Children's Privacy Policy

1 📋 Overview

MetalCore Manufacturing ("MetalCore," "we," "our," or "us") is committed to protecting the privacy and safety of all individuals, including children, who may interact with our websites, digital platforms, mobile applications, or services (collectively, our "Services").

This Children's Privacy Policy supplements our main Privacy Policy and outlines how we collect, use, disclose, and safeguard information from children under the age of 13 (or the applicable age of consent in your jurisdiction). This policy is designed in compliance with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and other applicable data protection laws.

Our core business is precision manufacturing and engineering services. We do not operate children-oriented websites, applications, or online services. However, we recognize that children may occasionally access our Services, and we are committed to handling any personal information from children responsibly and in full legal compliance.

2 🔍 Scope & Applicability

What This Policy Covers

This Children's Privacy Policy applies to:

• Our main website: www.metalcore-mfg.com
• Any subdomains of our primary domain
• Mobile applications published under the MetalCore Manufacturing brand
• Email communications and newsletters
• Customer portal and account management systems
• Online quotation and request forms
• Social media profiles and pages operated by MetalCore
• Any future digital services we introduce

Who Is Affected

This policy specifically addresses the privacy of:

• Children under the age of 13 (as defined by COPPA)
• Children under the age of 16 (in jurisdictions where the age of consent is higher)
• Children as defined by applicable local laws and regulations

What This Policy Does Not Cover

This policy does not apply to:

• Third-party websites or services linked from our Services (we provide no privacy guarantees for external sites)
• Offline interactions that do not involve digital data collection
• Information collected through our employees' professional activities unrelated to our Services

3 📊 Information We Collect from Children

MetalCore does not intentionally collect personal information from children under 13. Our Services are not designed, marketed, or intended for children. However, in the event that personal information from a child is collected, it may include:

What We Do NOT Collect

We do not collect the following from children under any circumstances:

• Financial information (credit cards, bank accounts)
• Sensitive personal data (health, race, religion, political opinions)
• Biometric data (facial recognition, fingerprints)
• Photographs or video recordings
• Geolocation data beyond IP-based general location
• Social Security numbers or government IDs
• Any data through gamified or incentivized mechanisms

4 👨‍👩‍👧 Parental Consent

Verifiable Parental Consent

In the rare event that we determine a user may be under 13 (or the applicable age of consent), we will take the following steps to obtain verifiable parental consent before any personal information is collected, used, or disclosed:

1. Age Verification: We may implement age-gating mechanisms on our forms and registration processes to identify users who may be children.
2. Parental Notification: We will notify the parent or legal guardian about the data collected and request verifiable consent.
3. Consent Verification: We may use one or more accepted methods to verify parental identity, including: credit card verification, government ID verification, videoconference confirmation, or a toll-free consent hotline.
4. Data Handling Pending Consent: Any data collected from a child will be securely stored and not processed until verifiable parental consent is received. If consent is not obtained, the data will be deleted within 30 days.

Consent Process

If you are a parent or guardian and wish to provide consent for a child to interact with our Services, please contact our Privacy Office at privacy@metalcore-mfg.com or call our consent hotline at +1 (800) 555-PRIVACY (774-8229).

Revocation of Consent

Parents or guardians may revoke consent at any time by contacting us through the methods listed in Section 12. Upon revocation, we will cease processing the child's personal information and delete all collected data within 30 days, unless retention is required by applicable law.

5 ⚙️ How We Use Children's Data

MetalCore does not process children's personal information for commercial purposes. In the event such information is collected (with proper parental consent or where legally required), it may only be used for the following limited purposes:

• Operational Necessity: Responding to inquiries or addressing issues that may arise from inadvertent access to our Services.
• Safety & Compliance: Protecting the safety and well-being of children and complying with legal obligations.
• Parental Notification: Contacting a parent or guardian if we discover that a child's personal information has been collected without proper consent.
• Service Improvement: Using anonymized, aggregated data to improve our Services (no personal identification is retained).

What We Will NEVER Do

We will never use a child's personal information for:

• Marketing or promotional communications
• Sale or rental to third parties
• Behavioral advertising or profiling
• Creating user profiles for targeted advertising
• Sharing with data brokers or advertising networks
• Any purpose beyond what is explicitly stated in this policy

6 🔗 Data Sharing & Disclosure

MetalCore does not sell, trade, or rent children's personal information to third parties. We may share limited information only under the following circumstances:

Service Providers

We may engage trusted third-party service providers who assist us in operating our Services (e.g., web hosting, email services, analytics). These providers are contractually obligated to handle any data in accordance with this policy and applicable privacy laws. They may not use children's data for any purpose other than providing the services we've requested.

Legal Requirements

We may disclose children's personal information if required to do so by law or in the good faith belief that such action is necessary to:

• Comply with a legal obligation or court order
• Protect and defend the rights or property of MetalCore Manufacturing
• Prevent or investigate possible wrongdoing in connection with our Services
• Protect the personal safety of users of our Services or the public

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of MetalCore's assets, any children's personal information will be transferred in accordance with applicable privacy laws, and parental consent will be sought where required.

7 🔒 Data Security Measures

MetalCore Manufacturing implements industry-leading security measures to protect any personal information, including children's data, from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

Technical Safeguards

• Encryption: All data transmitted between your browser and our servers is protected using TLS 1.3 encryption. Data at rest is encrypted using AES-256 standard encryption.
• Access Controls: Strict role-based access controls limit who can view or process personal data. Access to children's data requires elevated authorization.
• Firewall Protection: Multiple layers of firewall protection and intrusion detection systems monitor our networks 24/7.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing by independent third parties.
• Data Minimization: We collect and retain only the minimum data necessary for our stated purposes.

