PRIVACY POLICY

Madix, Inc.

Effective Date:  July 13, 2026

Last Reviewed:  July 28, 2026

1.   About This Policy

Madix, Inc. (“Madix,” “we,” “us,” or “our”) takes your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what choices you have.

This policy applies to:

This policy does not apply to the websites, apps, or services of third parties, even if our site links to them. We encourage you to review the privacy policies of those third parties directly.

If you are a Madix employee or job applicant, a separate internal privacy notice applies to your personal information and is not covered by this policy.

Please also review our Terms of Service, which governs your use of our website and the MyMadix portal, including how disputes between you and Madix are resolved.

California Notice at Collection

This section summarizes, for California residents, what personal information Madix collects at this page and how we handle it, as required by California law. It is not a complete description of our privacy practices. For the full explanation of any item below, see the corresponding section of this Privacy Policy.

Categories of personal information collected here.  Depending on the page, we collect identifiers (such as your name, email address, and phone number), professional or employment information (such as company name, job title, and business address), and, if you register for the MyMadix portal, additional account and commercial information as described in “The MyMadix Customer Portal” below.

Purpose for collection.  We use this information to respond to your inquiry, provide customer service, and manage our business relationship with you, and, if you register for the MyMadix portal, to create and maintain your account, as described in “How We Use Your Information” below.

Sale or sharing.  We do not sell your personal information. Limited sharing for advertising purposes may occur through cookies, as described in “Cookies and Tracking Technologies” below. You may opt out as described in “Your Privacy Rights” below.

Retention.  We retain this information as described in “Data Retention” below.

Your rights.  California residents have the rights described in “Your Privacy Rights” below, including the right to know, delete, and correct personal information. To exercise these rights, contact us as described in that section.

2.   Information We Collect and How We Collect It

Information You Give Us Directly

When you fill out a contact form, request a quote, or otherwise communicate with us through our website, you may provide:

Information from Email and Phone Communications

We also collect personal information when you contact us directly by email or phone. This includes your name and contact details, the content of your communications, and records of any follow-up correspondence. Information from these communications is stored in our customer relationship management system alongside any information you submitted through the website.

Information Collected Automatically

When you visit our website, our hosting provider’s server logs automatically record certain technical information about your visit, regardless of your cookie preferences, including:

Depending on your cookie preferences, we may also collect additional information about your visit, such as the pages you view, how you navigate our site, and how you found our website, as described in “Cookies and Tracking Technologies” below.

Information from Third Parties

We may obtain business contact information from a third-party business data provider to help us understand and qualify potential customers. This typically includes company names, addresses, industry classifications, and related business information.

If your company applies for a credit account with us, we also obtain a business credit report from a business credit reporting service to evaluate creditworthiness, as described in “How We Use Your Information” below.

Our Contact and Sales Assistance form is hosted on our behalf by a third-party service provider. Submitting the form may take you to that provider’s platform, but the information you provide is submitted to us and is covered by this Policy, not by the third-party services exclusion described above. That provider’s own privacy practices may also apply to your use of its platform.

Information Collected Offline: Credit Applications

If your company applies for a credit account with Madix, you provide certain information on a paper credit application, which is not submitted through our website. This may include:

This information is collected offline and is not associated with any specific page of our website.

Categories of Personal Information (For California Residents)

For California residents, the categories of personal information we collect include:

The only sensitive personal information we collect is account login credentials (username and password) for the MyMadix portal, and, in the limited circumstance where a credit application includes a personal guarantee, a guarantor’s Social Security number. We use login credentials solely to authenticate portal users, and we use a guarantor’s Social Security number solely to evaluate creditworthiness and manage the resulting credit account. We do not use or disclose either category of information for any other purpose.

3.   The MyMadix Customer Portal

The MyMadix portal (mymadix.madixinc.com) is a secure online account platform for Madix customers to view order history and track shipments.

Who Can Register

The portal is available to:

All third-party agent registration requests are reviewed and approved manually by Madix before access is granted.

