Effective September 21, 2026 · Depot Industrial Inc, 360 N Pacific Coast Hwy, El Segundo, CA 90245
This policy explains what personal information Depot Industrial Inc (“Depot Industrial”, “we”) collects, why we collect it, who we share it with and what choices you have. It covers depotindustrial.com, our cloud inventory management platform and our mobile applications. Our platform is sold to businesses: most of the personal information in it is entered by our customers about their own staff and operations, and in that case we act as a service provider processing data on their instructions.
Information you give us. When you contact us, request a quote or start a trial, we collect your name, company, work email, phone number, role and whatever you write in your message. If you become a customer we also hold billing contacts, purchase orders and invoicing details.
Account and usage information. For authorized users of the platform we hold a user name, work email, assigned site and role, authentication data, and logs of actions taken in the system — scans, stock movements, order changes and exports — which exist so inventory records are auditable.
Device and technical information. Our servers and mobile apps record IP address, device and operating system type, app version, time stamps, pages or screens used and error diagnostics. Mobile apps may access the camera to scan barcodes; that image data is used for decoding and is not stored as a photograph.
Customer Data. Inventory, order, shipment and supplier records our customers load into the platform. These may include names and contact details of their employees, carriers and consignees. We handle this data only as described in section 6.
We do not knowingly collect information from children, and the platform is not intended for consumer use.
We use personal information to provide and operate the platform and the mobile apps; to authenticate users and secure accounts; to answer enquiries, prepare quotes and run implementations; to provide support and training; to invoice and collect payment; to monitor reliability, investigate incidents and prevent abuse; to improve features and diagnose defects; and to send service notices such as maintenance windows, security advisories and changes to these documents. Where we send marketing email about our own products to business contacts, every message carries a one-click unsubscribe link and honoring it does not affect service notices.
Our legal bases, where such a concept applies to you, are performance of a contract (providing the platform), our legitimate interests (security, product improvement, business-to-business communication), compliance with legal obligations (tax and accounting records), and consent where we ask for it.
Our website and the platform use cookies and similar local storage that are necessary to keep you signed in, remember preferences and protect against fraudulent requests. We also use a small number of analytics cookies to understand which pages are used, in aggregate. We do not run advertising networks on our site, do not permit third-party behavioral advertising, and do not use cookies to build profiles of individuals. You can block or delete cookies in your browser; strictly necessary cookies are required for the platform to function.
We share personal information with: cloud hosting and storage providers that run our infrastructure in the United States; email, support-desk and customer-relationship tools we use to communicate with you; payment processors and accountants for billing; and professional advisers under duties of confidence. Each is engaged under a written contract that limits use to providing services to us and requires appropriate security. Where you enable an integration, we exchange the data that integration requires with the third-party system you connected.
We may disclose information where required by law, subpoena or court order, or to protect rights, safety and the integrity of the platform, and we will give affected customers notice where we are legally permitted to do so. If our business is merged or acquired, information may transfer with it, subject to this policy. We do not sell personal information and we do not share it for cross-context behavioral advertising.
We protect information with encryption in transit and at rest, role-based access controls, least-privilege administrative access, logging of privileged actions, regular patching and backups, and background-checked personnel bound by confidentiality. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify affected customers and, where required, regulators and individuals, without undue delay.
We keep enquiry and prospect records for up to twenty-four (24) months after our last exchange. Account records and Customer Data are kept for the subscription term and for thirty (30) days after termination to allow export, then deleted or irreversibly anonymized in the ordinary course. Security and audit logs are retained up to twelve (12) months. Invoicing and tax records are retained for seven (7) years as U.S. law requires. Backups age out on their own schedule, within ninety (90) days.
For Customer Data, our customer is the controller and we are the processor or service provider. We process that data only to provide the platform under our agreement with them, never for our own purposes, never to build unrelated products, and we do not sell it. Requests from individuals about data held in a customer's account are forwarded to that customer, who decides how to respond; we assist them in doing so. On termination, data is returned or deleted per section 5 and our contract.
Depending on where you live, you may have the right to know what personal information we hold about you and how we use it; to receive a copy or have it ported; to correct inaccuracies; to request deletion; to limit our use of sensitive information; to opt out of sale or targeted advertising (which we do not do); and not to be discriminated against for exercising these rights. California residents hold these rights under the CCPA as amended by the CPRA; residents of the EEA and the United Kingdom hold equivalent rights under the GDPR, including the right to object to processing and to complain to a supervisory authority.
To exercise a right, email info@depotindustrial.com or write to the El Segundo address below. We will verify your request against information we already hold and respond within forty-five (45) days, extending once where permitted and telling you if we do. An authorized agent may act for you with written permission we can verify. There is no charge unless a request is excessive or repetitive.
We are based in California and our infrastructure is operated in the United States. If you use the platform from outside the United States, the information described here is transferred to and processed in the United States. For transfers from the EEA, the United Kingdom or Switzerland we rely on the European Commission's Standard Contractual Clauses together with the UK Addendum, and we apply supplementary technical measures such as encryption. A copy of the relevant clauses is available on request.
When we change this policy we update the effective date at the top of this page. For changes that materially affect how we use personal information we give notice by email to account contacts, or by a notice in the platform, at least thirty (30) days before they take effect. Earlier versions are available on request.
Privacy questions, requests and complaints: Depot Industrial Inc, 360 N Pacific Coast Hwy, El Segundo, CA 90245 · info@depotindustrial.com · (530) 883-1724, Monday to Friday, 9:00 to 5:00 pm Pacific. We answer privacy mail first.