Privacy Notice
Effective July 18, 2026
Legal
Privacy Notice
This Privacy Notice explains how members of the Uniqcli Group collect, use, disclose, and retain personal information across our Sites, including getuniqcli.com and the Uniqcli-operated brand storefronts. It does not cover the independent practices of third parties. Our Sites and services are directed to customers in the United States.
1. Who is responsible for your information
Uniqcli LLC operates the Sites. "Uniqcli Group" means Uniqcli LLC, Uniqcli Federal LLC, and their current and future affiliates and sister companies; it is a trade description, not a separate legal entity. For a specific transaction, the responsible entity is the Uniqcli entity identified on the applicable quote, order, invoice, contract, or Statement of Work. Members of the Uniqcli Group may process personal information for one another consistent with this Notice.
2. Personal information we collect
Depending on how you interact with us, we collect the following categories of personal information:
- Identifiers and contact information — name, work email address, phone number, organization name, and portal sign-in identity.
- Professional and organizational information — employer, agency, procurement role, customer number, and authorized-user status.
- Account and authentication information — login identity, hashed password held by the sign-in provider, multi-factor status, and sign-in events.
- Commercial and transaction information — quotes, orders, invoices, returns, support tickets, and saved addresses.
- Payment-related information — payment method, processor token, the card's last four digits, billing status, and fraud-screening result. Full card numbers are processed by our payment processors and are not stored by us.
- Device, network, and online-activity information — IP address, device and browser characteristics, and pages and interactions on the Sites.
- Session-replay and experience data — collected only if and when session-replay or similar experience tools are enabled on the Sites. None are in use today (see Section 5).
- Communications and content you submit — messages, requirements, form entries, and files you send us.
- Procurement, compliance, and due-diligence information — end user and end use, destination and country-of-origin information, tax-exemption documents, sanctions and export-screening results, and public-contract identifiers.
- Inferences and preferences — reasonable inferences drawn to serve business and government buyers.
- Applicant information — the information a job applicant provides.
Do not submit restricted information through public Sites or ordinary email. Classified information, Controlled Unclassified Information, export-controlled technical data, protected health information, full payment-card data, credentials, and private keys must not be sent through public channels — see the CUI, FCI, and Secure Submission Notice at /legal/controlled-information.
3. Sources of the information
We collect personal information directly from you; automatically as you use the Sites; from service providers such as processors, carriers, manufacturers, distributors, providers, contract-vehicle operators, and fraud and compliance screeners; from public records and public sources; and, where permitted, from referral partners.
4. How we use personal information
We use personal information to operate, secure, and personalize the Sites; prepare quotes, bills of materials, and configurations; fulfill orders; register products, licenses, and warranties with manufacturers; perform services; authenticate users and prevent fraud; communicate with you; and measure site performance in aggregate. We also use it to comply with tax, export, contract, and audit obligations; to establish, exercise, or defend legal claims; to recruit; and in connection with a corporate transaction. De-identified data is not re-identified.
We do not run third-party advertising or targeting technologies today. If we introduce advertising or measurement technologies in the future, any such use will be subject to the choices described in Sections 5, 7, and 8, and this Notice will be updated first.
5. Cookies, analytics, and session replay
The Cookie Notice at /legal/cookie-settings lists every cookie and browser-storage item the Sites use. Today we use only our own session, sign-in, cart, and preference storage; Google Analytics 4 and PostHog (US cloud) for aggregate product analytics; Stripe.js and the PayPal SDK on checkout and payment pages; and Cloudflare, including its Turnstile anti-abuse check on public forms.
Optional analytics are gated on your browser's privacy signals, enforced in the site's code: when your browser sends Global Privacy Control (GPC) or has Do Not Track (DNT) enabled, our Google Analytics and PostHog scripts do not load at all — no analytics cookies are set and no analytics data is collected for that visit. We do not operate a consent banner today because the tools in use load only consistent with these signals and your browser controls.
We do not use session-replay or similar experience tools today. If we introduce them, this Notice and the Cookie Notice will be updated first, and session replay will exclude checkout, account, and secure pages.
6. How we disclose personal information
We disclose personal information to the parties needed to run the Sites and fulfill your orders, each bound to use it only for the authorized purpose:
- Members of the Uniqcli Group, consistent with this Notice.
- Manufacturers, distributors, aggregators, fulfillment, integration partners, carriers, and installers — as needed to fulfill, deliver, and support a specific order.
- Payment, banking, financing, fraud-screening, and tax providers.
- Cloud, email, identity, CRM, support, cybersecurity, monitoring, analytics, and professional-services providers.
- Government agencies, contracting offices, auditors, and prime contractors — for authorized transactions.
- Advisors, and law enforcement or authorities as required by law.
- Parties to a corporate transaction, and any recipient you direct us to share with.
7. Sale, sharing, and targeted advertising
We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws. We run no third-party advertising or targeting technologies today, and we have no arrangement under which personal information is exchanged for value. If advertising technologies are introduced in the future, they may constitute a sale, sharing, or targeted advertising, and the opt-outs described in Section 8 (GPC and Cookie Settings) will apply.
