Legal

Privacy Policy

Effective: January 1, 2025 — Last updated: January 1, 2025

United Metal Components (“Company,” “we,” “us,” or “our”) operates this website and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or place an order with us.

We are headquartered in California and comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other applicable state and federal privacy laws. If you are a California resident, please read Section 10 for your specific rights.

1. Who We Are

United Metal Components is a metal building materials supplier located at 9191 W Whitesbridge Ave, Fresno, CA 93706. We sell sheet metal panels, structural components, trusses, garage doors, and related construction materials. All sales are pickup only from our Fresno, CA facility.

For privacy inquiries, contact our Privacy Officer at sales@unitedmetalcomponents.com or (559) 567-9118.

2. Information We Collect

We collect personal information in the following categories:

A. Information You Provide Directly

Account information: Full name, email address, password (hashed)
Order information: Name, phone number, order notes
Contact form submissions: Name, email, phone, message content
Newsletter opt-in: Email address and name
Profile information: Phone, city, state, ZIP code

B. Information Collected Automatically

Log data: IP address, browser type, pages visited, timestamps
Device information: Device type, operating system
Analytics events: Page views, product views, add-to-cart events (no cross-site tracking)
Session cookies: Authentication tokens stored in secure, httpOnly cookies

C. Sensitive Personal Information

We do not intentionally collect sensitive personal information (e.g., Social Security numbers, financial account numbers, precise geolocation, racial/ethnic origin, health information, or biometric data). Do not submit such information through our site.

3. How We Use Your Information

We use personal information only for the following business purposes:

Fulfilling orders: Processing pickup orders, notifying you when your order is ready, and maintaining order history
Account management: Creating and maintaining your account, authentication, and password recovery
Customer communication: Responding to contact form submissions, questions, and support requests
Marketing (opt-in only): Sending product updates and promotional emails to subscribers who have opted in
Security and fraud prevention: Rate limiting, abuse detection, and protecting our systems and customers
Legal compliance: Maintaining records as required by California law, tax records, and responding to lawful requests
Service improvement: Analyzing aggregate, anonymized data to improve our website and product offerings

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects.

4. Sharing and Disclosure

We do not sell your personal information. We share personal information only in these circumstances:

Service providers: Supabase (database and authentication hosting), email service providers, and other vendors who process data on our behalf under written data processing agreements
Legal requirements: When required by law, court order, or government authority, or to protect our legal rights
Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to you
With your consent: For any other purpose with your explicit consent

We do not share your personal information with third-party advertisers or data brokers.

5. Cookies and Tracking

We use minimal, essential cookies:

Authentication cookies: Secure session tokens to keep you logged in (httpOnly, SameSite=Lax)
Preference cookies: Cart contents and UI preferences stored in browser localStorage

We do not use third-party advertising cookies, cross-site tracking pixels, or sell browsing data to data brokers. We do not use Google Analytics or Facebook Pixel on this site.

6. Data Retention

We retain personal data for as long as necessary for the purposes described in this policy:

Account data: until you delete your account, plus 30 days for recovery
Order records: 7 years (California tax and business record requirements)
Contact form messages: 2 years
Newsletter subscriptions: until you unsubscribe
Server logs: 90 days

7. Data Security

We implement reasonable technical and organizational security measures including:

TLS/HTTPS encryption for all data in transit
Passwords stored as bcrypt hashes (never in plaintext)
Row-level security (RLS) policies limiting data access
Rate limiting to prevent brute-force attacks
Input sanitization and parameterized queries to prevent injection attacks
Secure, httpOnly authentication cookies

No method of internet transmission or electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately.

8. Children’s Privacy

Our services are intended for adults and businesses in the construction materials industry. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly. Contact us at sales@unitedmetalcomponents.com if you believe a minor has provided us information.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., Google Maps for our location). We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies.

10. California Residents — Your Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and categories of third parties we share it with.
Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing transactions, complying with legal obligations).
Right to Correct: Request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. You do not need to opt out.
Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information beyond what is necessary for our business purposes.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

How to Submit a Request

To exercise any of these rights, submit a verifiable consumer request by Email: sales@unitedmetalcomponents.com; Phone: (559) 567-9118; or Mail: United Metal Components, 9191 W Whitesbridge Ave, Fresno, CA 93706, Attn: Privacy Officer.

We will respond within 45 days. We may extend this by an additional 45 days when reasonably necessary with prior notice. We verify your identity before processing requests. You may designate an authorized agent to submit a request on your behalf.

You may also contact the California Attorney General at oag.ca.gov/privacy to learn more about your rights.

11. “Do Not Track” Signals

California law requires us to disclose how we respond to Do Not Track (DNT) signals from browsers. We do not currently respond to DNT signals because no industry standard for DNT compliance has been adopted. We do not engage in cross-site tracking regardless of DNT settings.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will post the updated policy on this page with a revised effective date. For material changes, we will provide notice via email (if you have an account) or a prominent notice on our website at least 30 days before changes take effect.

13. Contact Us

United Metal Components — Privacy Officer
9191 W Whitesbridge Ave, Fresno, CA 93706
Email: sales@unitedmetalcomponents.com
Phone: (559) 567-9118