North Shore Steel Privacy Policy
Last Revised: October 1, 2026
This Privacy Policy outlines how we collect, use, share, and protect your personal information.
A. Definitions
1. “Personal Information” means data that identifies you; identifies a particular individual; refers to personally identifiable information, personal information, or personal data; or identifies, relates to, describes, is reasonable capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
2. “Service Provider” means a “Service Provider” under the CCPA, a “Processor” under the GDPR and US state privacy laws, or any natural person, legal entity, or other body that operates under a service-provider contract with us to process Personal Information from us under contractual obligations prohibiting the retention, use, or disclosure of Personal Information collected by us for any purpose other than the purpose specified in the contract or any other purpose permitted under any applicable data privacy laws (i.e. a person or entity who processes any Personal Information we collected on behalf of us).
3. “Sensitive Personal Information” means Personal Information that includes your social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, citizenship or immigration status, religious or philosophical beliefs, or union membership; contents of your mail, email, and text messages unless we are the intended recipient of the communication; genetic data; biometric information; Personal Information concerning your health; Personal Information collected and analyzed concerning your sex life, sexuality, or sexual orientation, Personal Information collected from a known child.
B. How We Collect Your Personal Information.
Directly from you. We collect your Personal Information directly from you when you provide such information directly to us, for example, when you submit information through a form on our website, call us, send us emails, or when you apply for a job through the portal on our website. We may offer contests, sweepstakes or other contests that will require you to sign up and provide additional Personal Information. In that case, we will collect the information provided along with your involvement in such activity.
Tracking technologies. When you visit our website, open or click on the emails we send you, we or third-parties we work with, automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.
C. Personal Information We Collect About You.
We may collect and use the following Personal Information:
| Categories of Personal Information | Specific Types of Personal Information Collected |
|---|---|
| Employment Information | Information you provide as part of applying for a job or during the course of your employment. |
| Identifying Information | Name, email address, postal address, phone number, date of birth, payment information. |
| Technical Information | IP address, browser type and version, preferred language, geographic location, operating system and computer platform, services you have viewed or searched for while using our websites, and parts of our websites that you have visited. |
D. Information We Collect from Website Visitors.
When you visit our website, we or third-parties we work with (like advertising networks, analytics providers, and social media platforms and networks), may collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third–party libraries, and cookies (collectively, “Tracking Technologies”). These Tracking Technologies only collect your Personal Information when you consent by clicking your preference on the Privacy Banner that is displayed on our website.
The Website Tracking Technologies we use include:
• Necessary Cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. These cookies do not store Personal Information used to identify you for marketing purposes and cannot be disabled through the Privacy Banner.
• Preferences Cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
• Statistics cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
• Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers. This information may include your IP address, browsing history, and device information. Depending on your preferences, it may be shared with third-party advertising providers like Google.
• Uncategorized cookies that are being analyzed and do not belong to any of the categories listed above.
Additional information about the specific cookies in each category may be found in our Privacy Consent banner. Once you select a preference on the banner, you can view the information or modify your cookie preferences and opt-out of the collection, sale, or sharing of this information by clicking the icon displayed in the bottom left-hand corner of our website.
E. Why We Use Your Personal Information.
In addition to the disclosures above about our use of Tracking Technologies, we collect and use Personal Information for the following purposes:
| Information | What we use your Personal Information for |
|---|---|
| Identifying Information, and Technical Information |
|
| Employment Information |
|
F. Who We Share Your Personal Information With. We collect Personal Information directly from you, automatically from your device through Tracking Technologies, and from third parties such as advertising networks, analytics providers, social media platforms, staffing agencies, background check providers, and our business customers and suppliers. We share or disclose your Personal Information for a business purpose as described below:
We share or disclose Personal Information with our Service Providers to process this data on our behalf in order to help deliver our services to you.
We may also disclose and exchange Personal Information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.
As set forth in Section D (Information We Collect from Website Visitors).
G. Personal Information We Sell. We do not sell any Personal Information. However, some jurisdictions consider the sharing or disclosing of Personal Information collected by Website Tracking Technologies with third-parties like Google to be a “sale” of Personal Information. To the extent this information is considered a sale, we share some of the Technical Information gathered when you browse our website with third-parties who process it to deliver content or advertisements that are more relevant to your interests, but only if you consent to the use of the applicable cookies. For additional information, please refer to Section D (Information We Collect from Website Visitors).
H. Sensitive Personal Information. Other than employment-related information such as government identification numbers collected for onboarding, payroll, tax, and benefits purposes, we do not collect Sensitive Personal Information. We do not sell or share Sensitive Personal Information, and we do not use or disclose Sensitive Personal Information for purposes other than those permitted under applicable law without first providing you the ability to limit that use. If our practices change, we will update this Policy and provide a “Limit the Use of My Sensitive Personal Information” mechanism on our website.
I. How Long Your Personal Information Will Be Kept. We will keep your Personal Information for the period necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. We do not retain any category of Personal Information for longer than reasonably necessary for the purpose for which it was collected. In determining the applicable retention period for each category, we consider the nature and sensitivity of the information, the duration of our relationship with you, our legal, tax, accounting, and recordkeeping obligations, and whether the information is needed to establish, exercise, or defend legal claims. By way of example, information collected through Tracking Technologies is retained for the life of the applicable cookie or as otherwise disclosed in our Privacy Consent banner, and employment-related information is retained for the duration of the application or employment relationship and any period required by applicable employment and tax laws.
We will also keep your Personal Information for as long as is necessary:
To respond to any questions, complaints or claims made by you or on your behalf;
To show that we treated you fairly; or
To keep records required by law.
When it is no longer necessary to retain your Personal Information, we will delete or deidentify it.
J. Where Your Personal Information is Held. Information may be held at our offices and those of our Service Providers in the United States.
K. Global Privacy Control. We honor Global Privacy Control, a browser-level signal, maintained either by a browser or browser extension, that a user can configure to opt out of the sale or sharing of Technical Information with third-parties. More information about Global Privacy Control is available at https://globalprivacycontrol.org/.
L. IMPORTANT NOTICE FOR CHILDREN UNDER THE AGE OF SIXTEEN (16). We do not intentionally collect the Personal Information of individuals under sixteen years of age, and we do not knowingly sell or share the Personal Information of consumers we know to be under the age of sixteen (16). We do not knowingly collect Personal Information from any person under the age of thirteen (13) without verifiable parental consent, and WE WILL NOT RETAIN ANY PERSONAL INFORMATION OF ANY PERSON UNDER THE AGE OF THIRTEEN (13) IF KNOWINGLY COLLECTED WITHOUT PARENTAL OR LEGAL GUARDIAN CONSENT. If we learn that we have collected Personal Information from someone under the age of 13 without verifiable parental consent, we will promptly delete that Personal Information. If you believe we have impermissibly collected Personal Information from someone under the age of 13, please contact us immediately at privacy@nssco.com.
M. Available Rights to You
1. Your Rights in General.
For You if You Are in the EEA, the UK, or Switzerland.
We do not offer our services in the EEA, the UK, or Switzerland. However, in the event that we collect Personal Information of a resident of these jurisdictions, we process that Personal Information on the following legal bases: your consent; as necessary to perform our agreement to provide services or other applicable agreements; as necessary for compliance with a legal obligation to which we are subject; or as necessary for our legitimate interests, which include operating, securing, and improving our business. Where we rely on your consent, you may withdraw that consent at any time by contacting us as described below, without affecting the lawfulness of processing carried out before withdrawal.
Residents of the EEA, UK, or Switzerland have the following rights.
| Your Right | The Right Explained |
|---|---|
| Right to Access | The right to be provided with a copy of your Personal Information (the right of access) |
| Right to Rectification | The right to require us to correct any mistakes in your Personal Information |
| Right to be Forgotten | The right to require us to delete your Personal Information—in certain situations |
| Right to Restriction of Processing | The right to require us to restrict processing of your Personal Information—in certain circumstances, e.g. if you contest the accuracy of the data |
| Right to Data Portability | The right to receive the Personal Information you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations |
| Right to Object | The right to object:
|
| Right Not to be Subject to Automated Individual Decision-Making | The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you |
| Right to Lodge a Complaint | Users that reside in the EEA, the UK, or Switzerland have the right to lodge a complaint about our data collection and processing actions with the supervisory authority concerned. Contact details for data protection authorities are available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en We commit to resolve complaints about privacy and its collection or use of your Personal Information. European Union or Swiss individuals with inquiries or complaints regarding this Policy should first contact Us at privacy@nssco.com. If we are acting as the Processor pursuant to instructions from a Controller, it may refer you to the applicable Controller to exercise your rights with respect to the data we are processing on its behalf. |
For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner’s Office (ICO) on individual rights under the General Data Protection Regulation.
