NATIONAL TRADE SUPPLY, LLC PRIVACY POLICY

Last Updated: October 28, 2026

This Privacy Policy (“Policy”) explains how National Trade Supply, LLC (“NTS,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit, create an account with, or make a purchase through our websites, including DiscountFilters.com and FilterOutlet.com (each a “Site” and collectively the “Sites”), and when you interact with our related customer service, email, and text-message programs (collectively, the “Services”).

This Policy applies to all NTS-owned properties identified above. NTS operates more than one Site offering similar products, and personal data may be stored in a shared database and used across our properties consistent with this Policy. This Policy does not apply to purchases you make through third-party marketplaces such as Amazon or eBay, which are governed by those platforms’ own privacy policies and terms. For marketplace orders, we receive only the limited information those platforms make available to us for order fulfillment and customer service.

Please read this Policy carefully. If you have questions, contact us using the information in the “How to Contact Us” section below.

PERSONAL DATA WE COLLECT

We collect the categories of personal data described below. “Personal data” (also referred to as “personal information”) means information that is linked or reasonably linkable to an identified or identifiable individual. It does not include de-identified, aggregated, or publicly available information.

Category Examples
Identifiers and contact data First and last name; email address; postal, shipping, and billing address; telephone/mobile number; country; account username and password.
Commercial information Products and services purchased or considered; order and purchase history; cart and browsing activity; product reviews you submit; customer-service communications.
Payment information Payment card and billing details, which are collected and processed by our third-party payment processor (Braintree, a PayPal service) using tokenization. NTS does not store full payment card numbers on its own systems.
Internet and device activity IP address; device and browser type; operating system; pages and products viewed; links and buttons clicked; dates and times of access; referring website; and similar interaction data collected through cookies, pixels, and analytics tools.
Approximate location General geographic location (such as city or region) derived from your IP address. We do not collect precise geolocation.
Inferences Preferences, interests, and characteristics derived from the data above to support analytics, product recommendations, and marketing.
Business contact data If you create a business account: business name, business website, and business email address.

We do not request or intentionally collect “sensitive” personal data (such as precise geolocation, government identifiers, racial or ethnic origin, religious beliefs, health information, or biometric data) for the purpose of inferring characteristics about you.

WHERE WE OBTAIN PERSONAL DATA

  • Directly from you, when you create an account, place an order, contact customer service, submit a review, or sign up for email or text communications.
  • Automatically, through cookies, pixels, tags, and analytics tools when you use the Sites (see “Cookies and Tracking Technologies” below).
  • From third-party marketplaces (such as Amazon and eBay), which provide limited order information so we can fulfill purchases and provide customer service.
  • From service providers that help us operate the Sites, process payments, deliver communications, and analyze usage.

HOW WE USE PERSONAL DATA

We collect and use personal data only for the purposes described below or as otherwise disclosed to you at the point of collection. We limit our collection of personal data to what is adequate, relevant, and reasonably necessary for these purposes:

  • To process and fulfill your orders, including processing payments through our payment processor.
  • To create and manage your account and authenticate your access.
  • To provide customer service and respond to your inquiries, returns, and cancellations.
  • To send transactional messages, such as order confirmations, shipping updates, order-status notifications, and product-review invitations.
  • To send marketing and promotional communications (including promotions, coupons, product updates, and cart or browse reminders) where you have opted in, and to allow you to opt out at any time. We may offer you a discount in exchange for providing your email address or phone number. See the Notice of Financial Incentive section below for details.
  • To operate, maintain, secure, troubleshoot, and improve the Sites, including through analytics and product-usage measurement.
  • To deliver, measure, and optimize advertising, including targeted and remarketing advertising (see “Targeted Advertising” below), subject to your right to opt out.
  • To detect, investigate, and prevent fraud, security incidents, and unlawful or prohibited activity.
  • To comply with legal obligations and enforce our Terms of Service and other policies.

We will not process your personal data for a materially different, unrelated purpose without first providing notice and, where required by law, obtaining your consent.

HOW WE SHARE PERSONAL DATA

We share personal data with the categories of recipients below. We do not sell your personal data for money. We disclose personal data only as described here:

