MetalPrints.com understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our customers and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
This Privacy Policy sets out the details relating to how we handle your personal information, whether collected online or offline, as:
In this Policy the following terms shall have the following meanings:
This Privacy Policy applies only to your use of our Site. Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.
Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’
Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
Under the GDPR, you have the following rights, which we will always work to uphold:
We may collect some or all of the following personal data (this may vary according to your relationship with us):
Information You Choose to Provide to Us, We may ask you to provide personal information when:
Information We Collect Automatically
Tracking Across Time and Different Sites
Other Categories Of Sources From Which We Collect Your Personal Information
Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it. Your personal data may be used for one of the following purposes:
We may also use your personal data for marketing purposes, which may include contacting you by email and/or telephone with information, news, and offers on our products and/or services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
Third Parties whose content appears on our Site may use third-party Cookies, as detailed below in Part 14. Please refer to Part 14 for more information on controlling cookies. Please note that we do not control the activities of such third parties, nor the data that they collect and use themselves, and we advise you to check the privacy policies of any such third parties.
We may also use your personal data for marketing purposes, which may include contacting you by email and/or telephone with information, news, and offers on our products and/or services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out.
Third Parties whose content appears on our Site may use third-party Cookies, as detailed below in Part 14. Please refer to Part 14 for more information on controlling cookies. Please note that we do not control the activities of such third parties, nor the data that they collect and use themselves, and we advise you to check the privacy policies of any such third parties.
How We Disclose Personal Information
Our Applications and Services
If you are an end user of our applications, your personal information may be viewed by other users with access to the applications.
Disclosure to Unaffiliated Third Parties
We may disclose your information for a variety of reasons including, but not limited to, to prevent an emergency, to prevent harm to others, to respond to legal requirements, to protect or enforce our rights and policies, to protect or enforce the rights of a third party, or as required or permitted by law (including, without limitation, to comply with a subpoena or court order). In particular, if you have an account, we may disclose your information to a third party that alleges that you have infringed their intellectual property rights in any way. Similarly, if you allege that another user is infringing upon your intellectual property rights, we may disclose your information to that user.
Disclosure to Service Providers and Online Partners
We may contract with various service providers who help us provide, maintain, and improve the Website and the services. For example, we use a service provider to process payments made to us, and may subcontract out production, fulfillment, analytics, reporting or other operations. We also contract with several online partners to help manage, monitor and optimize our Website and services and to help us measure the effectiveness of our advertising, communications and how visitors use the Website.
Disclosure of Non-Personal Information
We may disclose your de-identified information, in aggregate form, to potential strategic partners, advertisers, investors, customers, and others. Deidentified information means information subjected to reasonable measures to ensure that the deidentified information cannot be associated with the individual. We maintain de-identified information in a deidentified form and do not attempt to reidentify it, except that we may attempt to reidentify the information just to determine whether our deidentification processes function correctly.
Internet Advertising
We may use third party service providers to serve ads on our behalf across the Internet and sometimes on the Website. They may collect anonymous information about your visits to our Website, and your interaction with our products and services. They may also use information about your visits to this and other websites to target advertisements for goods and services.
Disclosure to Successors
If the ownership of all or substantially all of our business changes or we otherwise transfer assets relating to our business or the Website to a third party, such as by merger, acquisition, bankruptcy proceeding or otherwise, we may transfer or sell your personal information to the new owner. In such a case, unless permitted otherwise by applicable law, your information would remain subject to the promises made in the applicable privacy policy unless you agree differently.
Your Consent
In addition to the disclosure described elsewhere in this Privacy Policy, we will disclose personal information with companies, organizations, or individuals outside of MetalPrints.com when we have your consent to do so.
We will not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected. Your personal data will therefore be kept for the following periods (or, where there is no fixed period, the following factors will be used to determine how long it is kept):
We store your personal data at our server room in Scotts Valley, CA, USA. This is needed to process and ship your order and collect payment.
We are committed to protecting the security of all of the personal information we collect and use.
We use a variety of physical, administrative and technical safeguards designed to help protect it from unauthorized access, use and disclosure. We have implemented best-practice standards and controls in compliance with internationally recognized security frameworks. We use encryption technologies to protect data at rest and in transit. It is important for you to protect against unauthorized access to your password and to your computer. Be sure to close your browser after you have completed your visit to the Site.
Please note that despite our reasonable efforts, no security measure is ever perfect or impenetrable, so we cannot guarantee the security of your personal data.
