Privacy Policy

When we use the term “personal data” in this Privacy Policy, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an individual. The term does not include aggregate or de-identified data that is maintained in a form that is not reasonably capable of being associated with or linked to an individual and does not apply to other information that is excluded from privacy protections under applicable data protection law.

We collect your personal data in three ways: (i) Personal Data You Provide, (ii) Automatically Collected Personal Data, and (iii) Personal Data from Third Parties. More detail is provided below.

• Information When You Contact Us or Interact with Us: We collect personal data that you provide when you contact or interact with us, such as your name, address, email address, and telephone number. We may collect other information to process your request properly, such as questions, comments, feedback, or requests.
• Promotions and Products Interest: We collect personal data if you choose to participate in a survey, research, promotion, marketing campaign, free trials or evaluations of our products, webinars, community, help forums, or events conducted or sponsored by us. You may provide us with personal data such as your name, email address, and/or telephone number, employer name, your title, and audio or visual information.
• Purchase Information: When you make a purchase on our websites or with our staff, including the purchase of Acme products and services, we collect information about the purchase, such as contact information, items you have purchased, and professional information.

• Cookies: We use cookies and similar technologies to monitor the usage of our website. For example, we use cookies to remember your language preferences and login information, as well as to analyze our website traffic patterns. To learn more about our use of cookies, please see our Cookies Policy. We will obtain your consent to our use of cookies where required by law.
• Technical and Usage Information: We collect certain device and network connection information when you access and interact with our website. This information includes IP address, browser type, internet service provider, URLs of referring and exit pages, operating system, date and time stamp, information that you search for, locale and language preferences, identification numbers associated with your device, your mobile carrier, and system configuration information. Occasionally, we connect personal data gathered in our log files as necessary to improve our website. In such a case, we would treat the combined information in accordance with this Privacy Policy.

We obtain personal data from other sources, which we may combine with personal data we collect automatically or directly from you. We may receive the same categories of personal data as described above from the following third parties:

• Our Customers, and Other Users or Individuals Who Interact with Our Services: We may receive your personal data from our customers, and other users or individuals who interact with our services. This includes any information collected by us when your organization contacts us for support related to your organization’s use of our products, services, or events. In such instances, we will also collect information about the reason for the inquiry and any other information provided to us.
• Your Employer or Organization: If you interact with our services through your employer or organization, we may receive your personal data from them.
• Business Partners: We may receive your personal data from our business partners.
• Social Media: When you interact with our services through various social media networks, we may receive some information about you when permitted to share with third parties. The data we receive is dependent upon your privacy settings with the social network, and including, but not limited to, your profile information, profile picture, gender, username, user ID, age range, language, and country. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services.
• Service Providers: Our service providers that perform services on our behalf, such as survey and marketing providers, collect personal data and often share some or all of this data with us.

We share your personal data with third parties, such as (i) Agents and Authorized Partners, (ii) Service Providers, (iii) Third Parties for Corporate Transactions, and (iv) Other Third Parties.

We provide limited personal data to certain authorized resellers of our products and other authorized technology partners to communicate information to you about our products and as part of events that we jointly host with such partners.

We provide your personal data to contractors, service providers, and other third parties to support our business, which are bound by obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.

We may disclose your personal data to third parties (e.g., a buyer or other successor) in connection with a corporate transaction, such as a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which personal data held by us in the capacity of Data Controller is among the assets transferred.

We may access, preserve, and share your personal data with third parties when required by law or if we have good faith belief that it is necessary to:

• comply with applicable law, legal process, or government requests, as consistent with international recognized standards;
• comply with a subpoena, court order, or legal process served on us;
• establish or exercise our legal rights or defend against legal claims; or
• protect the property, interests, or personal safety of our agents, employees, customers, or the public.

Under such circumstances, we may be prohibited by law, court order, or other legal process from providing notice of the disclosure, and we reserve the right to not provide such notice in our sole discretion.

You have rights and choices when it comes to your personal data. Some of these rights apply generally, while others will only apply in certain circumstances. Depending on the scenario, these rights may be subject to some limitations provided by law.

• Right to access: You have the right to obtain information about the data stored about you, including certain information about the processing.
• Right to rectification: You have the right to demand the rectification of any incorrect or inaccurate personal data we hold with respect to you.
• Right to erasure: You have the right to have some or all your personal data erased.
• Right to restriction of processing: You have the right to have your data with processing restriction by satisfying prerequisites in the law (e.g., contesting the accuracy of your personal data).
• Right to withdraw consent: You are entitled to withdraw any declaration(s) of consent previously made and relating to the processing of your personal data with future effect. However, such withdrawal of consent does not affect the legitimacy of any processing operations previously executed.
• Right to data portability: You have the right to data portability in circumstances where we rely on contractual necessity or consent as our legal basis. This means that you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to share it with a third party.
• Right to object to the processing: You have the right to object to the processing of your personal data in certain circumstances. This right applies when we are performing a task in the public interest, pursuing our legitimate interests or those of a third party, or when your data is processed for the purpose of facilitating scientific or historical research in certain circumstances.

