What do you actually have on me?

Only what came through this site. If you used the inquiry form, we have the name, phone, email and address you typed, the kind of inquiry, your message, the spec you asked for (a line like 1/2-13 × 2 in Hex Cap Screw, SAE Grade 8, Yellow Zinc, 200 pcs), and the consent tick. With it, automatically: your IP address, your browser's user-agent string, the page you came from, and the two moments the form was opened and sent.

If you used the chat, we have the conversation. Your browser holds a token so you can come back to it. Your cookie choice sits in your own browser under site_consent_v2. There is no account, no password and no card data, because nothing is sold or paid for on the site.

What can I ask you to do with it?

  • Send me a copy. Everything above, as a plain file sent to the email you give us.
  • Correct it. A wrong phone number or a misspelled company name on an open inquiry.
  • Delete it. The inquiry, its email copy, the chat transcript, and log lines that can be tied to you.
  • Stop ad sharing. Opt out of the "sale" or "sharing" of personal data for advertising as California and the other state laws define it.

Visitors reaching the site from Europe have the GDPR rights to access, rectification, erasure, restriction, portability and objection. The same form handles all of them.

Who else has seen it?

The hosting provider that serves the site and stores the inquiry database, and the mail provider that carries the notification to our inbox. Neither uses it for anything of its own.

Paid ads bring people here. Google Ads (Google Ireland Ltd / Google LLC) adds a gclid to the click, Microsoft Advertising (Microsoft Ireland Operations Ltd) adds an msclkid, and Meta Ads (Meta Platforms Ireland Ltd) adds an fbclid where a campaign runs there. Consent Mode v2 keeps ad_storage, ad_user_data, ad_personalization and analytics_storage denied until you press Allow, and sets them back to denied the moment you decline or withdraw. Microsoft's own handling is in the Microsoft privacy statement. Full detail is in the privacy policy and the cookie policy.

Is there a faster way to opt out of ads?

Yes. Press Cookie settings in the footer of any page and choose Decline. That resets the four consent signals to denied straight away. If your browser sends Global Privacy Control (the Sec-GPC header), we treat it as an opt-out without asking you again.

How do you know it is me?

We match the request against the email or phone on the inquiry. If you write from the same address you used to send the parts list, that is usually enough. If the details do not match, we ask one question about the inquiry, such as the thread size or count you asked about. We never ask for ID documents or card numbers.

An authorized agent can make a request for you under California law. Send their written authorization with it.

How fast, and what does it cost?

We answer within 5 days, in writing. It costs nothing. If the request is a deletion, the reply confirms what was removed and names anything we could not remove and why: for example a written quote you accepted, which became an order and sits in our business records rather than in the site's inquiry store.

And if I am not happy with the answer?

Write back first; most problems are a missed detail. You can also complain to your state Attorney General, and in California to the California Privacy Protection Agency. Visitors in Europe can go to their local data protection authority. Our side of it: Zavtilo, 46 Market Street, Büro 5, Austin, Texas 82389, United States, [email protected], +1 (536) 555-1163.

Where do I send the request?

Here. Give a name and at least one way to reach you. Use the email or phone you put on your original inquiry so we can find it.

Form / Data requestPosts to the counter inbox
Tells us which law your request runs under. Leave blank if you prefer.

Answered in writing within 5 days.