Privacy policy
Last updated November 11, 2026
Pantry Direct Supply ("Pantry Direct Supply", "we") runs this online shop for offices, churches, schools, nonprofits and households buying office, breakroom, cleaning and pantry supplies. This policy explains what we collect, why, and who helps us run the shop. We don't sell anyone's information.
What we collect
- When you browse: the pages you request and basic technical details (IP address, browser) in our hosting provider's logs. We don't use advertising or tracking cookies.
- When you open an account: your organization's legal name, address, tax and resale details, documents you upload (such as a resale certificate), and the names, emails and phone numbers of the people who will order.
- When you order or request a quote: what you order, delivery addresses, PO references, payment status, and your messages with our team.
- When you sign in: a session cookie that keeps you signed in. It's required for the shop to work.
How we use it
- To review account applications, set your pricing and credit terms, and show you your prices.
- To take, fulfil, ship and invoice orders, including ordering from manufacturers and suppliers on your behalf.
- To send order confirmations, quotes, shipping updates and invoices.
- To keep accurate accounting and tax records, and to protect the shop against fraud and misuse.
Who helps us run the shop
We share information only with the services that run the shop for us, and only what each needs:
- Vercel (hosting) and Neon (database), in the United States.
- Microsoft 365, to send email from our pantrydirectsupply.com addresses.
- Stripe, to take card and bank payments. Card details go to Stripe directly; we never see or store full card numbers.
- Intuit QuickBooks Online, our accounting system: invoices, customer names and billing details are recorded there.
- Anthropic (Claude), which our staff use for specific internal tasks such as reading supplier price sheets and product documents and suggesting quote prices. Anthropic does not use this data to train its models.
- Suppliers, our warehouse partner and carriers, who receive the delivery details needed to ship your order.
We may also disclose information when the law requires it, or to protect our rights in a dispute.
How long we keep it
We keep account, order and invoice records for as long as your account is open and for at least seven years after, as tax and accounting rules require. Server logs are kept for a short period by our hosting provider.
Your choices
- Account administrators can update company details and users from their account page, or ask us to.
- You can ask us for a copy of the personal information we hold about you, or to correct or delete it. We'll delete what we're not required to keep for accounting or legal reasons.
- You can stop marketing emails at any time; order and invoice emails are part of the service.
Security
The shop runs over HTTPS, staff access is limited by role, and payment details are handled by Stripe. No system is perfectly secure; if we learn of a breach affecting your information, we'll tell you promptly.
Changes
We'll update this page when our practices change and change the date above. For significant changes, we'll email account administrators.