Legal
Privacy Policy
How we collect, use, disclose and retain personal information, what happens to an estimate request after you submit it, and the privacy rights available to U.S. and California residents.
Effective: September 5, 2026·Last updated: September 6, 2026
1.Introduction
This Privacy Policy explains how Find Steel Buildings (“we”, “us”, “our”) collects, uses, discloses and retains personal information in connection with findsteelbuildings.com (the “Site”), and the choices and rights you have.
Find Steel Buildings is a research, comparison and estimate-request resource. It is not a manufacturer, contractor, erector, structural engineer, permit authority or building-code authority, and it is not a party to any contract you enter into with a supplier.
The most consequential disclosure in this policy is the one about estimate requests: if you submit one, the information in it is passed to suppliers so that they can contact you. That is set out in full in the section on estimate requests and verified suppliers.
2.Scope of this policy
This policy applies to personal information we collect through the Site, through the estimate request flow, and through email correspondence with us. It applies to individuals in the United States; Find Steel Buildings covers steel building projects nationwide across the United States.
It does not apply to the independent suppliers, manufacturers, dealers, contractors and other businesses who receive an estimate request or whom you contact yourself, nor to any other third-party website. Those organisations act as separate controllers of your information under their own privacy policies, which we do not control.
3.Information we collect
We collect three kinds of information, and nothing beyond them:
- information you provide directly, principally through the estimate request flow or by emailing us;
- information collected automatically by the servers and infrastructure that deliver the Site; and
- information generated by our own operation of the Site, such as the page an estimate request was started from.
We do not collect government identifiers, driver’s licence or passport details, financial account or payment card information, credit history or credit checks, employment history, health information, biometric information, precise geolocation, or profile information from social-login providers. We do not purchase personal information from data brokers.
4.Information you provide
If you email us — for example with a factual correction, a supplier information update, a press enquiry or a privacy request — we receive your email address, any name or organisation you include, and the content of your message.
If you submit a request on Your Privacy Choices, we collect the type of request, your email address, optionally your state of residence and any details you choose to add, and whether a Global Privacy Control signal was present.
5.Project and estimate request information
The estimate request flow collects exactly the following:
- your name;
- your email address;
- your telephone number;
- your project location — state, city and ZIP code;
- the building type you are considering;
- the building width and length;
- your project timeline;
- the intended use of the building and any project requirements you describe;
- your consent to be contacted about the request;
- the page of the Site the request was started from, and the research family or supplier page it relates to; and
- campaign or referral attribution parameters carried in the link you arrived through (commonly called UTM parameters), where present.
These fields are all required by suppliers to price and respond to a project, other than those marked optional in the form itself. Please do not include information in the free-text fields that you would not want a supplier to receive.
6.Information collected automatically
When you visit the Site, our hosting and content-delivery infrastructure records standard server log information: your IP address, browser and device type, operating system, the referring URL and landing page, the pages and resources requested, timestamps, and basic interaction or error events needed to operate and secure the Site.
We do not carry out device fingerprinting, cross-site tracking, cross-device identity resolution or behavioural profiling, and we do not build advertising profiles about you.
8.How we use information
We use personal information for these purposes and no others:
- to provide the service you asked for, including operating the estimate request flow;
- to disclose an estimate request to suppliers so that they can respond to you;
- to communicate with you about your request or your correspondence;
- to operate, maintain, secure and troubleshoot the Site;
- to understand aggregate usage of the Site and improve our research and services;
- to detect, investigate and prevent fraud, abuse, automated extraction and security incidents;
- to comply with legal obligations, respond to lawful requests and enforce our Terms; and
- to keep records of requests, disclosures, consents and privacy requests.
We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train artificial-intelligence models.
9.How we disclose information
We disclose personal information only:
- to suppliers, as described in the next section;
- to service providers who host, deliver, secure and operate the Site on our behalf, under contracts limiting them to that purpose;
- where required by law, legal process or a governmental request, or to establish, exercise or defend legal claims;
- to protect the rights, property or safety of us, our users or the public, including to address fraud, abuse or security threats; and
- to an acquirer or successor in connection with a merger, acquisition, reorganisation, financing or sale of assets, subject to this policy continuing to apply to the information transferred.
