Information Sharing & Disclosure Policy

1. Introduction & Scope

Cup Source (“we,” “our,” or “us”) is committed to transparency regarding how we handle, share, and disclose business and personal information. This Information Sharing & Disclosure Policy applies to all clients, vendors, partners, employees, and website visitors who interact with our wholesale drinkware and packaging services.

By engaging with Cup Source, you acknowledge that we may share certain information with trusted third parties to fulfill orders, ensure compliance, and improve our services. We do not sell personal or business data for marketing purposes.

2. Information We Collect

To provide wholesale supply services, we collect and process the following categories of information:

• Business Information: Company name, tax ID, billing address, procurement contacts, and order history.
• Personal Data: Names, email addresses, and phone numbers of authorized representatives for account management and shipping coordination.
• Technical & Usage Data: IP addresses, browser types, and site interaction logs for security and service optimization.
• Payment Information: Processed securely via PCI-compliant third-party gateways. We do not store full credit card numbers.

3. How We Share Information

We share information only when necessary to deliver services, maintain operations, or comply with legal obligations. Sharing occurs under the following circumstances:

• Service Providers: Logistics carriers, payment processors, cloud hosting providers, and IT support firms bound by strict data processing agreements.
• Manufacturing Partners: Verified suppliers and co-packing facilities require order specifications and shipping details to fulfill custom-printed and bulk requests.
• Business Transfers: In the event of a merger, acquisition, or asset sale, customer records may be transferred as part of the business continuation process.
• Aggregate & Anonymized Data: We may publish industry insights or operational metrics using non-identifiable, aggregated data.

4. Mandatory & Legal Disclosures

Additionally, we may disclose information to:

• Prevent fraud, unauthorized transactions, or potential violations of our terms of service
• Protect the rights, property, or safety of Cup Source, our clients, or the public
• Cooperate with law enforcement or regulatory investigations
• Enforce contractual agreements or pursue available legal remedies

5. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete personal data we hold about you
• Opt out of non-essential communications or third-party sharing where permitted
• Request a copy of your data in a portable format
• Withdraw consent for data processing at any time

To exercise these rights, please submit a verified request through our designated privacy contact (see Section 8). We will respond within 30 days in accordance with applicable data protection regulations.

6. Data Security & Retention

We implement industry-standard technical and organizational measures to safeguard shared information, including encryption in transit and at rest, access controls, regular security audits, and employee training.

Data retention periods are determined by business necessity, contractual requirements, and legal obligations. Information is securely deleted or anonymized when no longer required, unless retention is mandated by law.

7. Policy Updates

This policy may be updated periodically to reflect changes in our practices, technology, or legal requirements. The “Last Updated” date at the top of this page will indicate when revisions were made. Material changes will be communicated via email or prominent website notice at least 30 days before they take effect.

8. Contact Information

For questions, requests regarding data sharing, or to report concerns about this policy, please contact our Data Protection Office:

• Email: privacy@cupsource.com
• Mailing Address: Cup Source Inc., 1420 Commerce Drive, Suite 300, Portland, OR 97209
• Phone: +1 (503) 555-0198

We are committed to addressing inquiries promptly and in compliance with all applicable privacy and disclosure regulations.