Privacy policy
Last updated: August 7, 2025
MAD operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). MAD is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
PRIVACY NOTICE
This Privacy Notice describes how Metal Accessories Direct ("Company", "we", "us", or "our") collects, uses, discloses, and safeguards your information when you interact with our services, including:
Visiting our website: https://www.metalaccessoriesdirect.com
Using our Facebook application (Metal Accessories Direct) or any other linked applications
Engaging with us through sales, marketing, events, or customer service
If you have any questions or concerns about this notice or our practices, please contact us at Metalaccessoriesdirect@gmail.com
IMPORTANT NOTICE REGARDING COMMUNICATIONS
By providing your email or phone number during checkout on Metalaccessoriesdirect.com, you consent to receive communications regarding your order, promotions, email and SMS marketing, and social media outreach.
SUMMARY OF KEY POINTS
What information do we collect?
Personal and non-personal information based on your use of our services.
Do we collect sensitive data?
No, we do not process sensitive personal information.
Do we share your data with third parties?
Only in specific scenarios such as business transfers or third-party integrations.
How is your information used?
To operate our services, process orders, communicate with you, and comply with legal obligations.
How do we protect your information?
We implement technical and organizational security measures, but we cannot guarantee 100% protection.
What are your rights?
You may review, update, or delete your data at any time.
TABLE OF CONTENTS
1. What Information Do We Collect?
2. How Do We Process Your Information?
3. When and With Whom Do We Share Your Personal Information?
4. Do We Use Cookies and Other Tracking Technologies?
5. How Long Do We Keep Your Information?
6. How Do We Keep Your Information Safe?
7. Do We Collect Information from Minors?
8. What Are Your Privacy Rights?
9. Controls for Do-Not-Track Features
10. Do California Residents Have Specific Privacy Rights?
11. Do Virginia Residents Have Specific Privacy Rights?
12. Do We Make Updates to This Notice?
13. How Can You Contact Us About This Notice?
14. How Can You Review, Update, or Delete the Data We Collect From You?
1. What Information Do We Collect?
In short:
Personal Information (name, email, phone number, address)
Payment details (via Stripe/PayPal)
Application Data and Device Information
Location and browsing behavior (via cookies and analytics)
We do NOT process sensitive personal information.
Payment Data
When you make a purchase, we may collect data necessary to process your payment, such as:
Payment instrument number (e.g., credit or debit card number)
Security code associated with your payment instrument
All payment data is securely stored by our third-party payment processors:
Stripe: https://stripe.com/privacy
PayPal: https://www.paypal.com/us/legalhub/privacy-full
Application Data
When using our application(s), we may collect certain data if you provide access or permission, including:
Mobile Device Data
We automatically collect information such as:
Device ID, model, and manufacturer
Operating system and version
System configuration
Application identification numbers
Browser type and version
Hardware model
Internet service provider and/or mobile carrier
IP address or proxy server
Additional information may include:
Phone network details
Device platform
Unique device ID
Features accessed within the application(s)
This information is primarily used to ensure the security, functionality, and performance of our application(s), and for troubleshooting, analytics, and internal reporting.
Accuracy of Information
All personal information you provide must be true, complete, and accurate. Please notify us of any changes.
Automatically Collected Information
In Short: Some information — such as your IP address and device characteristics — is collected automatically when you use our Services.
This may include:
Device and usage information
IP address
Browser and operating system details
Language preferences
Referring URLs
Device name and type
Country and location
Access times and activity data
Other technical data
This data is primarily used to maintain security and operation, and for internal analytics and reporting.
Like many websites, we collect this information using cookies and similar technologies.
Location Data
We may collect location data from your device, either:
Precise: via GPS and similar technologies
Imprecise: based on IP address
You can manage your location sharing preferences by:
Denying access to location data
Disabling Location settings on your device
Note: Disabling location access may limit functionality in certain areas of our Services.
Facebook Application Data
When using our Facebook application(s), we may access your basic Facebook account information, such as:
Name
Gender
Birthday
Current city
Profile picture URL
Other public information
We may also request additional permissions, including:
Friends list
Check-ins
Likes
You may choose to grant or deny each individual permission.