Organizational Safeguards

• Employee Training: All employees receive regular training on data privacy, COPPA compliance, and child safety protocols.
• Privacy by Design: Privacy protections are built into our systems and processes from the outset, not added as an afterthought.
• Incident Response: We maintain a comprehensive incident response plan that includes specific procedures for potential breaches involving children's data.
• Dedicated Privacy Office: Our Privacy Office oversees all data protection activities and serves as the point of contact for privacy-related inquiries.

8 📜 Parental Rights & Controls

Under COPPA, GDPR, and other applicable laws, parents and guardians have specific rights regarding their children's personal information. These rights include:

1. Right to Review: Parents can review the personal information we have collected from their child, in the form in which it was collected.
2. Right to Delete: Parents can request the deletion of their child's personal information. We will delete such data within 30 days of receiving a valid request.
3. Right to Refuse Further Collection: Parents can refuse to allow further collection or use of their child's personal information.
4. Right to Revoke Consent: Parents can withdraw previously given consent at any time, with future effect.
5. Right to Portability: Where applicable under GDPR or other regulations, parents can request a copy of their child's data in a machine-readable format.
6. Right to Erasure ("Right to Be Forgotten"): Under GDPR, parents can request complete erasure of their child's personal data where no legal basis for retention exists.
7. Right to Object: Parents can object to the processing of their child's personal information for specific purposes.
8. Right to File a Complaint: Parents have the right to lodge a complaint with a supervisory authority if they believe their rights have been violated.

How to Exercise These Rights

To exercise any of the above rights, parents or guardians should contact our Privacy Office with a written request that includes:

• The parent's/guardian's full name and contact information
• The child's name (if known)
• Proof of parental relationship or guardianship
• A clear description of the request (review, deletion, etc.)
• The email address or account associated with the child's data (if applicable)

We will respond to all valid requests within 30 days. Identity verification may be required to protect the child's privacy and confirm the requester's authority.

9 🍪 Cookies & Tracking Technologies

Our Services use cookies and similar tracking technologies to enhance user experience, analyze website traffic, and improve our services. We do not use tracking technologies specifically designed to target or track children.

Cookies We May Use

Our Commitment Regarding Children

• We do not use cookies to track children's online behavior
• We do not serve behavioral or targeted advertisements based on children's browsing
• Analytics data is anonymized and aggregated — no individual child can be identified
• We do not use "do not track" signal blockers for children's browsing activity

10 🗄️ Data Retention & Deletion

MetalCore is committed to retaining children's personal information only for as long as strictly necessary. Our retention policy includes:

Retention Periods

• Inadvertently Collected Data (No Consent): Deleted within 30 days of discovery that the data belongs to a child under 13.
• Data with Parental Consent: Retained only for the duration of the service interaction or as long as consent remains active.
• After Consent Revocation: All personal data deleted within 30 days of revocation request.
• Server Logs: Anonymized and aggregated within 90 days. No personally identifiable information is retained in logs.
• Legal Hold: Data may be retained longer if required by law, litigation, or regulatory investigation.

Deletion Process

When children's personal information is deleted, we use secure deletion methods that render the data unrecoverable. This includes:

• Secure erasure from active databases
• Removal from backup systems within 90 days
• Notification to third-party service providers to delete their copies
• Documentation of deletion for compliance records

11 ⚖️ Legal Compliance Framework

MetalCore Manufacturing is committed to full compliance with all applicable children's privacy laws and regulations. Our compliance framework addresses:

Children's Online Privacy Protection Act (COPPA)

As a U.S.-based company, we comply with COPPA (15 U.S.C. §§ 6501-6506 and 16 C.F.R. Part 312), which requires operators of commercial websites to obtain verifiable parental consent before collecting personal information from children under 13.

General Data Protection Regulation (GDPR)

For users in the European Economic Area (EEA), we comply with GDPR provisions regarding children's data, including Article 8 (conditions applicable to child's consent in relation to information society services) and Chapter III (rights of the data subject).

Other Applicable Regulations

• California Consumer Privacy Act (CCPA) / CPRA: Additional rights for California residents, including minors.
• Canadian Privacy Laws: PIPEDA and provincial equivalents regarding children's information.
• UK GDPR: Post-Brexit UK data protection regulations.
• Brazilian LGPD: Lei Geral de Proteção de Dados for Brazilian users.
• Other Jurisdictions: We comply with applicable data protection laws in all jurisdictions where we operate or serve customers.

Compliance Monitoring

We maintain an ongoing compliance program that includes:

• Annual privacy impact assessments (PIAs)
• Regular legal reviews of evolving privacy regulations
• Employee training on children's privacy obligations
• Third-party compliance audits (bi-annual)
• Documentation and record-keeping of all compliance activities

12 📞 Contact Us

If you are a parent or guardian and have questions about this Children's Privacy Policy, believe your child has provided personal information to MetalCore, or wish to exercise any of the rights described above, please contact our Privacy Office using any of the methods below:

Supervisory Authorities

If you believe your rights have not been respected, you have the right to lodge a complaint with the appropriate supervisory authority in your jurisdiction:

• United States: Federal Trade Commission (FTC) — ftc.gov
• European Union: Your national data protection authority
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• Canada: Office of the Privacy Commissioner — priv.gc.ca
• California: California Privacy Protection Agency — oag.ca.gov/privacy