Privacy Policy - Marshall Safety

Marshall Safety Group SL ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, products, and services.

We comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws. By using our services, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Personal Information

When you create an account, place an order, or interact with our services, we may collect the following personal information:

Contact Information: Name, email address, phone number, business address
Company Information: Company name, registration number, VAT/Tax ID, business type
Account Credentials: Username, password (encrypted), security questions
Financial Information: Billing address, payment method details, credit account information
Order Information: Purchase history, product preferences, shipping addresses
Communication Data: Email correspondence, quote requests, support inquiries

1.2 Automatically Collected Information

When you access our website, we automatically collect certain information about your device and browsing activity:

Technical Data: IP address, browser type, operating system, device identifiers
Usage Data: Pages visited, time spent on pages, click-through rates, referral URLs
Cookies & Tracking: Session cookies, preference cookies, analytics cookies
Location Data: Approximate geographic location based on IP address

1.3 Business Information

For B2B accounts, we collect additional business information including employee details, spending limits, approval workflows, trade references, and financial documentation required for credit account applications.

2. How We Use Your Information

2.1 Primary Purposes

We use your personal information for the following purposes:

Order Processing: To process and fulfill your orders, manage deliveries, and handle returns
Account Management: To create and manage your account, including employee access and permissions
Payment Processing: To process payments, manage invoices, and maintain credit accounts
Customer Support: To respond to inquiries, provide technical support, and resolve issues
Quote Management: To process quote requests and facilitate communication with sales team
Product Recommendations: To suggest relevant products based on your industry and purchase history
Communication: To send order confirmations, shipping updates, and account notifications

2.2 Marketing & Communications

With your consent, we may use your information to:

Send promotional emails about new products, special offers, and industry updates
Provide information about safety training programs and compliance resources
Invite you to webinars, events, or product demonstrations
Conduct surveys and request feedback on our products and services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

2.3 Legal & Compliance

We may use your information to comply with legal obligations, enforce our Terms & Conditions, protect our rights and property, prevent fraud, ensure platform security, and respond to legal requests from authorities.

3. Information Sharing & Disclosure

3.1 Service Providers

We share your information with trusted third-party service providers who assist us in operating our business:

Payment Processors: Stripe, PayPal, and banking partners for secure payment processing
Shipping Carriers: DHL, FedEx, UPS, and regional carriers for order fulfillment
Cloud Hosting: AWS, Azure, or similar providers for data storage and website hosting
Email Services: Email delivery platforms for transactional and marketing communications
Analytics Providers: Google Analytics and similar tools for website performance analysis
Customer Support: CRM platforms and helpdesk software for support ticket management

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your data.

3.3 Legal Requirements

We may disclose your information when required by law, such as in response to court orders, subpoenas, or government requests, or to protect our legal rights, prevent fraud, or ensure user safety.

3.4 Company Affiliates

Within your company account, authorized employees and administrators can access company order history, quotes, and account information as permitted by their assigned roles and permissions.

4. Data Security

4.1 Security Measures

We implement industry-standard security measures to protect your personal information:

Encryption: SSL/TLS encryption for data transmission and AES encryption for stored data
Access Controls: Role-based access restrictions and multi-factor authentication
Secure Infrastructure: Firewalls, intrusion detection systems, and regular security audits
Payment Security: PCI DSS compliant payment processing
Employee Training: Regular security awareness training for all staff members
Data Backup: Regular backups with secure, redundant storage

4.2 Data Breach Protocol

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR, and take immediate action to mitigate any potential harm.

4.3 Your Responsibility

Please keep your account credentials confidential and notify us immediately of any unauthorized access. You are responsible for maintaining the security of your login information.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

Retention Periods:

Active Accounts: Data retained for duration of account activity plus 12 months
Order Records: Retained for 7 years for accounting and legal purposes
Financial Records: Retained for 7 years in accordance with tax regulations
Marketing Data: Retained until you opt out or request deletion
Website Analytics: Anonymized data retained for up to 26 months
Compliance Records: Retained as required by applicable regulations

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and legal obligations.

6. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal information:

Right to Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete personal information

Right to Erasure

Request deletion of your personal data ("right to be forgotten")

Right to Restrict Processing

Limit how we use your personal information

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing of your data for specific purposes

How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer:

Email: privacy@marshallsafety.com
Mail: Data Protection Officer, Marshall Safety Group SL, Zeytinburnu, Istanbul, Turkey

We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device that help us provide and improve our services. We use both session cookies (deleted when you close your browser) and persistent cookies (remain on your device for a set period).

7.2 Types of Cookies We Use

Essential Cookies (Required)

Necessary for website functionality, including authentication, shopping cart, and security features. These cannot be disabled.

Functional Cookies (Optional)

Remember your preferences, language settings, and customization choices.

Analytics Cookies (Optional)

Help us understand how visitors interact with our website to improve user experience and performance.

Marketing Cookies (Optional)

Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness.

7.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality. For more information, visit your browser's help documentation.

8. International Data Transfers

Marshall Safety operates globally with distribution centers in Belgium, Georgia, UAE, Turkey, Pakistan, and Morocco. Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA).

When we transfer personal data outside the EEA, we ensure adequate protection through:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions recognizing equivalent data protection in destination countries
Binding Corporate Rules for intra-group transfers
Additional safeguards such as encryption and access controls

9. Children's Privacy

Our services are designed for business-to-business transactions and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected information from a child under 18, we will take immediate steps to delete such information from our records. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites, including payment processors, certification bodies, and industry resources. We are not responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party websites you visit. This Privacy Policy applies only to information collected by Marshall Safety.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of any material changes by:

Posting the updated policy on our website with a new "Last Updated" date
Sending an email notification to registered users
Displaying a prominent notice on our website

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

12. Contact Information

Data Controller

Marshall Safety Group SL
Headquarters: Zeytinburnu, Istanbul, Turkey

Privacy Inquiries:

Email: privacy@marshallsafety.com

Phone: +32 (0)65 123 456

Mail: Data Protection Officer, Marshall Safety Group SL, Zeytinburnu, Istanbul, Turkey

Response Time:

We aim to respond to all privacy inquiries within 30 days. For urgent matters, please indicate "URGENT" in your subject line.

Your Privacy Matters

At Marshall Safety, protecting your privacy is a core value. We are committed to transparency, security, and giving you control over your personal information. If you have any questions, concerns, or feedback about our privacy practices, please don't hesitate to contact us.

Thank you for trusting Marshall Safety with your business.