Information You Provide at Registration

When you register for a MyMadix account, you provide:

Information Accessible Through the Portal

Once logged in, customers can view order history and shipment tracking information drawn from our order management system. Third-party agents can access information related only to the accounts for which they have received authorization.

How We Use Portal Information

We use portal registration and activity data to authenticate users, provide account services, respond to customer inquiries, and maintain accurate account records. We do not use portal login activity for marketing purposes.

4.   How We Use Your Information

We use the personal information we collect for the following purposes:

To respond to your inquiries and provide customer service.  When you contact us through our website, we use your information to respond to your question or request.

To manage your portal account.  We use registration information to create and maintain your MyMadix account, authenticate your identity when you log in, and give you access to your order and shipment data.

To pursue and manage our business relationships.  We use business contact information to communicate with potential and current customers, follow up on sales inquiries, and manage customer relationships through our customer relationship management system.

To operate and improve our website.  We use the server log information described in “Information Collected Automatically” above to maintain website security and diagnose technical issues. If you accept the applicable cookies, we also use analytics information to understand how visitors use our site and to improve site content and performance.

To qualify business leads.  We use business information from third-party data providers to help us understand and qualify prospective customers.

To evaluate creditworthiness and manage credit accounts.  If your company applies for a credit account with us, we use the information on your paper credit application, together with a business credit report from a business credit reporting service, to evaluate creditworthiness and set account terms. We may also periodically reassess an existing account. If your application includes a personal guarantee, we collect the guarantor’s Social Security number. These credit reports address businesses only; a guarantor’s Social Security number does not result in a personal credit report being pulled on that individual.

To send marketing communications.  Some of our forms ask whether you would like to receive future communications from us. We do not currently send marketing communications by mail or email. If you indicate a preference, we retain that preference as part of your existing contact or account record, as described in “Data Retention” below.

To comply with legal obligations.  We may use your information as required by law, including to respond to lawful requests from government authorities, comply with court orders, or protect our legal rights.

We do not use your personal information for purposes that are incompatible with those described above without first notifying you.

5.   Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files that a website places on your device when you visit. They allow the website to recognize your browser, remember your preferences, and collect information about how you use the site. Some cookies are required for the site to work; others are optional.

The Tracking Technologies We Use

Our website uses a cookie consent management platform to manage your cookie preferences and record your choices. The cookies and tracking tools on our site fall into three categories:

Necessary Cookies.  These cookies are required for our website to function and cannot be turned off. They support core functions such as website security, content delivery, and remembering your cookie preferences. Necessary cookies do not collect personal information for marketing purposes.

Statistics Cookies.  These cookies help us understand how visitors find and use our site, including which pages are viewed, how visitors navigate between pages, and general engagement trends. We also embed video content from a third-party video hosting platform. When you interact with an embedded video, the video provider may collect data in accordance with its own privacy policy.

Marketing Cookies. These cookies help us advertise our own products more effectively on other websites and platforms; we do not display third-party advertising on our own website. These cookies may also help us understand which channels, such as search engines or referral links, bring visitors to our site, and may support targeted advertising across other websites and platforms. We have not configured a specific advertising campaign using these cookies, but their presence may result in advertisements about our products being shown to you on other websites.

For a current list of the specific cookies we use and the companies that provide them, click the cookie icon in the bottom-left corner of your screen.

Your Cookie Choices

When you first visit our website, a cookie consent banner will ask for your preferences. You can accept or decline non-essential cookies at that time. You can update your preferences at any time by clicking the cookie icon in the bottom-left corner of your screen.

Your browser may also allow you to block or delete cookies. See your browser’s help settings for instructions. Disabling certain cookies may affect how our website functions.

Do Not Track and Global Privacy Control

Some web browsers transmit “Do Not Track” (DNT) signals to websites. Our website does not currently respond to DNT signals in a way that changes how it collects or uses information. California law requires us to disclose this.

