Privacy Policy
This Privacy Policy explains how Precision Edge CNC collects, uses, shares, and protects personal information when you visit our website, request a quote, place an order, or otherwise interact with us. We keep our practices narrow and transparent — this document reflects what we actually do, not aspirational policy language.
01Overview
Precision Edge CNC ("we", "us", "our") is a precision machining company located at 1115 Des Moines Avenue, Loveland, Colorado 80537, United States. We operate the website at precisionedgecnc.top and provide CNC machining, prototyping, and manufacturing services to customers in the United States and, in limited circumstances, internationally.
This Privacy Policy applies to personal information we collect through our website, our quote and contact forms, our email correspondence, our phone conversations, and our business operations generally. It does not apply to information that we process on behalf of a customer as a data processor under a separate written agreement — in those cases, the customer's own privacy policy governs.
We have written this policy to comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Colorado Privacy Act (CPA), and other applicable US state privacy laws. Where state laws provide greater protection than this policy, those laws govern.
Plain-Language Summary
We collect the minimum information needed to quote and deliver parts, to communicate with you, and to meet legal and regulatory obligations. We do not sell your personal information. We do not share it with advertisers. We use third-party processors only where necessary (payment processing, email, shipping), and we require those processors to protect your information.
02Information We Collect
We collect information in three ways: information you provide directly, information collected automatically when you use our website, and information received from third parties such as trade references or credit reporting services.
Information You Provide Directly
- Contact and identity data: name, company, job title, business email address, business phone number, business mailing address.
- Quote and project data: part descriptions, drawings, CAD files, material specifications, quantities, target lead times, and any technical documentation you choose to submit with an RFQ.
- Order data: purchase order numbers, billing and shipping addresses, payment method details (processed by our payment provider — we do not store full card numbers), and delivery preferences.
- Credit application data: for customers requesting Net-30 terms, we collect trade references, financial information, and any documentation required for credit review.
- Communications: content of emails, contact form submissions, and notes from phone conversations relevant to your order or inquiry.
- Employment applications: if you apply for a job, we collect your resume, cover letter, contact details, and any information you provide during the hiring process.
Information Collected Automatically
- Device and usage data: IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referring URLs, and general geographic region derived from IP.
- Cookie data: information stored by cookies and similar technologies, as described in section 06.
- Server logs: standard web server logs including request timestamps, response codes, and error information used for security and diagnostic purposes.
Information from Third Parties
- Business information: publicly available company information, business directories, and referral sources.
- Credit references: information provided by trade references during credit application review.
- Fraud prevention: information from fraud prevention services used to protect our business and our customers.
What We Do Not Collect
We do not collect or process: biometric identifiers, genetic data, precise geolocation tracking, health information, information about your race, ethnicity, religion, or political opinions, or any category of "sensitive personal information" as defined under applicable privacy laws, except where required by law or explicitly provided by you in the context of a regulatory or compliance requirement.
03How We Use Information
We use the personal information we collect only for the following purposes. We do not use it for advertising, profiling, or any purpose unrelated to our business relationship with you.
| Purpose | Categories of Information |
|---|---|
| Responding to quote requests and RFQs | Contact data, project data, communications |
| Fulfilling orders and shipping parts | Contact data, order data, shipping addresses |
| Invoicing, payment processing, and collections | Order data, payment data, credit application data |
| Customer support and technical communication | Contact data, communications, order data |
| Quality documentation and traceability | Order data, project data (retained per legal requirements) |
| Compliance with legal, tax, and regulatory obligations | Order data, invoice data, contact data |
| ITAR and export control compliance | Contact data, order data, project data |
| Hiring and recruitment | Employment application data |
| Website security and fraud prevention | Usage data, cookie data, server logs |
| Website analytics and improvement | Usage data, cookie data (aggregated) |
What We Do Not Do With Your Information
- We do not sell your personal information to third parties.
- We do not share your personal information with advertisers or advertising networks.
- We do not use your information to train machine learning models outside our direct business use.
- We do not use your information to make automated decisions that produce legal or similarly significant effects.
