Effective Date: November 19, 2024
McLane Company, Inc., along with its subsidiaries (referred to as “McLane”, “we”, “us”, or “our”), handles a significant amount of information, including data pertaining to individuals like yourself who visit our websites, such as www.mclaneco.com and other websites we manage (collectively known as the “Site”). This Privacy Notice is designed to clearly explain our practices regarding the collection and processing of your personal information when you interact with our Site. Furthermore, it provides you with the necessary contact details should you have any inquiries about your personal information in our possession.
Personal information, in this context, generally refers to any data that can identify you, either directly or indirectly. This includes details like your name, email address, contact information, or any other information that can be reasonably linked back to you. The term “processing” encompasses a broad range of activities related to personal information, such as collecting, storing, using, accessing, disclosing, sharing, and transmitting this data.
This Privacy Notice extends beyond website visitors to include representatives of our corporate clientele, inventory providers, vendors, and other business entities that partner with McLane, its subsidiaries, or operational divisions (collectively referred to as “Business Partners”). These divisions include, but are not limited to, McLane Foodservice, Vantix Logistics, Inc., and Consumer Value Products. For instance, businesses utilizing platforms like McLane eServe will also find this notice relevant as it outlines our broader privacy practices.
This Privacy Notice does not apply to:
- Individuals participating in loyalty and reward programs managed by McLane on behalf of our Business Partners. Privacy terms specific to these programs are usually accessible via the respective loyalty application.
- Users of the McLane Xpress online platform. For privacy information related to McLane Xpress, please refer to the privacy notice available directly on that platform.
2. What Personal Information We Collect and Its Origins
For our Business Partners, during the account setup and routine business operations, we gather personal details such as your name, professional email address, physical business address, telephone and fax numbers, tax identification number (which might include a Social Security Number), contact information for chief executives and other corporate personnel, copies of W-9 forms and business licenses (e.g., for tobacco sales), and banking details. Providing this information is crucial for establishing a business relationship; failure to do so may prevent you from conducting business with McLane. For all users, including those just visiting our website, we automatically collect your Internet Protocol (IP) address and general location data like city, state, and country. We may cross-reference this information with publicly accessible databases to ensure accuracy.
We typically obtain your personal information directly from you – for example, when you become a Business Partner, communicate with us via phone or email, or register for our industry events. Data is also collected through your interactions with our Site. Additionally, we may receive personal information from external sources, such as service providers who assist us in our operations. In some instances, we might also gather information from public sources, including government lists of sanctioned entities or publicly available maps.
The personal information we collect falls into several categories, detailed in the table below. These categories reflect the types of personal information we’ve collected over the past year, categorized as per California law for clarity. It’s important to note that the inclusion of a category signifies only that we may collect some data within that category; it doesn’t imply we collect all types of information listed under each category.
| Category | Source | Purpose of Processing |
|---|---|---|
| Personal Identifiers. This includes details like your real name, aliases, postal address, unique personal identifiers, online identifiers, IP address, email address, account names, social security number, driver’s license number, passport number, and other similar identifiers. | Collected directly from you or our service providers. | For Business Partners, this information is essential for account creation and management. We use it for account notifications, billing, and payment processing. For all users, it enables communication, event registration, and service delivery. We also utilize this data to inform you about McLane products and services that might interest you, and for data analysis and compliance. |
| Information About You. This broad category includes data that identifies, relates to, describes, or can be associated with you. Examples include name, signature, social security number, physical characteristics, address, phone number, passport number, driver’s license, insurance details, education, employment history, financial and medical information. | Collected directly from you or our service providers. | Similar to Personal Identifiers, this is vital for Business Partner account management, communications, and service delivery. Additionally, for Business Partners, this data helps verify business status, conduct credit checks, ensure legal compliance for financial transactions and regulated product sales (like tobacco). For all users, it’s used for data analytics and compliance. |
| Commercial Information. This pertains to records of personal property, products or services purchased, considered, or your purchasing history and preferences. | Collected directly from you. | For Business Partners, this helps us service your account, understand your preferences, analyze purchasing patterns, and send relevant notifications including billing, promotions, and information about new offerings. Also used for compliance management. |
