Privacy Policy view .pdf

T&S Brass and Bronze Works, Inc. (“Company” or “we” or “our” or “us”) takes its customers’ and website users’ (“User” or “you” or “your”) on-line security and privacy seriously, so the Company makes reasonable efforts as described below to ensure its Users’ confidence and protect their on-line security and privacy. This privacy policy aims to give you information on how we collect and process your personal information and other data through your use of this website or when you use other services provided by the Company (collectively, our “Services”) and information on our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

• through use of our Services; or
• in email, text, and other electronic messages between you and the Services; or
• from you offline or through any other means.

It does not apply to information collected by:

• us if the information collected is of a non-personally identifiable, including, without limitation, log data, domain names of your internet service provider, your approximate geographic location, a record of your usage of our website or Services, time of usage, aggregated personal information, as long as that information cannot be used to specifically identify you; or
• any third party (like third-party websites), including through any application or content (including advertising) that may link or be accessible as a result of your use of our Services.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using our Services, you agree to this privacy policy. This policy may change from time to time. Your continued use of our Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

1. Types of Information Collected.

1. Traffic Data Collected. The Company automatically tracks and collects the following information when the User visits the Company’s websites (“Web Sites”), including the User’s: (i) IP address; (ii) domain server; (iii) type of computer; (iv) type of web browser; (v) pages visited and duration; and (vi) search terms used to access the Web Sites (collectively “Traffic Data”). Traffic Data is anonymous information that does not personally identify the User but is helpful in the Company’s efforts to improve the User’s experience on the Web Site. Our website may require you to accept session “cookies” to provide customer experience and efficiencies such as enabling you to login, personalizing your experience, and/or automatically filling in standard information on return visits. “Cookies” are small pieces of information that are stored locally on your device by your browser and passed back to the server whenever a request for a new page on the site is made. The session cookie is never saved or written to disk. It is discarded when the browser exits, when you log out of the website, or when you have not visited a page on the website for a given period of time, for example 60 minutes. Most web browsers automatically accept session cookies, but most browsers also allow you to configure your web browser to refuse them or to notify you before a cookie is set. You also can manually view (and delete) any cookies stored on your computer. If you do not allow session cookies to be set, you may not be able to use our website, access the full content otherwise available through our website and/or use the full features and functionality of our website.
2. Personal Information Collected. In order for the User to access certain Services that the Company offers via the Web Sites, the Company requires the User to provide information that personally identifies the User (“Personal Information”). Personal Information may include the following:
   • Identity Data includes names, title, date of birth, and gender.
   • Contact Data includes mailing address, telephone numbers, email address, and other digital contact information.
   • Financial Data includes bank account and payment card details.
   • Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, and feedback and survey responses.
   • Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
3. How Personal Data is Collected. We collect information about the use of our website, as well as any personal information that you provide on the site. We will not share this personal information in a manner that is inconsistent with the privacy policy unless required to do so by law. We collect data in a variety of ways, including, but not limited to, directly from you from phones calls, our website (via cookies or as entered by you), information submitted via email, physical mail, online or physical forms, business cards collected while at events, conferences, or verbally, or as collected during the ordinary course of business. We may acquire personal data from third parties while staying compliant with all regulations, such as General Data Protection Regulation (GDPR), and the California Consumer Privacy Act ("CCPA") as amended and extended by the California Privacy Rights Act (“CPRA”). Measures are taken to secure assurance from these sources, ensuring that you have granted consent for the sharing of such information when you initially provided it to the respective third party.

4. Non-Discrimination Clause. T&S Brass and Bronze Works Inc. is committed to ensuring the privacy and security of your personal data. We adhere to the principles set forth in applicable data regulations to guarantee fair and transparent processing of your information.

   We do not process personal data for any purpose that is incompatible with the purposes for which it was originally collected. We do not engage in any form of discriminatory processing based on race, color, ethnicity, religion, sex, gender identity, sexual orientation, national origin, disability, age, or any other protected characteristic. Our data processing activities are designed to treat all individuals equally and fairly, respecting their rights and privacy.

   If the User communicates with the Company by e-mail or completes online registration forms, surveys or other forms, any information provided in such communication also may be collected as Personal Information. If you have any questions about how we handle your personal data or if you believe your privacy rights have been violated, please contact us at personaldatainquiry@tsbrass.com.