8. Your choices
You can control cookies and analytics through your browser's privacy signal and cookie settings (see Section 5), and you can unsubscribe from marketing email using the link in each message. We honor both Global Privacy Control (GPC) and Do Not Track (DNT) in code. To exercise privacy rights, contact us as described in Section 9.
9. U.S. state privacy rights
If you are a resident of a U.S. state with a comprehensive privacy law — including California (as amended), Colorado, Connecticut, Texas, Virginia, Utah, and other states with similar laws — you may have the rights below. Many of the people whose information we hold provide it as business contacts acting for their organization, a context several state laws partially or fully exempt; we describe our practices anyway, and you may submit a request regardless of context.
- Know or access — confirm whether we process your personal information and obtain a copy.
- Correct — have inaccurate personal information corrected.
- Delete — have personal information deleted, subject to exceptions such as records we must keep for tax, accounting, warranty, or dispute purposes.
- Portability — receive your information in a usable format.
- Opt out — of sale, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling. We do not do these things, so there is nothing to opt out of; the right still exists and we will confirm that in response to a request.
- Limit use of sensitive personal information — we use sensitive information only to provide the service you asked for, which is the limited use these laws contemplate.
- Categories — obtain the categories of personal information we collected and disclosed about you, and the categories of recipients.
- Appeal — where your state provides it, appeal a decision to decline a request.
- Non-discrimination — we will not deny service, charge different prices, or provide a different level of service because you exercised a privacy right.
How to exercise your rights
Email [email protected] with your name, the state you reside in, your relationship to us, and the right you want to exercise. You may also reach us through the contact page at /company/contact. We verify requests proportionally to their sensitivity by matching the details you provide against our records; for portal account holders, a request sent from the signed-in account's email or made while signed in is our preferred path. We may ask follow-up questions to confirm your identity before acting on a request.
Authorized agents may submit a request where your state's law allows, by emailing [email protected] with proof of authority; we may still contact you to confirm. We respond within the period the applicable law requires (generally 45 days, extendable once where permitted and we notify you). If we decline a request, we explain why and, where your state provides it, how to appeal — reply to our decision or write to [email protected] with "Privacy appeal" in the subject line. If an appeal is denied, you may contact your state Attorney General.
10. California Notice at Collection
In the preceding 12 months, we collected the categories of personal information described in Section 2, for the purposes in Section 4, and disclosed them to the categories of recipients in Section 6. We limit our use of sensitive personal information to providing the service you requested. We do not sell personal information for money and do not knowingly sell or share the personal information of consumers under 16. If advertising technologies are introduced in the future, they may constitute a sale or share, and the opt-outs in Section 8 would apply. California residents may also request the Shine the Light disclosure by emailing [email protected].
11. How long we keep information
We retain personal information only as long as needed for the purpose collected, subject to the following general periods:
- Account records — for the life of the account plus a reasonable period afterward.
- Quotes — approximately 3 years after last activity.
- Orders, invoices, tax, payment, warranty, export, and contract records — approximately 7 years, or longer where law requires.
- Support and project records — for the engagement plus the applicable limitation period.
- Security logs — approximately 12 to 24 months.
- Analytics — per the tool and your signals.
- Privacy-request records — as needed to document and respond to requests.
A litigation hold, audit, or investigation may extend these periods.
12. Security
We maintain administrative, technical, and organizational safeguards including transport encryption, access control, authentication, monitoring, vendor review, and data minimization. Enforced in the platform's code, these include field-level AES-256-GCM encryption at rest for sensitive fields such as a business's federal EIN and tax-exemption certificate numbers (the EIN is displayed back only as its last four digits); deny-by-default, role-gated access; audit logging of sensitive administrative actions; and masking of email addresses in operational logs. Payment-card data is handled by Stripe and PayPal and is never stored on our systems. No system is perfectly secure.
13. International
We are based in the United States and process personal information in the United States. Where the laws of the EEA or the United Kingdom apply, our legal bases may include contract, legitimate interests, legal obligation, and consent, and you may have additional rights under those laws.
14. Children
The Sites are a business-to-business service and are not directed to children under 13, and we do not knowingly collect personal information from them. As stated in Section 10, we do not knowingly sell or share the personal information of anyone under 16.
15. Third-party sites
The Sites link to third-party sites and services with their own privacy practices, which we do not control. Their notices govern the information you provide to them.
16. Changes to this Notice
We may update this Notice from time to time. The effective date above reflects the current version, and material changes will be accompanied by additional notice or consent where required.
17. How to contact us
General privacy questions and requests: [email protected]
Website issues: [email protected]
Mail: Uniqcli LLC, Attn: Legal & Privacy, 233 S Wacker Drive, Suite 4400, Chicago, IL 60606-6322, USA
Privacy questions?
Talk to a Uniqcli engineer, or send a bill of materials for a TAA-verified quote — no payment up front.