recordings are used for security and safety purposes, including the prevention of theft, fraud, and other harmful or unlawful activities, and to help protect our employees, visitors, assets, and operations.

How D&H May Use Information We Collect

D&H and service providers acting on our behalf may use information about you for the following purposes:

Service delivery and improvement, including providing, operating, maintaining, enhancing, and developing our products and services, and protecting the legitimate interests of D&H and our users.
Transaction processing, including processing payments and fulfilling orders and requests.
Legal and regulatory compliance, including meeting applicable legal, regulatory, and contractual obligations.
Digital experience enhancement, including improving website functionality, performance, and usability.
Customer support, including responding to inquiries, requests, and communications.
Business operations, such as data analysis, audits, fraud detection and prevention, security monitoring, identifying usage trends, and expanding or improving our business activities.
Marketing and communications, including sending information about our products, services, promotions, and events that may be of interest to you, were permitted by law.
Employment administration, including establishing, managing, maintaining, and terminating employment or contractor relationships.

Who D&H Shares Information With

D&H may share personal information, including usage information, with its employees, agents, affiliates, subsidiaries, and third-party service providers who perform services on our behalf. These may include outside legal counsel, accountants, consultants, vendors, order entry and fulfillment providers, marketing service providers, and business partners, to the extent necessary for them to carry out their responsibilities.

For example, when you place an order, certain third-party service providers may have access to your personal information to support order automation, processing, fulfillment, and related internal business operations.

We may also disclose personal information to government authorities, regulators, or law enforcement agencies where required or permitted by law, as well as to affiliates or third parties in connection with corporate transactions, such as a merger, acquisition, financing, or sale of all or a portion of our business. D&H does not sell personal information.

When we engage third-party service providers, disclosure of personal information may be necessary to deliver our services. D&H requires such providers to protect personal information in a manner consistent with this Privacy Policy and applicable data protection laws. These service providers may be located in jurisdictions outside your country of residence and are contractually restricted from using personal information for any purpose other than providing services to D&H.

Principles for Processing of Personal Information

D&H collects, stores, processes, and transmits personal information in accordance with its internal policies and applicable privacy and data protection laws.

D&H is committed to the following principles in its processing of personal information:

Lawful and fair processing: Personal information is processed in a fair, lawful, and transparent manner.
Purpose limitation: Personal information is collected for specified, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes.
Data minimization: Personal information collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is collected.
Accuracy: Personal information is maintained as accurate, complete, and up to date as reasonably necessary for the purposes for which it is used.
Retention limitation: Personal information is retained in identifiable form only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.

If D&H intends to process personal information for purposes that differ from those described in this Privacy Policy, D&H will provide appropriate notice identifying the new purposes, any material changes to processing practices, and, where required, the recipients of the personal information.

Your Rights and Choices

Where provided for by the applicable privacy laws in your state, United States or Canadian residents may be entitled to exercise some or all of the following privacy rights:

Canada United States

Canada

If you are a resident of Canada, you have certain rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to:

Right to be Informed - Know why an organization collects your personal information and how it is used.
Right to Consent - Have your personal information collected, used, or disclosed only with your knowledge and consent, except where otherwise permitted or required by law.
Right to Withdraw Consent - Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions.
Right to Access - Request access to your personal information held by an organization.
Right to Correction - Request correction of inaccurate, incomplete, or outdated personal information.
Right to Limited Use and Retention - Expect that personal information will be used only for the purposes for which it was collected and retained only as long as necessary to fulfill those purposes.
Right to Security Safeguards - Expect that appropriate security measures are in place to protect your personal information.
Right to Transparency - Expect that an organization's privacy policies and practices are readily available and understandable.
Right to Accountability - Know who within an organization is responsible for protecting your personal information.
Right to Challenge Compliance and File a Complaint - Challenge an organization's compliance with PIPEDA and file a complaint with the organization or with the Office of the Privacy Commissioner of Canada (OPC).