2. How We Use Your Personal Information. By providing Personal Information on or through the Web Sites, the User is authorizing the Company to use that Personal Information. The Company uses Personal Information (i) to respond to requests and inquiries, (ii) to send the User information about the Company, including its affiliates, its products, or services, and (iii) to otherwise contact the User. 3. Who We Share Your Personal Information With. The Company may provide User’s Personal Information for a legitimate business purpose to third parties providing the Company services related to the Web Sites or the services provided through them, solely for the purposes of the services provided by such third party. We do not provide User’s Personal Information to third parties for such parties’ use in marketing or advertising. Except as described herein and as may be required by court order, other governmental agency order, applicable regulations, or other official proceeding, the Company does not sell, trade, or otherwise transfer to outside parties Personal Information unless the User provides consent in advance, where such consent must be in writing, which includes by email, except as provided in this Privacy Policy or required by law. 4. User Choice Regarding Collection, Use and Distribution of Traffic Data and Personal Information. The User may choose not to allow the use of cookies under Traffic Data. The User’s system settings control the use of cookies (not the Company). The User should check whether the User’s browser settings allow the User to refuse cookies. If the User does not accept cookies, the User will still have access to some, but not all, of the facilities of the Web Sites. The User may choose not to provide the Company with any Personal Information. In such an event, the User can still access some of the Web Sites; however, the User will not be able to access and use those portions of the Web Sites that require the User’s Personal Information, and the Company may not be able to respond to certain inquiries of the User. 5. How Long Your Personal information Will Be Kept. We will keep your Personal Information while we are providing products and/or services to you. Thereafter, we will keep your Personal Information for as long as is necessary:

• To respond to any questions, complaints or claims made by you or on your behalf;
• To show that we treated you fairly; or
• To keep records as required by applicable law.

We will not retain your Personal Information for longer than necessary for the purposes set out in this policy. Different retention periods apply for different types of personal information.

6. Your California Privacy Rights.

California Civil Code Section § 1798.83 permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. Additionally, Users of our Services that are California Residents have the right under the CCPA, as amended by the CPRA, and certain other privacy and data protection laws, as applicable, to exercise free of charge:

Right to Know/Right to Access. You have the right to know, and request disclosure of:

• The categories of personal information we have collected about you, including sensitive personal information
• The categories of sources from which the personal information is collected;
• Our business or commercial purpose for collecting, selling, or sharing personal information;
• The categories of third parties to whom we disclose personal information, if any; and
• The specific pieces of personal information we have collected about you.

Right to know What Information Shared. In connection with any personal information, we may disclose to a third party for a business purpose, you have the right to know:

• The categories of personal information about you that we disclosed and the categories of third parties to whom the personal information was disclosed; and
• The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom the personal information was disclosed for a business purpose.

Right to Limit Use of Sensitive Personal Information. You have the right to limit the use and disclosure of sensitive personal information to the use which is necessary to:

• Perform the services or provide the goods reasonably expected by an average consumer who requests those goods or services;
• To perform the following services: (1) Helping to ensure security and integrity to the extent the use of the consumer's personal information is reasonably necessary and proportionate for these purposes; (2) Short-term, transient use, including, but not limited to, non-personalized advertising shown as part of a consumer's current interaction with the business, provided that the consumer's personal information is not disclosed to another third party and is not used to build a profile about the consumer or otherwise alter the consumer's experience outside the current interaction with the business; (3) Performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing financing, providing analytic services, providing storage, or providing similar services on behalf of the business; and (4) Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the business, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by the business; and
• As authorized by further regulations.

Right to Deletion. Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and
  • Direct any service providers or contractors to delete your personal information from their records.
  • Direct third parties to whom the business has sold or shared your personal information to delete your personal information unless this proves impossible or involves disproportionate effort.
• Please note that we may not delete your personal information if it is reasonably necessary to:
  • Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
  • Help to ensure security and integrity to the extent the use of the consumer's personal information is reasonably necessary and proportionate for those purposes;
  • Debug to identify and repair errors that impair existing intended functionality;
  • Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
  • Comply with the California Electronic Communications Privacy Act;
  • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
  • Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
  • Comply with an existing legal obligation; or
  • Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.

Right to Correction. If we maintain inaccurate personal information about you, you have the right to request us to correct that inaccurate personal information. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal information.

