Privacy Policy
Effective Date: October 21, 2025
1) Overview
RSMROUSA LLC (“RSMROUSA,” “we,” “our,” or “us”) provides online and offline sales of industrial/commercial electrical products (e.g., Schneider Electric, ABB) to business and individual customers. We do not provide company formation, registration, or legal filing services.
This Privacy Policy explains how we collect, use, disclose, and protect Personal Information when you visit https://www.rsmrousa.com or otherwise use our websites, accounts/portals, checkout, customer support, and related services (collectively, the “Services”). By using the Services, you agree to this Policy.
If you do not agree, please discontinue use of the Services.
---
2) Notice at Collection (CPRA) – What We Collect, Why, and How Long We Keep It
We collect the categories of Personal Information listed below for the purposes shown. We do not “sell” or “share” Personal Information as defined under the California Consumer Privacy Act as amended by the CPRA. We also do not collect or use Sensitive Personal Information for the purpose of inferring characteristics.
Category of Personal Information Examples Business/Commercial Purpose Typical Retention Sold/Shared?
Identifiers Name, username, email, phone, account ID, IP address Account creation/management; order processing; customer support; fraud prevention; security For the life of the account and as required by law (e.g., 2–7 years for records/tax); then delete or de-identify No
Customer Records Billing/shipping address, company name, purchase history Fulfill orders, shipping/returns, invoicing, tax compliance, service communications Transaction records typically 4–7 years (tax/audit); then delete or de-identify No
Commercial Information Products viewed/purchased, quotes, carts Provide and improve Services, analytics on product demand, inventory planning Up to 5 years aggregated/de-identified where feasible No
Internet/Network Activity Device/browser info, pages viewed, time on page, referrers, cookie IDs Site functionality, security logs, debugging, analytics (if enabled) Log data typically 12–24 months; de-identify/aggregate where feasible No
Geolocation (general) City/region inferred from IP Regional pricing, localization, fraud prevention Same as logs No
Payment Information* Cardholder name, last4, token/transaction ID (processed by third-party processor) Process and confirm payment, fraud prevention, refunds We do not store full primary account numbers; processors retain per their policies and legal obligations No
* We use third-party payment processors to handle card data securely. We do not store full card numbers or CVV on our systems.
---
3) Sources of Personal Information
Directly from you (forms, checkout, account registration, customer support).
Automatically through cookies, pixels, and similar technologies (see Section 8).
Service providers/partners (e.g., shippers, payment processors) supplying limited data to complete transactions.
---
4) How We Use Personal Information
Provide, operate, and secure the Services (account setup, authentication, checkout).
Process orders, payments, shipments, returns, and support requests.
Communicate about orders, invoices, updates, and service notices.
Improve our catalog, site performance, and user experience.
Detect, investigate, and prevent fraud, security incidents, and misuse.
Comply with law, tax, accounting, and audit obligations.
Marketing communications with your consent or as permitted by law (you may opt out anytime).
No sale/share: We do not sell or share Personal Information for cross-context behavioral advertising. If this changes, we will update this Policy and provide required opt-out mechanisms.
---
5) Lawful Bases (GDPR/UK GDPR)
Where GDPR/UK GDPR applies, we rely on:
Contract (to provide the Services and fulfill orders);
Legitimate interests (site security, fraud prevention, service improvement);
Legal obligations (tax, accounting, compliance);
Consent (where required, e.g., certain cookies/marketing; you may withdraw at any time).
---
6) Disclosures of Personal Information
We disclose Personal Information to:
Service providers/processors acting on our behalf (e.g., payment processing, shipping, cloud hosting, email/SMS, customer support). They are bound by contractual obligations to use data only per our instructions and to protect it.
Business transfers (e.g., merger, acquisition, asset sale); successors will be bound by this Policy or a policy with materially similar protections.
Legal and safety (to comply with law, enforce agreements, protect rights, security, customers, or the public).
We do not disclose Personal Information to third parties for their own independent marketing.
---
7) Data Security
We implement administrative, technical, and physical safeguards designed to protect Personal Information (e.g., encryption in transit, access controls, logging). However, no method is 100% secure. If we believe the security of your data has been compromised, we will follow applicable breach-notification laws.
---
8) Cookies and Similar Technologies
We use essential cookies for core site functionality (e.g., cart, login). We may use analytics or performance cookies to understand usage and improve the Services, and—if activated in the future—advertising/retargeting cookies.
You can manage cookies in your browser settings; blocking some cookies may impact features.
Where required by law (e.g., EU/UK), we will present consent controls and honor your choices.
If/when we enable analytics/ads tools (e.g., Google Analytics, Meta Pixel), we will update this Policy to list them and provide opt-out links.
Do Not Track: We currently do not respond to browser “DNT” signals. You can limit tracking via browser settings or extensions.
---
9) Data Retention
We retain Personal Information only for as long as necessary to fulfill the purposes outlined in this Policy, including legal, tax, and accounting requirements. Typical examples:
Account data: retained while your account is active and for a reasonable period after closure (e.g., 2 years) unless longer required by law.
Transaction/finance records: generally 4–7 years.
Security logs: typically 12–24 months.
When retention ends, we will delete or de-identify data consistent with applicable laws and internal policies.
---
10) Your Rights & Choices
Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing, and to opt out of marketing.
Account holders can review/update certain information in the account portal.
Marketing emails include an Unsubscribe link; transactional/service emails will still be sent when necessary.
To exercise rights, contact us (Section 15). We may verify your request and respond within the timeframe required by law. You may use an authorized agent where permitted.
U.S. State Laws (CA/VA/CO/CT/UT/NV): We do not sell/share Personal Information or use targeted advertising. If you believe otherwise or want to appeal a decision on your request (where required, e.g., VA/CO/CT), please write “Privacy Appeal” in the subject line when contacting us.
---
11) International Users & Cross-Border Transfers
Your information may be transferred to, stored, and processed in the United States and other countries with different data-protection laws. Where required, we use appropriate safeguards (e.g., data-processing agreements and, for EEA/UK transfers, Standard Contractual Clauses). By using the Services, you consent to such transfers consistent with applicable law.
---
12) Children’s Privacy
The Services are not directed to children under 13, and we do not knowingly collect Personal Information from them. If you believe a child has provided us Personal Information, contact us and we will delete it.
---
13) Third-Party Websites and Services
The Services may link to third-party sites or services we do not control. This Policy does not cover their practices. Review their privacy policies before providing data.
---
14) Changes to This Policy
We may update this Policy from time to time. The “Effective Date” at the top shows when it last changed. Material changes will be posted on this page (and, where legally required, we will notify you).
---
If you are in the EEA/UK and wish to contact a Data Protection Officer (if appointed) or our EU/UK representative (if applicable), please indicate that in your request.