Your personal data is only shared when necessary to complete your order transactions and to gather certain interest, demographics, and audience data to support MetalPrints.com’s marketing efforts. All information is shared in a secure manner and is never sold or traded with other parties.
In addition to your rights under the GDPR, set out in Part 5, when you submit personal data via our Site, you may be given options to restrict our use of your personal data. In particular, We aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails).
You may access certain areas of our Site without providing any personal data at all. However, to use all features and functions available on our Site you may be required to submit or allow for the collection of certain data.
You may restrict our use of Cookies. For more information, see Part 14 for our Cookie Policy.
If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”.
All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 15.
Our Site may place and access certain first-party Cookies on your computer or device. First-party Cookies are those placed directly by us and are used only by us. We use Cookies to facilitate and improve your experience of our Site and to provide and improve our products and services. By using our Site, you may also receive certain third-party Cookies on your computer or device. Third-party Cookies are those placed by websites, services, and/or parties other than us. Third-party Cookies are used on our Site for providing live chat, marketing and feedback submission. In addition, our Site uses analytics services provided by Google Analytics, which also use Cookies. Website analytics refers to a set of tools used to collect and analyze usage statistics, enabling us to better understand how people use our Site.
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details (for the attention of Controller):
We will change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Any changes will be immediately posted on our Site, and you will be deemed to have accepted the terms of the Privacy Policy on your first use of our Site following the alterations. We recommend that you check this page regularly to keep up to date.
We process data in Colorado, California, North Carolina and Missouri and EU and rely on legally provided mechanisms to lawfully transfer data across borders, such as contracts incorporating data protection and sharing obligations. We provide the capability for the return, transfer and/or disposal of personal data in a secure manner.
We will only collect and process your personal data where we have a lawful reason for its collection.
When you visit our website and provide us with your personal information, we collect and use it with your consent.
As an application end user, you consent to our collection of your personal information when you log in for the first time. However, your employer has control of the account and may upload and share additional personal information.
Your employer’s responsibility is to ensure that collecting, using and sharing the personal information uploaded to the application complies with all applicable legislation.
Where we rely on your consent to process personal data, you have the right to withdraw or decline your consent at any time.
If you have any questions about the lawful bases upon which we collect and use your personal data, please contact us at privacy@metalprints.com or contact us by mail at 900 Disc Drive, Scotts Valley, CA 95066 USA, ATTN: Privacy Officer.
You may choose to receive or not receive marketing e-mail from us. Please click the “Unsubscribe” link, when available in the email we sent you to stop receiving marketing e-mail from us.
Even if you opt-out of receiving marketing e-mail, we may still communicate with you regarding security and privacy issues, servicing your account, fulfilling your requests, or administering any promotion or any program in which you may have elected to participate.
No Information from Children Under Age 13. If you are under the age of 13, please do not attempt to register with us at the Website or provide any personal information about yourself to us. If we learn that we have collected personal information from a child under the age of 13, we will promptly delete that information. If you believe we have collected personal information from a child under the age of 13, please email us at privacy@metalprints.com or contact us by mail at 900 Disc Drive, Scotts Valley, CA 95066 USA, ATTN: Privacy Officer.
Prospective users between the ages of 13 and 17 can only use the Website and services under their parents or legal guardian’s supervision. If you are between the ages of 13 and 17, you, your parent, or your legal guardian may request that we remove any of your information from our database and/or opt-out of receiving communications from us. If you wish to do so, please contact us by email at privacy@metalprints.com or contact us by mail at 900 Disc Drive, Scotts Valley, CA 95066 USA, ATTN: Privacy Officer.
This section provides additional specific information for California residents as required by the California Privacy Rights Act of 2020 ("CPRA").
We collect the personal information identified in Section 2.1 for the purposes identified in Section 3.0 and retains it for the period described in Section 6.0. We do not sell your personal information. We also do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
The CPRA requires that we provide you with the following information about disclosures of your personal information to third parties for "business purposes" as that term is defined in the CPRA during the twelve months preceding the last updated date of this Privacy Policy:
We disclosed your identifiers, commercial information, and internet or other electronic network activity described above to our service providers, including payment processing providers, customer relationship management platform providers, consultants, helpdesk service providers, and website analytics companies for the business purpose of performing services on our behalf.