- We do not contact you for marketing purposes unless you have opted in to receive such communications.
04Legal Basis for Processing
Where the GDPR or similar laws apply, we rely on the following legal bases for processing personal information:
- Contract performance: processing necessary to enter into or perform a contract with you, including quoting, manufacturing, shipping, and invoicing.
- Legitimate interests: processing necessary for our legitimate business interests, such as IT security, fraud prevention, quality improvement, and customer communication, where those interests are not overridden by your rights.
- Legal obligation: processing necessary to comply with laws, regulations, court orders, or lawful requests from public authorities, including tax, audit, and export control requirements.
- Consent: where you have given explicit consent for a specific processing activity, such as receiving marketing communications. You may withdraw consent at any time.
- Vital interests: processing necessary to protect your vital interests or those of another person, in rare emergency situations.
05Sharing & Disclosure
We share personal information only with the following categories of recipients, and only to the extent necessary for the purposes described above.
Service Providers
We use third-party service providers to support our business operations. These providers are contractually required to protect your information and to use it only for the specific services they provide to us.
- Payment processors: for processing ACH transfers, wire payments, and credit card transactions.
- Shipping carriers: UPS, FedEx, and LTL freight carriers, for delivering your orders.
- Email and communication services: for sending transactional and account-related emails.
- Accounting and ERP services: for invoicing, bookkeeping, and business record-keeping.
- Website hosting and analytics: for operating our website and understanding aggregate usage patterns.
- Legal, audit, and professional services: where required to support our operations.
Legal Disclosures
We may disclose personal information where required by law, subpoena, court order, or other legal process, or where we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, or government requests;
- Enforce our agreements, including our Terms of Service;
- Protect the rights, property, or safety of Precision Edge CNC, our customers, or the public;
- Detect, prevent, or address fraud, security, or technical issues.
ITAR and Export Control
Because we are registered with the US Department of State Directorate of Defense Trade Controls (DDTC) and handle ITAR-controlled technical data, we may be required to disclose information to government agencies in connection with export control compliance, audits, or investigations.
Business Transfers
If Precision Edge CNC is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected individuals before their information becomes subject to a different privacy policy.
No Sale of Personal Information
We do not sell personal information as that term is defined under the CCPA and CPRA. We have not sold personal information in the preceding twelve months.
06Cookies & Tracking
We use cookies and similar technologies to operate our website, remember your preferences, and understand how visitors use our site in aggregate. Cookies are small text files placed on your device by a web server.
Categories of Cookies We Use
- Strictly necessary cookies: required for the website to function, including remembering your cookie consent choice and maintaining basic session state. These cannot be disabled.
- Preference cookies: remember choices you make, such as your cookie banner selection and language preferences.
- Analytics cookies: help us understand how visitors use our site — pages visited, time on page, referring sources — so we can improve the site. These are anonymized or aggregated where possible.
Managing Cookies
You can manage cookie preferences through the cookie banner shown on your first visit to our site, or through your browser settings. Most browsers allow you to block or delete cookies. Doing so may affect website functionality but will not prevent you from using the core features of our site.
For detailed information about the specific cookies we set and how to manage them, see our Cookie Policy.
Do Not Track
Our website does not currently respond to "Do Not Track" browser signals because there is no industry-wide standard for their interpretation. We limit data collection to the categories described in this policy regardless of the DNT setting.
07Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this policy, and longer where required by law or for legitimate business reasons.
| Category | Retention Period |
|---|---|
| Quote requests that do not result in an order | 24 months from last contact |
| Customer order and invoice records | 7 years from invoice date (tax and audit) |
| Inspection and quality documentation | 7 years minimum; longer where required by customer contract |
| ITAR-controlled technical data | Per DDTC requirements; typically 5 years from last transaction |
| Contact form submissions (non-order) | 12 months from last communication |
| Website analytics (aggregated) | 26 months maximum |
| Employment applications (not hired) | 12 months from application date |
When retention periods expire, we securely delete or anonymize personal information. Where we cannot fully delete information (for example, because it is embedded in a legal record), we isolate it and restrict its processing to the legally required purpose.
