Effective Date: April 1, 2026
This Privacy Policy applies solely to Personal Data processed by FabTrack LLC in connection with the provision of the Service. It does not govern the data practices of Subscribers or their use of Personal Data outside of the Service.
For purposes of this Privacy Policy: (a) “Service” means the white-labeled Customer Experience Layer platform provided by FabTrack LLC; (b) “Subscriber” means the fabrication shop that subscribes to the Service; (c) “End User” means the Subscriber’s customer or authorized user; and (d) “Personal Data” means any information relating to an identified or identifiable individual, as defined under applicable law.
Questions or requests regarding this Privacy Policy may be directed to FabTrack LLC at jr.worley@fab-track.com.
We collect data necessary to provide the white-labeled “Customer Experience Layer” portal experience for fabrication shops and their end customers (“Service”). Depending on Subscriber configuration and use, this may include Personal Data relating to Subscriber personnel and End Users, including names, email addresses, project identifiers, and communication metadata, including:
Where the GDPR applies, FabTrack LLC processes Personal Data on the lawful bases of performance of a contract, compliance with legal obligations, and legitimate interests in operating, securing, and improving the Service.
Your data is processed through third-party sub-processors engaged by the Company to support core Service functionality, including:
FabTrack LLC may update or replace sub-processors from time to time to support Service functionality. Material changes to sub-processors will be communicated to Subscribers through the Service or other reasonable means.
FabTrack LLC implements reasonable administrative, technical, and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, or destruction, including, as appropriate, access controls, encryption, and system monitoring. These measures are appropriate to the nature of the data processed and the risks presented.
The Subscriber (fabrication shop) is the Data Controller with respect to personal data relating to its customers and end users. FabTrack LLC acts solely as a Data Processor and processes such data only on documented instructions from the Subscriber. The parties’ respective data protection obligations are further governed by a data processing agreement incorporated by reference into the applicable service agreement.
FabTrack LLC will notify the applicable Subscriber without undue delay upon becoming aware of a confirmed personal data breach affecting Subscriber data and will provide reasonable assistance to support the Subscriber’s regulatory or end-user notification obligations.
Personal Data may be processed in the United States and other jurisdictions where FabTrack LLC or its sub-processors operate. Where required by applicable law, such transfers will be subject to appropriate safeguards, including approved transfer mechanisms such as standard contractual clauses.
Subscribers are prohibited from uploading or processing regulated or sensitive data, including without limitation HIPAA- or GLBA-protected information.
Upon termination or expiration of the Service, access to the Service will be revoked immediately. Customer data will be archived in an inaccessible state for up to thirty (30) days following termination and permanently deleted thereafter, unless retention is required to comply with applicable law.
The Service is intended for business use and is not directed to individuals under the age of 18. FabTrack LLC does not knowingly process Personal Data of children.
To the extent applicable, residents of certain U.S. states may have additional rights regarding their Personal Data, including rights to access, delete, or correct such data. Requests should be submitted through the applicable Subscriber, acting as Data Controller.
FabTrack LLC will provide reasonable assistance to Subscribers to enable them to respond to verified data subject requests and appeals as required under applicable U.S. state privacy laws.
FabTrack LLC does not sell or share Personal Data, as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.
Subject to applicable law, individuals may have the right to access, correct, delete, or obtain a copy of their personal data. Because FabTrack LLC acts as a Data Processor, requests relating to end-customer data should be directed to the applicable Subscriber, who is responsible for responding as Data Controller.
Where the GDPR applies, data subjects may have the right to request access to, rectification or erasure of Personal Data, restriction of processing, data portability, or to object to processing. As FabTrack LLC acts as a Data Processor, such requests must be submitted to the applicable Subscriber acting as Data Controller.
Subscribers are solely responsible for providing legally compliant privacy notices to their End Users and for responding to data subject requests in their role as Data Controller.
This Privacy Policy is governed by and construed in accordance with the laws of the State of North Carolina, without regard to its conflict of laws principles. Any disputes arising out of or relating to this Privacy Policy shall be brought exclusively in the state or federal courts located in North Carolina.
FabTrack LLC may update this Privacy Policy from time to time. Material changes will be communicated to Subscribers through the Service or other reasonable means. Continued use of the Service after such updates constitutes acceptance of the revised Privacy Policy.