Privacy Policy

1. Introduction

SURPPLAX (“Surpplax,” “we,” “us,” or “our”) buys, trades, and brokers surplus oil and gas tubulars and drilling equipment for business customers worldwide. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit surpplax.com (the “Website”), contact us, or do business with us.

By using the Website, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the Website.

2. Who We Are

Surpplax operates through our United States company and our Brazilian company, which are under common ownership. For the purposes of this policy, the Surpplax entity that handles your information is the one you deal with, or the one that operates the Website.

Mailing address: Surpplax 7345 W Sand Lake Rd, Ste 210, Office 7776 Orlando, FL 32819, United States

Privacy contact: [hello@surpplax.com]

3. Information We Collect

Information you give us. When you fill in a contact or inquiry form, send us an email, request a quotation, or share inventory lists, we may collect:

  • Name, job title, and company name
  • Business email address, phone number, and WhatsApp number
  • Country and business address
  • Details of your inquiry, including equipment specifications, quantities, and commercial terms
  • Any other information you choose to include in your messages or attachments

Information collected automatically. When you visit the Website, we and our service providers may automatically collect:

  • IP address and approximate location
  • Browser type, device type, and operating system
  • Pages visited, time spent, referring website, and links clicked
  • Cookie and similar-technology data (see Section 7)

Information from other sources. In the ordinary course of business development, we may obtain business contact details (such as name, company, role, and business email) from publicly available sources, professional networks, trade events, industry directories, and business referrals.

We do not intentionally collect sensitive personal information through the Website, and we ask that you do not send it to us.

4. How We Use Your Information

We use personal information to:

  • Respond to your inquiries and provide quotations, proposals, and information about equipment
  • Negotiate, perform, and administer commercial transactions, including sourcing, logistics coordination, invoicing, and payment
  • Communicate with you about our business, including follow-ups and updates that may interest you
  • Operate, secure, maintain, and improve the Website
  • Analyze Website traffic and usage
  • Verify the identity and legitimacy of business counterparties and carry out due diligence, sanctions screening, anti-fraud, and anti-money-laundering checks
  • Comply with legal, tax, trade, and regulatory obligations
  • Establish, exercise, or defend legal claims

5. Legal Bases for Processing

Where the EU/UK General Data Protection Regulation (GDPR) or Brazil’s General Data Protection Law (LGPD, Law No. 13.709/2018) applies, we process personal information on one or more of these bases:

  • Performance of a contract or steps taken at your request before entering a contract
  • Legitimate interests, such as operating our business, developing commercial relationships, securing the Website, and preventing fraud, balanced against your rights and interests
  • Compliance with legal obligations, such as tax, accounting, export control, and sanctions rules
  • Consent, where required, such as for certain cookies or direct marketing. You may withdraw consent at any time.
  • Regular exercise of rights in legal, administrative, or arbitration proceedings

6. How We Share Information

We do not sell your personal information. We may share it with:

  • Our affiliated companies (our US and Brazilian entities) for the purposes described in this policy
  • Service providers that support our operations, such as website hosting, email, CRM and outreach tools, analytics, cloud storage, payment processing, accounting, and IT services, all bound to protect your information
  • Business counterparties such as buyers, sellers, brokers, freight forwarders, inspectors, and banks, to the extent needed to carry out a transaction you are involved in
  • Professional advisers such as lawyers, accountants, auditors, and insurers
  • Authorities and regulators when required by law, court order, or legal process, or to protect our rights, property, or safety
  • Successors in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality

7. Cookies and Similar Technologies

The Website may use cookies and similar technologies to make the Website work, remember your preferences, and understand how visitors use it. Types we may use:

  • Strictly necessary cookies, which are required for the Website to function
  • Analytics cookies, which help us understand traffic and improve content
  • Functional cookies, which remember settings such as language

You can control or delete cookies through your browser settings. Blocking some cookies may affect how the Website works. Where required by law, we will ask for your consent before setting non-essential cookies.

8. International Data Transfers

We operate globally, with offices in the United States and Brazil and business partners in South America, the Caribbean, the Middle East, Europe, and elsewhere. Your information may therefore be transferred to, stored in, and processed in countries other than your own, which may have different data protection laws.

When we transfer personal information across borders, we rely on appropriate safeguards where required, such as standard contractual clauses, adequacy decisions, or other mechanisms permitted by applicable law, including the GDPR and the LGPD.

9. Data Retention

We keep personal information only as long as needed for the purposes described in this policy, including to meet legal, tax, accounting, and contractual requirements, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

10. Security

We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. Please avoid sending sensitive information, such as banking credentials, through the Website’s forms.

11. Your Rights

Depending on where you live, you may have some or all of the following rights:

  • Access the personal information we hold about you and receive a copy
  • Correct inaccurate or incomplete information
  • Delete your information, or request anonymization or blocking of unnecessary data
  • Restrict or object to certain processing, including processing based on legitimate interests and direct marketing
  • Data portability, meaning receive your data in a structured, commonly used format
  • Withdraw consent at any time, without affecting earlier lawful processing
  • Information about the entities with which we have shared your data
  • Lodge a complaint with your local data protection authority, such as the Brazilian ANPD, an EU/UK supervisory authority, or the relevant US state authority

California and other US state residents: We do not sell or share personal information for cross-context behavioral advertising. Where state privacy laws apply, you may have the rights described above, and we will not discriminate against you for exercising them.

To exercise any of these rights, contact us at [privacy@surpplax.com]. We may need to verify your identity before responding and will reply within the time required by applicable law.

12. Marketing Communications

We may send business communications about equipment, opportunities, and services. You can opt out at any time by using the unsubscribe link in our emails or by writing to [privacy@surpplax.com]. Opting out of marketing will not stop transactional or legal notices related to an ongoing business relationship.

13. Children’s Privacy

The Website is intended for business users and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Third-Party Websites

The Website may link to third-party websites or services. We are not responsible for their privacy practices or content, and we encourage you to read their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Material changes will be posted on the Website, and your continued use of the Website after an update means you accept the revised policy.

16. Contact Us

If you have questions about this Privacy Policy or how we handle personal information, contact us:

Surpplax 7345 W Sand Lake Rd, Ste 210, Office 7776 Orlando, FL 32819, United States Email: [hello@surpplax.com] Website: surpplax.com