Exercising Your Rights

You may exercise any of the rights described above at any time by submitting a written request to our Privacy Officer using the contact information provided below. We will respond to your request within 30 days, as required by law.

If you request a correction, we will amend the information where appropriate and, if applicable, notify third parties to whom the information was disclosed. If you withdraw your consent, we will inform you of any legal or contractual implications of doing so.

If you are not satisfied with our response or believe your rights under PIPEDA have been violated, you may file a complaint with D&H and/or with the Office of the Privacy Commissioner of Canada:

Website: www.priv.gc.ca
Phone: 1-800-282-1276
Mail: 30 Victoria Street, Gatineau, QC K1A 1H3

To exercise any of your rights or for questions about our privacy practices, please contact:

Privacy Officer
D&H Distributing
Privacy@dandh.com or through our toll-free number 888-325-1247

If you are a resident of ALBERTA, you have certain rights under the Alberta Personal Information Protection Act (PIPA), including the right to:

Right to be Informed - Know why an organization collects your personal information and how it will be used.
Right to Access - Request access to your personal information held by an organization.
Right to Correction - Request correction of inaccurate, incomplete, or outdated.
Right to Consent - Have your personal information collected, used, or disclosed only with your knowledge and consent, except where otherwise permitted or required by law.
Right to Withdraw Consent - Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions.
Right to Transparency - Expect that an organizationâ€™s privacy policies and practices are readily available and easy to understand.
Right to Limited Use and Retention - Expect that personal information will be used only for the purposes for which it was collected and retained only as long as necessary to fulfill those purposes, and to decline optional uses such as marketing.
Right to Security Safeguards - Expect that reasonable security measures are in place to protect your personal information.
Right to Accountability - Know who within an organization is responsible for protecting your personal information.
Right to Challenge Compliance and File a Complaint - Challenge an organization's compliance with Alberta PIPA and file a complaint with the organization or with the Office of the Information and Privacy Commissioner of Alberta (OIPC).

Exercising Your Rights

If you request a correction, we will update the information where appropriate and, if applicable, notify third parties to whom the information has been disclosed. If you withdraw your consent, we will inform you of any legal or contractual implications of such withdrawal.

If you are not satisfied with our response or believe your rights under Alberta PIPA have been violated, you may file a complaint with D&H and/or with the Office of the Information and Privacy Commissioner of Alberta:

Website: www.oipc.ab.ca
Phone: 1-888-8780-4044

To exercise any of your rights or for questions about our privacy practices, please contact:

Privacy Officer
D&H Distributing
Privacy@dandh.com or through our toll-free number 888-325-1247

If you are a resident of BRITISH COLUMBIA, you have certain rights under the Personal Information Protection Act (British Columbia) (PIPA), including the right to:

Right to be Informed - Know why and how an organization collects, uses, or discloses your personal information.
Right to Access - Request access to your personal information held by an organization.
Right to Consent - Have your personal information collected, used, or disclosed only with your knowledge and consent, except where otherwise permitted or required by law.
Right to Withdraw Consent - Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions.
Right to Correction - Request correction of inaccurate, incomplete, or outdated.
Right to Security Safeguards - Expect that reasonable security measures are in place to protect your personal information.
Right to Limited Use and Retention - Expect that personal information will be used only for the purposes for which it was collected and retained only as long as necessary to fulfill those purposes.
Right to Transparency - Expect that an organization's privacy policies and practices are readily available and easy to understand.
Right to Challenge Compliance and File a Complaint - File a complaint with the organization and with the Office of the Information and Privacy Commissioner for British Columbia (OIPC).

