Privacy Policy

Step Tools Unlimited Inc., doing business as JEM Tool Supply (“JEM”, “we”), sells industrial tooling to businesses. This policy explains how we handle personal information on jemtoolsupply.com, in our accounts and emails, and when you order or ask for help. Because we sell to businesses, most of what we hold is business contact information: your name, work email, phone and company.

What you give us

• Account details: name, work email, phone, company, job role, and your sign-in method (an email link or password, which we never see in readable form).
• Order details: ship-to and bill-to addresses, purchase order numbers, items, quantities, notes, and order approvals within your company.
• Payment details: card payments are processed and stored by our payment processor. We keep only the card type, last four digits and expiry to show you which card is on file.
• What you send us: quote and specials requests, drawings and prints, reviews and stories, photos, logos, saved lists, and messages to the counter.
• Your cart while you’re signed in: the parts and quantities in it, so it follows you from one device to another.
• Access and credit applications, including information you provide about your business and references.

What we collect automatically

• Basic technical data our servers and security tools need: IP address, browser and device type, pages requested, and error logs.
• A security check (Google reCAPTCHA Enterprise, through Firebase App Check) that helps confirm requests come from our site and not from bots.
• Live activity: while a page is open, it tells our servers about once a minute which page it’s on and how many items are in the cart, so our staff can see current activity. Visitors appear by approximate city, worked out from the IP address, which we don’t keep; signed-in customers appear by company. These records are deleted within a day.
• Counts of how the site is used, totaled per day: how often pages are viewed, the words people search for, and which parts are added to carts. We keep these counts ourselves to improve the site, and nothing ties them to you: no cookie, account or IP address is stored with them.
• A small amount of data stored in your browser to keep you signed in and remember your cart and display settings. See Cookies and Storage.

We don’t use advertising or cross-site tracking cookies, and we don’t buy personal information from data brokers. We don’t ask for sensitive personal information such as Social Security numbers, health data or precise location.

• To run your account, verify who you are, and link you to your company’s JEM customer record.
• To quote, take, approve, ship, invoice and support orders, and to handle returns and warranty claims.
• To show your prices, order history, invoices, saved lists and stock information.
• To let your JEM sales rep and our counter see what’s in your cart while you’re signed in, so they can answer questions, quote it or help you finish an order.
• To send messages about your account and orders (sign-in links, order and approval notices). We send marketing emails only to business contacts who can unsubscribe at any time.
• To answer questions, quote specials, and improve our catalog, site and service.
• To protect the site, our customers and JEM from fraud, abuse and security threats, and to meet legal, tax and accounting duties.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We share it only as needed to run the business:

• Service providers who work for us under contract, such as Oracle NetSuite (our business system for customers, orders and invoices), Google Cloud and Firebase (hosting, sign-in, storage and security), Resend (email delivery), our payment processor, and UPS and other carriers (shipping).
• Manufacturers and suppliers, when needed to quote, make, ship or support your order (for example, a drawing for a special tool, or a ship-to address for a drop shipment).
• People at your own company, according to the roles your company’s admins set.
• Authorities or others when the law requires it, or to protect rights, safety and property.
• A buyer or successor if JEM’s business is sold or reorganized, under the same protections.

We keep account information while your account is open, and order, invoice and tax records for as long as accounting and tax laws require (generally seven years). Uploaded drawings are kept with the request or order they belong to. When we no longer need information, we delete or anonymize it; backups are overwritten on their normal schedule.

We use encrypted connections (HTTPS), sign-in without stored passwords for most users, role-based access within your company, server-side checks on every account request, and security checks against automated abuse. Credentials for our business systems are kept in a secrets manager, never in the site’s code. No system is perfectly secure, so please keep sign-in emails private and tell us right away at 408-834-8656 if you suspect misuse.

• Review and update your name, phone, photo and settings in your account at any time.
• Unsubscribe from marketing email using the link in any message. Account and order emails continue while you have an account.
• Ask us to access, correct or delete your personal information, or to close your account, by emailing sales@jemtoolsupply.com or calling 408-834-8656. We’ll verify your request using your account email, and may keep records we’re required to keep (such as invoices).

California and other state rights

Depending on where you live and on whether a state privacy law applies to JEM, you may have the right to know what personal information we collect, use and disclose; to access, correct or delete it; to opt out of its sale or sharing (we don’t sell or share it); and not to be treated differently for using these rights. You may use an authorized agent. We treat a Global Privacy Control (GPC) signal from your browser as an opt-out of sale and sharing, though we don’t sell or share in the first place. We don’t respond differently to “Do Not Track” signals, since we don’t track you across sites.

This site is for businesses and isn’t directed to anyone under 18. We don’t knowingly collect information from children. If you believe a child has given us information, contact us and we’ll delete it.

We’ll update this policy when our practices change and change the effective date above. If a change is significant, we’ll tell signed-in users before it takes effect.

Privacy questions or requests: sales@jemtoolsupply.com, 408-834-8656, or Step Tools Unlimited Inc., Attn: Privacy, 18434 Technology Dr, Morgan Hill, CA 95037.