We do not disclose personal information to data brokers, and we do not rent or trade contact lists.
10.Estimate requests and verified suppliers
When you submit an estimate request, the project and contact information you provide may be shared with one to three verified suppliers so that they can contact you about your project.
The suppliers who receive it are independent businesses. Once they receive your request, they hold your information as separate controllers under their own privacy policies and retention practices, which we do not control. They may contact you about the project you described by telephone, text message or email using the details you provided. Message and data rates may apply.
“Verified supplier” means that selected business or profile facts about the company have been checked against sources available to us at the time of research. It is not a guarantee of quality, licensing in any particular jurisdiction, insurance, financial standing, background screening or project performance.
Find Steel Buildings does not operate a real-time automated matching engine and does not guarantee that you will receive any quote, a particular number of quotes, a particular price, or a response from any supplier.
If you no longer wish to hear from a supplier who has already received your request, tell that supplier directly. To stop future disclosures by us, use Your Privacy Choices.
11.Service providers
We rely on a small number of service providers to run the Site: application hosting and content delivery, database and backend infrastructure, and email delivery. They process personal information only on our instructions and only to provide those services, and they are prohibited from using it for their own purposes. Under U.S. state privacy laws these are “service providers” or “processors”, and disclosures to them are not a sale or sharing of personal information.
12.Analytics and advertising technologies
As of the last-updated date of this policy, the Site uses no third-party analytics provider, no advertising provider, no tracking pixel and no server-side tracking integration. Attribution parameters carried in an inbound link are stored with an estimate request so that we can tell which research page led to it; they are not used to target advertising to you. Should this change, we will update this section, the category table below and the notice presented at collection before the technology is deployed.
14.Categories of personal information (last 12 months)
The table below describes the categories of personal information we have collected in the twelve months before the last-updated date of this policy, using the categories defined by the California Consumer Privacy Act. A statutory category that we do not collect is not listed. The Site is newly launched, so for some categories the period we can describe is shorter than twelve months; where that is so, the table describes our practice for the whole period the Site has been operating, and we do not represent a longer history than we have.
| Category of personal information | Examples actually collected | Business or commercial purposes | Categories of recipients | Sold or shared under CCPA/CPRA |
|---|---|---|---|---|
| Identifiers | Name, email address, telephone number, city, state, ZIP code, IP address, online identifiers in server logs and attribution parameters | Providing the estimate request service; responding to correspondence; operating and securing the Site; fraud and abuse prevention; legal compliance and recordkeeping | Suppliers who receive an estimate request; hosting, infrastructure and email service providers; legal and governmental recipients where required | Yes — treated as sold or shared when contained in an estimate request disclosed to suppliers. Server-log identifiers are not. |
| Customer records information (Cal. Civ. Code § 1798.80) | Name, telephone number and address information you provide with a project | Providing the estimate request service; recordkeeping | Suppliers who receive an estimate request; hosting and infrastructure service providers | Yes — when contained in an estimate request disclosed to suppliers. |
| Commercial information | Building type, width, length, intended use, project requirements, timeline, and the fact that you requested estimates | Providing the estimate request service; improving our research; recordkeeping | Suppliers who receive an estimate request; hosting and infrastructure service providers | Yes — when contained in an estimate request disclosed to suppliers. |
| Internet or other electronic network activity information | Pages requested, referring URL, landing page, timestamps, browser and device type, operating system, basic interaction and error events | Operating, securing and troubleshooting the Site; aggregate usage understanding; fraud and abuse prevention | Hosting, content-delivery and infrastructure service providers | No. |
| Geolocation data (coarse only) | City, state and ZIP code you provide for a project, and approximate region inferred from an IP address in server logs | Providing the estimate request service; regional relevance of research; security | Suppliers who receive an estimate request; hosting and infrastructure service providers | Yes — the project location you provide, when disclosed to suppliers. Server-log region information is not. |
| Inferences | The building family or research topic your enquiry relates to, derived from the page you started from | Providing the estimate request service; improving our research | Suppliers who receive an estimate request; hosting and infrastructure service providers | Yes — when disclosed with an estimate request. |
We have not collected biometric information, sensory data, professional or employment information, education information, protected-classification characteristics, or non-public education information, and we have not disclosed any personal information for cross-context behavioural advertising.
