Privacy Policy

1. Introduction

MetalCore Manufacturing Inc. ("MetalCore," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and manage your information when you visit our website, use our services, or interact with us in any way.

By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms, please do not access our site or services.

2. Information We Collect

We collect information that you provide directly and information collected automatically:

2.1 Information You Provide

• Identity Data: Name, job title, company name, and professional credentials when you submit a quote request, register for a webinar, or contact us.
• Contact Data: Email address, phone number, mailing address, and billing information.
• Business Information: Details about your manufacturing requirements, project specifications, technical drawings, RFQ (Request for Quote) documents, and order history.
• Communication Data: Contents of emails, forms, or messages you send us; records of correspondence; and feedback or survey responses.
• Account Data: Username, password, and account preferences when you create an account on our portal.

2.2 Information Collected Automatically

• Usage Data: Pages visited, time spent on site, clickstream data, download history, and referral URLs.
• Device Data: IP address, browser type, operating system, device identifiers, and screen resolution.
• Location Data: General geographic location derived from your IP address.
• Cookies & Similar Technologies: Identifiers stored on your device that help us remember preferences and analyze traffic patterns (see Section 7 for details).

3. How We Use Your Information

We use the information we collect for the following business purposes:

• Quote & Order Processing: To evaluate manufacturing requirements, generate accurate quotes, and fulfill production orders.
• Customer Support: To respond to inquiries, provide technical assistance, and manage warranty or quality claims.
• Service Improvement: To analyze site usage, optimize our website experience, and develop new manufacturing capabilities.
• Communication: To send order confirmations, shipment updates, policy notifications, and (with consent) marketing communications.
• Quality Assurance: To maintain material traceability, document certifications, and support regulatory compliance (ISO 9001:2015, AS9100, ITAR).
• Security: To detect and prevent fraud, abuse, and unauthorized access to our systems.
• Legal Compliance: To comply with applicable laws, regulations, export controls, and government agency requirements.

4. Legal Basis for Processing (GDPR)

For individuals in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Performance of a Contract: Processing necessary to fulfill our manufacturing agreements and provide requested services.
• Legitimate Interests: Pursuing our legitimate business interests in operating, improving, and securing our services.
• Consent: Where you have explicitly consented to specific processing activities, such as receiving marketing emails.
• Legal Obligation: Where processing is required to comply with applicable laws and regulations.

5. Information Sharing & Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

5.1 Service Providers

We engage trusted third-party vendors who assist us in operating our business, including cloud hosting, data analysis, payment processing, shipping fulfillment, and IT support. These parties are contractually obligated to protect your data and use it only for the services they perform for us.

5.2 Business Partners & Subcontractors

To fulfill manufacturing orders, we may share relevant technical specifications and project details with approved subcontractors and supply chain partners, bound by confidentiality agreements and quality standards.

5.3 Legal Requirements

We may disclose your information when required by law, regulation, legal process, government request, or to protect the rights, property, or safety of MetalCore, our clients, or the public. This includes compliance with export control laws and ITAR regulations.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and multi-factor authentication for internal systems
• Regular security audits and penetration testing
• Employee training on data protection and cybersecurity best practices
• Secure data centers with 24/7 physical and network monitoring
• Incident response protocols and breach notification procedures

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and serve relevant content.

7.1 Types of Cookies We Use

1. Essential Cookies: Required for the website to function properly (e.g., session management, authentication). These cannot be disabled.
2. Analytical Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics). We aggregate and anonymize this data.
3. Functional Cookies: Remember your preferences such as language, region, and display settings.
4. Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. We use these only with your consent.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored and delete them individually
• Block third-party cookies
• Block cookies from specific sites
• Block all cookies
• Delete all cookies when you close the browser

Please note that disabling cookies may affect the functionality of our website and your ability to access certain features.

8. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where there is no legal obligation to retain it.
• Right to Portability: Request transfer of your data in a machine-readable format.
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Non-Discrimination: Exercise your rights without receiving discriminatory treatment.

To exercise any of these rights, please contact us using the information in Section 13. We will respond to verified requests within 30 days.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting, or reporting requirements:

• Customer Accounts: Retained for the duration of the business relationship and up to 7 years after account closure.
• Quote Requests: Retained for 3 years after submission.
• Order & Production Records: Retained for the duration of the warranty period plus statutory requirements (typically 7-10 years for aerospace/defense).
• Website Analytics: Aggregated and anonymized; raw data retained for up to 26 months.
• Marketing Communications: Retained until you opt out or 5 years of inactivity.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected data from a child, we will take immediate steps to delete that information.

11. Third-Party Links & Services

Our website may contain links to third-party websites, industry directories, social media platforms, and partner sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Specific third-party services we utilize include:

• Google Analytics: Web traffic analysis (Google's Privacy Policy: google.com/policies/privacy/)
• LinkedIn: Professional networking and social features
• CRM Platform: Customer relationship management for order tracking
• Payment Processors: Secure payment processing for sample orders

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or industry standards. When we make significant changes, we will:

• Post the updated policy on this page with a revised "Last Updated" date
• Notify registered users via email at least 30 days before the change takes effect
• Provide clear notice on our website homepage for material changes

We encourage you to review this policy periodically to stay informed of how we are protecting your information. Continued use of our services after changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Mailing Address: MetalCore Manufacturing Inc., 4200 Industrial Blvd, Detroit, MI 48201, United States
• Email: privacy@metalcore-mfg.com
• Phone: +1 (800) 555-METAL (6382)
• Data Protection Officer: dpo@metalcore-mfg.com
• Response Time: We will respond to all privacy inquiries within 30 days of receipt.

Regulatory Complaints: If you are located in the EEA, you also have the right to lodge a complaint with your local data protection authority. A list of supervisory authorities is available at edpb.europa.eu.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally compliant transfer mechanisms.