Category of Recipient Purpose of Disclosure
Payment processor Braintree (a PayPal service) processes payment card transactions and related billing data.
Email, SMS, and CRM platforms Emarsys, MailGun, Attentive deliver transactional and (where you have opted in) marketing communications and manage customer engagement.
Analytics providers Google Analytics, Google Tag Manager, and Woopra measure and analyze Site traffic, performance, and user behavior.
Behavior and session-analytics providers Microsoft Clarity generates heatmaps and may record on-site sessions (mouse movement, clicks, scrolling, and page interactions) to help us understand and improve the user experience.
Advertising partners Google and Microsoft (Bing) measure ad conversions and deliver targeted and remarketing advertising. See “Targeted Advertising” below.
Hosting, infrastructure, and security Cloudflare provides content delivery, performance, and security services and may process IP addresses and request metadata.
Review platforms Third-party customer-review services [currently Trustpilot and Google Customer Reviews; confirm successor vendor after the Trustpilot contract concludes] collect and display product reviews.
Corporate affiliates and successors Our parents, subsidiaries, and affiliates; and, in connection with a merger, acquisition, financing, or sale of assets, the relevant counterparty (consistent with this Policy).
Legal, safety, and government Courts, regulators, and law-enforcement or government authorities where disclosure is required by law, subpoena, or court order, or is necessary to protect rights, safety, or property, or to prevent fraud or unlawful activity.

The service providers and processors listed above are contractually limited to processing personal data only as necessary to perform services for us and may not use it for their own purposes. We engage each processor under a written agreement containing the data-protection terms required by applicable law.

TARGETED ADVERTISING

We do not sell your personal data in exchange for monetary consideration.

We do use cookies, pixels, and similar technologies provided by Google and Microsoft to measure advertising performance and to deliver targeted and remarketing advertisements to you on other websites based on your activity on our Services. Under some state privacy laws, this activity may be considered “targeted advertising,” a “sale,” or “sharing” of personal data. Regardless of how it is characterized, you have the right to opt out, as described in “Your Privacy Choices” below and through the “Do Not Sell or Share My Personal Information” link on our Sites.

We do not use personal data for profiling in furtherance of decisions that produce legal or similarly significant effects about you.

COOKIES AND TRACKING TECHNOLOGIES

We and our service providers use cookies, pixels, tags, web beacons, and similar technologies to operate the Services, remember your preferences, analyze usage, and support advertising. These technologies fall into the following categories:

  • Strictly necessary: required for the Services to function, including account login, shopping cart, checkout, and security. These cannot be disabled through our preference tools.
  • Functional: remember your settings and preferences to improve your experience.
  • Analytics and performance: help us understand how visitors use the Services so we can improve them (for example, Google Analytics, Woopra, and Microsoft Clarity).
  • Advertising: used by us and our advertising partners (Google and Microsoft) to measure and deliver targeted and remarketing advertising.

Managing cookies and opt-out signals:

You can control cookies through your browser settings, though disabling some cookies may affect Site functionality. You may also opt out of certain interest-based advertising through the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org), and you may opt out of Google Analytics using Google’s opt-out browser add-on. We honor opt-out preference signals, including the Global Privacy Control (GPC), as a valid request to opt out of the sale or sharing of personal data sent from the browser or device on which it is enabled.

SMS MESSAGING

DiscountFilters.com offers an optional SMS program (short code 77986) through which subscribers who opt in may receive recurring autodialed marketing messages, including promotions, coupons, and cart or browse reminders, as well as order and shipping notifications. Consent to receive marketing text messages is not a condition of any purchase.

Consent for SMS Communications: If you grant consent to receive SMS communications from us, directly or through our third-party partners, the information obtained as part of the SMS consent process will not be shared with any other third parties for marketing purposes.

Message Frequency: Our SMS message frequency will vary, but will not exceed more than 1 message in 24 hours.

Potential Fees for SMS Messaging: Many carriers charge a fee for each message sent or received. This can vary depending on the carrier’s pricing structure and whether the message is sent domestically or internationally.

Opt-In Method: You may opt in for SMS messaging from us through intake forms located on our website. This agreement for SMS will not be shared with third parties for marketing purposes, except any third-party partner that processed the opt-in.

Opt-out: You may opt out of SMS messaging from us by replying STOP at any time to any received SMS message. Once opted-out, you will receive no further SMS communication. You may, however, opt back in at any time by replying START to any SMS message.

Standard Messaging Disclosures: Message and data rates may apply. Message Frequency May Vary. You can opt-out at any time by texting ‘STOP.’ For assistance, text ‘HELP.’

YOUR PRIVACY CHOICES

To opt out of the sharing of your personal data, you may use any of the following:

You may also broadcast an opt-out preference signal, such as the Global Privacy Control (GPC), and we will treat it as a valid opt-out of sharing for the applicable browser or device. When we receive your opt-out request, including through a GPC signal, we will display confirmation that your request has been processed. Closing a banner or otherwise not acting is not treated as consent. We do not support “Do Not Track” (DNT), which is different from GPC.

NOTICE TO CALIFORNIA RESIDENTS (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides you the rights described below, subject to certain exceptions.

Your Rights under the CCPA:

  • Right to know and access the categories and specific pieces of personal data we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it;
  • Right to delete personal data we collected from you, subject to exceptions;
  • Right to correct inaccurate personal data;
  • Right to opt out of the sale or sharing of your personal data;
  • Right to limit the use and disclosure of your sensitive information; and
  • Right to non-discrimination for exercising your rights.

