What this covers
The application on this site, and what we do with it afterwards.
Lakai is responsible for the information described here. Questions and requests: wholesale@lakai.com. Shopping in the wholesale store is covered by the store's own privacy policy. This program is for businesses; we do not knowingly collect information from anyone under 18. If this notice changes, the date at the top changes with it.
What we collect
What is on the form, a small technical record, and our notes.
- Your business — names, type, year opened, EIN, contact details, addresses, what you sell and where, rough volumes, and how you heard about us.
- People — the owner's, buyer's and accounts-payable contacts' names and emails, and who signs. If you give someone else's details, make sure they are happy with that.
- Tax documents — your resale permit details and the certificate files you upload. Black out any Social Security number first.
- Your agreement — which terms you ticked, their version and a fingerprint of the exact wording, and the date.
- Technical record — when the form was sent, the internet (IP) address, country and browser it came from, and whether the bot check passed.
- Our notes — a reference number, our decision and its date, and any short internal note.
Do not send Social Security numbers, bank details or card numbers.
Why we use it
To decide on your application and run your account.
To review the application; to open and run the account — login, invoices, shipping and order emails; to hold the resale certificates tax law requires; to keep a record of what was agreed; and to detect fraud. Required answers are what we need to open an account. A person decides every application; the only automated step is the bot check. Where UK or EU law applies, we rely on steps before a contract and our legitimate interests, and on consent only for marketing.
Who sees it
Lakai's wholesale team and the services that run the process. No advertisers.
Applications are read by Lakai's wholesale staff, through a password-protected admin area, and by the people who maintain this site under confidentiality. We share information only with Cloudflare, which hosts the site, stores applications and runs the "verify you are human" check (Cloudflare also uses that check's technical signals to improve it — see its Turnstile privacy notice); with the platforms that run the wholesale store and invoicing once you are approved (your EIN and certificate files stay in the application record); with tax authorities, courts or regulators when the law requires; with professional advisers; and with a successor to the wholesale business. Emails about your application — our team's notice and your receipt — are sent through Resend, which receives only what those emails contain (a summary of your answers and your reference — never your EIN, permit number or files).
We do not sell this information, and we do not share it for targeted advertising — so there is no "Do Not Sell or Share" choice to make here.
Where it is kept
Encrypted in transit and at rest. Kept as long as the account and tax law need.
Applications and certificate files are stored privately on Cloudflare's infrastructure, encrypted at rest, in data centres that may be outside your country (including the United States and Asia-Pacific). Uploaded files never have a public web address.
Approved dealers: kept while the account is open and for up to seven years after, because tax authorities can ask us to prove tax-exempt sales. Applications we do not approve: we aim to delete the tax documents within 90 days of our decision (or of applying, if we make none) and the rest within 12 months. This is not yet automatic — ask, and we will delete yours sooner. These periods cover every copy we hold.
Your rights
Ask us what we hold, correct it, or delete it where the law allows.
Email wholesale@lakai.com from the address on your application, or quote your reference. We check requests are genuine, there is no charge, and we aim to reply within a month. A request never counts against you. Records that tax law requires us to keep cannot be deleted early; we will tell you if that applies. In the UK or EEA you can also object to or restrict processing, get a portable copy, and complain to your data-protection authority. A Global Privacy Control signal has no effect here, because nothing is sold or shared.
Marketing and cookies
Applying is not signing up for marketing. This site sets no cookies of its own.
Restock alerts, drop news and promotions are sent only if you ask for them, and every one lets you unsubscribe. Emails about your application, account, orders or invoices are not marketing.
The form sets no cookies and runs no analytics or advertising code. The bot check is Cloudflare Turnstile: it sends Cloudflare technical details about your browser and connection, may keep a short-lived token in your browser, and does not read what you type or track you across sites.