Policies

Privacy Policy

What information we collect through gtdi.net, our customer portal and our forms, how we use and protect it, and how to exercise your privacy rights.

Effective: October 5, 2026

This Privacy Policy explains how GTDI, a Delaware corporation, registered to do business in California (“GTDI”, “we”, “us”), collects, uses, shares and protects personal information through gtdi.net, our customer portal (the “Portal”), our forms, and our dealings with customers and suppliers. We sell to organizations, so most of the information we hold is business contact information. This policy was last updated on October 5, 2026.

1. Information we collect

From you:

Account requests: name, role, work email, phone, organization name and type, delivery ZIP code, products of interest, expected monthly quantity and any notes.
Portal accounts: sign-in email and password, name, phone and role; your organization’s delivery locations and receiving instructions; the colleagues on your account; and your quote requests, quotes, acceptances, purchase order references, document downloads and messages.
Orders and credit: billing and accounts-payable contacts, resale or exemption certificates, and credit applications, including trade and bank references and, if a personal guarantee is offered, the guarantor’s name, home address and contact details.
Contact and supplier forms: name, email, phone, organization or company, role, topic and message.
Communications: emails, calls and messages with our team.

Automatically: when you visit, our servers record technical information such as IP address, browser type, pages requested, referring page, and date and time. The Portal also records sign-ins and account activity for security.

From others: trade and bank references and business credit reporting agencies, for credit applications; a consumer credit reporting agency, only for a guarantor who authorizes a report; public sources, such as government business and licensing registries, to verify organizations; and carriers, which confirm deliveries.

We do not need patient information to supply products, and we ask you not to send it. We do not collect payment card numbers through the website.

2. How we use information

To review account requests and verify the organizations and people we serve
To operate the Portal, including sign-in, security and organization-level access
To prepare quotes, confirm and deliver orders, invoice and collect payment, and handle returns, claims and recalls
To evaluate credit applications and manage credit accounts
To communicate about accounts, quotes, orders, product safety and supplier relationships
To send information about our products and services, which you can opt out of at any time
To protect our customers, systems and business from fraud and misuse
To keep records the law requires, including tax, accounting and product-complaint records, and to meet other legal obligations

A person reviews every account request and credit application; we do not use automated decision-making to approve them.

We share personal information only as needed for the purposes above, with:

carriers, which receive delivery names, addresses, contacts and receiving details;
suppliers and manufacturers, which receive delivery details to ship orders directly to you, and product, lot and contact details to handle complaints and recalls;
service providers working for us under contract, including our website hosting provider, email delivery provider, business email and document services, payment processors and banks;
references you name in a credit application, to check them;
professional advisers, such as accountants, auditors, lawyers and insurers;
authorities and others, when the law requires it or to protect the rights, property or safety of our customers, GTDI or the public; and
a successor, if our business is sold or reorganized, subject to this policy.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct marketing.

4. Cookies and tracking

We use only cookies that the site needs to work: sign-in and security cookies, which end when you sign out or your session expires (after up to 7 days if you choose “Keep me signed in on this device”); a short-lived cookie that protects password-setup links; and a one-time cookie that shows a confirmation after you submit a form. We use no advertising or analytics cookies, tracking pixels or social media plug-ins, and we do not allow other companies to collect information about your activity across websites through our site. Because we do not track visitors across sites, the site does not respond differently to Do Not Track signals. We treat a Global Privacy Control signal as a request to opt out of sale and sharing; because we do neither, no further action is needed.

5. How long we keep information

Account requests we decline or close: 12 months after the decision, then deleted or de-identified.
Portal users: while the account is open and for 24 months after access ends, then de-identified. Quotes and orders remain as business records.
Business, tax and credit records: as long as tax, accounting and commercial laws require.
Product-complaint records: at least two years from receipt, or the expected life of the device if longer.
Contact and supplier inquiries: as long as needed to respond and to maintain the relationship.
Server logs and email delivery records: for the limited periods our hosting and email delivery providers keep them for security and troubleshooting.

6. How we protect information

The site and Portal use encrypted connections. Access to customer information is limited to staff who need it, and staff accounts require a second sign-in step. Each organization sees only its own prices, quotes and documents. Passwords are stored in a form we cannot read, and we never ask for your password by email or phone. No system is completely secure; if a security incident affects your personal information, we will notify you as the law requires.

7. Your choices

Ask your representative to update your account details. You can opt out of promotional email by using the link in the email or by telling us; messages about your account, quotes, orders and product safety continue while you have an account.

8. California privacy rights

If you are a California resident, the California Consumer Privacy Act gives you the right to:

know and access the personal information we hold about you, including its categories, sources, purposes and recipients, and the specific pieces;
delete it, subject to exceptions such as records the law requires us to keep;
correct inaccurate information;
opt out of the sale or sharing of personal information, although we do neither; and
not be discriminated against for exercising these rights.

In the past 12 months we collected these categories: identifiers (such as name, email, phone, IP address and account name); customer records (such as address, signature, bank reference and credit information); commercial information (such as quotes, orders and purchase history); internet or network activity (server logs and Portal activity); professional or employment information (role and employer); and sensitive personal information (account sign-in credentials). We collected them from the sources and for the purposes in Sections 1 and 2, and disclosed each category for business purposes to the recipients in Section 3. We have not sold or shared personal information, including that of consumers under 16. We use sensitive personal information only to provide and secure accounts, as the law permits, so the right to limit its use does not apply.

To make a request, email sales@gtdi.net or call 424-832-6485, Monday–Friday, 8:00 a.m.–5:00 p.m. Pacific Time. We confirm receipt within 10 business days and respond within 45 days; if we need up to 45 more days, we tell you why. We verify requests by matching the information you give us with the information we hold and, for account holders, by contacting you through the email or phone on file. An authorized agent may make a request with your signed permission, and we may ask you to confirm your identity with us directly.

9. Children

Our site and services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16.

10. Changes

We will post any change here with a new effective date. If a change is material, we will also email Portal users before it takes effect.

11. Contact

GTDI · Los Angeles, California · 424-832-6485 · sales@gtdi.net