Privacy Policy

1. Who We Are

Express Tools is an authorized dealer of professional contractor equipment including brands such as Topcon, Trimble, Leica, Spectra Precision, and Sokkia. We operate expresstools.com and are owned and operated by Hughes Construction Products Group Inc., located at 420 Industrial Blvd, Nash TX 75569.

For privacy-related questions or requests, contact us at: privacy@expresstools.com or call 1-800-397-8665.

For general legal matters: legal@expresstools.com

2. Data We Collect

We collect the following categories of personal information:

Information You Provide

• Identity: Full name, company or employer name
• Contact: Email address, phone number, shipping and billing address
• Payment: Payment card information processed securely via Stripe (we do not store raw card numbers)
• Order history: Products purchased, order dates, shipping details, service and warranty requests
• Communications: Messages sent to our support team, quote requests, contact form submissions
• Account credentials: Username and encrypted password (if you create an account)

Information Collected Automatically

• IP address: Collected by our servers and analytics tools on every page load
• Browser & device data: Browser type and version, operating system, device type, screen resolution, and device identifiers
• Browsing behavior: Pages visited, time on site, navigation path, referral source, and search queries — collected via Google Analytics 4 (GA4)
• B2B identification: Your company name, job title, and employer may be inferred from your IP address and email domain by RB2B, a business visitor identification service. This is used for B2B sales outreach purposes
• Cookie data: Session identifiers, shopping cart contents, and analytics identifiers (see Section 6)

Information from Third Parties

• Email engagement data from Klaviyo (opens, clicks, unsubscribes)
• Shipping status updates from ShipStation or carrier APIs

3. How We Use Your Data

We use your personal information for the following purposes:

• Order fulfillment: Processing and shipping orders, tracking deliveries, and handling returns
• Transactional communications: Sending order confirmations, shipping notifications, and receipts via Resend
• Customer support: Responding to inquiries and resolving order issues
• Marketing communications: Sending deal alerts, product announcements, and contractor-specific offers via Klaviyo (with your consent where required; opt-out available at any time)
• Analytics and site improvement: Understanding how visitors use our site to improve product selection and user experience
• B2B sales outreach: Identifying business visitors to our site and following up with relevant product information and offers
• Fraud prevention: Detecting and preventing unauthorized transactions and abuse
• Legal compliance: Meeting tax reporting obligations, responding to lawful requests from authorities
• AI-powered features: Providing product recommendations and compatibility suggestions using AI (see Section 7)

4. Third Parties We Share Data With

We do not sell your personal information. We share data with the following service providers who process it on our behalf under data processing agreements or confidentiality terms:

We may also disclose your information if required by law, court order, or to protect the rights and safety of Express Tools, our customers, or the public.

5. Do Not Sell or Share My Personal Information

We share personal data with the following categories of parties for business purposes:

• BigCommerce — e-commerce platform (checkout, order management, account storage)
• Resend — transactional email delivery (order confirmations, shipping notifications)
• Klaviyo — marketing email platform (opt out or use the unsubscribe link in any marketing email)
• Google Analytics (GA4) — site analytics and performance measurement
• RB2B — B2B visitor identification (opt out)

To opt out of the sharing of your personal information (including for analytics and B2B identification purposes):

6. Cookies

We use the following types of cookies on expresstools.com:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect site functionality.

7. Artificial Intelligence

8. Your Rights — GDPR (EU/EEA Residents)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to legal retention obligations
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including for direct marketing
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@expresstools.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Your Rights — California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific rights regarding your personal information:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collection, and the categories of third parties with whom we share it
• Right to Delete: Request deletion of personal information we have collected from you (subject to certain legal exceptions, such as order records required for tax compliance)
• Right to Correct: Request correction of inaccurate personal information we maintain about you
• Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information with third parties (see Section 5 above)
• Right to Limit Use of Sensitive Information: Request that we limit the use of sensitive personal information to specific purposes permitted by law
• Right to Non-Discrimination: We will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised your privacy rights

How to submit a request: Email privacy@expresstools.com or call 1-800-397-8665. Include your name, email address, and the specific right you wish to exercise. You may designate an authorized agent to submit a request on your behalf.

10. Your Rights — Virginia Residents (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) provides you with the following rights:

• Right to Access: Confirm whether we process your personal data and request a copy of that data
• Right to Correct: Request correction of inaccuracies in your personal data
• Right to Delete: Request deletion of personal data you have provided to us or that we have collected about you
• Right to Data Portability: Obtain a portable copy of your personal data in a commonly used, machine-readable format
• Right to Opt-Out: Opt out of the processing of your personal data for (a) targeted advertising, (b) the sale of personal data, or (c) profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to Appeal: If we decline to act on your request, you may appeal by submitting a written appeal to privacy@expresstools.com. We will respond to your appeal within 60 days.

Response time: We will respond within 45 days of receiving a verifiable request. This may be extended by an additional 45 days with prior written notice.

To submit a VCDPA request: privacy@expresstools.com or call 1-800-397-8665.

11. Other State Privacy Rights

Residents of Colorado, Connecticut, and Texas have similar privacy rights under their respective state laws. We honor these rights for all qualifying residents.

12. Data Retention

We may retain anonymized or aggregated data indefinitely, as it no longer constitutes personal information under applicable law.

13. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted data storage via Supabase, and access controls limiting who can view personal information. Payment data is handled exclusively by Stripe and is never stored on our servers. While we take reasonable precautions, no system is completely secure, and we cannot guarantee absolute security of your information. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you via email or a prominent notice on our website. Your continued use of Express Tools after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

You may also manage your data and privacy preferences directly from your Account Settings.