Metal and Steel Limited (metalandsteel.com) respects your privacy on the Internet and conducts its business in accordance with the Data Protection Act 1998. As part of our company operations and in support of our core objectives, we gather certain types of data about our clients. Such data is often limited to contact details and some basic information about your area of work and employment status, but may include other information necessary to provide a particular service you have requested.

Your personal details (title, full name, company name, place of residence) are collected for record purposes and would be in the sole possession of MetalandSteel.com without a right of further distribution, neither for personal nor commercial purposes. Your contact details will not be used by anyone other than MetalandSteel.com and will be used only in relation to your project. By providing your information to Metalandsteel.com, you explicitly give your consent for us to process your personal and sensitive data. However, when we collect sensitive personal data through this site, we will ask you to consent to our uses of the data, and you may choose not to give us this consent if you so desire. Wherever the provision of information is optional, this will be made clear.

MetalandSteel.com requires you to provide your e-mail address for communication purposes only and it will not be disclosed to any third party under any circumstances. Your e-mail address allows MetalandSteel.com to maintain a business relationship with you, and thus may be used when communication is required for the purposes of updates and/or maintenance. Your attached project proposal file will only be used upon your voluntary consent in relation to your project requirements. Should you choose not to proceed with the project after you have uploaded your project proposal, the file will not be used for any personal or commercial purposes by MetalandSteel.com

Confidentiality

MetalandSteel.com will not sell or disclose your data to any third party without your permission and will not disclose any information except where it is reasonably required in order to maintain and/or update data security measures, or where it is necessary to identify, contact or bring a legal action against persons or entities to preserve and/or enforce the rights of MetalandSteel.com, and in such circumstances we will endeavour to contact you to advise you of such, prior to such action.

Policy Changes

Metalandsteel.com may update or change the contents of this website at any time and without notice. Please contact Metalandsteel.com directly to verify that any information contained on this site is accurate and up-to-date. Thank you for reading this privacy policy. If you have any questions, please contact our legal team at legal@metalandsteel.com or talk to one of our customer service representatives from Contact Us page.

PRIVACY

Is your site secure for Credit Card purchases?
Absolutely, 100% Yes. In fact more secure than if you use your credit card in a retail shop. We understand that in order for us to have a long-term relationship with you, we need to offer more than just great products at great bargain prices - we need to earn your trust. We have therefore gone to great lengths to provide you with the safest online shopping around - and you can confirm our claims for yourself .

Safe Information Handling
All sensitive information you send us is encrypted in transit. If someone somehow attempts to read the sensitive information you send us then all they see is an unreadable (garbled) message.

Safe Information Storage
We secure our servers using best-practice software and networking technologies to prevent unauthorised access (called "hacking") to our servers.

SECURITY

Introduction:
Direct Payment Solutions (hereinafter referred to as DPS) is committed to protecting your privacy as an Internet user whenever you buy goods or services from a supplier who uses the DPS payment facilities. Your supplier will generally be using DPS facilities when you use a credit card over the Internet. DPS recognizes its responsibility to keep confidential at all times any information about you which DPS acquires in connection with such a transaction, whether directly from yourself or through the supplier. DPS protects your personal information on the Internet at the same high standard that you would experience through any channels of the bank, such as bank branches, cash machines or on the telephone. Please note however that DPS's responsibility is necessarily limited to protection by DPS of information which DPS obtains. DPS itself cannot, of course, control the use or disclosure by your supplier of any information which they obtain from you.

Collection of Information:
To enable DPS to provide secure payment facilities DPS will typically acquire information which may include your name, your credit card numbers (with the expiry date) and your billing address.

Use and Disclosure of Information:
DPS uses the information which you enter onto the payment page to obtain authorization to the transaction from the issuer of the credit card and DPS's own or the supplier's bank and to process the payment. Some details from your transaction (such as your name and email and delivery address, but never your card details) are made available to the supplier through DPS's customer management system, which allows them to keep track of what transactions have been made. Subject to the above, DPS will not disclose the information to third parties, or make any use of it, without your permission (unless DPS is required to do so by statute or by an authorized body in order to aid the investigation or prevention of crime).

Security:
DPS is committed to data security. DPS uses a variety of security technologies and procedures to help protect your personal information from unauthorized access, use or disclosure. For example, DPS stores the personal information you provide in computer servers with limited access that are located in controlled facilities secured by the latest in surveillance and security technology. When DPS transmits sensitive information (such as a credit card numbers) over the Internet, DPS protects it through the use of encryption, such as the Secure Socket Layer (SSL) protocol. Credit card details stored on site are encrypted using 168bit 3DES encryption. DPS is also certified PCI-DSS compliant:

PCI-DSS
"PCI-DSS, the Payment Card Industry Data Security Standard is a set of security requirements relating to the protection of card holder data. The standard is governed by the PCI Security Standards Council, an organisation put together by most of the major card schemes VISA, MasterCard, American Express, JCB and Discover. It's relevant for any entity that stores or transmits sensitive card holder data, that being generally things like the PAN (card number), Card security code, track data, PIN block. The current version of the standard is Version 1.2. Preceding PCI-DSS the card schemes had their own standards, the VISA Account Information Security (AIS) standard formed the basis to most of the PCI-DSS requirements."

PCI-DSS Certified DPS is listed as a Participating Organisation of the PCI Security Standards Council and VISA. More importantly DPS is listed as a PCI-DSS Validated Service Provider.