Privacy Policy

1. Introduction and Scope

Global Dynamic Systems (“Company,” “we,” “us,” or “our”), operating the GDS Supply platform accessible at gdssupply.com (the “Platform”), is committed to handling personal information in accordance with applicable data protection legislation. This Privacy Policy (“Policy”) describes the categories of information we collect, the purposes for which such information is processed, the conditions under which it may be disclosed to third parties, and the rights available to individuals whose information we hold.

This Policy applies to all visitors, registered users, prospective customers, and other individuals (“Data Subjects” or “you”) who access or interact with the Platform, regardless of the means of access. By accessing or using the Platform in any manner, you acknowledge that you have read, understood, and agreed to the terms of this Policy. If you do not agree with any provision of this Policy, you must immediately cease use of the Platform.

This Policy does not apply to information collected offline or through channels other than the Platform, nor to third-party websites that may be linked to or from the Platform. The Company accepts no responsibility or liability for the privacy practices of any such third parties.

2. Categories of Information Collected

The Company collects, processes, and retains information falling within the following categories, including but not limited to:

2.1 Information Provided Directly

Information you voluntarily provide in connection with registration, order placement, quote requests, account management, or communications with Company personnel, including without limitation: full legal name, business entity name, email address, telephone number, physical address, billing address, purchase history, request-for-quotation submissions, payment instrument details (processed and tokenized by our payment processors), and any other information submitted through forms, correspondence, or interactive features of the Platform.

2.2 Information Collected Automatically

Technical and usage data collected automatically upon access to the Platform, including without limitation: Internet Protocol (IP) address, device identifiers, browser type and version, operating system, referring URLs, session duration, pages viewed, interactions with Platform features, approximate geographic location derived from network data, and other diagnostic and analytical data generated through your use of the Platform.

2.3 Information from Cookies and Similar Technologies

The Platform employs cookies, local storage objects, pixel tags, session identifiers, and analogous tracking technologies for purposes including session management, security enforcement, functional operation, and user experience optimization. The scope of such technologies and your available choices are further described in our Cookie Policy. Consent to the use of non-essential technologies is governed by applicable law and obtained through the consent mechanism presented upon your initial access to the Platform.

2.4 Information from Third-Party Sources

The Company may receive information about you from third-party service providers, business partners, payment processors, identity verification services, fraud prevention providers, and other sources engaged in connection with the operation of the Platform, to the extent permitted by applicable law.

3. Purposes and Legal Bases for Processing

The Company processes personal information for the following purposes, relying on the legal bases indicated:

• Execution and fulfillment of purchase orders, quotations, and related commercial transactions (performance of contract)
• Account creation, authentication, and access management (performance of contract; legitimate interests)
• Delivery of transactional communications including order confirmations, shipping notifications, and quote responses (performance of contract)
• Compliance with applicable tax, accounting, customs, export control, and other legal obligations (legal obligation)
• Prevention, detection, and investigation of fraudulent, unauthorized, or unlawful activity (legitimate interests; legal obligation)
• Security, integrity, and operational continuity of the Platform (legitimate interests)
• Analytics, Platform improvement, and service optimization (legitimate interests)
• Enforcement of the Company's Terms & Conditions and other contractual or legal rights (legitimate interests; legal obligation)

4. Disclosure to Third Parties

The Company does not sell personal information to third parties for monetary consideration. The Company may disclose personal information to the following categories of recipients, to the extent necessary and in accordance with applicable law:

• Service Providers and Data Processors: Third-party vendors engaged to provide infrastructure, hosting, payment processing, email delivery, shipping calculation, address verification, security, analytics, and other operational services on behalf of the Company, each bound by contractual data protection obligations.
• Authorized Carriers and Logistics Providers: Shipping carriers and freight forwarders to the extent necessary to fulfill delivery obligations.
• Legal and Regulatory Authorities: Courts, regulators, law enforcement agencies, or other governmental bodies where disclosure is required or permitted by law, including in connection with legal proceedings, regulatory investigations, or enforcement of legal rights.
• Business Transfers: In connection with any merger, acquisition, reorganization, sale of assets, or similar corporate transaction, personal information may be transferred as a business asset, subject to confidentiality obligations.
• With Your Consent: To any other third party with your prior explicit consent.

