your privacy matters

This Privacy Policy covers how CSBS Metal Trading LLC (d/b/a Draco Steel Buildings) or a CSBS Metal Trading LLC-affiliated company (collectively, “Draco”) handles personal data whether you interact with us on our websites or in person (including by phone or when visiting our sales or production facilities). We may on occasion provide links to third party services or products, although Draco’s Privacy Policy does not apply to how third parties define personal data or how they use it. We encourage you to read their privacy policies and know your privacy rights before interacting with them.  To exercise your privacy rights and choices set forth below, please contact us via telephone at (888) 503-7226.

Your Privacy Rights

At Draco, we respect your ability to know, access, correct, transfer, restrict the processing of, and delete your personal data. We have provided these rights to our global customer base and if you choose to exercise these privacy rights, you have the right not to be treated in a discriminatory way nor to receive a lesser degree of service from Draco. Draco does not sell your data including as “sale” is defined in Nevada and California.

There may be situations where we cannot grant your request — for example, if you ask us to delete your transaction data and Draco is legally obligated to keep a record of that transaction to comply with law. We may also decline to grant a request where doing so would undermine our legitimate use of data for anti- fraud and security purposes, such as when you request deletion of an account that is being investigated for security concerns. Other reasons your privacy request may be denied are if it jeopardizes the privacy of others, is frivolous or vexatious, or would be extremely impractical.

Personal Data Draco Collects from You

At Draco, we believe that you can have great products and great privacy. This means that we strive to collect only the personal data that we need. The personal data Draco collects depends on how you interact with Draco.

When you create enter your contact information on our website in order to request an estimate or sales quotation (including first name, last name, telephone number, e-mail address, zip code and specifications of the product you wish to have estimated), purchase a product, contact us (including by social media), participate in an online survey, or otherwise interact with Draco, we may collect a variety of information, including:

  • Account Information. Your account details, including email address, purchase history, account status, and age
  • Device Information. Data from which your device could be identified, such as device serial number, or about your device, such as browser type
  • Contact Information. Data such as name, email address, physical address, phone number, or other contact information
  • Payment Information. Data about your billing address and method of payment, such as bank details, credit, debit, or other payment card information
  • Transaction Information. Data about purchases of Draco products and services or transactions facilitated by Draco, including purchases on Draco platforms
  • Fraud Prevention Information. Data used to help identify and prevent fraud, including a device trust score
  • Usage Data. Data about your activity on and use of our offerings, such as app launches within our services, including browsing history; search history; product interaction; crash data, performance and other diagnostic data; and other usage data
  • Location Information. As may be embedded in your IP address used to access our website
  • Financial Information. Details including salary, income, and assets information where collected, and information related to Draco-branded financial offerings
  • Government ID Data. In certain jurisdictions, we may ask for a government-issued ID in limited circumstances, including when accepting a credit card payment via telephone, managing deliveries, or as required by law
  • Other Information You Provide to Us. Details such as the content of your communications with Draco, including interactions with customer support and contacts through social media channels

You are not required to provide the personal data that we have requested. However, if you choose not to do so, in many cases we will not be able to provide you with our products or services or respond to requests you may have.

Personal Data Draco Receives from Other Sources

Draco may receive personal data about you from other individuals, from businesses or third parties acting at your direction, from our partners who work with us to provide our products and services and assist us in security and fraud prevention, and from other lawful sources.

  • Draco may collect data about you from other individuals — for example, if a contractor engaged by you furnishes data to us in respect of a project you may be interested in completing.
  • At Your Direction. You may direct other individuals or third parties to share data with Draco. For example, if a contractor engaged by you furnishes data to us at your direction in respect of a project you may be interested in completing

Draco’s Use of Personal Data

Draco uses personal data to power our services, to process your transactions, to communicate with you, for security and fraud prevention, and to comply with law. We may also use personal data for other purposes with your consent.

Draco uses your personal data only when we have a valid legal basis to do so. Depending on the circumstance, Draco may rely on your consent or the fact that the processing is necessary to fulfill a contract with you, protect your vital interests or those of other persons, or to comply with law. We may also process your personal data where we believe it is in our or others’ legitimate interests, taking into consideration your interests, rights, and expectations.

  • Power Our Services. Draco collects personal data necessary to power our services, which may include personal data collected to improve our offerings, for internal purposes such as auditing or data analysis, or for troubleshooting.
  • Process Your Transactions. To process transactions, Draco must collect data such as your name, purchase, and payment information.
  • Communicate with You. To respond to communications, reach out to you about your transactions or account, market our products and services, provide other relevant information, or request information or feedback. From time to time, we may use your personal data to send important notices, such as communications about purchases and changes to our terms, conditions, and policies. Because this information is important to your interaction with Draco, you may not opt out of receiving these important notices.
  • Security and Fraud Prevention. To protect individuals, employees, and Draco and for loss prevention and to prevent fraud, including to protect individuals, employees, and Draco for the benefit of all our customers.
  • Comply with Law. To comply with applicable law — for example, to satisfy tax or reporting obligations, or to comply with a lawful governmental request.

