Privacy Policy

Effective date: April 30th, 2026 Last updated: August 12th, 2026

Central Hub Link LLC ("Central Hub Link," "we," "us") is a Massachusetts retailer based in Norwood. This policy explains what information we collect through centralhublink.com and our business communications, why we collect it, who we share it with, and what control you have over it.

We are a business-to-business site. Most of the information we collect is professional contact information from brands and distributors. We do not sell personal information.

1. Information you give us

Contact and inquiry information. When you use a form on this site, email us, or call, we collect what you provide: your name, business email address, phone number, company name, job title, and the content of your message.

Wholesale account and supplier information. If you apply for or discuss a wholesale relationship, we collect the business details you submit — line sheets, price lists, MAP and channel policies, product data, minimum order requirements, payment terms, and the contact details of the people managing the account.

Correspondence. We keep records of emails, form submissions, text messages, and notes from calls related to a potential or active business relationship.

We ask that you not send sensitive personal information — government ID numbers, financial account numbers, or health information — through this site or by email.

2. Information collected automatically

When you visit the site, our hosting and security providers automatically log standard technical data: IP address, browser type and version, device type, operating system, referring page, pages viewed, and timestamps. This is used for security, fraud prevention, and understanding general site usage. We do not attempt to identify individual visitors from it.

3. Information about retail customers

If you bought a product from us on a third-party marketplace, that platform collects your information under its own privacy policy. We receive only the limited order information the platform provides — typically name, shipping address, order contents, and a masked contact method — and we use it to fulfill the order, process returns, and answer service questions. We do not use marketplace customer data for our own marketing.

4. Cookies and similar technologies

This site uses cookies and similar technologies for essential functions (keeping the site working, remembering form state, security and bot protection) and, where enabled, for basic analytics about how pages are used.

You can block or delete cookies in your browser settings. Essential cookies are required for parts of the site to function; disabling them may break forms.

We do not run advertising or cross-site behavioral tracking cookies on this site. Because there is no consistent industry standard for "Do Not Track" signals, we do not currently respond to them.

5. How we use information

We use the information described above to:

- respond to inquiries and wholesale account requests

- evaluate, open, and manage supplier relationships

- send business communications about accounts, orders, and policy matters

- fulfill retail orders and handle customer service and returns

- keep purchasing, invoice, and sourcing records so we can substantiate our supply chain to brands and platforms

- meet tax, accounting, resale-certificate, and other legal obligations

- protect the site and our business from fraud, abuse, and security threats

- We do not use the information to build advertising profiles, and we do not sell it.

6. Text messaging and email

Text messages. If you provide a mobile number and consent, we may send text messages related to your inquiry or account. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for assistance.

No mobile information is sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never shared with anyone for marketing. Information may be shared only with the service providers that help us deliver the messages, and only for that purpose.

Email. We send business email in response to inquiries and about active accounts. Marketing or newsletter email, if we send it, includes an unsubscribe link. Unsubscribing from marketing email does not stop transactional or account-related messages.

Consent to receive messages is not a condition of any purchase or business relationship.

7. Who we share information with

We share information only in these situations:

Service providers. Companies that operate parts of our business under contract — our CRM and website platform, email and SMS delivery providers, hosting and security services, accounting and bookkeeping, and third-party fulfillment partners who ship orders on our behalf. They may use the information only to perform services for us.

Brands and distributors. With companies we buy from, where necessary to open or maintain an account — for example, providing our business documentation, or confirming sourcing when a brand asks us to substantiate it.

Marketplaces and platforms. Where required to operate as an authorized seller, resolve a listing or pricing issue, or verify sourcing.

Legal and safety. When required by law, subpoena, or regulator, or where necessary to establish or defend legal claims, enforce our terms, or protect the rights and safety of our business, our partners, or the public.

Business transfer. If Central Hub Link is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction. We will note it here if that happens.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

8. How long we keep it

We keep information as long as needed for the purpose it was collected, and as long as required for legal, tax, and accounting obligations.

In practice: inquiry records from relationships that don't proceed are retained for a limited period and then deleted; supplier account and purchasing records, including invoices and sourcing documentation, are retained for the length of the relationship and for the period required by tax and recordkeeping law afterward.

9. Security

We maintain a written information security program consistent with Massachusetts regulations on the protection of personal information (201 CMR 17.00). Safeguards include access controls limiting who can see what, encryption of data in transit, vetting of service providers who handle information on our behalf, and secure disposal of records we no longer need.

No system is perfectly secure. We can't guarantee absolute security, and information you send us by email travels over channels we don't control.

10. Your rights and choices

Depending on where you live, you may have the right to:

- request access to the personal information we hold about you

- request correction of inaccurate information

- request deletion, subject to records we're legally required to keep

- request a portable copy

- opt out of marketing communications

- opt out of the sale or sharing of personal information — though we don't sell or share it

- be free from discrimination for exercising these rights

California residents. Under the CCPA/CPRA, you have the rights listed above. We have not sold or shared personal information in the preceding twelve months, and we do not knowingly collect personal information from anyone under 16.

Other U.S. states. Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others, have comparable rights, including the right to appeal a denied request.

EU/UK. If you contact us from the European Economic Economic Area or the United Kingdom, you may have rights under the GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to complain to a supervisory authority. Our lawful bases are typically legitimate interests in operating a business relationship, performance of a contract, and legal obligation.

How to make a request. Email [email protected] with "Privacy request" in the subject line and tell us what you're asking for. We'll verify your identity — usually by confirming details we already have on file — and respond within the timeframe the applicable law requires, generally 45 days. Authorized agents may submit requests with written proof of authorization.

11. Children

This site is intended for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we'll delete it.

12. Changes to this policy

We may update this policy as our business or the law changes. The effective date at the top shows the current version. Material changes will be described on this page.

13. Contact us

Questions about this policy or your information or for brand and compliance concerns:

[email protected] | 617-915-5753 · Monday–Friday, 9am–5pm ET