United States privacy laws provide residents with certain rights that may be applicable to you, depending on your state of residence:
| Disclosure of Personal Information We Collect About You | You have the right to know:
Please note that we are not required to:
|
|---|---|
| Personal Information Sold or Used for a Business Purpose | In connection with any Personal Information we may sell or disclose to a third party for a business purpose, you have the right to know:
|
| Right to Opt-out | You have the right to opt-out of the sale of your Personal Information to third parties or Service Providers, the use for targeted advertising, and profiling in furtherance of a decision that produces a legal or similarly significant effect concerning you. |
| Right to Access | The right to be provided with a copy of your Personal Information (the right of access) |
| Right to Limit the Use and Disclosure of Sensitive Personal Information. | The right to limit the use and disclosure of any Sensitive Personal Information about you. |
| Right to Rectification or Correct Personal Information | The right to require us to correct any mistakes in your Personal Information |
| Right to be Forgotten or Deleted | The right to require us to delete your Personal Information We may deny the request if the information is necessary to:
|
| Right to Restriction of Processing | The right to require us to restrict processing of your Personal Information—in certain circumstances, e.g. if you contest the accuracy of the data |
| Right to Data Portability | The right to receive the Personal Information you provided to us in a portable and readily usable format. If the Personal Information is in a platform, you may have the right to receive the information in a format that allows the transfer to another platform. |
| Right to Object | The right to object:
|
| Right Not to Be Subject to Automated Individual Decision-Making | The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you |
| Right Not to Be Discriminated Against | You have the right to not be discriminated against by us because you exercised any of your rights. This means we cannot, among other things:
Please note that we may charge a different price or rate or provide a different level or quality of goods and services to you, if that difference is reasonably related to the value provided to our business by your Personal Information. |
| Right to Appeal the Denial of an Enforcement of Your Right by Us | You have the right to appeal the denial or failure to enforce any request of your rights listed above by us. You can appeal any data privacy decision or indecision we make concerning your Personal Information by emailing us and including the word “Appeal” in the subject line of the email with information sufficient to allow us to identify the original request. |
2. How to Contact us or Exercise Your Rights. If you would like to contact us or exercise any of your rights as described in this Policy, please call us toll-free at 877-453-3533, email us at privacy@nssco.com, submit a request through our online form, or write to us at 13935 Industrial Rd, Houston, TX 77015. To opt out of the sale or share of your Personal Information collected as described in Section D (Information We Collect from Website Visitors), you can click the "Do Not Sell or Share My Personal Information" link in the footer of any page. The Do Not Sell page explains your options and has a button that reopens the cookie banner, where you can choose Deny, or turn off Marketing and Statistics and click Allow selection.
Not all of the rights listed above may apply to you depending on your state of residence and other factors, including restrictions on the number of times per year you can make certain kinds of requests. We reserve the right to evaluate your request to determine our responsibilities for complying with the request.
You may also designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your written permission to act for you, and we may require you to verify your identity directly with us or to confirm that you authorized the request. If you choose to contact us directly, you will need to provide us with:
Enough information to identify you (e.g., your full name, email address and phone number);
Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and
A description of what right you want to exercise and the information to which your request relates.
We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.
Any Personal Information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.
We will confirm receipt of your request within ten (10) business days and will respond substantively within forty-five (45) days, which we may extend by an additional forty-five (45) days where reasonably necessary, in which case we will notify you of the extension and the reason for it. If we decline to act on your request, we will tell you why and, where applicable law provides an appeal right, we will respond to your appeal within forty-five (45) days (or sixty (60) days where required by applicable state law) with a written explanation of the reasons for our decision and information about how to submit a complaint to your state attorney general or other applicable regulator.
N. General Information
1. Changes to This Privacy Notice. We may change this Policy from time to time. We will post the revised Policy on our website and update the “Last Revised” date above.
2. Do You Need Extra Help? If you would like this Policy in another format (for example: audio, large print, braille), please contact us (see “How to contact us” above).
3. Who Is Responsible for Your Personal Information. North Shore Supply Company, Inc. d/b/a North Shore Steel, located at 12944 Market Street Road, Houston, TX 77015, is the business and data controller responsible for the Personal Information described in this Policy. We have designated a privacy contact who is accountable for our compliance with this Policy and applicable data protection laws, and who can be reached at privacy@nssco.com. Residents of Canada may also direct complaints to the Office of the Privacy Commissioner of Canada, and residents of the EEA or the UK may complain to their local supervisory authority as described above.
713-980-5874
713-453-3533