Please note that you may not be able to benefit from all features of our website if you request the deletion of your personal data or object to or withdraw your consent to such processing.

To exercise any of the above rights, please contact us by following the instructions available in the section “Contact Us” in this Privacy Policy.

If you are not satisfied with how we have responded to any of your rights requests, you also have the right to lodge a complaint with your local supervisory authority.

The personal data we collect may be transferred to and stored in countries outside of the jurisdiction you are in to locations where we and our third-party service providers have operations.

In the event of a transfer, we ensure that the personal data is transferred to countries recognized as offering an adequate level of protection, or the transfer is made pursuant to appropriate safeguards, such as standard contractual clauses adopted by the European Commission. If you wish to inquire further about these safeguards used, please contact us.

Acme complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), (collectively the “Data Privacy Framework” or “DPF”), as set forth by the U.S. Department of Commerce, regarding the transfers of non-HR personal data from the European Union, the United Kingdom (and Gibraltar), and Switzerland, in accordance with the transfer requirements under applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”). Acme has certified to the U.S. Department of Commerce that it adheres to the DPF Principles of notice, choice, accountability for onward transfer, security, data integrity and purpose limitation, access, and recourse, enforcement, and liability with respect to all personal data received from the EU, UK, or Switzerland in reliance on the DPF.

Acme is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) with regard to its compliance with the DPF Program. If there is any conflict between the terms in this statement and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF program, and to view our certification, please visit https://www.dataprivacyframework.gov.

• Purposes of Data Processing: Acme may act as a data processor or a data controller when processing non-HR personal data transferred from the European Economic Area to the United States of America, depending on the product(s) or service(s) being provided. The types of non-HR data we collect and process varies depending on the business relationship, the product or service being provided, customers’ preferences, contractual requirements with customers, and the legitimate interests, including marketing, security, billing, transaction processing, product support, and relationship management.
• Notice: At the time of data collection, or as soon as practicable thereafter Acme notifies data subjects about its data practices regarding personal data.
• Choice: Acme offers individuals the opportunity to opt out of personal data, or opt in for sensitive data being: (i) disclosed to a third party (other than to Acme’s service providers under contract or pursuant to lawful request as set forth below), or (ii) used for a purpose materially different from the purpose for which it was originally collected or subsequently authorized by you.
• Access: Individuals whose personal data may be processed by Acme are entitled to obtain confirmation of whether such personal data is being processed, access the information held, and ask us to correct, amend, or delete that information where it is inaccurate or has been processed in violation of the laws. If requested to remove data, we will respond within a reasonable time frame.
• Accountability for Onward Transfers (Transfer to Third Parties): When Acme transfers personal data to a third party, we take reasonable and appropriate steps to ensure the third-party processes personal data for limited and specified purposes and in a manner consistent with our DPF obligations. Where the transfer is to a third-party agent acting on our behalf, we may be liable if such third parties fail to meet those obligations.
• Security: Acme takes reasonable and appropriate measures to protect personal data from loss, misuse and unauthorized access, disclosure, alteration, and destruction.
• Data Integrity and Purpose Limitation: Acme will retain personal data for a reasonable period of time necessary to comply with applicable law, in accordance with our retention policies, and in a manner that is compatible with and relevant to the purposes for which it was collected or authorized by individuals.
• Lawful Requests: We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
• Enforcement and Dispute Resolution: If you have a question or complaint related to Acme’s participation in the DPF, please contact us. Please note, to pursue your rights under the DPF, your complaint must concern personal data received from the EU, UK, or Switzerland in reliance on the DPF, which excludes any personal data transferred under the Standard Contractual Clauses (SCCs), any approved derogation from the EU Directive, or other non-DPF data transfer mechanisms.

Acme has further committed to refer unresolved DPF complaints to the International Centre for Dispute Resolution, which is the international division of the American Arbitration Association (“ICDR/AAA”), located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit the ICDR/AAA at https://go.adr.org/dpf_irm.html for more information or to file a complaint. The services of the ICDR/AAA are provided at no cost to you.

If neither Acme nor its dispute resolution provider is able to resolve your DPF complaint, you may be entitled, under certain conditions, to invoke binding arbitration through the Data Privacy Framework Panel. DPF-certified organizations must respond within 45 days of receiving a complaint.

We do not knowingly collect personal data from children under 13. If you are under 13, do not use or provide any information on this website or provide any data about yourself to us. If we learn we have collected or received personal data from a child under 13 without verification of parental consent, we will delete that data. If you believe we might have any information from or about a child under 13, please contact us.

You can contact us online or at the following postal address:

Acme Metal Products
1784 Salisbury Road
Statesville, NC 28677
United States