We do recognize Global Privacy Control (GPC) signals. If your browser or browser extension sends a GPC opt-out preference signal, we will treat it as a request to opt out of the sale and sharing of your personal information as described in Section 9.

6.   How We Share Your Information

We share personal information with the following categories of third parties in the ordinary course of running our business:

Service Providers.  We share information with companies that provide services on our behalf, including website hosting, content delivery and security, cookie consent management, video hosting, website analytics, customer relationship management, and order management.

Business Data Providers.  We work with a third-party business data provider to obtain and enrich business contact information for lead management. We also work with a business credit reporting service to obtain business credit reports when your company applies for a credit account with us.

Legal and Safety Disclosures.  We may disclose personal information when we believe it is necessary to comply with applicable law, respond to a valid legal process (such as a court order or subpoena), protect the safety of any person, or protect our legal rights and interests.

Business Transfers.  If Madix is involved in a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any material change in ownership or in how your personal information is used.

7.   Data Retention

We retain personal information according to the criteria described below for each category. Retention periods vary by category and are based on the purposes for which the information was collected and applicable legal requirements. As noted below, some categories do not yet have a defined retention period.

Contact and inquiry data:  Information submitted through our sales assistance and contact forms is stored in our customer relationship management system. At this time, this information is retained indefinitely, as we do not have a defined retention or archival schedule for this system. We anticipate establishing such a schedule as part of an upcoming system migration, and we will update this policy once that schedule is in place.

Portal account data:  Account registration data and related order and shipment history are migrated daily from our enterprise resource planning system into our customer relationship management system and are updated as changes occur in that system. As with the data described above, this information is retained indefinitely at this time, pending the same anticipated system migration.

Credit application data:  Credit applications and related credit reports are currently retained indefinitely. We are in the process of transitioning to a schedule under which this information will be destroyed after five years.

Analytics and cookie data:  Analytics data is retained according to the configuration of the applicable tool. Individual cookie data expires according to each cookie’s lifespan, viewable by clicking the cookie icon in the bottom-left corner of your screen.

Server logs:  Server access logs maintained by our hosting provider are retained for up to 4 days.

For categories of information where we have established a retention period or schedule, we will delete or anonymize that information once it is no longer needed for the purposes described above, unless a longer retention period is required by law. As described above, some categories of information are currently retained indefinitely because we have not yet established a retention schedule for them.

8.   Security

We take reasonable technical and organizational steps to protect your personal information from unauthorized access, use, modification, or disclosure. These measures include access controls on our internal systems and the MyMadix portal, use of reputable cloud-based service providers that maintain their own security programs, and ongoing review of our data handling procedures.

Credit applications and related credit reports are accessible only to a small number of employees in our accounting department who are responsible for evaluating and managing credit accounts.

No internet transmission or electronic storage system is completely secure. We cannot guarantee the absolute security of your information. If you believe your personal information may have been compromised, please contact us promptly at privacy@madixinc.com.

9.   Your Privacy Rights

Depending on where you live, you may have certain rights regarding the personal information we hold about you. We will not discriminate against you for exercising any of these rights.

California Residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA/CPRA”), gives you the following rights:

Right to Know.  You may ask us to disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we collected it, and the categories of third parties with whom we have shared it.

Right to Delete.  You may ask us to delete personal information we have collected about you, subject to certain exceptions permitted by law.

Right to Correct.  You may ask us to correct inaccurate personal information we hold about you.

Right to Data Portability.  When you exercise your Right to Know and request the specific pieces of personal information we have collected about you, you may request that we provide that information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another entity without hindrance.

Right to Opt-Out of Sale or Sharing.  We do not sell your personal information. We do not currently share your personal information for cross-context behavioral advertising, except as may occur through the Marketing Cookies described in Section 5. You have the right to opt out of any such sharing by clicking the cookie icon in the bottom-left corner of your screen or by contacting us directly.