Draco retains personal data only for so long as necessary to fulfill the purposes for which it was collected, including as described in this Privacy Policy, or as required by law. When assessing retention periods, we first carefully examine whether it is necessary to retain the personal data collected and, if retention is required, work to retain the personal data for the shortest possible period we deem acceptable under law.

Draco’s Sharing of Personal Data

Draco may share personal data with Draco-affiliated companies, service providers who act on our behalf, our partners, or others at your direction. Further, Draco does not share personal data with third parties for their own marketing purposes.

  • Service Providers. Draco may engage third parties to act as our service providers and perform certain tasks on our behalf, such as design, architectural or other professional services, and we may share data including personal data, in connection with your use of our services and delivering products to customers. Draco service providers are obligated to handle personal data consistent with this Privacy Policy and according to our instructions. They cannot use the personal data we share for their own purposes except in connection with the services being provided to us.
  • At times, Draco may partner with third parties to provide services or other offerings. For example, Draco may purchase certain accessories or components, such as insulation, from third parties. Draco requests its partners to protect your personal data.
  • Draco may share personal data with others at your direction or with your consent. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate. We may also disclose information about you where there is a lawful basis for doing so, if we determine that disclosure is reasonably necessary to enforce our terms and conditions or to protect our operations or users, or in the event of a reorganization, merger, or sale.

Protection of Personal Data at Draco

At Draco, we believe that great privacy rests on great security. We use administrative, technical, and physical safeguards to protect your personal data, taking into account the nature of the personal data and the processing, and the threats posed. We are constantly working to improve on these safeguards to help keep your personal data secure.

Cookies and Other Technologies

Draco’s websites, online services, interactive applications, and advertisements may use “cookies” and other technologies such as web beacons. These technologies help us to better understand user behavior including for security and fraud prevention purposes, tell us which parts of our websites people have visited, and facilitate and measure the effectiveness of advertisements and web searches.

  • Communications Cookies. These cookies are used to enable network traffic to and from Draco’s systems, including by helping us detect any errors.
  • Strictly Necessary Cookies. These cookies are set as required to provide a specific feature or service that you have accessed or requested. For example, they allow us to display our websites in the proper format and language, to authenticate and verify your transactions, and to preserve the contents of your Bag when shopping online at
  • Other Cookies. These cookies are used to understand how visitors interact with our websites and online services, including by helping us to assess the effectiveness of advertisements and web searches. Draco also uses these cookies to remember choices you make while browsing, so we can provide you with a customized experience.

If you prefer that Draco not use cookies, we provide you with the means to disable their use. If you want to disable cookies and you’re using the Safari web browser, choose “Block all cookies” in Safari’s privacy settings. If you are using a different browser, check with your provider to find out how to disable cookies. Certain features of the Draco website may not be available if all cookies are disabled.  In addition to cookies, Draco uses other technologies that help us achieve similar objectives.

In some email messages Draco sends to you, we provide a “click-through URL” that links you to content on the Draco website. When you click one of these URLs, they pass through a separate server before arriving at the destination page on our website. We track this click-through to help us determine interest in particular topics and measure whether we are communicating with you effectively. If you prefer not to be tracked in this way, you should not click graphic or text links in email messages.

Draco generally treats data we collect using these cookies and similar technologies as nonpersonal data. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal data by local law, we also treat these identifiers as personal data in those regions. In addition, Draco sometimes combines nonpersonal data collected from these technologies with other personal data Draco holds. When we combine data in this way, we treat the combined data as personal data for purposes of this Privacy Policy.

Transfer of Personal Data Between Countries

Draco products and offerings connect you to the world. To make that possible, your personal data may be transferred to or accessed by entities around the world, including Draco-affiliated companies, to perform processing activities such as those described in this Privacy Policy in connection with your use of our products and services. Draco complies with laws on the transfer of personal data between countries to help ensure your data is protected, wherever it may be.

Our Companywide Commitment to Your Privacy

To make sure your personal data is secure, we communicate our privacy and security guidelines to Draco employees and strictly enforce privacy safeguards within the company.

Privacy Questions

If you have questions about Draco’s Privacy Policy or privacy practices including where a third-party service provider is acting on our behalf, would like to contact our Data Protection Officer, or would like to submit a complaint, you can contact us at (888) 503-7226.

Draco takes your privacy questions seriously. A team reviews your inquiry to determine how best to respond to your question or concern, including those inquiries received in response to an access or download request. In most cases, all substantive contacts receive a response within seven days. In other cases, we may require additional information or let you know that we need more time to respond.

Where your complaint indicates an improvement could be made in our handling of privacy issues, we will take steps to make such an update at the next reasonable opportunity. In the event that a privacy issue has resulted in a negative impact on you or another person, we will take steps to address that with you or that other person.

If you are not satisfied with Draco’s response, you may refer your complaint to the applicable regulator. If you ask us, we will endeavor to provide you with information about relevant complaint avenues which may be applicable to your circumstances.

When there is a material change to this Privacy Policy, we’ll post a notice on this website at least a week in advance of doing so.

Draco logo
Visit Us

1735 Market Street

Suite A533

Philadelphia, PA 19103

Contact us

(888) 50-DRACO

(888) 503-7226

© 2021 MarPen Interactive LLC.  All rights reserved.