Data practices

Privacy Policy

Last updated October 28, 2026

Who is responsible

Metal Workx & Designs, Inc. is responsible for the project-inquiry information submitted through this website. Privacy questions may be sent to reachus@officialmetalworkdesigns.com or directed to the published office number.

Information collected

The project form may collect your name, organization, email, optional phone number, preferred contact method, service category, project location, timing, and project summary. The server also creates a rotating cryptographic rate-limit key from connection information. It does not retain the raw network address in the inquiry record.

Sources and purposes

Information comes directly from you. It is used to review the request, contact you through the selected method, assess project fit, prevent abuse, manage project inquiries, and meet legitimate operational or legal obligations. A form submission is not marketing consent.

Service providers and disclosures

The website and project-inquiry database are hosted with Spaceship. Website images are served from the same hosting account. Access to the private owner area is controlled by the company, and inquiry notifications are sent through the hosting provider’s mail service. These providers handle data as needed to operate the site. Information may also be disclosed when legally required, to protect rights and safety, or in connection with a legitimate business transaction subject to appropriate safeguards. The website does not claim to sell or share personal information for cross-context behavioral advertising.

Cookies and tracking

The website does not intentionally use advertising pixels, chat widgets, embedded maps, social widgets, or non-essential analytics. Authentication cookies are used only for the private owner area. If analytics, advertising, customer-relationship-management, maps, or other integrations are added later, this policy and any required preference controls must be updated before use.

Retention

Inquiry records should be reviewed within 30 days and deleted or anonymized when no longer needed. The operational target is no more than 12 months for an unconverted inquiry unless an active customer relationship, dispute, safety matter, or legal obligation supports longer retention. Authorized staff can delete records when they are no longer needed.

Security

The website uses server-side validation, same-origin checks, minimized hashed throttling identifiers, restricted administrative access, database parameterization through an object-relational mapper, encrypted HTTPS connections and restrictive security headers. No website can guarantee absolute security.

Your choices and requests

You may ask to access, correct, or delete an inquiry, or object to further contact, by using the email or office phone above. Identity and request scope may need to be reasonably verified without collecting excessive data. Available legal rights vary by jurisdiction and circumstances.

Children

This business website is not directed to children and is not designed to knowingly collect children’s personal information.

Updates

Material changes will be reflected on this page with a revised date. New integrations or data uses require review before activation.