Right to Limit Use of Sensitive Personal Information.  We collect account login credentials for the MyMadix portal, which we use solely for user authentication. Under California regulations, businesses are not required to provide a right-to-limit notice for sensitive personal information used solely for the purpose of authenticating users. We do not use portal login credentials for any other purpose. We also collect a guarantor’s Social Security number, in the limited circumstance where a credit application includes a personal guarantee, which we use solely to evaluate creditworthiness and provide financing in connection with the resulting credit account. Under California regulations, businesses are not required to provide a right-to-limit notice for sensitive personal information used to provide financing or to perform services reasonably expected by the consumer requesting them. We do not use or disclose a guarantor’s Social Security number for any other purpose.

Right to Non-Discrimination.  We will not deny you goods or services, charge you a different price, or provide you a different quality of service because you exercised any right under the CCPA/CPRA.

How to Submit a California Request

You may submit a request to exercise any of the above rights using either of the following methods:

You may submit a Right to Know request up to twice within any 12-month period. To protect your privacy and security, we will verify your identity before processing your request by asking you to provide information that we can reasonably match against the personal information we already maintain about you (for example, your name, email address, and details associated with your inquiry or MyMadix account). For certain requests we may require additional verifying information. We will respond within 45 days. If we need more time, we will notify you and may extend our response by up to 45 additional days.

Authorized Agents.  You may use an authorized agent to submit a request on your behalf. If you use an authorized agent, we may require the agent to provide proof that you gave them signed permission to submit the request, and we may also require you to verify your own identity directly with us or to confirm that you authorized the agent to act for you. We do not require a power of attorney for an agent to act on your behalf; however, an agent acting under a valid power of attorney need not provide separate signed permission.

Texas Residents

Madix primarily operates in a business-to-business context. The Texas Data Privacy and Security Act (“TDPSA”) defines “consumer” to mean a Texas resident acting in an individual or household capacity, and it generally does not apply to individuals acting solely as business representatives or employees. We provide this section for the benefit of any Texas residents who may interact with us in a personal capacity and will respond to requests under this section regardless of whether the TDPSA strictly requires it.

If you are a Texas resident, the TDPSA gives you the following rights:

Right to Access.  You may confirm whether we are processing your personal data and ask to see it.

Right to Correct.  You may ask us to correct inaccuracies in your personal data, taking into account the nature of the data and our purposes for processing it.

Right to Delete.  You may ask us to delete personal data we have collected about or from you.

Right to Data Portability.  You may request a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.

Right to Opt-Out.  You may opt out of the processing of your personal data for targeted advertising, the sale of your personal data, or profiling that produces legal or similarly significant effects. You may also exercise this right by enabling a universal opt-out mechanism, such as the GPC signal, in your web browser.

How to Submit a Texas Request

To exercise your TDPSA rights, please contact us:

We will respond within 45 days. We may extend our response by an additional 45 days if we notify you of the reason for the extension within the initial 45-day period.

If we decline your request, we will tell you why. You may appeal by contacting us at the same email or phone number and explaining the basis for your appeal. We will respond to appeals within 60 days. If we deny your appeal, we will inform you of our decision and the reasons for it. You may then submit a complaint to the Texas Attorney General at: https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint

Residents of Other States

Residents of other states with applicable privacy laws may also have rights regarding their personal information. Please contact us at privacy@madixinc.com to learn more.

10.   Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the services we provide. When we make material changes, we will update the “Effective Date” at the top of this policy.

We encourage you to review this policy periodically. Your continued use of our website or the MyMadix portal after we post an updated policy indicates your acceptance of the changes. We review this policy at least once per year.

11.   Contact Us

If you have questions about this Privacy Policy or how we handle your personal information, please contact us:

Madix, Inc. 500 Airport Road Terrell, Texas USA

Privacy Inquiries:  privacy@madixinc.com

Phone:  214.515.5400

Accessibility.  We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you use assistive technology and have difficulty accessing this policy, or if you would like to receive it in an alternative format, please contact us at privacy@madixinc.com or 214.515.5400, and we will work with you to provide the information in a manner that meets your needs.