Privacy Policy

At CNC Web Growth ("we", "us", "our", operating at cncwebgrowth.com), we provide website design, RFQ (Request for Quote) system architecture, and digital growth consulting tailored specifically to precision CNC machine shops and contract manufacturers.

We are deeply committed to protecting your privacy, personal information, and proprietary manufacturing data. This Privacy Policy describes how we collect, use, store, share, and protect your information when you visit our website, request a complimentary website audit, book a strategy call, or engage our services.

This policy has been designed to comply with applicable global privacy frameworks, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the FTC Act, and Google's Terms of Service and Partner Policies.

1. Information We Collect

We collect information directly from you when you voluntarily provide it, as well as automatically through your interaction with our website and our analytics infrastructure:

A. Information You Voluntarily Provide

• Audit & Strategy Inquiry Data: Your name, business email address, machine shop/company name, website URL, primary manufacturing capabilities (e.g., 3-axis/5-axis CNC milling, Swiss turning, wire EDM, sheet metal), materials machined, machine tolerances, certifications (e.g., ISO 9001, AS9100, ITAR), and current RFQ challenges.
• Consultation & Meeting Booking: Name, email address, phone number, and meeting notes collected when scheduling an appointment through our embedded scheduler (powered by Cal.com).
• Direct Communications: Any inquiries, emails, or project files sent directly to our team via info@cncwebgrowth.com.

B. Information Collected Automatically (Telemetry & Device Data)

• Device & Connection Identifiers: Internet Protocol (IP) address (truncated/anonymized for privacy), browser type and version, operating system, device manufacturer/model, language preferences, and screen resolution.
• Usage & Interaction Data: Pages viewed, time spent per page, referring URLs, button clicks (e.g., initiating a strategy call, opening calendar slots, submitting audit inquiries), scroll depth, and interaction timestamps.

2. Google Analytics 4 & Google Tag Manager Disclosures

We use Google Tag Manager and Google Analytics 4 (GA4) (Measurement ID: G-XRH65W9FNK) provided by Google LLC ("Google") to analyze how visitors engage with our web property and improve user experience.

GA4 uses cookies and similar measurement technologies to collect aggregated, pseudonymous information about website traffic. We strictly do not pass Personally Identifiable Information (PII)—such as names, unhashed email addresses, or billing details—into Google Analytics. IP addresses are automatically masked and anonymized by Google Analytics 4.

Google processes this data in accordance with Google's privacy policies. To understand how Google collects and uses information from partner websites, please review Google's official policy:

How to Opt Out of Google Analytics: You can prevent your data from being used by Google Analytics across all websites by downloading and installing the official Google Analytics Opt-out Browser Add-on.

3. Online Advertising, Remarketing & Conversion Tracking

We may utilize digital advertising services, including Google Ads and Meta Pixel (Pixel ID: 1986164975521062), to measure the performance of our educational campaigns, track conversions (such as audit requests and call bookings), and deliver relevant advertisements to manufacturing professionals who have previously visited our site.

Third-party vendors, including Google and Meta, use cookies, web beacons, and device identifiers to serve targeted ads based on prior visits to our website.

Managing & Opting Out of Personalized Advertising:

• Google Ads: You can customize or turn off personalized Google advertisements by visiting Google My Ad Center.
• Meta / Facebook Ads: You can manage your ad preferences via Facebook Ad Preferences.
• Industry Opt-Out Tools: You can opt out of interest-based advertising from participating companies via the Network Advertising Initiative (NAI) Opt-Out Page, the Digital Advertising Alliance (DAA) Consumer Choice Page, or for European visitors, Your Online Choices (EDAA).

4. Cookies & Tracking Technologies

A cookie is a small text file stored on your computer or mobile device when you access a website. We categorize our cookies as follows:

You can manage your cookie preferences at any time via the on-site cookie consent banner or by adjusting your browser settings to reject cookies.

