La Mirada, CA · (714) 630-3888 · Contact
Privacy Policy

Privacy Policy

How we handle the information you share with Harley & Son online.

Effective date: February 2026

Scope: This site is intended for business-to-business (B2B) inquiries. We do not knowingly collect information from children or individual consumers.

Information we collect

What we receive

Contact and Project Data:

  • Name, company, and contact details (such as phone/email if provided), and project details you submit via our forms, phone, or other provided channels
  • Technical drawings, CAD files, NDAs, or other documents you upload through quote or NDA request forms
  • Survey responses and feedback you provide voluntarily

Website Analytics:

  • Basic site usage data (page visits, aggregate referrer information showing which pages visitors came from, time on site) collected via privacy-focused analytics
  • No personally identifiable information is tracked through analytics
Service providers

Third-party processors we use

We use the following trusted services to operate this website and respond to your requests:

  • Cloudflare Pages — Website hosting and content delivery
  • Cloudflare Turnstile — Spam prevention and bot detection on forms (cookieless verification)
  • Cloudflare R2 & D1 — Secure file storage and database for form submissions and attachments
  • Cloudflare Web Analytics — Privacy-first website analytics (no cookies, no personal data tracking)
  • Resend — Transactional email delivery for form notifications

These processors access only the data necessary to perform their specific functions. We do not sell or share your information for marketing purposes.

Cookies & tracking

What we store in your browser

Cookies:

  • We do not use tracking cookies or advertising cookies
  • Essential session data may be temporarily stored for form submissions and spam prevention
  • Cloudflare Turnstile operates without advertising cookies and helps prevent spam and abuse. It may use privacy-preserving browser/device signals to evaluate requests. We do not use it for advertising or tracking.

Analytics:

  • We use privacy-focused analytics that operate without cookies and do not collect personally identifiable information
  • We collect only aggregate statistics (page views, referrer sources) to improve site content
How we use your data

Purpose of data collection

  • Respond to requests: Process quote requests, NDA submissions, support inquiries, and supplier applications
  • Project documentation: Maintain records of customer interactions, technical drawings, and project specifications
  • Quality & compliance: Retain records as required by AS9100D, ISO 9001:2015, ITAR, and applicable contractual/legal requirements (including NIST 800-171 alignment where applicable)
  • Website improvement: Analyze site usage to enhance content and user experience
File retention

How long we keep your information

Active Inquiries & Projects:

  • Contact information and project details are retained while actively servicing your request
  • Technical drawings and CAD files submitted for quotes are retained for the duration of the quote process and project lifecycle

Completed Projects:

  • Customer project records, including drawings and specifications, are retained for at least 7 years to meet AS9100D and ISO 9001:2015 quality system requirements
  • ITAR-controlled technical data may be retained longer as required by federal regulations

Form Submissions:

  • Contact form inquiries are typically retained for at least 1 year unless you request earlier deletion
  • Survey responses are retained in aggregate form (anonymized) indefinitely for quality improvement

Files No Longer Needed:

  • Drawings and attachments from declined quotes or abandoned inquiries may be deleted after 90 days of inactivity

Note: Retention periods may vary based on contract requirements, legal holds, or customer-specific obligations.

Your rights

Data access, correction, and deletion

What you can request:

  • Access a copy of the personal information we have about you
  • Correct inaccurate or outdated contact details
  • Request deletion of your information (subject to compliance limitations below)

What we cannot delete: Due to quality system and regulatory requirements (AS9100D, ISO 9001, ITAR), we must retain certain records:

  • Project documentation, drawings, and specifications for completed work (retained at least 7 years)
  • Quality records and First Article Inspection reports associated with manufactured parts
  • Supplier qualification records and audit documentation
  • Any records subject to active legal holds, audits, or government requirements

How to make a request: Contact us at (714) 630-3888 or via our contact form. We will respond within 15 business days and honor all reasonable requests consistent with legal and quality obligations.

Security

How we protect your data

  • All form submissions and file uploads are transmitted over encrypted HTTPS connections
  • Technical drawings and attachments are stored in access-controlled cloud storage using Cloudflare’s security controls, including encryption protections
  • Database records are protected with role-based access controls and regular backups
  • Our quality management system (AS9100D / ISO 9001) includes documented procedures for handling customer data and proprietary information
Updates to this policy

Policy changes

We may update this privacy policy to reflect changes in our practices or legal requirements. Significant changes will be posted on this page with an updated effective date.

Questions

Contact us

For privacy-related questions or data requests, contact us at:

If you need an alternate secure method to transmit technical data, call and we’ll provide an appropriate channel.