Privacy Notice

Requisition Desk is a business-to-business procurement service. This notice applies when you visit our website, use the Desk or API, submit or discuss a requisition, receive a quote, coordinate fulfillment, or otherwise communicate with us for business purposes.

In this notice, “your organization” means the business or other organization for which you act. A separately agreed customer contract may allocate privacy responsibilities for a particular service. It does not displace rights that applicable law makes mandatory.

The information depends on how you work with us and may include:

• Identity and contact information, such as names, work email addresses, phone numbers, job titles, organization names, and account identifiers.
• Account and authorization information, including sign-in records, organization membership, authorized users and agents, and API credential-related records.
• Requisition information, including product links, part numbers, quantities, specifications, deadlines, budget or approval context, and any raw or free-text material submitted through the website, Desk, API, or email.
• Transaction and delivery information, including delivery contacts and addresses, purchase-order references, billing details, tax or onboarding records, and fulfillment status.
• Business communications and records, including quote, message, and document history, attachments, support requests, and corrections or instructions.
• Technical, security, and measurement data, such as IP-derived and request data, timestamps, routes and URLs, browser, device and network characteristics, authentication and security events, performance measurements, and coarse location derived from network information.

Please do not submit passwords, private keys, payment-card details, health information, or other sensitive personal information unless we specifically request it through an appropriate channel for a legitimate business need.

We receive information directly from you, from your organization, or from an employee, contractor, procurement system, or other authorized agent acting for it. We also create business records as we source, quote, communicate, support, bill, and fulfill requests.

Technical information comes from the browser, device, network, and systems used to reach our services. Product, delivery, and transaction information may also come from suppliers, distributors, carriers, manufacturers, service organizations, and other parties involved in a requested transaction.

We use information for ordinary business purposes, including to:

• receive, understand, source, and respond to requisitions;
• prepare and discuss quotes and coordinate procurement and fulfillment;
• operate accounts, organization access, authentication, and the API;
• manage delivery, billing, onboarding, support, and customer communications;
• maintain accurate business, transaction, tax, and compliance records;
• measure, troubleshoot, secure, and improve our website and services; and
• prevent misuse, enforce applicable terms, resolve disputes, and meet legal obligations.

Using a Requisition Desk service does not give us unlimited permission to use personal information. We process it in relation to the purposes described here, applicable agreements, and applicable law.

We disclose information when reasonably needed for the purposes above. Recipient categories may include your organization and its authorized users or agents; suppliers, manufacturers, distributors, carriers, installation or service organizations, and other business counterparties involved in a request; and financial, accounting, tax, insurance, legal, audit, and other professional advisers.

We also use service providers for website and application hosting, database and file storage, authentication and security, business email and communications delivery, quote and transaction management, performance monitoring, analytics, and operational support.

Information may also be disclosed in connection with a financing, reorganization, sale, merger, or similar business event; to comply with law or lawful process; or when reasonably necessary to protect people, rights, systems, or property. We do not treat a third party’s independent privacy practices as our own; those parties may have separate responsibilities for information they receive.

Desk access is organized around business organizations. Information visible in an organization workspace may be available to its authorized users and delegated agents. Your organization controls whom it authorizes and should promptly update access when roles change.

Some access flows use links sent by email. Those links can be sensitive because anyone able to use a valid link may be able to access the related record or continue the related flow. Keep them private and contact us if one may have been exposed.

We keep information for as long as reasonably needed for the record’s purpose, including active service, sourcing and transaction work, support, security, dispute management, and legal, tax, accounting, and compliance obligations. The appropriate period varies by the type of record, the relationship, and applicable requirements.

Cancelling a request, ending account access, or stopping use of a service does not itself delete the associated records. A correction may update a current record while earlier messages, quotes, documents, or audit history remain preserved where reasonably needed. Backup, security, and legal-hold copies may also remain for their applicable lifecycle.

You may ask to access, correct, or delete personal information about you, or object to or request a restriction on certain processing, by emailing support@reqdesk.com. The rights available depend on where you are and the circumstances. We may need to verify your identity and authority, and we may retain or decline to change information where a lawful exception applies—for example, to complete a transaction, preserve required records, protect security, or establish or defend legal claims.

If information is managed for your organization, we may direct the request to, or consult, that organization. Authorized agents may submit requests where permitted, subject to verification. You may also complain to the privacy or data-protection regulator available in your jurisdiction. We will not unlawfully discriminate against you for making an applicable privacy request.

Requisition Desk is based in the United States. We and the organizations that support or transact with us may process information in the United States and other countries. Laws in those places may differ from those where you live, and processing locations depend on the service or business activity.

We use administrative, technical, and organizational measures intended to protect information in light of its nature and use. No transmission, storage, authentication, or security measure can guarantee absolute security. You should use secure devices and channels, protect credentials and emailed access links, and notify us promptly about suspected unauthorized access.

Our services are designed for organizations and business users. They are not intended for children, and we do not knowingly solicit children’s personal information through them.

We may update this notice as our services, practices, or legal obligations change. The date at the top identifies the current version. Material changes will be presented through an appropriate service or communication when required.

Questions or privacy requests may be sent to support@reqdesk.com. The responsible business is Requisition Desk LLC, Texas, United States.