2. How Do We Process Your Information?
In Short: We use your information for:
Account management
Order fulfillment and support
Marketing and promotions (with your consent)
Legal compliance and fraud prevention
We process your personal information for a variety of purposes, depending on how you interact with our Services. These include:
Account Creation and Authentication
To facilitate the creation of your account, authenticate your identity, and manage user accounts. This ensures your account remains functional and secure.
Service Delivery
To deliver and facilitate the provision of services you have requested.
Customer Support
To respond to your inquiries, provide technical or customer support, and resolve any issues related to the requested services.
Order Fulfillment and Management
To process and manage your orders, payments, returns, and exchanges made through our Services.
Marketing and Promotional Communications
To send you marketing and promotional content, in accordance with your preferences. You may opt out of marketing communications at any time. (See "WHAT ARE YOUR PRIVACY RIGHTS?" below.)
Targeted Advertising
To deliver personalized advertising and content based on your interests, preferences, and location.
Prize Draws and Competitions
To administer contests, sweepstakes, and promotional giveaways.
Service and Experience Improvement
To analyze and enhance our Services, products, marketing efforts, and your overall experience with us.
Usage Analytics
To identify trends in how users interact with our Services and use those insights to inform improvements.
Marketing Effectiveness
To assess the success of our marketing and promotional campaigns and tailor future communications accordingly.
Legal Compliance
To comply with applicable laws, respond to legal requests, and establish, exercise, or defend legal claims.
3. When and With Whom Do We Share Your Personal Information?
In Short: Your information may be shared:
With service providers
In business transfers
On third-party offer walls
4. Do We Use Cookies and Tracking Technologies?
Yes. Cookies and similar tools may be used to enhance user experience and collect technical data.
5. How Long Do We Keep Your Information?
In Short: We retain data as long as necessary for business, legal, or compliance purposes.
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law (e.g., tax, accounting, or other legal obligations).
No purpose described in this notice will require us to retain your personal information beyond the duration of your active account with us.
When we no longer have a legitimate business need to process your personal information, we will:
Delete or anonymize the information; or
If deletion is not immediately possible (e.g., data stored in backup archives), we will securely store and isolate your information from any further processing until deletion is feasible.
6. How Do We Keep Your Information Safe?
In short: We use industry-standard security measures but cannot guarantee 100% protection.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or method of information storage can be guaranteed to be 100% secure.
As such, , we cannot guarantee that hackers, cybercriminals, or other unauthorized third parties will be unable to defeat our security measures and improperly collect, access, steal, or alter your information. Although we will do our best to protect your personal information, the transmission of personal information to and from our Services is at your own risk.
We recommend that you only access our Services within a secure environment.
7. Do We Collect Information from Minors?
In Short: No. We do not knowingly collect or market to individuals under 18 years of age.
In short: You may:
Review and correct your data
Opt-out of marketing
Delete your account
EEA, UK, and Swiss Residents
If you are located in the European Economic Area (EEA) or the United Kingdom (UK) and believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection authority.
EEA residents: Contact your Member State’s data protection authority.
UK residents: Contact the UK Information Commissioner’s Office (ICO).
Swiss residents: Contact the Federal Data Protection and Information Commissioner (FDPIC).
Withdrawing Your Consent
If we rely on your consent. either express or implied, depending on the applicable law to process your personal information, you may withdraw that consent at any time by contacting us using the details provided in the section titled “How Can You Contact Us About This Notice?” below.
Please note:
Withdrawal of consent does not affect the lawfulness of any processing conducted prior to your withdrawal.
Where permitted by applicable law, we may continue to process your personal information on legal grounds other than consent.
Opting Out of Marketing Communications
You may unsubscribe from our marketing and promotional communications at any time:
By clicking the unsubscribe link in our marketing emails, or
By contacting us using the details provided in the “How Can You Contact Us About This Notice?” section below.
Even after opting out, we may still send you non-promotional communications, including service-related messages necessary for managing your account or responding to your inquiries.
Account Information
If you would like to review, update, or terminate your account, you may:
Contact us directly using the contact details provided below.
Upon your request to terminate your account:
We will deactivate or delete your account and remove your information from our active databases.
