Privacy Policy

Last Updated: Feb 10, 2026

We at MOD-PAC Corp. (“MOD-PAC,” “Company,” “our,” “we,” or “us”) have a firm commitment to safeguarding the privacy of our customers when visiting any of our websites (the “Websites”), which includes: www.shopmodpac.com and www.modpac.com. This Privacy Policy (the “Policy”) describes who we are and our practices for collecting, using, maintaining, protecting, and disclosing your personal data. It also describes your rights in relation to identifiable information regarding our customers, such as your name, address, or email address.

Primarily, we collect such information for the purpose of providing you with an outstanding experience as you access our large collection of online designs and printing resources to design, personalize and order print products (collectively, the “Services”). In order to provide you with relevant information, respond to your requests, and increase the benefits you receive from the Services, we sometimes request that you provide us with information about yourself. This Policy does not apply to information collected by us offline or through any other means, including on any other website operated by Company or any third party (including our affiliates and subsidiaries) that does not link to this policy; or any third party that may link to or be accessible from or through the Services.

By using our Services, you consent to the collection and use of your personal data in the manner described below. If we decide to change our privacy practice, we will post those changes on this page so that you are always aware of what information we collect, how we use it and under what circumstances we disclose it. Changes to this Policy will be prospective only. Please check this page from time to time for changes to make sure you are aware of our latest privacy practices. Also, if you have not already done so, please review the Terms of Use that govern your use of the Service. This Policy is considered part of the Terms and Conditions.

What Information We Collect and How We Collect It

Personal Data

We collect and may transmit personally identifiable information that you voluntarily provide to us through our Services. Personally identifiable information that we collect and transmit may include, but will not be limited to: first and last name, company name, job title, mailing address, shipping address, e-mail address, telephone number, billing information, transaction data, non-precise geolocation information, purchase information, information contained in any e-mail or other communication you send to us, information you give to us in any other way (such as feedback or survey data) and any other identifier that permits us to identify or contact you (“Personal Data”).

When you make a payment online through our Websites, we use a third-party service provider to process payments on our behalf. You must submit your name, your credit card number, bank account number, or other payment information, and billing information for payment verification purposes. This information allows our payment processor to process and fulfill your payment. MOD-PAC does not have access to your credit card number or other payment information when you pay through our Websites. Your sharing of such information is governed by our payment processors applicable privacy policy and terms of use.

Usage Data

Data may be collected from you automatically when you access our Websites about how you access and use the Websites (“Usage Data”). Usage Data may include information such as your device’s Internet Protocol address (e.g., IP address), internet domain, browser type, browser version, time zone setting and location, browser plug-in types and versions, language preference, referring website, date and time of visitor request, browser history, operating system, analytic data, and other diagnostic data.

Aggregate Data

MOD-PAC may collect data that is about you but individually does not identify you, such as statistical information and analytic data relating to Websites usage.

This information may be collected through various portions of our Services. Some of the ways in which we may collect Personal Data from you include, but are not limited to, our:

• Emails
• Website Collection, including directly from you when you provide it to us or automatically as you navigate the website
• The ShopModPac online ordering service
• Information you provide through interactions with our Services or with third parties we use to provide you Services

If you choose to provide your Personal Data through the use of the Services, and later decide that you want to opt out of us having your information, please refer to the Choice/Opt-Out provision below or email sales@modpac.com.

Technologies Used for Automatic Data Collection

We use cookies, pixels, analytics tools and other technologies to make our Websites work properly, improve their performance, understand how visitors interact with them, and deliver relevant content and advertising. These technologies help us provide a better user experience and measure the effectiveness of our marketing efforts.

We may automatically collect, use, store, and transfer certain information about your visit to our Websites through technologies such as cookies, pixels, and analytics tools. Some of these technologies are provided by third-party service providers, and information collected through them may be shared with or directly collected by those third parties.

