1. Introduction
This Global Privacy and Legal Notice is provided by Metal (“we,” “our,” or “us”), a digital infrastructure company headquartered in Tampa, Florida. It applies to all users accessing or using our website, applications, services, and products (“Services”). This Notice outlines how we collect, use, store, and protect your personal data, and describes your rights regarding that information. By using our Services, you agree to the terms set forth in this Notice. If you do not agree, please refrain from using our Services.
2. Collection of Personal Data
We collect personal data when you use our Services, interact with us, or voluntarily provide information. This may include:
- Identity Information: Name, email address, phone number, or other identifiers.
- Technical Data: IP address, browser type, device information, and operating system.
- Transaction Data: Payment details, purchase history, and billing information.
- Usage Data: Information about how you interact with our website and Services.
- Location Data: Geographic location based on your device or IP address.
- Communication Data: Correspondence including customer service interactions and feedback.
3. Purpose of Data Collection
We collect personal data for the following purposes:
- To provide and improve our Services.
- To communicate with you about updates, service information, and relevant offers.
- To personalise your experience based on your preferences and usage.
- To send targeted marketing content where you have consented.
- To comply with legal, regulatory, and contractual obligations.
- To analyse trends and improve the performance and security of our Services.
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Consent: Where you have provided explicit consent.
- Contractual Necessity: Where processing is required to fulfill a contract with you.
- Legitimate Interests: Where processing serves our legitimate business interests and does not override your rights.
- Legal Obligation: Where processing is required to comply with applicable law.
For users in the European Union or United Kingdom, we process personal data in accordance with the General Data Protection Regulation (GDPR) and the UK GDPR respectively. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Where we rely on legitimate interests as our legal basis, you have the right to object to that processing.
5. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:
- Right to Know: You have the right to request disclosure of the categories and specific pieces of personal data we have collected about you, the sources of that data, the purposes for collection, and the third parties with whom we share it.
- Right to Delete: You have the right to request deletion of personal data we have collected, subject to certain exceptions.
- Right to Opt Out: You have the right to opt out of the sale of your personal data. Metal does not sell personal data.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise your California privacy rights, contact us at [email protected]. We will respond to verifiable consumer requests within 45 days as required by law.
6. Your Data Protection Rights
Regardless of your location, you may have the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Correct or update inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to certain exceptions.
- Right to Restriction: Request that we restrict processing of your personal data in certain circumstances.
- Right to Data Portability: Request your personal data in a structured, commonly used format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where we process data based on consent, withdraw that consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. EU and UK residents may also lodge a complaint with their local supervisory authority.
7. Data Sharing and Transfers
We may share your personal data in the following circumstances:
- Service Providers: Trusted third parties who assist in operating our business including payment processors, data hosting providers, and marketing platforms.
- Legal Requirements: Where required to comply with legal obligations or protect our legal rights.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your data may transfer to the acquiring entity.
- Affiliates and Partners: Where you have consented, with affiliates or trusted partners for marketing and research purposes.
Personal data may be transferred and processed outside your country of residence. Where data is transferred from the EU or UK to the United States or other jurisdictions, we implement appropriate safeguards including Standard Contractual Clauses as approved by the European Commission.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. Once no longer needed, we securely delete or anonymise your data.
9. Security of Personal Data
We implement appropriate technical and organizational measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. No method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but we are committed to protecting your data to the highest reasonable standard.
10. Cookies and Tracking Technologies
We use cookies and tracking technologies to enhance your experience, analyse site usage, and improve our Services. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our website. Where required by law, we obtain your consent before placing non-essential cookies.
11. Children’s Privacy
Our Services are not directed at children under the age of 13, or under 16 in certain jurisdictions. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.
12. International Users
If you access our Services from outside the United States, your personal data may be transferred to and processed in the United States. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place.
13. Changes to This Notice
We may update this Notice periodically. Changes will be posted on our website with an updated effective date. We encourage you to review this Notice regularly. Continued use of our Services following any update constitutes acceptance of the revised Notice.
14. Contact Us
For questions, concerns, or to exercise your privacy rights:
Metal Legal
[email protected]
Metal
Global Headquarters
Tampa, Florida 33602
15. Governing Law
This Notice shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of law principles. Any disputes arising from or related to this Notice shall be resolved in the competent courts located in Hillsborough County, Florida.
By using our Services, you acknowledge that you have read and understood this Global Privacy and Legal Notice and agree to its terms.