| Usage Information. This includes internet activity data such as browsing history, search queries, and interactions with our websites, applications, or advertisements. | Automatically collected via cookies and web beacons when you visit our websites. | For all users, this information is used for marketing, to suggest relevant products and services. For Business Partners, it aids in account administration, data analytics, and system development. It is also crucial for security monitoring, fraud prevention, and ensuring compliance. |
| Geolocation Data. Information about your geographic location. | Collected directly from you. | Used for marketing purposes, including offering targeted products and services through direct and partner advertising. Note that we do not collect precise geolocation data as defined under California law. |
| Recordings. Audio, electronic, visual, thermal, olfactory, or similar information. | Collected directly from you. | For all users, recordings like customer service call logs are used to respond to inquiries and improve support quality. They also aid in security, fraud detection, and compliance. |
| Professional or Employment-Related Information. Details such as your employer and job title. | Collected directly from you or through service providers. | For Business Partners, this is needed for account setup, communication, and event registration. Also used for account notifications and compliance management. |
In addition to these categories, we also collect sensitive personal information from our Business Partners, as defined by California law:
| Category | Source | Purpose of Processing |
|---|---|---|
| Social Security Number. | Collected directly from you. | If your tax ID is your Social Security Number, we collect and share this with service providers and government bodies to comply with tax and regulatory requirements. |
3. Sharing Your Personal Information: Who and Why?
We may share personal information of our Business Partners and Site visitors with the following broad categories of third parties:
- Third-Party Service Providers: We disclose your information to service providers who assist in managing, maintaining, and enhancing our Site and services to Business Partners. This includes marketing firms that may inform you about events or new products (and may use other advertising entities), analytics providers (including location data services), travel agencies for event travel arrangements, contract compliance firms, data analytics companies, and consultants.
- Designated Third Parties: If you use our services to interact with other entities or instruct us to share your data, we will do so. Examples include payment processors, freight brokers, and shipping companies necessary for order fulfillment. For platforms like McLane eServe, this might involve sharing data with logistics partners to ensure smooth delivery of orders placed through the system.
- Auditors and Advisors: We may share information with our legal and financial advisors and auditors for compliance and operational oversight. We also disclose information when legally required, such as in response to subpoenas, court orders, or law enforcement requests, to protect our rights, safety, or property, or to respond to your requests.
- Business Transfers: In the event of a merger, acquisition, or sale of McLane or its assets, your personal information may be transferred as part of the business assets, consistent with this Privacy Notice.
- With Your Consent: We may also disclose your personal information in other situations with your explicit permission.
We affirm that we do not “sell” your personal information, nor do we “share” it for cross-context behavioral advertising as per applicable privacy laws, and we have not done so in the past 12 months. If you consent to non-essential cookies through our cookie preferences, we may share data for advertising purposes. We also do not share your personal information with third parties for their independent marketing or promotional use.
We ensure that all non-governmental third parties receiving your personal information are contractually bound to protect it in accordance with applicable privacy laws.
4. Understanding Cookies and Similar Technologies
When you visit our websites, you have the option to allow the use of cookies to improve website functionality, enhance user experience, ensure security, and offer products tailored to your interests.
Cookies are small data files transferred from a website and stored by your browser. They enable websites to remember specific information across pages, websites, and visits. We also use pixels, which are transparent images that help us record details like IP addresses and timestamps. For simplicity, we refer to all such technologies as “cookies” in this notice.
Some cookies are essential for our website’s operation (“Strictly Necessary” cookies) and are always active. For non-essential cookies, like analytical and marketing cookies, we request your consent. You can adjust your cookie preferences at any time via the “Cookie Settings” link in our website footer.
We utilize Google Analytics to analyze website usage. This tool uses persistent cookies to provide insights into visitor demographics (age, gender, interests) and device information, including IP address, device type, screen details, browser, geographic location, and language preferences. For McLane customers, Google Analytics might collect your user ID upon login to personalize your experience. We may use Google Analytics data for remarketing purposes. You can opt-out of Google Analytics for Display Advertising and customize ads through Google’s Ad Settings or use the Google Analytics opt-out browser add-on.