Below is an overview of some of the technologies we utilize:

• Cookies are small files placed on your device that allow us to recognize your browser and store preferences or settings. We use cookies to enhance Website usability, to provide website functionality, personalize content, and improve your experience. In addition to our own cookies, third-party providers may place cookies on your device to support analytics, advertising, and other services.
• Pixels are small pieces of code embedded on a webpage that help track user interactions, such as page views or clicks. Pixels are often used to measure the effectiveness of advertising and understand user actions on the Websites. Some pixels may be provided by third parties and may allow third-party providers to collect information about your activity for analytics and marketing purposes.
• Analytics may be provided by third-party vendors to analyze Website traffic and usage. These vendors use cookies and similar technologies to collect information such as your IP address, browser type, and browsing behavior. This information is transmitted to and stored by these vendors on their servers (or those of their subprocessors). They use it to provide us with reports and insights and may share it with other parties where required by law or for their own processing purposes. For example, we utilize Google Analytics, a web analytics website offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Websites. This data is shared with other Google websites. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having your activity on the Websites made available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and dc.js) from sharing information with Google Analytics about visit activity. For more information about the privacy practices of Google, please visit the Google Privacy Terms web page at https://policies.google.com/privacy?hl=en
• Third-Party Tracking Technologies may be utilized by third party service providers to collect information about your online activities across different websites and services. We do not control these technologies or how third parties use the information they collect. For details on how these third parties handle your data, please refer to their respective privacy policies.

By using the Websites, unless you select otherwise via our cookie manager, you consent to our use of these technologies as described above.

If you do not want to allow for use of cookies or other technologies (including analytics cookies), you can generally opt-out by setting browsers to reject cookies or via our cookie setting popup. You may also disable or delete cookies from your computer at any time. Please be aware that disabling cookies may limit the functionality of the Websites, reduce our ability to provide customized content, and impact on your overall experience when visiting the Websites.

How We Use Your Information

We may use your Personal Data and other information (such as Usage Data) for the following purposes:

• To provide and maintain our Services, including to monitor the usage of our Services and to fulfill orders.
• To contact you by phone, email, text message, or other equivalent means of electronic communication regarding our products, services and promotions, such as New Promotions, New How-To’s and other content, New Templates, and New Products & Capabilities.
• To provide you with news, special offers, and general information about us and our products unless you have opted not to receive such information. For example, with your permission, we may send you emails about our store, new products, and other updates.
• To manage your requests, such as to attend and manage requests you direct to us.
• To provide customer support.
• To detect, prevent, and address technical issues.
• To gather analysis and valuable information so that we can improve the Services we provide to you, including website design, shopping preferences, and your online shopping experiences. This may also include the use of Usage Information we collect, whether connected to your Personal Data or not, to estimate out audience size and usage patterns, store information about your preferences, speed up your searches, and recognize you when you return to the Website.
• To prevent and detect criminal and/or fraudulent activity that would be damaging to you and/or us.
  In any other way we may describe when you provide the information.
• For any other purpose with your consent.

Your Personal Data will not be rented or sold with any third party, except as described in this Privacy Policy or as otherwise agreed to by you.

Disclosure of Your Personal Data

We may disclose aggregated information and information that does not identify any individual without restriction.
We (and our service providers) may share your information, including Personal Data, in the following situations:

• With website providers: We may share your Personal Data with website providers to monitor and analyze the use of our Websites.
• With service providers: We may share your Personal Data with service providers to help us deliver our services to you.
• For business transfers: We may share or transfer your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business by another company.
• With affiliates: We may share your Personal Data with our affiliates.
• With business partners: We may share your Personal Data with our business partners to offer you certain products, websites, or promotions.

We may also share your information, including Personal Data:

• To comply with any court order, law, or legal process, including responding to any government or regulatory request.
• To enforce or apply agreements between you and Company.
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our clients, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.
• To protect against legal liability.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies and Advertising

You can select your preferences via our cookie manager, or you can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our Websites may then be inaccessible or not function properly.

Promotional Offers

If you do not wish to have your Personal Data used by MOD-PAC for marketing purposes to offer our products and services to you, you can opt-out of these uses of your Personal Data via the link in the email communication or by contacting us at sales@modpac.com. This opt-out does not apply to information provided to MOD-PAC for our everyday business purposes, such as to process your transactions, maintain your accounts, or respond to court orders and legal investigations.

We do not control third parties’ collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

California Residents

If you are a resident of California, you may have additional rights related to your information. For more information, please visit our California Consumer Privacy Notice below.

Third-Party Service Providers

In general, the third-party providers used by us will only collect, use and disclose your Personal Data to the extent necessary to allow them to perform the services they provide to us. The following are some examples of our use of third-party service providers:

• Payment gateways and other payment transaction processors;
• E-marketing firms that assist us with the administration of our Websites, promotional newsletters and emails, which helps us understand what our customers want and need from our service, including analysis of the results of particular surveys we may perform; and
• Outside shipping companies to deliver your product orders.

However, some third-party service providers have their own privacy policies with respect to the information we are required to provide for your purchase-related transactions. For these providers, we recommend that you read their privacy policies to learn about the manner in which your Personal Data will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. If you elect to proceed with a transaction that involves the services of a third-party service provider, your Personal Data may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

Once you leave our Websites or Application and are redirected to a third-party website or application, including through the use of links as described below, you are no longer governed by this Policy or our Terms of Use. MOD-PAC is not responsible for, and expressly disclaims all liability of any kind whatsoever arising out of, in connection with, related to and/or resulting from any products, services, or information offered or provided by third-party service providers, or any of the activities of third-party service providers. MOD-PAC makes no warranty, express or implied, or guarantee regarding any third-party service providers, or any products, services or information offered or provided by third-party service providers, or any activities of third-party service providers.

Links

The Services we provide may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. Such third-party links may include access to social media platforms. MOD-PAC is not responsible for these third-party websites, plug-ins, applications, or their respective privacy statements, and expressly disclaims all liability of any kind whatsoever arising out of, in connection with, related to and/or resulting from any products, services, or information offered, provided, or collected by third-party websites, or any activities of third-party websites. MOD-PAC is not responsible for your use of these third-party websites, plug-ins, or applications. MOD-PAC makes no warranty, express or implied, or any guarantee regarding any third-party websites, plug-ins, applications, their respective privacy statements, or any products, activities, services or information offered, provided, or collected by third-party websites, plug-ins, or applications. When you leave the Websites, we encourage you to review the privacy policies of such third parties by visiting the links included within those separate websites, since their policies may differ from this Policy, and they may use information in ways other than those described in this Policy.

Security/Privacy Information

The security of your Personal Data is very important to us. MOD-PAC uses commercially reasonable safeguards that are designed to protect and limit unauthorized access, acquisition, disclosure, destruction, alteration, misuse of, or damage to, your Personal Data. However, please remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Retention of Personal Data

We retain Personal Data for as long as is required for the purposes for which it was collected and for purposes of satisfying any legal, accounting, contractual, or other reporting requirements and in accordance with our policies and procedures.

Geographic Restrictions:

MOD-PAC is based in the State of New York in the United States. We provide these Websites only for use by individuals located in the United States. We make no claims that the Websites, their accessibility, or their content is appropriate or your access to it is legal outside of the United States. If you access the Websites from outside the United States, you do so at your own initiative and risk, and consent to potential processing, collection, and transfer of your Personal Data to a country that may have different privacy laws and that may or may not be as comprehensive as your own.

Notification of Changes

If we decide to change this Policy, we will post those changes to this Policy, the Websites, and other places we deem appropriate, so our users are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it

Age of Consent

The Services are not intended for use by those under the age of 18, nor are they targeted to those under the age of 18. If you use the Services, you hereby represent and warrant that you are at least 18 years of age. No one under the age of 18 may provide any information to or on our Services.

We do not knowingly collect Personal Data from those under the age of 18, nor do we knowingly sell or otherwise disclose the Personal Data of those under the age of 18. If you are under the age of 18, do not (i) use or provide any information on MOD-PAC’s Services or through any of its features, (ii) use any of the interactive or fillable features of the Services, or (iii) provide any information about yourself to us, including your name, address, telephone address, e-mail address or any other information that could be used to identify you. Any information we receive from users we believe to be under the age of 18 will be purged from our database.

Contact Information

If customers have any questions or suggestions regarding our privacy policy, please contact us at:

MOD-PAC Corp. Sales Office
1801 Elmwood Avenue
Buffalo, New York 14207
Telephone: 800-666-3722
Fax: 800-873-1269

Email Address: sales@modpac.com

California Consumer Privacy Notice

This California Consumer Privacy Notice (“California Notice”) supplements the information contained in our Website Privacy Policy (“Privacy Policy”) and is adopted to comply with the California Consumer Privacy Act (including the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”), and applies solely to visitors, users, and individuals who reside in the such states State of California (“Consumers”). Any terms or analogous terms defined under CCPA have the same meaning when used in this California Notice. All other capitalized terms shall have the same meaning as those designated in the Privacy Policy. This California Notice explains how MOD-PAC collects, uses, discloses and retains Personal Information and how consumers may exercise their rights under applicable CCPA.

WHAT INFORMATION IS COLLECTED

MOD-PAC’s data collection practices include the collection and use of Personal Data as described in the Privacy Statements and as set forth below. This California Notice applies to our data practices both online and offline. MOD-PAC retains this information as set forth in the Privacy Statements. (See, Retention of Personal Data).

