Effective date: August 29, 2026

Three Points Trading, Co., doing business as Crystal Dairy Distributing ("Three Points Trading," "we," "us," or "our"), respects the privacy of our business customers and their representatives. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our website at threepointstrading.com, our business-to-business ordering activities, and our text messaging program.

1. Scope

This Privacy Policy applies to information we handle through:

- threepointstrading.com;

- links from our website to our third-party business ordering portal;

- our customer, ordering, invoicing, delivery, and account-management processes; and

- our recurring SMS order and delivery reminder program.

Our services are intended for businesses and their authorized representatives, not for personal, family, or household use.

2. Information We Collect

We may collect the following information about a business customer and its representatives:

- business and contact information, including business name, contact name, mailing or delivery address, email address, and telephone number;

- account information used to identify or manage a customer account;

- ordering information, including products, quantities, order dates, requested delivery information, skips, and changes to normal ordering or delivery routines;

- invoicing and account records maintained through our accounting service providers; and

- SMS program information, including mobile number, consent status, date and method of consent, reminder preferences, messages sent, delivery status, and opt-in, help, skip, and opt-out requests.

Our website is a simple informational Google Site and does not itself offer ordering, payment, or account functions. When you select an ordering link, you are directed to a third-party ordering platform. The website host and other technology providers may automatically process limited technical information such as IP address, browser type, device information, access time, referring page, and cookies or similar technologies needed to operate and secure their services.

We do not collect payment-card or banking information through our website or ordering portal as part of the ordering process described in this Policy.

3. How We Collect Information

We may collect information:

- directly from you or your business;

- from an authorized representative of your business;

- through our third-party ordering portal;

- through communications with us by telephone, email, text message, or in person;

- when an order, delivery, skip, or account record is created or updated; and

- automatically through our website host and other service providers.

4. How We Use Information

We may use information to:

- establish and maintain business customer accounts;

- process, fulfill, document, and support orders and deliveries;

- create and manage invoices and business records;

- provide customer service and respond to inquiries;

- send requested weekly order and delivery reminders and occasional notices about holiday schedules or other changes to normal business routines;

- process delivery-skip requests and messaging preferences;

- maintain evidence of SMS consent and honor opt-out requests;

- secure, maintain, and improve our website and business operations;

- prevent misuse, fraud, or security incidents;

- comply with law and enforce our agreements; and

- protect our rights, customers, personnel, and operations.

5. How We Disclose Information

We may disclose information to service providers that process information on our behalf for legitimate business purposes. These may include:

- Google, which hosts our website;

- Orderspace, which provides our business-to-business ordering portal;

- Zapier, which supports workflow automation and related records;

- Intuit QuickBooks Online, which supports invoicing and accounting;

- Twilio, which would provide our SMS messaging services; and

- professional advisers and other vendors that support our business, security, legal, or compliance needs.

These providers may process information under their own terms and privacy policies as well as their agreements with us.

We may also disclose information when reasonably necessary to comply with law, legal process, or governmental requests; investigate fraud or security issues; protect rights or safety; enforce agreements; or complete a merger, financing, sale, reorganization, or transfer of some or all of our business, subject to applicable law.

6. No Sale or Advertising-Based Sharing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or provide it to third parties or affiliates for their own marketing or promotional purposes.

Mobile information, text messaging originator opt-in data, and consent will not be sold or shared with third parties or affiliates for their marketing or promotional purposes. We may provide mobile information to service providers that help us operate the messaging program, but only as necessary to perform services for us or as otherwise permitted or required by law.

7. SMS Communications

If you opt in to our SMS program, Three Points Trading may send approximately four recurring automated order or delivery reminder messages per month, plus occasional operational notices when holidays or other events change our normal business routine. Message frequency may vary. Message and data rates may apply.

Consent to SMS communications is not a condition of purchasing goods or services. Reply STOP to cancel recurring messages or HELP for assistance. A request to skip one delivery does not, by itself, withdraw consent from the SMS reminder program. See our SMS Terms at https://threepointstrading.com/sms-terms.

8. Cookies and Similar Technologies

We do not currently use the website for behavioral advertising. Because the site is hosted by Google, Google or other essential providers may use cookies or similar technologies to deliver, secure, and measure their services. Browser controls may allow you to block or delete cookies, although doing so can affect website functionality.

9. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to maintain customer, order, invoice, tax, delivery, consent, opt-out, security, and legal records. Retention periods vary according to the nature of the information and applicable business or legal requirements.

We retain evidence of SMS consent for as long as needed to meet applicable requirements and at least until the recipient withdraws consent. We may retain suppression records after an opt-out so that we can honor the request.

10. Data Security

We use reasonable administrative, technical, and physical safeguards appropriate to the information we maintain. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Third-Party Services and Links

Our website links to third-party services, including our ordering portal. Those services are governed by their own terms and privacy practices. We are not responsible for the content or privacy practices of third-party websites or services, although we choose providers to support our business operations.

12. California Privacy Rights

California residents may have rights regarding personal information under applicable law. Depending on the law and circumstances, those rights may include requesting access to, correction of, or deletion of certain information and receiving information about our data practices. Some information may be exempt, and we may retain information when permitted or required by law.

To make a privacy request, contact us using the information below. We may need to verify the request and the requester's authority to act for a business or another person. We will not unlawfully discriminate against anyone for exercising an applicable privacy right.

Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer a sale- or sharing-based opt-out process.

13. Children

Our website and services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children under 13.

14. Changes to This Policy

We may update this Privacy Policy as our practices, services, or legal obligations change. We will post the updated version and revise the effective date. Material changes may also be communicated through other appropriate means.

15. Contact Us

Three Points Trading, Co.  

DBA Crystal Dairy Distributing  

PO Box 744  

Carmichael, CA 95809  

Email: moo@threepointstrading.com  

Phone: 916-740-2276