We also employ Hotjar to better understand user interaction on our site, analyzing metrics like time spent on pages, clicked links, and user preferences to improve our website. Hotjar uses cookies and similar technologies to collect data on visitor behavior, including IP address (de-identified after processing), device type, screen information (recording interactions and screen content), browser, location, and language. This data may also be used for remarketing. More details are available in the “About Hotjar” section of Hotjar’s support site.
You can disable cookies through your browser settings, which is browser and device-specific. Disabling cookies on one device won’t affect others. Disabling marketing cookies means you will not receive tailored advertisements.
Do Not Track & Global Privacy Control (GPC): Upon your first visit and periodically thereafter, a cookie consent interface will appear, allowing you to manage preferences regarding data sharing for targeted advertising. We also support Global Privacy Control (GPC) signals to prevent data disclosure for advertising. You can manage your cookie preferences via the “Cookie Settings” link in the footer or by contacting us as detailed in Section 7.
5. Data Storage and Retention
Your personal information is stored in physical files and on computer systems managed by or for McLane, and in hard copy format at our facilities or secure off-site storage. We retain your personal information as long as necessary for our legal and contractual obligations, and in accordance with our Records Retention Schedule.
Retention periods are determined based on data sensitivity, potential risks from unauthorized use, processing purposes, and legal and regulatory requirements.
In some cases, we may anonymize personal information for research or statistical purposes, allowing us to use this anonymized data indefinitely without further notice.
6. Data Security Measures
We implement reasonable security measures to protect your personal information from accidental loss, unauthorized access, use, or alteration. Access to personal information is limited to individuals with a legitimate business need, who are obligated to maintain confidentiality and process data in an authorized manner. McLane has internal policies governing the handling of personal information, restricted access to premises and networks, and procedures to manage suspected data breaches, including notifications to you and relevant regulators as legally required.
7. Your Privacy Rights and How to Exercise Them
Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information, subject to legal limitations and exemptions. The rights listed below may or may not all be applicable to you based on your jurisdiction. However, McLane may choose to honor these rights even where not legally mandated.
- Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, purposes of collection, categories of recipients, and if applicable, details about any sales or sharing of your data. You may also have the right to data portability. We will need to verify your identity before fulfilling such requests.
- Right to Opt-Out: You may have the right to opt-out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising, although we only engage in such sharing with your consent. You can manage your consent via our cookie preferences manager.
- Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information as legally defined, you may have the right to limit its use to specific purposes. However, we currently use sensitive information only for the purposes outlined in this notice.
- Right to Deletion: You can request the deletion of your personal information, subject to certain exceptions. Identity verification is required before deletion. We may not be able to delete data necessary for legal obligations, defense of claims, or as legally permitted or required (e.g., to continue providing services or maintain legally required records).
- Right to Correction: You can request the correction of inaccurate personal information, following identity verification. Corrections may be refused under similar conditions as deletion requests if data retention is legally mandated.
Data solely retained for backup purposes is generally excluded from these rights until restored to an active system or accessed for commercial purposes.
Exercising these rights will not result in discriminatory treatment.
Please be aware that legal limitations and security protocols may restrict the extent of information we can disclose.
Identity verification is required for all rights requests. This involves submitting personal details for matching against our records. If we cannot verify your identity, we may not be able to fulfill your request. We are not obligated to collect additional information for verification purposes. For deletion requests, a two-step verification process is required. You can appoint an authorized agent to make requests on your behalf, provided they have written permission or power of attorney. We may still require you to verify your identity directly with us.
Information collected for verification will be used solely for this purpose.
To exercise your rights, please call us at 1-866-416-1384, email [email protected], or submit a request through our website via the “Personal Information Request” link.
8. Privacy of Children and Minors
We do not knowingly collect personal information directly from individuals under 21 years of age, nor do we intentionally sell personal information of those under 21. Our services are not designed for individuals under 21, and we request that they not submit personal information through our services.
9. Updates to This Privacy Notice
We may modify this Privacy Notice at any time as per applicable law. Revised notices will be posted on our mclaneco.com website, with the latest revision date at the top of the notice.
10. Contact Information
For questions, concerns, complaints, or suggestions regarding this Privacy Notice, or to contact us for any reason, please call 1-866-416-1384 or email [email protected].