Current third-party processors utilized by the Company include, without limitation: Stripe, Inc. (payment processing); PayPal Holdings, Inc. (payment processing); Resend, Inc. (email delivery); Neon, Inc. (database services); Vercel, Inc. (hosting and infrastructure); Cloudflare, Inc. (security and bot detection); Google LLC (address services); and UPS and FedEx (shipping rate calculation). This list is subject to change without prior notice.

5. International Data Transfers

The Company is based in the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. Such jurisdictions may have data protection laws that differ from those of your country of residence. By using the Platform, you acknowledge and consent to such transfers. Where required by applicable law, the Company relies on appropriate transfer mechanisms, including Standard Contractual Clauses or other lawful bases, to facilitate cross-border data transfers.

6. Data Retention

The Company retains personal information for such periods as are necessary to fulfill the purposes described in this Policy, comply with applicable legal, regulatory, tax, and accounting obligations, resolve disputes, enforce agreements, and protect the legitimate interests of the Company. Specific retention periods vary depending on the nature of the information and the context in which it was collected. Upon expiration of the applicable retention period, information is securely deleted or anonymized in accordance with the Company's internal data governance procedures.

7. Security

The Company implements and maintains technical, administrative, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction, including transport layer security (TLS/HTTPS), access controls, and credential hashing. Notwithstanding the foregoing, no security measures are absolute or impenetrable, and the Company does not represent or warrant that personal information will be protected against all unauthorized access or disclosure. The Company shall not be liable for any unauthorized access to or disclosure of personal information that occurs despite reasonable security measures.

8. Your Rights

Subject to applicable law and certain statutory limitations, Data Subjects may have the right to:

• Request access to personal information held by the Company
• Request rectification of inaccurate or incomplete personal information
• Request erasure of personal information, subject to legal retention obligations
• Request restriction of or object to certain processing activities
• Request portability of personal information provided by you, where technically feasible
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
• California residents (CCPA/CPRA): The right to know, delete, correct, and opt out of the sale or sharing of personal information. The Company does not sell personal information as defined under the CCPA.

The Company will endeavor to respond to verified requests within the timeframes prescribed by applicable law. The Company reserves the right to decline requests that are manifestly unfounded, excessive, or repetitive, or that would adversely affect the rights and freedoms of others. Identity verification may be required prior to processing any request.

9. Minors

The Platform is intended solely for use by business entities and adult individuals in a commercial capacity. The Company does not knowingly collect personal information from individuals under the age of eighteen (18). If the Company becomes aware that personal information has been collected from a minor without verifiable parental or guardian consent, it will take reasonable steps to delete such information.

10. Limitation of Liability

To the fullest extent permitted by applicable law, the Company's liability arising from or related to this Policy, or the processing of personal information described herein, shall be limited to direct damages not exceeding the greater of (i) the total amounts paid by you to the Company in the twelve (12) months preceding the claim, or (ii) one hundred US dollars ($100). In no event shall the Company be liable for indirect, consequential, incidental, punitive, or special damages of any nature.

11. Amendments

The Company reserves the right to modify, update, or replace this Policy at any time and at its sole discretion, without prior notice, by posting the revised Policy on this page with an updated effective date. Material changes may be communicated through a notice on the Platform or via email to registered account holders. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised Policy. It is your responsibility to review this Policy periodically.

12. Governing Law

This Policy and any dispute arising out of or related to this Policy shall be governed by the laws of the State of Texas, United States of America, without regard to conflict of law principles. Any legal proceedings relating to this Policy shall be brought exclusively in the state or federal courts of competent jurisdiction located in the State of Texas.

13. Contact

Inquiries, requests, or complaints regarding this Policy or the Company's data practices should be directed to: