Privacy Policy

1. Introduction

Blue Bridge Metals (“we,” “us,” or “our”) operates the website www.bb-metals.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Site or contact us through it.

By using the Site, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Site.

2. Information We Collect

2.1 Information You Provide Directly

When you submit our contact form or reach out via email, we may collect:

  • Your name
  • Company name and title
  • Email address and phone number
  • The content of your message or inquiry

We collect this information solely to respond to your inquiry and evaluate potential business relationships.

2.2 Information Collected Automatically

When you visit the Site, we automatically collect certain technical data through Google Analytics, including:

  • IP address (anonymized where required by law)
  • Browser type and version
  • Pages visited and time spent on the Site
  • Referring website or source
  • General geographic location (country/region level)

This data is aggregated and used only to understand how visitors use the Site and to improve its performance. We do not use it to identify individual visitors.

Google Analytics is operated by Google LLC. You can learn more about Google’s data practices at https://policies.google.com/privacy and opt out of tracking via the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

2.3 Cookies

The Site uses only the cookies set by Google Analytics (analytics/performance cookies). No advertising, tracking, or social media cookies are used. You may disable cookies through your browser settings; however, some site functionality may be affected.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and communicate with you about potential business opportunities
  • To evaluate whether we can provide steel consulting or sourcing services relevant to your needs
  • To analyze aggregate website traffic and improve the Site’s content and user experience
  • To comply with applicable legal obligations

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Legal Bases for Processing (GDPR – EU/EEA/UK Visitors)

If you are located in the European Union, European Economic Area, or United Kingdom, we process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR) and applicable UK data protection law:

  • Legitimate Interests (Article 6(1)(f) GDPR): Processing contact form submissions and analytics data to operate and improve our business, where our interests are not overridden by your rights.
  • Contract (Article 6(1)(b) GDPR): Where processing is necessary to take steps at your request prior to entering into a business relationship.
  • Legal Obligation (Article 6(1)(c) GDPR): Where processing is required to comply with applicable laws.

5. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy:

  • Contact form data: Retained for up to 3 years following last contact, or as long as a business relationship is active.
  • Google Analytics data: Retained per Google’s default retention settings (26 months), as configured in our Google Analytics account.

You may request deletion of your personal data at any time (see Section 7).

6. International Data Transfers

Blue Bridge Metals operates from the United States and works with companies in Europe and globally. If you are accessing the Site from the EU, EEA, or UK, please be aware that your information may be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

Where required, we rely on appropriate safeguards for such transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms. Google Analytics data transferred to Google is subject to Google’s Data Processing Agreement and Standard Contractual Clauses.

7. Your Privacy Rights

7.1 Rights Under GDPR (EU/EEA/UK Residents)

If you are located in the EU, EEA, or UK, you have the following rights under the GDPR:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restriction of Processing: Request that we limit how we process your data in certain circumstances.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
  • Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g., your national Data Protection Authority).

To exercise any of these rights, please contact us at the address provided in Section 10.

7.2 Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purposes, and the categories of third parties with whom we share it.
  • Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may contact us to confirm.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, please contact us using the information in Section 10. We will respond within 45 days as required by law.

Categories of personal information collected in the past 12 months: Identifiers (name, email, IP address); Internet or network activity (pages visited); Geolocation data (country/region). We do not collect sensitive personal information as defined by the CPRA.

8. Third-Party Services

The Site uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies to collect anonymous usage data. Google may transfer this data to servers in the United States or other countries.

We have enabled IP anonymization in Google Analytics to further protect visitor privacy. We do not use any other third-party tracking, advertising, or data broker services.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or alteration. These include secure hosting on WordPress with standard access controls, and limited access to contact form data stored in Google Drive.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have a concern about our data practices, please contact us:

Blue Bridge Metals

Website: www.bb-metals.com

Email: [Insert Contact Email]

Mailing Address: [Insert Mailing Address]

For EU/EEA/UK residents with unresolved concerns, you have the right to contact your local Data Protection Authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

11. Changes to This Policy

This Privacy Policy was last updated on May 12, 2026. We may update this Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the effective date at the top of this page. We encourage you to review this Policy periodically.