1. Who We Are

X Steel Frame LLC is a Florida-registered limited liability company specializing in cold-formed steel (CFS) and light gauge steel (LGS) project coordination, engineering support, field fabrication, and related technical services. We operate as a B2B project partner and technical coordinator serving general contractors, subcontractors, developers, and construction professionals in Florida and the Southeast United States.

Registered Address: 7901 4th St N #13458, St. Petersburg, FL 33702, United States
Website: https://xsteelframe.com
Contact Email: info@xsteelframe.com
Phone: 772-314-4772

X Steel Frame LLC is the data controller responsible for your personal information collected through this website.

2. Information We Collect

2.1 Information You Provide Directly

When you use our contact form or otherwise communicate with us, we may collect:

• First name and last name
• Business email address
• Phone number
• Country of residence or operation
• Your role or situation in the construction industry (as selected in our contact form)
• Any message or inquiry content you submit
• Company name and job title (if provided voluntarily)

2.2 Information Collected Automatically

When you visit our website, we and our third-party service providers may automatically collect:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation path on our website
• Referring website or source
• Date and time of your visit
• Cookie identifiers and similar tracking data (see Section 6)

2.3 Information We Do Not Collect

We do not collect sensitive personal information such as Social Security numbers, government-issued ID numbers, payment card numbers, health information, or biometric data through this website.

3. How We Collect Information

We collect personal information through the following means:

• Contact Form: Our website contains a contact form where you can submit inquiries. Submission constitutes voluntary provision of the listed data.
• Direct Communication: Email, phone calls, or other direct communication with our team.
• Cookies & Analytics Tools: Automated data collection via cookies, Google Analytics, and similar tools when you browse our website.
• Advertising Platforms: When you interact with our advertisements on Google Ads or Facebook/Meta, those platforms may share interaction data with us in accordance with their own privacy policies.
• Live Chat: If you use a live chat feature on our website, the content of that conversation and any contact information you provide will be collected.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to Inquiries: To respond to your contact form submissions, answer questions, and provide information about our services.
• Business Communication: To send project-related updates, service information, and follow-up communications related to your inquiry.
• Marketing Communications: With your consent or as permitted by applicable law, to send you email newsletters, updates about X Steel Frame services, industry insights, and promotional materials. You may opt out at any time (see Section 10).
• Service Delivery: If you engage X Steel Frame for project services, your information is used to deliver, manage, and support those services, including coordination with engineering partners, subcontractors, or manufacturers where necessary.
• Website Analytics: To analyze website traffic, understand how visitors use our site, and improve our website and content using Google Analytics and similar tools.
• Advertising & Retargeting: To deliver relevant advertisements to you on Google, Facebook/Meta, and other platforms based on your visit to our website.
• Legal Compliance: To comply with applicable federal and Florida state laws, regulations, and legal obligations.
• Security: To detect, prevent, and respond to fraud, security incidents, or technical issues.

5. Legal Basis for Processing

For visitors from the European Economic Area (EEA), United Kingdom, or other jurisdictions requiring a stated lawful basis for processing personal data, we rely on the following:

• Consent: Where you have given explicit consent, such as subscribing to marketing emails or accepting non-essential cookies.
• Legitimate Interests: To operate our business, respond to inquiries, improve our website, and send relevant communications where our interests do not override your fundamental rights.
• Contractual Necessity: Where processing is necessary to fulfill a service agreement or pre-contractual steps at your request.
• Legal Obligation: Where we must process your information to comply with applicable law.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies. For full details, please see our Cookie Policy. In summary:

• Essential Cookies: Required for the website to function correctly. Cannot be disabled.
• Analytics Cookies: Used by Google Analytics to understand how visitors use our website. These cookies collect anonymized data.
• Advertising Cookies: Used by Google Ads and Facebook/Meta Pixel to serve relevant advertisements and measure campaign performance.
• Functional Cookies: Used to remember your preferences and support live chat functionality.

You may control cookie settings via your browser or our cookie consent tool. Note that disabling certain cookies may affect website functionality.

7. Third-Party Services & Disclosure

7.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating our website and business. These parties are contractually required to protect your data and may not use it for their own purposes:

• Namecheap / WordPress Hosting: Website hosting and content management infrastructure (Namecheap, Inc.).
• Google LLC: Google Analytics (website analytics), Google Ads (advertising), and associated services. Data processed in accordance with Google’s Privacy Policy.
• Meta Platforms, Inc. (Facebook): Facebook Pixel for advertising and remarketing. Data processed in accordance with Meta’s Data Policy.
• Email Marketing Platform: If you subscribe to communications, your email and name may be stored with our email marketing provider (e.g., Mailchimp or equivalent). You may unsubscribe at any time.
• Live Chat Provider: Our live chat tool may collect your name, email, and chat content to facilitate support.

7.2 Business Partners

In the course of delivering project services, we may share limited information (such as shipping addresses, project contact details, or technical specifications) with our manufacturing partners, engineering firms, or on-site coordinators. We share only the minimum information necessary for legitimate project delivery and legal compliance. We do not share your information for third-party marketing purposes.

7.3 Legal Requirements

We may disclose personal information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of X Steel Frame LLC, our clients, or others.

7.4 Business Transfers

If X Steel Frame LLC undergoes a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on our website.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law:

• Contact Form Inquiries: Retained for up to 3 years from the date of submission, or for the duration of a business relationship, whichever is longer.
• Marketing Subscriber Records: Retained until you unsubscribe or request deletion, plus an additional 90-day period for compliance recordkeeping.
• Project & Service Records: Retained for a minimum of 7 years in accordance with Florida business records and construction industry regulations.
• Analytics Data: Retained in accordance with Google Analytics default retention settings (up to 26 months, configurable).
• Advertising Data: Retained in accordance with the respective platform’s data retention policies (Google, Meta).

Upon expiration of the applicable retention period, we securely delete or anonymize your personal information.

9. Data Security

We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and our website
• Secure server infrastructure hosted by Namecheap with access controls
• Restricted internal access to personal information on a need-to-know basis
• Regular monitoring and security updates to our WordPress installation and plugins

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to use caution when submitting personal information online. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and, where required, the appropriate regulatory authorities, in accordance with applicable law.

10. Your Privacy Rights

10.1 For All Users

Regardless of your location, you have the right to:

• Opt out of marketing emails by clicking the “Unsubscribe” link in any email we send
• Request information about what personal data we hold about you
• Request correction of inaccurate personal data
• Contact us at info@xsteelframe.com with any privacy-related concern

10.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The categories and specific pieces of personal information we collect, use, disclose, or sell.
• Right to Delete: Request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: We do not sell personal information. We do use advertising cookies — you may opt out via our Cookie Policy settings.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise California rights, contact us at info@xsteelframe.com with “California Privacy Request” in the subject line. We will respond within 45 days.

10.3 EEA / UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights including the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing and to lodge a complaint with your local data protection authority. To exercise these rights, contact us at info@xsteelframe.com.

10.4 Florida Residents

Florida’s Digital Bill of Rights (effective July 1, 2024, for covered controllers) may provide additional rights. While X Steel Frame LLC may not currently meet the revenue/data thresholds of a covered controller, we voluntarily honor the spirit of the law and will respond to access and deletion requests submitted to info@xsteelframe.com.

11. Children’s Privacy

Our website and services are directed exclusively at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child has submitted personal information to us, please contact us at info@xsteelframe.com.

12. International Visitors

Our website is operated from the United States. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using our website, you consent to the transfer of your information to the United States in accordance with this Privacy Policy.

For visitors from the EEA or UK, where cross-border data transfers require additional safeguards (such as Standard Contractual Clauses), we rely on applicable mechanisms recognized under GDPR and UK GDPR.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, provide notice via email or a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our website following the posting of changes constitutes your acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: