Privacy Policy
How we handle the information you share with Harley & Son online.
Effective date: February 2026
Scope: This site is intended for business-to-business (B2B) inquiries. We do not knowingly collect information from children or individual consumers.
What we receive
Contact and Project Data:
- Name, company, and contact details (such as phone/email if provided), and project details you submit via our forms, phone, or other provided channels
- Technical drawings, CAD files, NDAs, or other documents you upload through quote or NDA request forms
- Survey responses and feedback you provide voluntarily
Website Analytics:
- Basic site usage data (page visits, aggregate referrer information showing which pages visitors came from, time on site) collected via privacy-focused analytics
- No personally identifiable information is tracked through analytics
Third-party processors we use
We use the following trusted services to operate this website and respond to your requests:
- Cloudflare Pages — Website hosting and content delivery
- Cloudflare Turnstile — Spam prevention and bot detection on forms (cookieless verification)
- Cloudflare R2 & D1 — Secure file storage and database for form submissions and attachments
- Cloudflare Web Analytics — Privacy-first website analytics (no cookies, no personal data tracking)
- Resend — Transactional email delivery for form notifications
These processors access only the data necessary to perform their specific functions. We do not sell or share your information for marketing purposes.
What we store in your browser
Cookies:
- We do not use tracking cookies or advertising cookies
- Essential session data may be temporarily stored for form submissions and spam prevention
- Cloudflare Turnstile operates without advertising cookies and helps prevent spam and abuse. It may use privacy-preserving browser/device signals to evaluate requests. We do not use it for advertising or tracking.
Analytics:
- We use privacy-focused analytics that operate without cookies and do not collect personally identifiable information
- We collect only aggregate statistics (page views, referrer sources) to improve site content
Purpose of data collection
- Respond to requests: Process quote requests, NDA submissions, support inquiries, and supplier applications
- Project documentation: Maintain records of customer interactions, technical drawings, and project specifications
- Quality & compliance: Retain records as required by AS9100D, ISO 9001:2015, ITAR, and applicable contractual/legal requirements (including NIST 800-171 alignment where applicable)
- Website improvement: Analyze site usage to enhance content and user experience
How long we keep your information
Active Inquiries & Projects:
- Contact information and project details are retained while actively servicing your request
- Technical drawings and CAD files submitted for quotes are retained for the duration of the quote process and project lifecycle
Completed Projects:
- Customer project records, including drawings and specifications, are retained for at least 7 years to meet AS9100D and ISO 9001:2015 quality system requirements
- ITAR-controlled technical data may be retained longer as required by federal regulations
Form Submissions:
- Contact form inquiries are typically retained for at least 1 year unless you request earlier deletion
- Survey responses are retained in aggregate form (anonymized) indefinitely for quality improvement
Files No Longer Needed:
- Drawings and attachments from declined quotes or abandoned inquiries may be deleted after 90 days of inactivity
Note: Retention periods may vary based on contract requirements, legal holds, or customer-specific obligations.
Data access, correction, and deletion
What you can request:
- Access a copy of the personal information we have about you
- Correct inaccurate or outdated contact details
- Request deletion of your information (subject to compliance limitations below)
What we cannot delete: Due to quality system and regulatory requirements (AS9100D, ISO 9001, ITAR), we must retain certain records:
- Project documentation, drawings, and specifications for completed work (retained at least 7 years)
- Quality records and First Article Inspection reports associated with manufactured parts
- Supplier qualification records and audit documentation
- Any records subject to active legal holds, audits, or government requirements
How to make a request: Contact us at (714) 630-3888 or via our contact form. We will respond within 15 business days and honor all reasonable requests consistent with legal and quality obligations.
How we protect your data
- All form submissions and file uploads are transmitted over encrypted HTTPS connections
- Technical drawings and attachments are stored in access-controlled cloud storage using Cloudflare’s security controls, including encryption protections
- Database records are protected with role-based access controls and regular backups
- Our quality management system (AS9100D / ISO 9001) includes documented procedures for handling customer data and proprietary information
Policy changes
We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be posted on this page with an updated effective date.
Contact us
For privacy-related questions or data requests, contact us at:
- Phone: (714) 630-3888
- Contact form: Submit a request
If you need an alternate secure method to transmit technical data, call and we’ll provide an appropriate channel.