Exercising Your Rights

If you are not satisfied with our response or believe your rights under British Columbia PIPA have been violated, you may file a complaint with D&H and/or with the Office of the Information and Privacy Commissioner of British Columbia:

Website: www.oipc.ab.ca
Phone: 1-888-8780-4044

To exercise any of your rights or for questions about our privacy practices, please contact:

Privacy Officer
D&H Distributing
Privacy@dandh.com or through our toll-free number 888-325-1247

If you are a resident of QUEBEC, you have certain rights under the Quebec's Act Respecting the Protection of Personal Information in the Private Sector, as amended by Law 25, including the right to:

Right to be Informed - Know why and how an organization collects, uses, or discloses your personal information.
Right to Access - Request access to your personal information held by an organization.
Right to Rectification - Request correction of personal information that is inaccurate, incomplete, or outdated.
Right to Consent - Have your personal information collected, used, or disclosed only with your knowledge and consent, except where otherwise permitted or required by law.
Right to Withdraw Consent - Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions.
Right to Transparency - Expect that an organization's privacy policies and practices are readily available and easy to understand.
Right to Privacy by Default - Expect that privacy protection measures are built into products and services by default.
Right to Deletion - Request that your personal information be deleted, subject to applicable legal exceptions.
Right to De-indexation - Request that an organization cease dissemination of your personal information or de index links associated with your name, where provided by law.
Right to Data Portability - Receive your personal information in a structured, commonly used technological format and request its transfer to another organization, where applicable.
Right to Object to Automated Decision Making - Be informed of, and object to, decisions based solely on automated processing and request human intervention, where applicable.
Right to Security Safeguards - Expect that reasonable security measures are in place to protect your personal information.
Right to Limited Use and Retention - Expect that personal information will be used only for the purposes for which it was collected and retained only as long as necessary to fulfill those purposes.
Right to File a Complaint - File a complaint with the organization and with the Commission d'accès à l'information du Québec (CAI).

Exercising Your Rights

If you are not satisfied with our response or believe your rights under Quebec Law 25 have been violated, you may file a complaint with D&H and/or with the Commission d'accès à l'information du Québec (CAI):

Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741

To exercise any of your rights or for questions about our privacy practices, please contact:

Privacy Officer
D&H Distributing
Privacy@dandh.com or through our toll-free number 888-325-1247

United States

If you are a resident of California, you have certain rights under the the California Consumer Privacy Act (CCPA), as amended by California Privacy Rights Act (CPRA), including the right to:

Right to Know - Request information about the personal information we collect about you, including the categories of personal information collected, the sources from which it is collected, the purposes for which it is used, and whether it is sold or shared and with whom.
Right to Access - Request access to the personal information we have collected about you.
Right to Rectification - Request correction of personal information that is inaccurate, incomplete, or outdated.
Right to Correction - Request correction of inaccurate personal information maintained about you.
Right to Deletion - Request deletion of your personal information, subject to certain legal exceptions.
Right to Opt-Out of Sale or Sharing - Direct us not to sell or share your personal information, including for cross-context behavioral advertising, and to opt out of certain automated decision-making technologies, where applicable.
Right to Limit Use of Sensitive Personal Information - Limit the use and disclosure of sensitive personal information to purposes necessary to provide requested services or as otherwise permitted by law.
Right to Non-Discrimination - Not be discriminated against for exercising your privacy rights, including denial of services, different pricing, or reduced quality of service.
Right to Data Portability - Receive your personal information in a structured, commonly used, and machine-readable format that allows you to transfer it to another organization.

Exercising Your California Privacy Rights

You may exercise any of the rights described above at any time by submitting a verifiable consumer request to our Privacy Officer using the contact information provided below. We will respond to your request within 45 days, as required by law, unless an extension is permitted.

If you are not satisfied with our response or believe your rights under CCPA/CPRA have been violated, you may file a complaint with the organization and/or with the California Privacy Protection Agency (CPPA):

Website: cppa.ca.gov

To exercise any of your rights or for questions about our privacy practices, please contact:

Privacy Officer
D&H Distributing
Privacy@dandh.com or through our toll-free number 888-325-1247

Social Media

D&H may offer social media features that allow you to share information and interact with D&H through third-party social media platforms. Your use of these features may result in the collection or sharing of information about you by the applicable social media provider, depending on your interactions and privacy settings.