Generally, MOD-PAC collects the following categories of Personal Information:

• Identifiers, including contact information and biographic information;
• Commercial information;
• Internet or other similar network, browsing, or search activity; and
• Professional or employment-related information.

We do not collect or process Sensitive Personal Information.

OUR PURPOSES FOR THE COLLECTION AND USE OF PERSONAL INFORMATION

Our collection of Personal Information is limited to business and commercial purposes as described below:

1. To perform our Services;
2. For execution of a contract or to enforce the terms and conditions arising under a contract (e.g., performing services, maintaining customer relationships, keeping the customer informed, invoicing and bill collection) or other agreements between the parties;
3. To perform customer acceptance procedures, including verifying identities and addresses and performing other due diligence to protect our business interests and to determine eligibility for services;
4. To comply with legal, tax, accounting, or regulatory obligations to which MOD-PAC or a third party is subject;
5. To manage risk and operations, legal obligations, including ensuring internal compliance with our policies and procedures, to respond to regulatory and government oversight applicable to MOD-PAC, and to investigate complaints or pursue and defend claims, proceedings, or disputes;
6. To protect the security and integrity of MOD-PAC’s information technology systems;
7. To provide information about relevant services offered by MOD-PAC, opportunities and experiences offered by MOD-PAC, and relevant developments in the marketplace and industry;
8. To evaluate, develop and improve the quality of MOD-PAC’s services or our Websites and for other related internal business purposes;
9. To seek professional advice, such as from professional advisors (including, but not limited to, legal counsel);
10. For website related services, like analytics, insights, or customer support, quality and safety maintenance, or to develop new technological improvements;
11. For other purposes that are compatible with this Privacy Policy or were permitted by applicable law; and
12. As otherwise disclosed upon collection, or to the Consumers or a data subject provides other consent or authorization to the collection, use, disclosure and storage of Personal Information.

SOURCES OF COLLECTION OF PERSONAL INFORMATION

We may collect Personal Information from the following sources:

• From your employer;
• Directly from you;
• From users of our Websites, both directly and through automatic means such as cookies;
• From certain affiliates, business partners or agents;
• If You provide us with information when contacting us, request information about our Services, or contact our customer service;
• Fraud prevention and detection agencies and organizations, including law enforcement;
• From third party sources, including publicly available sources and governmental agencies and departments; and
• Through engagement with our social media platforms.

The chart below describes the categories of Personal Information collected in the previous twelve months and the business or commercial purposes for such collection. For more information about the exact identifiers we collect, please see our general Privacy Policy and the section labeled “What Information We Collect and How We Collect It.” The numbers below align with the “Our Purposes for Collection and Use of Personal Information” section outlined above.

CATEGORIES OF THIRD PARTIES WITH WHOM WE DISCLOSE PERSONAL INFORMATION

We disclose the categories of Personal Information outlined above to affiliates, certain service providers or other third parties for business purposes, to provide our products and Services, or for other purposes as provided by applicable laws. This includes to:

• service providers for or to support business operations or provision of services;
• information technology, software, and cloud providers, security providers, and similar services in connection with providing Services and in the support of daily operations;
• service providers to develop, operate, and maintain our Websites;
• service providers for marketing purposes;
• our employees, affiliated companies, contractors, agents and third-party vendors to perform services related to your account, to offer our products and services, and for business operations.

We may also have to disclose your information to:

• government agencies or regulatory bodies to fulfill legal obligations;
• a buyer, investor or successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, including potentially as a going concern or as part of bankruptcy, liquidation, or a similar proceeding, in which Personal Information held by us is among the assets transferred or to third parties in connection with MOD-PAC’s acquisition of other entities;
• law enforcement or government officials;
• any other entity disclosed by MOD-PAC when you provide the information, or for which you provide authorization; or
• third party fraud prevention and credit risk reduction companies and organizations.

“SELLING” OR “SHARING” OF PERSONAL INFORMATION

MOD-PAC may “share” your Personal Information, as defined under CCPA, to marketing software providers to use for cross-contextual behavioral advertising. The categories of Personal Information shared include your identifiers, commercial information, internet and other electronic identifiers, and inference information.

MOD-PAC does not have actual knowledge that it shares Personal Information of Consumers under the age of 16. If you are between 13 and 16 years of age, you must authorize us to sell or share your Personal Information. If you are under 13 years of age, your parent or guardian must authorize us to sell or share your Personal Information.

You have a Right to Opt-Out of the sharing of your Personal Information by us at any time. You can submit a request to opt out of the sale or sharing of your Personal Information through our Do Not Sell/Share My Personal Information (https://www.modpac.com/optout/), or through the other methods referenced below in this Notice. The Right to Opt-Out is subject to exemptions under the CCPA and other limitations under applicable law.

