Diabetic Buyback Program
    LEGAL

    Privacy Policy

    Last updated: May 21, 2026

    XBC Group LLC, doing business as Diabetic Buyback Program ("we," "us," or "our"), operates the website diabeticbuybackprogram.com. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have under United States federal law and applicable state laws including the Colorado Privacy Act and the California Consumer Privacy Act as amended.

    1

    Information we collect

    We collect the following categories of personal information directly from you when you request a quote, ship supplies to us, or contact our support team:

    1. a.Identifiers: name, mailing address, email address, telephone number.
    2. b.Commercial information: a description of the supplies you wish to sell, your selected payment method, and your transaction history with us.
    3. c.Financial account information for payment: depending on the payment method you choose, this may include your Venmo handle, PayPal email, Cash App tag, Zelle phone or email, or bank routing and account number for ACH direct deposit. We do not collect or store full credit-card numbers.
    4. d.Communications: the contents of text messages, emails, and phone calls between you and our team.

    We collect the following categories automatically when you use the website:

    1. e.Device and usage information: IP address, browser type, operating system, referring URL, pages viewed, and timestamps. We use this to operate and improve the site and to detect fraud.
    2. f.Cookies and similar technologies: small data files stored on your device. You can disable cookies in your browser settings, but parts of the site may not function correctly without them.
    2

    How we use your information

    We use your personal information to:

    1. a.Process your quote, generate a prepaid UPS return label, receive and inspect your shipment, and issue payment.
    2. b.Communicate with you about your transaction.
    3. c.Comply with our legal obligations, including tax reporting.
    4. d.Detect, prevent, and respond to fraud, abuse, and violations of our Terms of Service.
    5. e.Improve our site and our service quality.

    We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

    3

    Categories of third parties with whom we share information

    We share your personal information only with service providers acting on our behalf and only for the purposes listed above. Current categories include:

    1. a.Shippo (Popout, Inc.) for the sole purpose of generating UPS Ground return labels and tracking shipments.
    2. b.UPS as the carrier for inbound shipments.
    3. c.Our payment partners: Venmo, PayPal, Cash App, Zelle, our bank for ACH, and our check-printing service.
    4. d.Our website host and analytics providers.
    5. e.Our communications providers for email and SMS.
    6. f.Our accountants, lawyers, and other professional advisors.
    7. g.Law enforcement or government authorities when we are legally required to disclose information.

    Each service provider is contractually limited to using the information solely to perform services for us.

    4

    How long we keep your information

    We keep your information for as long as your account is active and for the period required by federal and state tax, accounting, and consumer-protection laws, typically seven (7) years for financial records.

    5

    Your rights

    Depending on where you live, you may have the following rights:

    1. a.To know what personal information we have collected about you.
    2. b.To access a copy of that information.
    3. c.To request correction of inaccurate information.
    4. d.To request deletion of your information, subject to our legal obligation to retain financial records.
    5. e.To opt out of the sale or sharing of personal information. We do not sell or share for advertising.
    6. f.To not be discriminated against for exercising any of these rights.

    To exercise any right, email support@diabeticbuybackprogram.com or write to the address in Section 9. We will verify your identity using the contact information we already have on file and will respond within forty-five (45) days.

    6

    Children

    This site is not directed to children under thirteen (13). We do not knowingly collect personal information from children. If you believe we have collected information from a child, email support@diabeticbuybackprogram.com and we will delete it.

    7

    Security

    We use industry-standard administrative, technical, and physical safeguards to protect your information. No system is perfectly secure. If we ever learn of a breach affecting your information, we will notify you and the appropriate state authority as required by law.

    8

    Changes to this Privacy Policy

    We may update this Policy from time to time by posting a revised version and updating the "Last updated" date.