We encourage you to review the privacy policies and account settings of the social media platforms you use to understand how those platforms collect, use, and share your information when you engage with D&H through social media.

Security of Personal Information

D&H is committed to complying with applicable legal requirements and implements reasonable physical, technical, and administrative safeguards designed to protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction.

In the event that we become aware of a security incident involving personal information under our control, we will notify affected individuals and relevant authorities as required by applicable law. By providing your email address to us, you consent to receive electronic notifications from D&H regarding such security incidents, unless prohibited by law.

Where personal information is transferred or processed outside of your jurisdiction, including to service providers located in other provinces or countries, D&H ensures that appropriate safeguards and contractual protections are in place to maintain a level of protection consistent with applicable privacy laws.

Data Incident

Canada (Federal - PIPEDA)

For Canadian residents, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) of any security incident involving personal information under our control if the incident poses a real risk of significant harm, as required by law. We will maintain records of all such incidents and retain them for the period required by applicable legislation.

Alberta

For residents of Alberta, we will notify the Office of the Information and Privacy Commissioner of Alberta without unreasonable delay of any security incident involving personal information if the incident presents a real risk of significant harm to individuals. Such harm may include, but is not limited to, financial loss, identity theft, reputational harm, or loss of employment or business opportunities.

British Columbia

For residents of British Columbia, we will notify affected individuals of a security incident involving personal information if the incident poses a real risk of significant harm, in accordance with applicable law.

Quebec

For residents of Quebec, we will notify affected individuals and the Commission d'accès à l'information du Québec (CAI) of any security incident involving personal information if the incident presents a real risk of serious injury, as required under Quebec law.

United States

For residents of the United States, we will notify affected individuals of a security incident involving personally identifiable information without unreasonable delay, in accordance with applicable federal and state laws.

Access to Personal Information

To help prevent fraudulent or unauthorized access requests, D&H may require reasonable verification of your identity before granting access to personal information or processing a correction request. This may include requesting sufficient information to confirm that the individual making the request is the authorized data subject or an authorized representative.

Retention Period

D&H retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or otherwise identified at the time of collection, unless a longer retention period is required or permitted by law or necessary to meet legal, regulatory, or contractual obligations.

When personal information is no longer required, it is securely disposed of or rendered irreversibly anonymized using appropriate measures, such as secure deletion, shredding, or anonymization. Responsibility for implementing and overseeing retention and disposal practices rests with D&H's designated Privacy Officer, who ensures compliance with this Privacy Policy and applicable data protection laws.

Additional Provisions

Minors

D&H does not knowingly collect personal information from children and does not direct its websites or services to children. If you are under the age of majority in your jurisdiction, please do not register for our services or provide any personal information to us.

If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete such information as promptly as possible. If you believe that a minor may have provided personal information to D&H, please contact us at Privacy@dandh.com.

Changes

D&H may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or other operational needs. Any updates will apply prospectively.

If we make material changes to this Privacy Policy, we will provide notice by posting the updated version on the applicable website and indicating the effective date of the changes. We will provide sufficient notice when required by law.

Changes will become effective as of the stated effective date unless you object within the applicable notice period. Continued use of our websites or services after the effective date constitutes acceptance of the updated Privacy Policy.

Compliance

D&H uses a self-assessment process to monitor and evaluate compliance with this Privacy Policy and to periodically review the policy to ensure it remains accurate, complete, and reflective of our information-handling practices.

If we make material changes to this Privacy Policy, we will notify you by posting the updated version on our website and updating the effective date.

Questions

If you have any questions or concerns about this Privacy Policy, D&H's privacy practices, or our collection, use, or disclosure of personal information, or if you wish to request access to your personal information, please contact us using the information provided below.

If we need or are required to contact you regarding any matter related to this Privacy Policy, we may do so using the email address, telephone number, or mailing address we have on file for you.

Email: privacy@dandh.com
Toll-free number: 888-325-1247