CONSUMER RIGHTS UNDER CCPA

CCPA provides Consumers with specific rights regarding their Personal Information. This section explains how those rights may be exercised (“Privacy Requests”).

California Consumers have the following rights:

1. Consumers have the right to request to certain information about our collection and use of Personal Information (the “Right to Know”) or access to specific pieces of Personal Information (“Specific Request to Know”). Consumers may only submit two requests per a twelve-month period, beginning on the date of their first request.
2. Consumers have the right to request correction of inaccurate Personal Information (“Right to Correct”) maintained by MOD-PAC.
3. Consumers have the right to opt-out of the sale or sharing of Personal Information (“Right to Opt-Out”).
4. Consumers have the right to request deletion of Personal Information, subject to certain exceptions (the “Right to Delete”). Once we receive a request and confirm the Consumer’s identity, we will review the request to determine if an exception allowing us to retain the information applies. We may deny a deletion request if retaining the Personal Information is necessary for us to:
   • Complete the transaction(s) for which we collected the Personal Information including to provide services requested or otherwise to fulfill our contractual obligations; and/or
   • As otherwise allowed by the applicable law.

We will not discriminate against Consumers for exercising their CCPA rights including refusing services or offering different pricing models.

CALIFORNIA SHINE THE LIGHT

California Civil Code Section 1798.83, known as the “Shine The Light” law, permits MOD-PAC’s clients who are California residents to request and obtain from us a list of what Personal Information (if any) we disclosed to third parties for their direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once each calendar year and are free of charge. You may make a request for this information by contacting us using any of the below methods.

HOW TO EXERCISE RIGHTS UNDER CCPA

California Consumers or authorized agents may submit a request to MOD-PAC in one of the following ways:

1. By emailing us at sales@modpac.com
2. By telephone at: 800-666-3722
3. By written notice mailed to:MOD-PAC, Inc.
   1801 Elmwood Avenue
   Buffalo, New York 14207

California Consumers can opt-out of the Sale/Share of their Personal Information by visiting the “Do Not Sell/Share of my Personal Information” Form (https://www.modpac.com/optout/) or through any of the above methods.

Further, businesses are required to process global privacy control (“GPC”) signals, which is referred to in California as opt-out preference signals (“OOPS”), which are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual’s choice to opt-out of the sale and sharing of Personal Information. To use an OOPS/GPC, you can download an internet browser or a plugin to use on your current internet browser and follow the settings to enable the OOPS/GPC. We have configured the settings of our consent management platform to receive and process GPC signals on our website. We process OOPS/GPC with respect to sales and sharing that may occur in the context of collection of cookie Personal Information by tracking technologies online by third-party digital businesses and apply it to the specific browser on which you enable OOPS/GPC. We currently do not, due to technical limitations, process OOPS/GPC for opt-outs of sales and sharing in other contexts (e.g., non-cookie Personal Information). We do not: (1) charge a fee for use of our service if you have enabled OOPS/GPC; (2) change your experience with any product or service if you use OOPS/GPC; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to the OOPS/GPC. To learn more about the GPC, please visit https://globalprivacycontrol.org/. If you delete cookies or reset your device, you may need to set your preference again to ensure we continue to honor your preferred choice.

Authorized Agents: Except as it relates to the opt-out of Sale/Share or the opt-out of Targeted Advertising, if you are making a request as an Authorized Agent, please submit the request on behalf of the Consumer and provide proof that the Consumer provided you signed permission to submit the request. We may also require that you confirm your identity by providing a driver’s license, passport or other form of identification.

Verification of Requests: Except as it relates to the opt-out of Sale/Share or the opt-out of Targeted Advertising, when submitting a request under CCPA, we are required to reasonably validate or authenticate the requestor to appropriately secure Personal Information. If we cannot validate the requestor based on the information provided, we will notify the requestor that we are unable to fulfill the request. We will only use Personal Information provided in the request to verify the requestor’s identity or authority to make it. We will confirm receipt of a request. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to another 45 days), we will inform you of the reason and extension period. We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will detail why we made that decision and provide a cost estimate before completing the request.

Updates to this California Notice

Please refer to this California Notice regularly as it may be revised due to legislative changes, changes in technology or our privacy practices or new uses of customer information not previously disclosed. Changes to this Notice are effective when they are posted on this page. If you have any comments, concerns, or questions, please contact us through one of the methods set forth above.