Privacy Policy

Last Updated: January 12, 2026

CoreCentric Solutions, Inc. (“CoreCentric Solutions,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information of our customers, website visitors, and users of our eCommerce services. This Privacy Policy explains how we collect, use, share, disclose, and protect your information when you visit or make purchases through our website, hosted on Magento and located at shop.corecentricsolutions.com (the “Site”).

This Privacy Policy is intended to comply with all applicable U.S. laws including, without limitation:

California Consumer Privacy Act (CCPA)
California Privacy Rights Act (CPRA)
California Online Privacy Protection Act (CalOPPA)
California “Shine the Light” Law
Payment Card Industry Data Security Standard (PCI DSS)

By using our Site, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect personal information in the following categories. Some of this information is collected directly from you, some automatically through cookies or analytics tools, and some from service providers we work with.

A. Information You Provide

Account Information (required)
- Name
- Email address
- Phone number
- Billing address
- Shipping address
Order Information
- Products purchased
- Order history
- Customer service interactions
Payment Information
We do not store credit card numbers. Payments are securely processed through Braintree and PayPal. These processors may collect card information, billing details, and related data as necessary to complete transactions.
Communications
- Emails, support inquiries, eDesk CRM interactions
- Contact form submissions (retained 6 months)
Newsletter & Marketing Signups
- Email address
- Marketing preferences
User-Generated Content
- Product reviews
- Comments
(We do not collect uploaded images or files.)

B. Information Collected Automatically

We automatically collect:

IP address
Browser and device identifiers
Operating system and connection information
Site usage statistics
On-site search queries
Shopping cart activity
Cookie identifiers

Tools used include Google Analytics, Google Ads, Bing Ads, Meta/Facebook Pixel, Instagram, Amazon Ads, TikTok Pixel, and LinkedIn Ads.

We use:

Session cookies
Persistent cookies
Third-party cookies (analytics, advertising, remarketing)

We do not display an EU/UK cookie consent banner, as we do not target European residents nor ship internationally.

2. How We Use Your Information

We use the collected information to:

Process and fulfill orders
Provide account access and authentication
Communicate order updates and support
Send marketing emails through Mailchimp and SendGrid (only if you opt in)
Improve website performance
Prevent fraud
Conduct analytics and advertising (Google, Bing, Meta, TikTok, Amazon, LinkedIn)
Maintain security and detect misuse
Comply with legal obligations

3. How We Share Your Information

We share personal information with certain third parties as needed to operate our business:

A. Service Providers

Payment processors: Braintree, PayPal
Email platforms: Mailchimp, SendGrid
Customer service system: eDesk
Shipping carriers: UPS, FedEx, USPS
Fulfillment centers and drop-ship partners
Advertising partners: Google, Bing, Meta, TikTok, Amazon, LinkedIn
Hosting provider: Amazon Web Services (AWS)

These parties may only use your information to provide contracted services and must protect it accordingly.

B. Legal Requirements

We may disclose information if required by law, subpoena, or legal process.

4. Selling and Sharing Personal Information (CCPA/CPRA)

CoreCentric Solutions does not sell your personal information for money.

However, California law defines “sell” and “share” very broadly to include:

Data that may be shared:

Cross-context behavioral advertising
Third-party tracking
Sharing identifiers with analytics or ad networks

Because we use remarketing tools (Google, Bing, Facebook/Meta, TikTok, Amazon, LinkedIn), we may be considered to “share” personal information for advertising purposes under CPRA.

Categories potentially “shared” under California law:

Identifiers (IP address, cookies, device IDs)
Internet or website activity
Geolocation (approximate)
Inferred preferences from browsing

You may opt out (see Section 9).

5. Data Retention

Order records: retained 7 years for legal and accounting purposes
Customer accounts: retained until the customer deletes the account
Support emails / contact forms: retained 6 months
Analytics data: retained according to Google Analytics default settings

6. How We Protect Your Information

Your data is stored on AWS, using:

Firewalls and intrusion detection
Encryption at rest and in transit
PCI DSS compliance for payment processing
Account-based access controls

We do not perform regular third-party penetration testing and do not maintain formal internal access control policies. No method of transmission or storage is 100% secure, but we implement commercially reasonable safeguards.

7. Children’s Privacy

We do not knowingly collect information from children under 16 and do not sell or share information about minors.

8. Do Not Track

We do not respond to Do Not Track (DNT) signals because there is no standardized method for doing so.

9. Your Privacy Rights (California Residents)

California residents have the following rights under CCPA/CPRA:

Right to know what personal information we collect and how we use it
Right to access and request copies
Right to correct inaccurate information
Right to delete personal information
Right to opt out of “selling” or “sharing”
Right to limit use of sensitive information (we do not collect sensitive PI)
Right to non-discrimination for exercising privacy rights

How to Submit a Request

You may submit privacy requests via:

Email: privacy@corecentricsolutions.com
Phone (toll-free): 866-737-2244
Mail: CoreCentric Solutions, Inc., 191 E North Ave, Carol Stream, IL 60188

We will verify your identity before completing your request.

Authorized Agents

California residents may designate an authorized agent to make requests on their behalf.

10. Shine the Light Law (California Civil Code §1798.83)

California residents may request information about the categories of personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year. Requests may be submitted to the contact information above.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the content or privacy practices of such websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top indicates the effective date of the most recent revision. Changes are effective when posted.

13. Contact Us

For questions, privacy requests, or concerns, contact us at: