ACOSTA SHEET METAL MFG.
PRIVACY POLICY
Last updated: September 24, 2026
This Privacy Policy (this “Policy”) describes how Sal J. Acosta Sheetmetal Mfg. Co., Inc., a California corporation doing business as “Acosta Sheet Metal Mfg.” (“Acosta,” “we,” “us,” or “our”), collects, uses, discloses, and otherwise processes personal information, as well as the rights and choices individuals may have regarding their personal information.
1. Introduction and Scope
This Policy applies when a person (“you” or “your”) visits or interacts with our website at www.acostamfg.com (our “Site”), or otherwise interacts with Acosta online or offline, including when you contact us, request information or a quote, submit an order or other form, purchase products, apply for employment, or communicate with us by telephone or email.
For information about the privacy choices you have regarding your personal information, please see Section 7. Your Privacy Choices below.
If you are a resident of California, please also refer to Section 14. Additional Privacy Information for California Residents below for more information about the categories of personal information we collect and your rights under California privacy laws.
Please note that, depending on how you interact or engage with us, we may provide you with other privacy notices with additional details about our information practices.
2. Personal Information We Collect
We collect personal information directly from you, automatically through your use of our Site, and, in limited circumstances, from other unaffiliated sources. The personal information we collect varies depending upon your use of our Site and our interactions with you.
a. Personal Information We Collect Directly from You.
In general, we may collect the following personal information from you:
-
Contact and Inquiry Information. When you contact us through our Site, by email, by telephone, in person, or otherwise, we may collect your name, company name, email address, telephone number, and any other information you choose to provide in connection with your inquiry or request.
-
Purchasing Products. When you request a quote, place an order, purchase products, or otherwise conduct business with us, we may collect information such as your name, company name, billing and delivery addresses, email address, telephone number, purchase order number, order details, product specifications, drawings, cut sheets, delivery instructions, purchase history, and other information necessary to process and fulfill your order.
-
Communications and Interactions. When you email, call, or text with us, use any chat feature we may offer on our Site, or otherwise communicate or interact with us and with our team for support or other purposes, we and our third-party vendors may collect and maintain records of your contact details and communications.
-
Payment and Credit Information. When you make a payment or apply for credit, we or our service providers may collect billing information, payment information, credit-related information, and other information necessary to process payments, establish credit terms, or administer your account.
-
Employment Application Information. If you apply for employment with Acosta, we may collect your name, contact information, employment history, education, qualifications, availability, resume, employment application, and other information you provide in connection with your application.
b. Personal Information We May Collect Automatically.
When you visit or use our Site, we and our service providers may automatically collect certain information about your device and use of the Site through cookies, log files, and similar technologies, including:
-
Device and Browsing Information. When you visit or use our Site, we may collect information such as your IP address, browser type, operating system, device type, Internet service provider, referring and exiting pages, and similar technical information.
-
Activities and Usage. We may collect activity information related to your use of our Site, such as information about the links clicked, pages viewed, searches, products viewed, time spent within our Site, your interactions with us within our Site, and other activity and usage information.
-
Location Information. We may collect or derive general geographic location information, such as city, state, or region, from your IP address..
For more information about our use of cookies and other similar technologies, please see Section 6. Cookies and Tracking below.
c. Personal Information We Collect from Other Sources.
-
Business Customers and Other Third Parties. If you interact with us on behalf of a business or other organization, we may receive your name, contact information, job title, or other business contact information from your employer, colleagues, customers, vendors, or other business contacts.
-
Other Sources. We may also receive personal information from service providers and other third parties that assist us in operating our business, as well as information that is publicly available or otherwise lawfully provided to us.
3. How We Use Personal Information
We may collect, use, disclose and otherwise process the personal information that we have collected about you for the following purposes:
-
Provide Products and Services. To respond to requests for information or quotes, process and fulfill orders, provide products and services, arrange delivery, process payments, administer customer accounts, and otherwise conduct business with our customers.
-
Analytics and Improvement. To better understand how individuals access and use our Site and our product and service offerings, and for other research and analytical purposes, such as to evaluate and improve our Site and business operations, to inform our marketing and promotion activities, to develop our Site and its features, and for internal quality control and training purposes.
-
Communicate with You. To respond to your inquiries, and to send you requested materials and other information about our Site and offerings. We may also use this information to send administrative information to you, for example, changes to our terms, conditions, and policies.
-
Marketing and Promotions. To provide information about our products, services, and business that we believe may be of interest to you, and to support our marketing and business development activities, subject to applicable law and your communication preferences.
-
Recruiting and Employment Applications. To receive, review, and evaluate employment applications, communicate with applicants, conduct interviews, assess qualifications, and otherwise manage our recruiting and hiring processes.
-
Security and Protection of Rights and Interests. To (i) protect our Site and our business operations, and to protect our rights or those of our stakeholders; (ii) manage and respond to actual and potential legal disputes and claims; (iii) prevent and detect fraud, unauthorized activities, unauthorized access, and other misuse; (iv) investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or unaffiliated entity, or violations of our Terms of Use, to the extent we believe necessary; and (v) otherwise establish, defend, or protect our rights or interests.
-
Compliance and Legal Process. To (i) comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; or (ii) respond to a subpoena, warrant, court order, or other legal process. In addition, as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
-
Auditing, Reporting, and Other Internal Operations. To (i) conduct audits and assessments of our operations, privacy controls, security controls, financial controls, risk controls, and our compliance with legal obligations; (ii) conduct assessments of our general business and its operations, accounting, recordkeeping and legal functions; and (iii) maintain appropriate business records.
-
Business Transactions and Operational Support. To (i) assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings; (ii) administer our business, accounting, auditing, compliance, recordkeeping, and legal functions; and (iii) enforce company policies and procedures.
In addition, to the extent permitted by applicable law, we may combine the personal information we collect with information from publicly available and other sources for any of the purposes described above.
4. How We Disclose Personal Information
We may disclose the personal information we collect for the purposes described above and as follows:
-
Affiliates and Subsidiaries. We may disclose the personal information we collect to our corporate affiliates and subsidiaries.
-
Vendors and Services Providers. We may disclose the personal information we collect to vendors and to service providers who perform functions on our behalf, such as entities that provide payment processing, email transmission, data hosting, analytics, marketing, and technical and customer support services.
-
Business Customers, Vendors, and Other Business Partners. We may disclose personal information to customers, vendors, suppliers, contractors, delivery providers, and other business partners where reasonably necessary to process or fulfill orders, provide products or services, coordinate deliveries, administer customer or vendor relationships, or otherwise conduct our business
-
Analytics Providers. We may disclose certain device, browsing, and Site usage information to analytics providers and other service providers that assist us in understanding how visitors use our Site, evaluating Site performance, and improving our Site and business operations. For more information, please see Section 6, Cookies and Tracking, below.
-
In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the personal information we have collected from you to the other company. We may also disclose certain personal information as necessary prior to the completion of such a transaction, or other corporate transaction such as a financing or restructuring, to lenders, auditors, and external advisors, including attorneys and consultants.
-
Compliance and Legal Obligations. To comply with our legal and compliance obligations and to respond to legal process. For example, we may disclose personal information in response to subpoenas, court orders, and other lawful requests by government officials and law enforcement, including responding to national security or law enforcement disclosure requirements.
-
Professional Advisors. We may disclose personal information to our attorneys, accountants, auditors, consultants, insurers, financial institutions, and other professional advisors in connection with the operation and administration of our business.
5. Aggregate and Deidentified Information
Notwithstanding anything else in this Policy, we may use, disclose, and otherwise process aggregate and deidentified information related to our business and our Site with unaffiliated entities for quality control, analytics, research, development, and other purposes. Where we use, disclose or process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in deidentified form and not to attempt to reidentify the information.
6. Cookies and Tracking
We and our service providers may use cookies, log files, and similar technologies to automatically collect certain information when you visit or use our Site. These technologies may be used to operate and secure the Site, remember preferences, understand how visitors use the Site, identify and resolve technical issues, and improve the performance and functionality of the Site. We use this information to, for example, analyze and understand how users of our Site access and use, as well to identify and resolve bugs and errors in our Site and to assess secure, protect, optimize and improve the performance of our Site. You have certain choices about our use of cookies and tracking within our Site, as described in this section. We may also aggregate such information to analyze trends and administer our Site.
Cookies.
“Cookies” are alphanumeric identifiers we transfer to your device through your web browser for tracking purposes. Some cookies allow us to make it easier for you to navigate our Site, while others are used to remember preferences, support the security and performance of our Site, or allow us to track activity and usage data within our Site.
Pixel Tags.
Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Site to, among other things, track the activities of users of our Site, help us manage content, and compile usage statistics. We may also use these in our emails to let us know when they have been opened or forwarded, so we can track response rates and gauge the effectiveness of our communications.
Local Storage Objects
Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our websites. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.
Hosting.
Our Site is hosted through Wix. Wix may use cookies and similar technologies in connection with hosting, operating, securing, maintaining, and analyzing the Site. Wix’s collection and use of information is governed by its own privacy practices and policies. To learn more about how Wix collects, uses, and processes information, please review the Wix Privacy Policy, available at https://www.wix.com/about/privacy, and Wix’s information regarding cookies used on Wix websites.
Analytics.
We may use analytics tools and services to help us understand how visitors use our Site, including information about pages visited, links clicked, and other interactions with the Site. These tools may use cookies and similar technologies to collect information about your device and use of the Site.
7. Your Privacy Choices
We make available several ways for you to manage your personal information, including preferences regarding cookies, advertising, whether you want to receive certain marketing and promotional content from us, and choices regarding your account information. Many of these are browser and device specific, which means that you need to set the preference for each browser and device you use to access our Site; in addition, if you delete or block cookies, you may need to reapply these preferences.
Cookie Settings
To prevent cookies from tracking your activity on our Site or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function.
Marketing and Other Communications.
You can opt out of receiving marketing emails from us by using the unsubscribe feature in any such email we send you.
Updating Your Information
You may contact us at help@acostamfg.com if you would like to update or correct personal information that you have provided to us.
8. Minors Not Permitted
Our Site is not designed for minors, and we do not knowingly collect personal information from children under the age of eighteen (18). If we discover that a child under eighteen (18) has provided us with personal data in violation of applicable law, we will delete such information from our systems. If you’re a parent and you believe we have collected your child’s information in violation of applicable law, please contact us as set forth below in Section 13. Contact Us.
9. External Links and Features
Certain features or functionality of our Site may be provided or supported by unaffiliated third parties, including Wix, and our Site may contain links to unaffiliated websites or services. Any access to and use of such features, functionality, or linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third-party entities. We are not responsible for the information practices of such unaffiliated entities, including their collection of your personal information. You should review the privacy policies and terms for any unaffiliated entities before using those websites or those features.
10. Security
We have implemented commercially reasonable safeguards intended to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.
11. Retention
Acosta retains the personal information we collect only as reasonably necessary for the purposes described in this Policy or otherwise disclosed to you at the time of collection. For example, we will retain your information as necessary to comply with our tax, accounting, and recordkeeping obligations, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and comply with our legal obligations.
12. Changes to this Policy
This Policy is reviewed and updated periodically consistent with applicable law and to ensure it accurately describes our information practices. When we update this Policy, we will accordingly revise the “Last Updated” date at the top of this document.
If we make any changes to this Policy that materially affect our practices regarding use of personal information we previously collected, we will endeavor to provide users with notice, such as by posting prominent notice on our Site.
13. Contact Us
If you have questions or concerns regarding this Policy or the handling of your personal information, please contact us at help@acostamfg.com.
14. Additional Privacy Information for California Residents
This section of the Policy provides additional information for California residents and describes our information practices as may be required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (“CCPA”). Depending on how you interact or engage with us, we may provide you with other privacy notices with additional details about our privacy practices.
Scope. This section applies to “personal information” as defined by the CCPA, whether collected online or offline. This section does not address or apply to our handling of personal information that is exempt under the CCPA, such as publicly available information or aggregated or de-identified information.
Categories of Personal Information Collected and Disclosed. While our processing of personal information varies based upon our relationship and interactions with you, the table below identifies, generally, the categories of personal information (as defined by the CCPA) that we have collected about California residents in the past twelve (12) months, as well as the categories of third parties to whom we may disclose this information for a business or commercial purpose.
Categories of Personal Information Collected
Identifiers
Includes direct identifiers, such as name, alias, postal address, email address, unique personal identifier, telephone number, IP address, account number, and similar identifiers.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Internet service providers, operating systems and platforms
-
Business customers, vendors, suppliers, contractors, and other business partners
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Commercial Information
Includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. For example, this may include information that we receive from third parties in order to better understand and reach our customers.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Internet service providers, operating systems and platforms
-
Business customers, vendors, suppliers, contractors, and other business partners
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Audio, Electronic, Visual
Includes audio, electronic, visual, or similar information, and call
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
Categories of Personal Information Collected
Sensitive Personal Information
In limited circumstances, we may collect: financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.
Categories of Third Parties to Whom We Disclose
-
Payment processors and other service providers involved in processing payments or administering credit
-
Financial institutions
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Categories of Personal Information Related to Customer Records
Includes personal information, such as name, address, telephone number, billing, delivery, or payment information, information that individuals provide us in order to purchase or obtain our products and services. For example, this may include information collected when an individual purchases or orders products and services, or enters into an agreement with us related to our products and services.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Internet service providers, operating systems and platforms
-
Business customers, vendors, suppliers, contractors, and other business partners
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Internet and Electronic Network Activity Information
Includes browsing history, clickstream data, search history, and information regarding your interaction with our Site and other Site usage information.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Internet service providers, operating systems and platforms
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Thermal, or Similar Information
recordings (e.g., of customer support calls).
Categories of Third Parties to Whom We Disclose
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Internet service providers, operating systems and platforms
-
Business customers, vendors, suppliers, contractors, and other business partners
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Characteristics of Protected Classifications Under California and Federal Law
Only in limited circumstances, and where permitted or required by applicable law, in connection with recruiting or employment, including for legally required or permitted reporting, recordkeeping, accommodation, or similar purposes, may include personal information such as race or ethnicity, religion, sex (including sexual orientation), gender, national origin, disability, medical condition, marital status and other characteristics of protected classifications under California or federal law.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Professional advisors and agents
-
Regulators, government entities and law enforcement
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Geolocation Data
Includes approximate geographic location information, such as city, state, or region derived from an IP address.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Affiliates and subsidiaries
-
Internet service providers, operating systems and platforms
-
Vendors, contractors, and other business partners
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Categories of Personal Information Collected
Professional or Employment-Related Information
Includes information you provide in connection with an employment application or business relationship.
Categories of Third Parties to Whom We Disclose
-
Service providers
-
Advisors and agents
-
Regulators, government entities and law enforcement
-
Parties involved in an actual or proposed business transaction
-
Others as directed by you or as required by law
Sales and Sharing of Personal Information.
California privacy laws define a “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. We do not sell personal information for monetary consideration. Based on our current practices, we also do not knowingly sell or share personal information for purposes of cross-context behavioral advertising as those terms are defined under the CCPA.
Sources of Personal Information.
In general, we may collect personal information from the following sources:
-
From you;
-
Internet service providers, operating systems and platforms;
-
Business customers and other third parties;
-
Service providers;
-
Publicly available information; and
-
Government entities.
Purposes of Collection, Use, and Disclosure of Personal Information.
As described in more detail in Section 3. How We Use Personal Information and Section 4. How We Disclose Personal Information, we collect, use, disclose and otherwise process the above personal information for the following business or commercial purposes and as otherwise directed or consented to by you:
-
services and support;
-
analytics and improvement;
-
communicating with you;
-
marketing and promotions;
-
security and protection of rights and interests;
-
compliance and legal process;
-
auditing, reporting, and other internal operations;
-
responding to applications for employment; and
-
general business and operational support.
Sensitive Personal Information.
Notwithstanding the purposes described above, we do not collect, use, or disclose sensitive personal information about you beyond the purposes authorized by the CCPA. We do not use or disclose your sensitive personal information other than as authorized pursuant to section 7027 of the CCPA regulations (Cal. Code. Regs., tit. 11, § 7027 (2022)).
Retention.
For information regarding our retention practices related to your personal information, please see Section 11. Retention above.
Your Rights and Choices.
For information regarding our retention practices related to your personal information, please see Section 11. Retention above.
-
Know/Access: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. The right to a copy of your personal data that we retain, in some cases in a portable (i.e., machine-readable, user-friendly) format.
-
Deletion: The right to the deletion of personal information that we have collected about you
-
Correction: The right to correct inaccurate personal information that we maintain about you.
-
Opt-Out Rights: The right to opt out of the “sale” or “sharing” (as such terms are defined under the CCPA) of your personal information.
-
Limit Certain Uses and Disclosures of Sensitive Personal Information. The right to limit certain uses and disclosures of sensitive personal information; however, as noted above, we do not engage in uses or disclosures of “sensitive personal information” that would trigger such a right.
-
Right to Non-Discrimination: The right not to be subject to discriminatory treatment for exercising your rights under the CCPA.
Submitting CCPA Requests.
California residents may exercise their CCPA privacy rights as provided below:
Requests to know/access, correct, and delete. You may submit a request to Acosta to exercise your CCPA rights to know/access, to delete, and to correct your personal information held by us by submitting a privacy request to us via email at help@acostamfg.com or on our contact page at www.acostamfg.com.
We will take steps to verify your request by matching the information provided by you with the information we have in our records. You must complete all required fields on our webform. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents may initiate a request on behalf of another individual by contacting us via the above number or online using our webform. Authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.
Requests to Opt Out. Our website responds to global privacy control—or “GPC”—signals, which means that if we detect that your browser is communicating a GPC signal, we will, subject to applicable law, process that as a request to opt that particular browser and device out of “sales” and “sharing” (i.e., via cookies and tracking tools) on our website. California residents may also opt out of any “sales” and “sharing” through cookies and other online tracking technologies on our website by adjusting your cookie privacy preferences for those technologies in our cookie preference manager, which you can access by clicking [here]. Note that if you come back to our website from a different device or use a different browser on the same device, you will need to enable GPC or set your cookie preferences for each browser and device you use to access our website. More information about GPC is available at: https://globalprivacycontrol.org/.
You may exercise the right to opt out of any “sales” and “sharing” in which we engage other than through cookies and online tracking technologies by submitting an opt out request via email at help@acostamfg.com.
Rights Under California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, please email us at help@acostamfg.com and include in your request a current California address and your attestation that you are a California resident.
Contact Us. Please see the “Contact Us” section above.