Some information may be retained in our records as needed to:
Prevent fraud,
Troubleshoot issues,
Assist in investigations,
Enforce our legal terms, and/or
Comply with applicable legal requirements.
Cookies and Similar Technologies
Most web browsers accept cookies by default. You may choose to:
Remove or reject cookies by adjusting your browser settings.
Opt out of interest-based advertising via the settings provided by third-party advertisers.
Note: Disabling cookies may impact certain features or services of our website or applications.
If you have any questions or concerns about your privacy rights, please contact us at: metalaccessoriesdirect@gmail.com
9. Controls for Do-Not-Track Features
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
10. Do California Residents Have Specific Privacy Rights?
In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.
Shine The Light Law (California Civil Code Section 1798.83)
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits California residents to request and obtain, once per year and free of charge, information about:
Categories of personal information (if any) that we disclosed to third parties for direct marketing purposes.
The names and addresses of all third parties with which we shared such personal information in the immediately preceding calendar year.
If you are a California resident and would like to make such a request, please submit it in writing using the contact information provided below.
Rights for California Minors
If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of any unwanted data that you have publicly posted on the Services.
To request removal:
- Contact us using the information provided below.
- Include the email address associated with your account.
- Include a statement confirming that you reside in California.
We will ensure that the data is no longer publicly displayed on the Services. However, please note that the data may not be completely or comprehensively removed from all our systems (e.g., backups and archives).
CCPA Privacy Notice
The California Code of Regulations defines a “resident” as:
Every individual who is in the State of California for other than a temporary or transitory purpose.
Every individual who is domiciled in the State of California but is outside the State for a temporary or transitory purpose.
All other individuals are defined as “non-residents.”
If this definition of “resident” applies to you, we must comply with certain rights and obligations regarding your personal information.
Categories of Personal Information Collected
In the past twelve (12) months, we have collected the following categories of personal information:
| Category | Description | Collected |
|---|---|---|
| A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name | YES |
| B. Personal information categories listed in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | YES |
| C. Protected classification characteristics under California or federal law | Gender and date of birth | NO |
| D. Commercial information | Transaction information, purchase history, financial details, and payment information | NO |
| E. Biometric information | Fingerprints and voiceprints | NO |
| F. Internet or other similar network activity | Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements | NO |
| G. Geolocation data | Device location | YES |
| H. Audio, electronic, visual, thermal, olfactory, or similar information | Images and audio, video, or call recordings created in connection with our business activities | NO |
| I. Professional or employment-related information | Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from other personal information | Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics |
NO |
We will use and retain collected personal information as needed to provide the Services or for:
Category A – As long as the user has an account with us
Category B – As long as the user has an account with us
Category G – As long as the user has an account with us
We may also collect other personal information outside of these categories through interactions in person, online, or by phone or mail, including:
Receiving help through our customer support channels
Participation in customer surveys or contests
Facilitation of the delivery of our Services and responding to inquiries
How We Use and Share Your Personal Information
More information about our data collection and sharing practices can be found in this Privacy Notice. You may contact us by email at metalaccessoriesdirect@gmail.com.
If you are using an authorized agent to exercise your right to opt out, we may deny the request if the authorized agent does not provide proof of valid authorization.
Information Sharing
We may disclose your personal information with our service providers pursuant to a written contract. Each service provider is a for-profit entity that processes information on our behalf, following the same privacy protection obligations mandated by the CCPA.
We may use your personal information for our own business purposes, such as undertaking internal research for technological development and demonstration. This is not considered “selling” your personal information.
Metal Accessories Direct has not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the past twelve (12) months and will not do so in the future for website visitors, users, or other consumers.
Your Rights Regarding Personal Data
1. Right to Request Deletion of Data — Request to Delete
You may request the deletion of your personal information. We will respect your request, subject to exceptions provided by law, such as:
Another consumer’s right to free speech
Compliance with legal obligations
Processing required to protect against illegal activities
2. Right to be Informed — Request to Know
Depending on the circumstances, you have the right to know:
Whether we collect and use your personal information
The categories of personal information we collect
The purposes for which we use personal information
Whether we sell or share personal information to third parties
The categories of personal information sold, shared, or disclosed for business purposes
The categories of third parties to whom information was sold, shared, or disclosed
The business or commercial purposes for such actions
The specific pieces of personal information we have collected about you
We are not obligated to provide or delete de-identified consumer information or re-identify data to respond to a request.
3. Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
4. Right to Limit Use and Disclosure of Sensitive Personal Information
We do not process sensitive personal information.
Verification Process
Upon receiving your request, we must verify your identity to ensure you are the individual whose data we hold. This may involve:
Requesting information to match existing records
Contacting you via a method you previously provided
Using other verification methods as needed
We will only use the information provided for verification purposes and will delete it once verification is complete.
Other Privacy Rights
You may object to the processing of your personal information
You may request correction of inaccurate or outdated personal information, or ask us to restrict processing
You may designate an authorized agent to make a CCPA request on your behalf (proof of authorization required)
You may opt out of future selling or sharing of your personal information to third parties. We will process opt-out requests as soon as possible, and no later than fifteen (15) days after receipt
How to Exercise Your Rights
To exercise any of these rights, you may contact us:
Email: metalaccessoriesdirect.com
Call us: (716) 395-0149
If you have concerns about how we handle your data, we welcome your feedback.
11. Do Virginia Residents Have Specific Privacy Rights?
In Short: Yes. Residents of Virginia are protected under the CDPA.
Virginia CDPA Privacy Notice
Under the Virginia Consumer Data Protection Act (CDPA):
Consumer — A natural person who is a resident of the Commonwealth of Virginia, acting only in an individual or household context. This does not include a person acting in a commercial or employment context.
Personal data — Any information linked or reasonably linkable to an identified or identifiable natural person. This does not include de-identified data or publicly available information.
Sale of personal data — The exchange of personal data for monetary consideration.
If you meet the definition of “consumer” under the CDPA, we must adhere to certain rights and obligations regarding your personal data.
Information We Collect, Use, and Share
The information we collect, use, and disclose about you will vary depending on how you interact with Metal Accessories Direct and our Services. For more details, please visit the following sections of this Privacy Notice:
When and With Whom We Share Your Personal Data
Your Rights Under the Virginia CDPA
You have the following rights with respect to your personal data:
Right to be informed whether or not we are processing your personal data.
Right to access your personal data.
Right to correct inaccuracies in your personal data.
Right to request deletion of your personal data.
Right to obtain a copy of the personal data you previously shared with us.
Right to opt out of the processing of your personal data if it is used for:
Note: Metal Accessories Direct has not sold any personal data to third parties for business or commercial purposes, and we will not sell such data in the future.
How to Exercise Your Rights
You can exercise your rights under the Virginia CDPA by:
Emailing us at metalaccessoriesdirect@gmail.com
If you use an authorized agent to make a request, we may deny the request if the agent does not provide valid proof of authorization to act on your behalf.
Verification Process
We may request additional information necessary to verify your identity and your request. If your request is submitted through an authorized agent, we may need to collect further information before processing it.
We will respond to your request within forty-five (45) days of receipt. If additional time is required, we may extend the response period once for up to an additional forty-five (45) days, and we will inform you of the extension and reason within the initial 45-day period.
Right to Appeal
If we decline to take action on your request, we will notify you of our decision and the reason for it.
To appeal our decision, email us at metalaccessoriesdirect@gmail.com
We will respond within sixty (60) days of receiving your appeal, providing a written explanation of our decision.
If your appeal is denied, you may contact the Virginia Attorney General to submit a complaint.
12. Do We Make Updates to This Notice?
Yes. Updates will be reflected with a revised date at the top of the document.
Updates to This Privacy Notice
We may update this privacy notice from time to time. Any changes will be indicated by an updated “Revised” date, and the new version will take effect as soon as it becomes accessible.
If we make material changes, we may notify you by:
Prominently posting a notice of such changes, or
Sending you a direct notification.
We encourage you to review this privacy notice regularly to stay informed about how we are protecting your information.
13. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, You may contact us via:
Email: metalaccessoriesdirect@gmail.com
14. How Can You Review, Update, or Delete the Data We Collect From You?
Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it To submit a request, please email metalaccessoriesdirect@gmail.com.