Non-Discrimination:

We will not discriminate against you for exercising your CCPA rights.

Minors:

We do not sell or share the personal data of consumers we know are under sixteen (16). Where we have actual knowledge that a consumer is under 16, we treat that as sensitive information.

Shine the Light:

If you are a California resident with an established business relationship with us, you may request a notice disclosing the categories of personal data we shared with third parties for their direct-marketing purposes during the preceding year. To request this notice, contact us using the information in “How to Contact Us.” We will respond within 30 days at no cost to you.

NOTICE TO RESIDENTS OF OTHER U.S. STATES

The States of Arkansas, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia (collectively, the “Regulated States”) have adopted comprehensive consumer data-protection acts that generally define a “consumer” as a resident of the state acting only in an individual or household context (and not in a commercial or employment context). If you are a consumer in one of the Regulated States, you may have some or all of the following rights, subject to exceptions:

  • Right to confirm whether we are processing your personal data and to access it;
  • Right to correct inaccuracies in your personal data;
  • Right to delete your personal data;
  • Right to obtain a copy of the personal data you previously provided, in a portable format; and
  • Right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

HOW TO EXERCISE YOUR RIGHTS

To exercise any of the rights above, please submit a verifiable request using the methods in “Your Privacy Choices” or “How to Contact Us.” Your request must provide enough information for us to reasonably verify you are the person about whom we collected personal data (or an authorized representative), and describe your request with enough detail for us to understand and respond to it.

Verification:

To protect your privacy and maintain security, we will take steps to verify your identity before granting access to, deleting, or correcting, your personal data, and we may require you to provide certain information for that purpose. If you ask us to confirm specific pieces of sensitive information we hold (such as a financial-account or identification number), we may ask you to verify your identity and provide that information so we can confirm it, rather than disclosing it to you directly. You may use an authorized agent where permitted by law; we may deny a request if the agent does not submit proof of valid authorization. You may also make a verifiable request on behalf of your minor child.

Our response time:

We will respond to a verifiable request without undue delay and within forty-five (45) days of receipt. The response period may be extended once by an additional 45 days when reasonably necessary; we will inform you of any such extension within the initial 45-day period, together with the reason.

Appeals:

If we decline to take action on your request, you may appeal our decision by contacting us at [email protected] with the subject line “Privacy Request Appeal.” We will respond to your appeal within 45 days (or 60 days where reasonably necessary, with notice to you) and will explain the reasons for our decision. If your appeal is denied, Indiana residents may contact the Indiana Attorney General’s Office (Consumer Protection Division, 302 W. Washington St., 5th Floor, Indianapolis, IN 46204; 1-800-382-5516; in.gov/attorneygeneral); for residents of other states, you may contact the consumer-protection authority in your state.

DATA RETENTION

We retain personal data for as long as reasonably necessary to provide the Services and for the purposes described in this policy, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. To determine the appropriate retention period for each category of personal data, we consider:

  • The length of our ongoing relationship with you and provision of the Services;
  • Whether we have a legal, tax, accounting, or regulatory obligation to retain the personal data;
  • Whether retention is advisable in light of our legal position (such as limitation periods, litigation, or investigations); and
  • The sensitivity of the information and the risks presented by its retention.

When personal data is no longer needed, we will delete or de-identify it in accordance with our routine record-keeping. We are under no obligation to store personal data indefinitely.

DATA STORAGE AND SECURITY

Your personal data is stored and processed on systems located in the United States. By using the Services, you understand that your personal data will be processed in the United States. We and our service providers may continue to store certain information after you stop using the Services or close your account, as permitted or required by law.

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, use, alteration, and disclosure, appropriate to the volume and nature of the data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

CHILDREN’S PRIVACY

The Sites are intended for adults and are not directed to children. We do not knowingly collect personal data from children under the age of 13 in violation of the Children’s Online Privacy Protection Act. Our SMS program and account features are not available to anyone under 18. If we learn that we have collected personal data from a child under 13 without verifiable parental consent, we will delete it. If you believe a child may have provided us with personal data, please contact us using the information below.

CHANGES TO THIS POLICY

We may update this Policy from time to time. When we make changes, we will revise the “Last Updated” date above. If we make material changes, we will provide additional notice as required by law, such as by posting a prominent notice on the Sites or notifying you directly. We encourage you to review this Policy periodically.

HOW TO CONTACT US

If you have questions or concerns about this Policy or our privacy practices, contact us:

  • By email: [email protected]
  • By phone: 1-866-764-9900
  • By mail: National Trade Supply, LLC, 2011 Southtech Drive, Suite 100, Greenwood, IN 46143