08Your Privacy Rights
Depending on your jurisdiction, you may have specific legal rights regarding your personal information. These rights are summarized below. To exercise any right, contact us using the information in section 14.
You have the right to request a copy of the personal information we hold about you, along with information about how we collected it, how we use it, and with whom we share it. We will respond to verified requests within 30 days (45 days where permitted by law).
You have the right to request correction of inaccurate personal information we hold about you. Where you have an account with us, you can also update certain information directly.
You have the right to request deletion of personal information we hold about you, subject to certain legal exceptions. We may be required to retain some information to comply with tax, audit, export control, quality documentation, or other legal obligations.
You have the right to request that we restrict the processing of your personal information in certain circumstances, such as while a dispute about accuracy is being resolved or where processing is unlawful but you do not want us to delete the data.
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.
Where processing is based on legitimate interests, you have the right to object to that processing. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
You have the right not to be discriminated against for exercising any of your privacy rights. We will not deny you service, charge you different prices, or provide a different level of quality because you exercised a privacy right.
We do not sell personal information and we do not share it for cross-context behavioral advertising. Therefore, there is nothing to opt out of at this time. Should this change, we will provide a clear opt-out mechanism and update this policy.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority. In the EU, this is the supervisory authority of your country of residence. In the US, you may contact your state attorney general's office. We would appreciate the opportunity to resolve your concern directly first.
How to Exercise Your Rights
To exercise any of the rights above, contact us at [email protected] with a clear description of your request. We may ask you to verify your identity before acting on the request. Authorized agents may submit requests on your behalf with written permission.
09Security
We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction.
- Encryption in transit: all website traffic is protected by TLS encryption. Email communications with our team use encrypted transport where supported by the recipient's mail system.
- Access controls: employee access to personal information is limited to those who need it to perform their job, and is governed by role-based permissions and audit logging.
- Segregated ITAR systems: ITAR-controlled technical data is stored on segregated, access-controlled systems available only to authorized US persons.
- Physical security: our facility uses controlled access, video monitoring, and visitor registration to protect physical assets and records.
- Vendor oversight: service providers handling personal information on our behalf are required to implement appropriate safeguards and to notify us of security incidents.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work continuously to protect the information entrusted to us and to comply with applicable breach notification laws if a security incident occurs.
10International Transfers
Our primary operations, servers, and business records are located in the United States. If you are accessing our website or doing business with us from outside the United States, your personal information will be transferred to and processed in the United States.
Where the GDPR applies to such transfers, we rely on appropriate safeguards, including:
- The European Commission's Standard Contractual Clauses (SCCs) with our service providers;
- Where applicable, adequacy decisions recognized by the European Commission;
- Explicit consent for specific transfers where no other mechanism is available.
Because we handle ITAR-controlled technical data, certain information may be subject to additional export control restrictions that limit where it can be transferred and who can access it. Such information is not accessible to non-US persons regardless of their location.
11Children's Privacy
Our website and services are intended for business use by adults. We do not knowingly collect personal information from children under 16 years of age. If you believe we have inadvertently collected information from a child under 16, please contact us at [email protected] and we will delete the information promptly.
12Third-Party Links
Our website may contain links to third-party websites, including map services, carrier tracking pages, and industry resources. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of external sites. We encourage you to review the privacy policy of any website you visit.
13Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:
- Update the "Last updated" date at the top of this page;
- Provide a prominent notice on our website for a reasonable period;
- Where required by law, obtain your consent to the updated policy.
We encourage you to review this page periodically. Your continued use of our website or services after an update constitutes acceptance of the revised policy, except where additional consent is required.
14Contact Us
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have a concern about how we handle your information, please contact us using the details below. We aim to respond to privacy inquiries within five business days.
Privacy Contact
Attn: Privacy Officer
1115 Des Moines Avenue
Loveland, CO 80537
United States
If you are an EU or UK resident and are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local supervisory authority. If you are a California or Colorado resident and are not satisfied with our response, you may contact the California Attorney General's office or the Colorado Attorney General's office, respectively.