Data Privacy Agreement

We may collect and process the following categories of personal data:

• Personal identification information: name, email address, phone number, billing address, and shipping address provided when you place an order or inquire about services.
• Payment information: card or bank details required to process transactions, handled by PCI-compliant payment processors.
• Project information: details relevant to building projects, such as product requirements, measurements, site location, photographs, and drawings.
• Account and communication data: credentials, messages, call logs, quotes, orders, and support history.
• Browser and device information: IP address, device type, browser version, and cookie data used to operate and optimize the website.

Your personal data is used only for defined, lawful purposes:

• Order processing: fulfilling orders, arranging freight consolidation and shipping, invoicing, and customs documentation.
• Communication: order status updates, responses to inquiries, and service notices.
• Marketing: with your consent, promotional emails, newsletters, and product updates, with an unsubscribe option in every message.
• Service improvement: analyzing usage and feedback to improve website functionality and customer service.
• Security and compliance: fraud prevention, access control, dispute resolution, and legal, tax, and customs record-keeping.

We collect only the data necessary to deliver our services and meet your project needs, and we do not use it for unrelated purposes without notifying you. We take reasonable steps to keep data accurate and current, and you may correct your information at any time through your account or by contacting us.

We implement industry-standard safeguards to protect the confidentiality and integrity of your data, including:

• Encryption: sensitive data, including payment information, is encrypted in transit using TLS and encrypted at rest in our databases.
• Network protection: firewalls, monitored infrastructure, and hardened hosting environments.
• Access controls: role-based permissions, row-level database security, least-privilege administrative accounts, and mandatory authentication.
• Accountability: audit logging of privileged actions, periodic access reviews, and confidentiality obligations for all personnel and contractors.

We do not sell or rent your personal data. We share it only in these circumstances:

• Service providers: shipping and freight partners, customs brokers, payment processors, cloud hosting, and email delivery providers, each bound by written confidentiality and data protection terms and permitted to use data only to perform services for us.
• Manufacturers and suppliers: limited details necessary to manufacture, configure, or ship your order.
• Legal requirements: disclosure to comply with court orders, customs and tax regulations, or other lawful requests.
• Business transfers: in a merger, acquisition, or sale of assets, subject to equivalent data protection commitments.

Global Sales operates from the United States and serves Bermuda and the Caribbean. Your data may be transferred to and processed in the United States and in destination countries where fulfillment occurs.

Where data originates in the EEA, the UK, or another jurisdiction requiring transfer safeguards, we rely on Standard Contractual Clauses or another lawful transfer mechanism, together with the technical and organizational measures described in Section 4.

We retain personal data only as long as necessary for the purposes in this Agreement and to satisfy legal, accounting, customs, and reporting requirements — generally seven (7) years for transactional and shipping records, and the life of the account plus seven (7) years for account and project records.

At the end of the retention period, data is securely deleted or irreversibly anonymized for statistical purposes.

To exercise these rights, contact info@global-sales.us. We verify identity before acting and respond within the period required by applicable law, generally within 30 days.

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or outdated data.
• Deletion: request deletion, subject to legal retention obligations.
• Restriction and objection: ask us to limit or stop certain processing.
• Data portability: receive your data in a structured, commonly used, machine-readable format or have it transmitted to another provider.
• Withdraw consent: withdraw consent for consent-based processing at any time.
• Opt out of marketing: unsubscribe from marketing at any time via the link in our emails or by contacting us.
• Complain: lodge a complaint with your local data protection authority.

Our website uses cookies and similar technologies to operate core features, remember preferences, and understand usage. Strictly necessary cookies are always active; analytics and marketing cookies are used only where permitted or consented to.

You can manage cookies in your browser settings. Disabling cookies may affect certain website functionality. We honor Global Privacy Control (GPC) browser signals.

Our website may link to external sites not operated by Global Sales. We are not responsible for their privacy practices and encourage you to review their policies before submitting information.

Our services are intended for business and adult consumer use. We do not knowingly collect data from children under 13, and we will delete any such data promptly upon discovery.

Where Global Sales processes personal data that a business customer (the “Controller”) provides about its own customers, employees, or contacts, Global Sales acts as a processor and will: process that data only on the Controller's documented instructions; ensure personnel are bound by confidentiality; apply the security measures in Section 4; assist with data subject requests and breach notification; and delete or return the data at the end of the engagement, subject to legal retention.

Global Sales engages sub-processors only under written terms no less protective than this Agreement and remains responsible for their performance. A current list of sub-processor categories is available on request.

On reasonable written notice and no more than once annually (or following a confirmed breach), a Controller may request documentation evidencing our compliance with this Agreement. We will provide reasonable assistance with data protection impact assessments and regulator inquiries relating to data we process on the Controller's behalf.

Global Sales may update or modify this Data Privacy Agreement at any time. Changes are posted on this page with an updated date, and material changes will be communicated to registered account holders. Continued use of our website and services after changes take effect constitutes acceptance.

Questions, concerns, or requests related to this Data Privacy Agreement may be directed to:

Global Sales — 3530 Queen Palm Drive, Tampa, FL 33619, USA

Phone: +1 (813) 236-9077 · Email: info@global-sales.us

Business hours: Monday – Friday, 8 AM – 5 PM EST.