Privacy Policy

1. Introduction & Scope

Rana Republic Co. (“we”, “us”, or “our”) operates as an independent wholesale distributor registered and based in Ontario, Canada. This Privacy Policy describes our practices regarding the collection, use, and disclosure of information gathered through our website (ranarepublicco.com), commercial wholesale account applications, and commercial communications.

We conduct business on a business-to-business (B2B) basis. While Canadian privacy law generally excludes business contact information (such as an employee's name, title, business address, and business email) when used solely for commercial communications, we maintain strict safeguards for all data entrusted to us.

2. Information We Collect

We collect business and contact information through three primary electronic submission channels on this website, as well as ongoing commercial order communications:

• General & Commercial Contact Inquiries (/contact/): Full contact name, business organization name, corporate email address, business telephone number, inquiry subject classification, and submitted message details.
• Wholesale Account Applications (/wholesale-account/): Legal corporate entity name, operating/trade name (DBA), Canadian Business Number (BN), provincial sales tax / GST / HST registration identifiers, commercial physical address, authorized purchasing representative credentials (name, corporate email, phone, title), business model classification (independent retail, reseller, corporate procurement, institutional), years in commercial operation, estimated purchase volume bracket, and credit trade references where credit terms are requested.
• Supplier & Brand Partnership Inquiries (/suppliers/): Manufacturer or vendor business name, primary commercial representative contact details, product categories represented, brand authorization or licensing status, country of manufacture, warehouse and dispatch origin, and catalog/line sheet specifications.
• Technical & Website Security Data: Client IP address (utilized strictly for rate limiting, security defense, and abuse prevention), browser user-agent, and submission timestamp verification to prevent automated submission spam.

3. How We Use Collected Information & Electronic Notifications

The information collected across our website is utilized strictly for legitimate commercial business purposes:

• Account Qualification & Onboarding: Verifying business legitimacy, tax status, and commercial eligibility prior to granting access to wholesale catalogues and commercial price schedules.
• Internal Email Notifications: When a contact form, wholesale application, or supplier inquiry is submitted, our web server generates an automated administrative email notification dispatched to our commercial sales desk (sales@ranarepublicco.com) for manual review and account qualification.
• Commercial Order Execution: Processing wholesale purchase orders, coordinating commercial freight and LTL shipments, and issuing compliant Canadian business invoices.
• Supplier Evaluation: Reviewing vendor capabilities, merchandise compliance, and supply chain logistics for potential distribution onboarding.
• No Unsolicited Marketing: We do not sell, rent, lease, or monetize commercial contact data to third-party data brokers, marketing agencies, or external advertisers.

4. Disclosure of Information

Rana Republic Co. does not sell or share business information except as necessary to fulfill commercial operations:

• Vetted Logistics Partners: Third-party Canadian freight carriers, LTL operators, and courier services solely for the purpose of executing commercial freight delivery and bill-of-lading (BOL) coordination.
• Financial & Banking Institutions: For commercial wire processing, credit evaluation, and corporate payment verification.
• Legal & Regulatory Authorities: When required by Canadian statutory law, court subpoena, or governmental audit.

5. Data Security, Protected Submission Records & Retention

We implement rigorous administrative, technical, and architectural safeguards to protect all submitted business data:

• Protected Submission Records: Website form transmissions are recorded in server-side audit logs (api/data/submissions.log.php). These records are safeguarded by multiple defense-in-depth layers, including direct PHP execution denial headers (preventing web execution) and web server access controls (.htaccess and web.config) preventing direct HTTP access.
• Encryption & Headers: Web traffic is encrypted in transit via SSL/TLS (HTTPS). All form responses enforce strict security headers and MIME sanitization against header injection.
• Data Retention Standards: Approved wholesale account records and commercial transaction documentation are retained in accordance with Canada Revenue Agency (CRA) commercial record-keeping standards (minimum six years for completed financial transactions). Inquiries or applications that do not proceed to an approved account or commercial agreement are purged periodically from server logs.

6. Access, Corrections & Privacy Contact

To request access to the business profile information on file, submit corrections or updates to authorized purchasing representatives, or address inquiries regarding our privacy practices under PIPEDA, please contact our privacy desk:

Privacy Officer
Rana Republic Co.
Ontario, Canada
Email: sales@ranarepublicco.com