5. How We Use Your Information

We process your personal and business data strictly for legitimate commercial purposes:

• Executing Requested Website Audits: Reviewing your shop's current website, technical capabilities, machine lists, and positioning to deliver a tailored RFQ improvement roadmap.
• Consultation & Strategy Sessions: Preparing for scheduled 30-minute discovery calls and answering specific technical questions.
• Project Scoping & Service Delivery: Drafting fixed-price proposals, Statements of Work (SOWs), and developing custom high-converting websites and RFQ architectures.
• Communications & Customer Support: Responding to inquiries, sending project milestones, and providing technical support.
• Security & Fraud Prevention: Protecting our infrastructure, preventing malicious automated submissions, and ensuring service integrity.
• Legal Compliance: Meeting our legal, tax, accounting, and regulatory obligations.

We do not sell, rent, or lease your personal or business data to third-party data brokers or marketing lists.

6. Proprietary Manufacturing Data & Confidentiality

We understand that CNC machine shops and precision manufacturers handle sensitive information, including non-disclosure agreements (NDAs) with defense, aerospace, medical, and industrial clients.

Any proprietary machine lists, equipment tolerances, customer case study parameters, or CAD/CAM technical drawings shared with us during an audit, roadmap preparation, or project engagement are held in strict commercial confidence. We are pleased to execute mutual Non-Disclosure Agreements (NDAs) prior to accessing proprietary client data.

7. Data Sharing & Third-Party Sub-Processors

We do not sell your data. We share information only with trusted third-party service providers who assist us in operating our business, under strict confidentiality and data protection agreements:

• Hosting & Infrastructure: Hostinger International Ltd. (secure web hosting and server infrastructure).
• Content Management: Sanity Inc. (headless CMS content delivery).
• Appointment Scheduling: Cal.com, Inc. (secure calendar management and meeting reservations).
• Analytics & Tagging: Google LLC (Google Analytics 4 and Google Tag Manager).
• Digital Advertising: Google LLC (Google Ads) and Meta Platforms, Inc. (Meta Pixel).
• Professional Advisors: Legal, accounting, and compliance consultants as required to comply with law.

8. Legal Bases for Processing (EEA & UK Users)

For visitors and clients located in the European Economic Area (EEA) and United Kingdom (UK), we process personal data under the following legal bases under Article 6 of the GDPR:

• Performance of a Contract: When processing is necessary to conduct an audit you requested or fulfill a Statement of Work.
• Consent: When you provide explicit consent for non-essential cookies, analytics, or direct marketing. You may withdraw consent at any time.
• Legitimate Interests: To operate, secure, and improve our web services, monitor performance, and communicate with business inquiries, provided these interests are not overridden by your fundamental rights.
• Legal Obligation: When required to comply with applicable laws, court orders, or regulations.

9. Your Privacy Rights (GDPR & Global Rights)

Depending on your jurisdiction, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we maintain about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to statutory retention obligations.
• Right to Restrict Processing: Request temporary or permanent limitation on processing.
• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local Data Protection Authority (DPA) or supervisory body.

To exercise any of these rights, email us at info@cncwebgrowth.com. We will respond within 30 days.

10. Notice to California Residents (CCPA / CPRA Disclosures)

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), California residents have specific statutory rights.

Categories of Personal Information Collected in the Preceding 12 Months:

California consumers also have the right to request disclosure of personal information collected, request deletion, request correction, and the right to be free from discrimination for exercising these privacy rights.

11. Data Retention & Security

We implement robust administrative, technical, and physical safeguards—including SSL/TLS 256-bit encryption for all data in transit, restricted access controls, and firewall protections—to safeguard your information against unauthorized access, loss, or alteration.

We retain your personal and business data only for as long as necessary to fulfill the purposes for which it was gathered, deliver ongoing website services, resolve disputes, and satisfy statutory tax or legal obligations. GA4 event telemetry is configured with standard retention periods.

12. Children's Privacy

Our website and services are exclusively designed for precision machining businesses, industrial professionals, and corporate entities. We do not knowingly market to or solicit personal data from children under the age of 18 (or under 13 in the United States, in accordance with COPPA). If we learn that a minor has submitted personal information, we will immediately delete it.

13. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect enhancements to our technology, regulatory modifications, or updates to Google Partner guidelines. The revised date will always be reflected at the top of this page. Significant modifications will be prominently posted on our website.

14. Contact Us

If you have questions, comments, or data privacy requests regarding this Privacy Policy or our data handling practices, please contact our designated Privacy team: