XBC Supply Group

Legal

Privacy Policy

Last updated: August 7, 2026

XBC Group LLC, a Colorado limited liability company ('we,' 'us,' or 'our'), operates the website xbcsupplygroup.com. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have under United States federal law and applicable state laws including the Colorado Privacy Act and the California Consumer Privacy Act as amended.

1. Information we collect

We collect the following categories of personal information directly from you when you request a quote, ship supplies to us, or contact our support team:

  1. Identifiers: name, mailing address, email address, telephone number.
  2. Commercial information: a description of the supplies you wish to sell, your selected payment method, and your transaction history with us.
  3. Financial account information for payment: depending on the payment method you choose, this may include your Venmo handle, PayPal email, Cash App tag, Zelle phone or email, or bank routing and account number for ACH direct deposit. We do not collect or store full credit-card numbers.
  4. Communications: the contents of text messages, emails, and phone calls between you and our team.

We collect the following categories automatically when you use the website:

  1. Server log information: when any page on this site is requested, our website host automatically records the requesting IP address, browser type, the page requested, and a timestamp. This is standard hosting activity and we do not analyze it.
  2. Cookies and tracking: this site sets no cookies. It runs no JavaScript, loads nothing from any other company, and uses no analytics, advertising, or tracking technology of any kind, so there is nothing here for you to disable and nothing that follows you anywhere.

2. How we use your information

We use your personal information to:

  1. Process your quote, generate a prepaid UPS return label, receive and inspect your shipment, and issue payment.
  2. Communicate with you about your transaction.
  3. Comply with our legal obligations, including tax reporting.
  4. Detect, prevent, and respond to fraud, abuse, and violations of our Terms of Service.
  5. Improve our site and our service quality.

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

3. Categories of third parties with whom we share information

We share your personal information only with service providers acting on our behalf and only for the purposes listed above. Current categories include:

  1. Shippo (Popout, Inc.) for the sole purpose of generating UPS Ground return labels and tracking shipments.
  2. UPS as the carrier for inbound shipments.
  3. Our payment partners: Venmo, PayPal, Cash App, Zelle, our bank for ACH, and our check-printing service.
  4. Our website host, which serves these pages and keeps the server logs described above. We do not use analytics.
  5. Our communications providers for email and SMS.
  6. Our accountants, lawyers, and other professional advisors.
  7. Law enforcement or government authorities when we are legally required to disclose information.

Each service provider is contractually limited to using the information solely to perform services for us.

4. How long we keep your information

We keep your information for as long as your account is active and for the period required by federal and state tax, accounting, and consumer-protection laws, typically seven (7) years for financial records.

5. Your rights

Depending on where you live, you may have the following rights:

  1. To know what personal information we have collected about you.
  2. To access a copy of that information.
  3. To request correction of inaccurate information.
  4. To request deletion of your information, subject to our legal obligation to retain financial records.
  5. To opt out of the sale or sharing of personal information. We do not sell or share for advertising.
  6. To not be discriminated against for exercising any of these rights.

To exercise any right, email support@xbcsupplygroup.com or write to the address in Section 9. We will verify your identity using the contact information we already have on file and will respond within forty-five (45) days.

6. Children

This site is not directed to children under thirteen (13). We do not knowingly collect personal information from children. If you believe we have collected information from a child, email support@xbcsupplygroup.com and we will delete it.

7. Security

We use industry-standard administrative, technical, and physical safeguards to protect your information. No system is perfectly secure. If we ever learn of a breach affecting your information, we will notify you and the appropriate state authority as required by law.

8. Changes to this Privacy Policy

We may update this Policy from time to time by posting a revised version and updating the "Last updated" date.

9. Contact

XBC Group LLC, operating the Diabetic Buyback Program
Attn: Returns and Processing
11990 Grant Street, Suite 550
Northglenn, Colorado 80233
United States
support@xbcsupplygroup.com