We have disclosed your identifiers, commercial information, and internet or other electronic network activity described above to other companies within the Circle Graphic family of companies for the business purposes of (a) auditing compliance with policies and applicable laws, (b) helping to ensure security and integrity, (c) debugging, (d) short-term transient use, (e) internal research, and (f) activities to maintain or improve the quality of a service.
We have no actual knowledge that we sell or share the personal information of consumers who are under 16 years of age.
As is common practice among businesses operating online, we may allow third parties to receive information about you via cookies for purposes of analyzing and optimizing our services, supporting live chat, to personalize your online experience by providing adver-tisements that are more relevant to you, and for statistical research and analytics. We do not "sell" your Personal Information as most people would understand that term, mean-ing that we do not disclose your Personal Information to any third party in exchange for a monetary payment. However, as is common practice among businesses operating online, we may allow third parties to receive information about you via cookies for purposes of analyzing and optimizing our services, to personalize your online experience by providing advertisements that are more relevant to you, and for statistical research and analytics. These activities may be defined as a "sale" of Personal Information, or as a disclosure of Personal Information to third parties for cross-context behavioral advertising ("sharing"), under the CPRA.
In the last 12 months, we have disclosed Identifiers, including without limitation name, physical address, e-mail address; Geolocation, and Internet or Other Electronic Network Activity Information, to analytics providers and advertising platforms, and such disclosure may be considered a "sale" or "sharing" of personal information. We disclosed this information in order to enable marketing to you and to deliver targeted advertising on the Site and in other interactions that you have with MetalPrints.com while online.
We have no actual knowledge that we have sold or "shared" the personal information of children under 16, in the last 12 months and we have no intention to do so.
Company discloses personal information to third parties for analytical, marketing, and advertising services, which may constitute sales of personal information, as follows:
Categories of Personal Information | Categories of Third-Party Recipients |
---|---|
Identifiers | Advertising Networks - to provide advertising better suited to your interests |
Internet Activity Information | Analytics Providers - to better understand our website visitors |
Geolocation | Advertising Platforms - to provide advertising better suited to your interests |
Audio and Inferences | Analytics Providers - to better understand our website visitors |
Company "shares" personal information with third parties as follows in order to provide you with information about products and services that may be of interest to you:
Categories of Personal Information | Categories of Third-Party Recipients |
---|---|
Identifiers | Advertising Networks - to provide advertising better suited to your interests |
Geolocation | Advertising Platforms - to provide advertising better suited to your interests |
Internet Activity Information | Analytics Providers - to better understand our website visitors |
Commercial Information | Advertising Platforms - to provide advertising better suited to your interests |
Audio and Inferences | Analytics Providers - to better understand our website visitors |
As a California resident, you may be able to exercise the following rights under the CPRA in relation to your personal information that we have collected (subject to certain limitations and exceptions at law):
In addition to the rights mentioned above, the CPRA grants California residents with the following additional rights:
Please note that if exercising these rights limits our ability to process personal information (such as a deletion request), we may no longer be able to provide you with our products and services or engage with you in the same manner.
To opt out of the sale or sharing of your personal information, you may modify your cookies settings or contact us at privacy@metalprints.com.
To exercise any of your right mentioned above, please submit a request by contacting us at privacy@metalprints.com or contact us by mail at 900 Disc Drive,Scotts Valley, CA 95066 USA, ATTN: Privacy Officer, we will need to verify your identity before processing your request.
We will need to verify your identity before processing your request.
In order to verify your identity, we will generally require sufficient information from you so that we can match it to the information we maintain about you in our systems. Depending on the risk entailed by the request (i.e., a request for specific pieces of personal information), we may need additional personal information from you to be able to identify you. We will notify you.
We may decline a request to exercise the right to know, correct, or delete if we cannot verify your identity to a sufficient level of certainty or locate your information in our systems, or as permitted by law.
We endeavor to respond to a privacy rights request within the required timeframes. If we need more time, we will inform you of the reason and extension period in writing. If you submit your privacy rights request electronically, we will deliver our written response to the verified email associated with the request. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
You may choose to designate an authorized agent to make a request on your behalf. The authorized agent must submit with the request a document signed by you that authorizes the authorized agent to submit the request on your behalf. Unless you have provided a power of attorney under the California Probate Code, we may ask you or your authorized agent to follow the applicable process described above for verifying your identity.
If we do not take action on your Privacy Rights Request within the 45 days response period, or in the event of an extension, within the maximum 90-day response period, we will inform you in writing of the reasons for not taking action, as well as provide an explanation of any rights you have to appeal the decision.