Privacy Policy

1. Introduction

Welcome to Tarheel Metal Structures. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website hosted on Cloudflare.

2. Information We Collect

We collect information in the following ways:

• Device & Log Data: When you visit our site, your browser automatically sends information including your IP address, browser type and version, operating system, referring URLs, and pages visited.
• Usage Data: The pages of our site that you visit, the time and date of your visit, and the time spent on those pages.
• Contact Form Submissions: When you use the contact form on our website, we collect the information you provide, which may include your name, email address, phone number, project address, and details about the metal building you are interested in. This information is used to respond to your inquiry and prepare your quote, and is not used for marketing without your consent.

3. Third-Party Services & Technologies

We use specific third-party tools to improve site performance, security, and analytics:

A. Cloudflare (Hosting & Security)

Our website is hosted and protected by Cloudflare. In this capacity, Cloudflare acts as a data processor, collecting technical data (such as IP addresses and security headers) to detect threats, mitigate DDoS attacks, and optimize content delivery.

Turnstile: We use Cloudflare Turnstile to protect our forms from spam and bots. Turnstile processes technical signals (such as browser telemetry and IP addresses) to verify legitimate activity without relying on intrusive tracking cookies.

B. Formspark (Contact Form Processing)

Contact form submissions on our website are processed by Formspark, a third-party form backend service. When you submit the contact form, the information you enter is transmitted to and stored by Formspark for the purpose of delivering your request to us. Formspark does not use your submission data for advertising or sell it to third parties. You can review Formspark's privacy practices at formspark.io.

4. How We Use Your Data

We use the collected information to:

• Respond to quote requests and inquiries submitted through our contact form.
• Maintain and monitor the performance of our website.
• Protect our site from malicious bot activity and fraud.
• Analyze traffic patterns to improve user experience.

We do not use contact form submissions for marketing purposes without your explicit consent.

5. Legal Basis for Processing (Where Applicable)

Depending on your location, applicable data protection laws may include the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA/CPRA). Where these laws apply, we process your data based on:

• Legitimate interests: Ensuring site functionality, security, and basic performance monitoring.
• Consent: Where required by law, we will obtain your explicit consent before placing non-essential cookies on your device.
• Legal obligation: Where processing is required to comply with applicable law.

6. Cookies

We use cookies and similar technologies to enhance your experience.

• Essential Cookies: Required for site security and core functionality (e.g., Cloudflare security features).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

7. California "Do Not Track" Disclosure

Some web browsers may transmit "Do Not Track" (DNT) signals. Our website does not currently respond to DNT browser headers. We continue to monitor the development of industry standards for how these signals should be interpreted.

8. Data Sharing & Retention

• Sharing: We share information with trusted third-party service providers — including Cloudflare (hosting and security), Formspark (contact form processing) — strictly for the purposes described in this policy. We do not sell, trade, or rent your personal data.
• Retention: We retain collected data only as long as necessary for the purposes described in this policy, unless a longer period is required by law.

9. Data Security

We implement industry-standard security measures provided by our hosting environment (Cloudflare) to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location — including the EU/UK under GDPR or California under CCPA/CPRA — you may have the right to:

• Access, correct, or request deletion of your personal data.
• Object to or restrict certain processing activities.
• Request a portable copy of your data.

To exercise these rights, please contact us at buildings@tarheelmetal.com.

11. Changes & Contact

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.