We will use reasonable efforts to comply with your requests within forty-five (45) days of your request, but may extend this period an additions forty-five (45) days if necessary.

7. Your European Privacy Rights. If applicable, you may have rights under European and other laws to have access to your personal information and to ask us to rectify, erase, and restrict use of your personal information. You may also have rights to object to your personal information being used, to ask for the transfer of personal information you have made available to us and to withdraw consent to the use of your personal information. Further information on how to exercise your rights is set out below.

We will honor your rights under applicable data protection laws. You have the following rights under European laws and may have similar rights under the laws of other countries.

• Right of subject access: The right to make a written request for details of your personal information and a copy of that personal information.
• Right to rectification: The right to have inaccurate information about you corrected or removed.
• Right to erasure ('right to be forgotten'): The right to have certain personal information about you erased. We will use reasonable efforts to comply with your requests within thirty (30) days of your request.
• Right to restriction of processing: The right to request that your personal information is only used for restricted purposes.
• Right to opt out of marketing: You can manage your marketing preferences by unsubscribe links found in the communications you receive from us or by visiting the applicable preference center.
• Right to object: The right to object to processing of your personal information in cases where our processing is based on the performance of a task carried out in the public interest or we have let you know the processing is necessary for our or a third party’s legitimate interests.
• Right to data portability: The right to ask for the personal information you have made available to us to be transferred to you or a third party in machine-readable format.
• Right to withdraw consent: The right to withdraw any consent you have previously given us to handle your personal information. If you withdraw your consent, this will not affect the lawfulness of our use of your Personal Information prior to the withdrawal of your consent.

These rights are not absolute, and they do not always apply in all cases. In response to a request, we will ask you to verify your identity if we need to, and to provide information that helps us to understand your request better. If we do not comply with your request, whether in whole or in part, we will explain why.

8. Requests and Inquiries About User Personal Information. You may have any Personal Information submitted to Company through the Web Sites removed or modified by sending the Company notice of such request through the following email address personaldatainquiry@tsbrass.com or by sending a written request to the following address:

The request must provide the User’s name and the information to be deleted or the modifications to be made. You must include either a telephone number or an email address for the Company’s use in the event of any questions on the instructions provided by the User. Notwithstanding the foregoing, the Company may retain Personal Information to the extent required to comply with applicable regulations or other applicable law.

9. Data Retention. We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymize your personal information so that it can no longer be associated with you, in which case we may use such information without further notice to you. 10. Data Security. We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your data transmitted to or through our Services. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained within the Services. In addition, we have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so. Specifically, in the event of a security breach involving personal data under GDPR, we will promptly notify the appropriate Supervisory Authority within 72 hours of becoming aware of the breach. If you would like to know more about our data transfer practices or data security measures, please send an email to personaldatainquiry@tsbrass.com. 11. Consent to Transfer Information to the United States. The Web Site is operated in the United States. If the User is located in the European Union, Canada or elsewhere outside of the United States, please be aware that information the Company collects will be transferred to and processed in the United States. By using the Web Sites or providing the Company with any information, the User consents to this transfer and processing of his or her information in the United States. 12. Links, Downloads and User Privacy. The Web Sites may contain links to other web sites or forms for download and use. The Company is not responsible for the privacy practices, or the content of web sites served by the links and in providing the link the Company does not imply any endorsement, recommendation, or approval of such sites. Furthermore, the Company is not responsible for the privacy practices of any third party to which User submits any forms containing User’s information. The User accessing any such site or using any forms does so entirely at the User’s own risk. 13. Children’s Privacy. Company does not knowingly collect personally identifying information through the Web Sites from online visitors under 13 years of age. No one under age 13 should provide any Personal Information to or through any of the Services. If you are under 13, do not use our Services or provide any information to or through our Services. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at personaldatainquiry@tsbrass.com. 14. Business Transition. In the event the Company experiences a business transition, such as a merger, acquisition by another company, sale of all or a portion of its assets, or bankruptcy, the User’s Personal Information will likely be among the assets transferred. The User’s submission of his or her Personal Information is deemed agreement to this potential future transfer. 15. Updates and Changes to the Privacy Policy. The Company reserves the right, at any time, to change this Privacy Policy, simply by posting a changed Privacy Policy on this Web Site. The User is responsible to check this Privacy Policy when it uses the Web Sites for any such changes to the Privacy Policy. Effective Date: July 29, 2024