15.Data retention
We keep personal information only for as long as is reasonably necessary for the purpose it was collected for, and then delete it or render it non-identifying. In deciding how long that is, we consider the purpose, our operational needs, legal and regulatory obligations, the need to resolve disputes and enforce our agreements, and security and recordkeeping requirements.
- Estimate requests, including the project and contact information in them, are retained for as long as needed to fulfil and evidence the request and to resolve any dispute about it.
- Email correspondence is retained for as long as needed to handle the matter and keep a record of it.
- Privacy requests and opt-outs are retained for as long as needed to honour them and to demonstrate compliance.
- Server logs are retained for a short operational period for security and troubleshooting.
Information already disclosed to a supplier is retained by that supplier under its own policy, not ours.
16.Security
We maintain reasonable administrative, technical and organisational safeguards designed to protect personal information against unauthorised access, use, alteration, disclosure and loss, including encrypted transport, access controls on our systems and restricting access to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We make no claim to hold any particular security certification or attestation. If you believe your interaction with us is no longer secure, contact us at info@findsteelbuildings.com.
17.Third-party websites and suppliers
The Site links to supplier and third-party websites, standards bodies, government resources and other external sources. We do not control them and are not responsible for their content, security or privacy practices. Once you leave the Site, or once a supplier receives your information, this policy no longer governs how your information is handled — read the privacy policy of the organisation concerned.
18.Children
The Site is intended for adults and business purchasers evaluating steel-building projects. It is not directed to children, and we do not knowingly collect personal information from anyone under 16 years of age. We do not sell or share the personal information of consumers under 16. If you believe a child has provided us with personal information, contact info@findsteelbuildings.com and we will delete it.
19.U.S. state privacy rights
Several U.S. states give residents rights over their personal information. Depending on where you live and subject to statutory exceptions, you may have the right to:
- confirm whether we process your personal information and access it;
- obtain a copy of it, in a portable form where required;
- correct inaccurate personal information;
- delete personal information we hold about you;
- opt out of the sale of personal information, of targeted or cross-context behavioural advertising, and of certain profiling;
- limit the use and disclosure of sensitive personal information, where applicable; and
- not be discriminated against for exercising a privacy right.
We honour these rights for residents of any state whose law provides them, and we extend the request process described below to all U.S. residents regardless of state. Some states also provide a right to appeal a refused request; if we refuse your request we will tell you why and how to appeal, and you may contact your state attorney general.
20.California privacy rights
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act provides the following rights, subject to the exceptions and verification requirements in the statute and its regulations:
- Right to know. To request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling or sharing it, and the categories of third parties to whom we disclose it, for the 12-month period preceding your request.
- Right to delete. To request deletion of personal information we collected from you, subject to statutory exceptions.
- Right to correct. To request correction of inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing. To direct us not to sell or share your personal information, as explained in the sale and sharing section above.
- Right to limit use and disclosure of sensitive personal information, where a business uses it beyond the permitted purposes.
- Right to non-discrimination. Not to receive discriminatory treatment for exercising any of these rights.
The category disclosures required by the statute are in the table above. We do not offer financial incentives in exchange for personal information.
Whether a business must comply with the statute depends on thresholds in the law relating to its revenue, the number of consumers whose information it handles and the share of its revenue derived from selling personal information. We do not assert that we do or do not meet those thresholds. We honour the requests described here for California residents regardless, and we handle them on the timelines set out below.
21.Sensitive personal information
We do not collect the categories the CCPA defines as sensitive personal information. We do not collect government identifiers, financial account or payment card information with a security code, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, the contents of your mail, email or text messages other than correspondence you send to us, genetic data, biometric data used for identification, health information, or information about your sex life or sexual orientation. Your email address, telephone number and the city, state and ZIP code of a project are not sensitive personal information under that definition. Because we do not collect it, we do not use or disclose sensitive personal information for any purpose beyond those permitted by law, and the right to limit its use has no practical application here. You may still submit a limitation request, and we will confirm the position to you.
