Privacy Policy

Information We Collect

We collect information you provide directly through the Site’s forms.

• Contact form: name, company, business email, phone number, and your message.
• Request for quote (RFQ): company and contact details, part and project information, manufacturing requirements, and the files you upload (for example drawings, models, and specifications).
• Supplier interest form: business identity and contact details, capability and quality-system descriptions, self-reported certifications, and any documents you upload.
• Security and operational logs: submission timestamps, submission reference numbers, and a hashed network identifier used for abuse prevention and rate limiting. We do not log uploaded file contents.

How We Use Information

We use submitted information to respond to inquiries, prepare quotations, evaluate supplier interest, maintain business records, and protect the Site and our systems from abuse. We do not sell personal information and do not use it for third-party advertising.

File Uploads

Files submitted through the RFQ and supplier forms are uploaded directly to private Microsoft Azure Blob Storage using short-lived, single-purpose upload permissions. Uploaded files are not publicly accessible, are not emailed as attachments, and are scanned for malware before internal review. Files are not processed by automated design-analysis or artificial-intelligence tools.

Controlled Data

The public RFQ portal is for commercial, non-controlled information only. Do not submit Controlled Unclassified Information (CUI), ITAR-controlled technical data, export-controlled technical data, or other controlled defense information through the Site. If controlled information is submitted in violation of this restriction, we may delete it without review and will contact you regarding appropriate handling.

Infrastructure and Service Providers

The Site and its forms are hosted on Microsoft Azure in the United States. We use Microsoft services for hosting, storage, email notification, and security monitoring, and a bot-mitigation service (Cloudflare Turnstile) to protect forms from automated abuse. These providers process information on our behalf under their own security and privacy commitments.

Analytics

[CONFIRM] The Site does not currently use third-party analytics or advertising trackers. If analytics are added, this section will be updated to identify the provider and the information collected.

Retention

RFQ and supplier submissions are retained as business records for [CONFIRM] years, or longer where required to support a quotation, order, or legal obligation. Contact form messages are retained for [CONFIRM] months. Security logs are retained for [CONFIRM] days. Submissions that are started but never completed may be marked abandoned and removed under the same schedule.

Security

We use reasonable administrative and technical safeguards, including encrypted connections (HTTPS), private storage, identity-based access to storage, malware scanning, and access logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Choices

You may request access to, correction of, or deletion of information you submitted by emailing info@gdntmfg.com. We may retain information needed to fulfill a quotation or order, comply with law, or protect our legal rights.

Compliance Status

This Policy does not represent that GD&T Manufacturing holds any specific certification or formal compliance status (including CMMC, ITAR, HIPAA, or GDPR). Any such status will be stated expressly on the Site only when it is factually accurate.

Children

The Site is intended for business use and is not directed to children under 16. We do not knowingly collect information from children.

Changes

We may update this Policy. The "last updated" date reflects the most recent revision.

Contact

Questions about this Policy: info@gdntmfg.com.