22.Do not sell or share my personal information
You may direct us not to sell or share your personal information at any time. We provide two methods, one of them online:
- the Your Privacy Choices page, which records your request immediately; and
- email to info@findsteelbuildings.com with the subject line “Do Not Sell or Share”.
We do not operate a telephone line for privacy requests, and we do not publish one anywhere on this site. We operate exclusively online and collect personal information directly from the consumer it concerns, through the estimate form and the privacy request form; where a business meets both of those conditions the regulations allow it to provide an email address as its method for submitting requests. We provide the online form in addition to email. If our operations change so that either condition no longer holds, we will change our request methods accordingly.
We action opt-out requests as soon as feasible and in any event within 15 business days. An opt-out is honoured for at least 12 months, after which we may ask whether you wish to opt back in; you never have to.
23.Global Privacy Control and opt-out preference signals
The Site reads the Global Privacy Control signal sent by your browser or extension and shows you, on Your Privacy Choices, whether one was received. We treat a signal as a valid request to opt out of the sale and sharing of personal information.
In practice there is nothing the signal needs to switch off while you are simply browsing: the Site carries no advertising technology and no cross-context advertising integration, and personal information reaches a supplier only when you choose to submit an estimate request. The disclosure the opt-out concerns therefore only arises from a request you send us.
A browser signal carries no information that lets us identify you, so on its own it cannot be applied to an estimate request you submitted earlier, and it does not by itself create a record on our side. To have an opt-out applied to information already associated with you, submit the form on that page or email us with the address you used. Where you submit a request through the form, the presence or absence of the signal is recorded with it and forms part of the record we act on.
24.Exercising your privacy rights
To make any privacy request, use either method:
- the Your Privacy Choices page; or
- email info@findsteelbuildings.com, describing the right you wish to exercise.
We acknowledge requests within 10 business days and respond substantively within 45 calendar days. Where a request is complex or numerous we may extend that period by a further 45 days and will tell you why within the first period. Requests are free, unless they are manifestly unfounded or excessive, in which case we will explain the position before doing anything. You may make a right-to-know request twice in a 12-month period.
25.Verification and authorised agents
Before we act on a request to know, delete or correct, we must reasonably verify that the request comes from you. Because the information we hold is limited, verification is normally a matter of matching the email address you use to the information in our records, and confirming by a reply to that address. For a request about specific pieces of personal information we may ask you to confirm additional details already in the record, such as the project you described.
We will not ask you for identity documents, government identifiers, financial account details or other sensitive documentation, and you should not send them. Any information provided for verification is used only for that purpose and then deleted. If we cannot verify a request we will tell you, and where possible we will treat it as an opt-out request, which does not require verification.
An authorised agent may make a request on your behalf. The agent must provide written permission signed by you, and we may contact you to confirm the authorisation and to verify your identity, unless the agent provides a valid power of attorney.
26.Notice at collection
A short notice is presented at the point where an estimate request is submitted, telling you what is collected, why, that it may be disclosed to suppliers, that the disclosure is treated as a sale or share with a right to opt out, and linking to this policy and to Your Privacy Choices. The full detail is in the sections above on estimate request information, supplier sharing, sale and sharing, and retention.
We do not collect additional categories of personal information, or use information for materially different purposes, without providing notice first.
27.Changes to this policy
We may update this policy to reflect changes in our practices, technologies or legal obligations. The last-updated date at the top of the page shows when it last changed. Where a change is material, we will take reasonable steps to make it apparent before it takes effect. Your continued use of the Site after a change constitutes acceptance of the updated policy.
28.Contact us
For any question about this policy or about your personal information, contact:
Find Steel Buildings30 N Gould StSheridan, WY 82801United Statesinfo@findsteelbuildings.comRelated pages: Terms and Conditions, Advertising Disclosure, How It Works and Your Privacy Choices.
