Wrex Products, Inc. of Chico — home

Privacy Policy

Version 1.0 · Draft — not yet in effect

Draft — requires attorney review. This page is a practical starting draft, not a substitute for legal advice. Do not publish it as final without review by counsel qualified in California and U.S. privacy/consumer-protection law.

What we collect

We collect information you provide directly: name, company, work email, phone number, and the content of any message, RFQ, or file you submit through our contact form, RFQ form, or by emailing us directly. We do not knowingly collect information from children.

Why we collect it

Solely to respond to your inquiry, prepare a quotation, and provide the products or services you request. We do not use form submissions for unrelated marketing without separate consent.

Where it's stored, and what it passes through

Anything you send us travels through service providers before it reaches a person at Wrex, and it stays in some of them afterwards:

  • Our website's network and security layer (currently Cloudflare) — page requests and uploads pass through it for delivery, filtering and abuse protection.
  • Transactional email (currently Resend) — form submissions are turned into notification emails here.
  • Private object storage (an S3-compatible bucket, currently Cloudflare R2) — uploaded drawings and CAD files land here and stay here. Our staff may open files directly from that platform rather than from an email.
  • Business email (Microsoft 365) — notification emails, your replies, and anything you email us directly are stored in Wrex mailboxes.
  • Our CRM, if a submission is routed there.
  • Endpoint security software on Wrex computers, which scans files opened on those machines.

Email you send us directly follows the same shape: it passes through your mail provider and ours, and is stored in our mailboxes. See our Data & CAD File Security notice for how uploads are protected in storage.

Who receives it

Wrex Products staff who need the information to respond to your inquiry, and the service providers that run our infrastructure: our transactional email provider, our private file storage, our business email (Microsoft 365), and — if you're routed there — our CRM.

Quoting your part also requires us to share your project information outside Wrex. We are a manufacturer, not a broker, but we do not make every element of a part in-house and we do not set raw-material or tooling prices. To return a real number to you, we send the information needed to price the work to:

  • Tooling vendors — mold and die makers who quote the tool. Some are in the United States; others are outside it (see below).
  • Raw material suppliers and distributors — for resin, alloy and stock pricing and availability.
  • Subcontractors and outside machine shops — for secondary operations, finishing, plating, coating, and processes we do not run ourselves.
  • Component and sub-assembly suppliers — where a part includes items we buy rather than make.

What goes out is what those parties need to price the work — typically drawings or CAD geometry, materials and finishes, tolerances, quantities, and target dates. We do not send them your contact details for their own marketing, and we do not authorize them to use your information for anything other than quoting or performing the work.

AI tools

We may use AI applications to help us review, interpret and quote a project, which means project information — potentially including drawings and CAD geometry — may be provided to those tools. We do not publish a list of the specific tools we use, and it may change. If your project requires that no AI service receives your data, tell us before you send it. [Counsel: confirm this level of disclosure is sufficient without naming processors, and that the tools in use permit confidential business input.]

International transfers

Some of the tooling vendors and suppliers described above are located outside the United States — including, but not limited to, China, India, Taiwan, Vietnam and Hong Kong. Quoting a tool often means sending your drawings or CAD geometry to them. If your project cannot leave the United States, or cannot go to a particular country, tell us before you send anything and we will tell you whether we can quote it on that basis.

This is also why our Data & CAD File Security notice asks you not to send export-controlled technical data through this site. Transmitting ITAR- or EAR-controlled data to a foreign party can itself be a violation regardless of what happens next, and our normal quoting route does exactly that kind of transmission.

Confidentiality and NDAs

An NDA between you and Wrex does not stop this sharing — it governs it. We cannot quote a part without pricing its tooling, material and outside operations, so a signed NDA is our commitment to protect your information, not a commitment that your drawings never leave our building.

Be aware that we do not have a confidentiality agreement with every vendor we quote through. Some of our tooling partners and suppliers are under an NDA or NNN agreement with us and some are not. If your project requires that every recipient be under a written confidentiality obligation, that each recipient be approved in advance, or that particular countries or named competitors are excluded, say so before you send anything — when the NDA is negotiated, not after files are in flight. We can quote on that basis, but only if we know, and it may change which vendors we can use.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. We may use service providers to carry out our own sales and marketing — for example a CRM or an email tool — which means your contact details may sit in those systems on our behalf. [Counsel to confirm the recipient categories above, the country list, and whether a transfer mechanism or additional notice is required for any non-U.S. recipient.]

How long we keep it

We retain information for as long as necessary to provide our services. It may also be stored across our IT systems — email, other applications, databases, quality systems, and paper copies — as needed to review and quote a project, along with backups and archives, and to comply with applicable legal obligations.

It differs by system, and only some of it expires. We would rather set that out precisely than imply a single deletion promise we do not keep:

  • Uploaded files — deleted from the website’s file storage 365 days after upload, by an automatic rule on the storage itself rather than by anyone remembering to run it.
  • Email — notification emails and your correspondence stay in Wrex mailboxes indefinitely, subject to normal mailbox management. Those emails reference the drawings you sent, and any copy taken into our quoting or quality systems is kept on the same indefinite basis.
  • The website's own submission record — the form text and metadata the site stores to recognise duplicate submissions expires automatically after a set period (currently one year), separately from the file and the email.
  • Backups, snapshots and shadow copies — of servers, databases, mailboxes, the website and its logs. These exist so we can recover from failure, and they are not selectively editable.

So please do not read the file schedule as “deleted after a year”. A drawing leaving the website’s file storage is not the same as Wrex no longer having it: the email that carried it, and any copy taken into quoting or quality work, are on no deletion schedule at all.

The same is true downstream: vendors, suppliers and partners who received your information in order to quote may keep it in their own systems, mailboxes, records and backups, and we do not control their retention.

Asking us to delete your information

Put the request in writing and send it to info@wrexproducts.com and to every other Wrex address you have — your usual contact here, and any department address you have corresponded with. Address it to Wrex management and identify the project or reference so we can find it.

Then call (530) 895-3838 to confirm we received it. A deletion request is worth a phone call: it is the only channel that tells you a person has it. Please allow reasonable time to complete — this is a manual process across several systems and, where you ask us to reach vendors, across other companies too.

What we can and cannot do, stated honestly:

  • Active systems — when a deletion request is processed, data is permanently erased from active systems.
  • Backups and archives — data may persist in delayed electronic backup systems and archives for a standard rotation cycle, until it is overwritten or next accessed, as permitted by law.
  • Vendors and suppliers — we can pass your request on and ask them to delete. We cannot guarantee what a third company does inside its own systems, and some are outside the United States.
  • Records we must keep — some information may need to be retained for legal, tax, warranty, quality or contractual reasons.

[Counsel: this section states operational reality and must be reconciled with statutory deletion rights before publication — in particular the CCPA/CPRA treatment of backup systems and of service-provider/contractor pass-through obligations. Confirm the response timeline the law requires and what may lawfully be retained.]

Analytics and third-party scripts on this site

This site uses a small number of third-party scripts:

  • Google Analytics 4 — how pages are found and used, in aggregate. Loads only after you consent.
  • ThomasNet — the industrial sourcing directory Wrex lists on, for attributing buyer traffic.
  • A Microsoft 365 chat widget — so you can ask a question without filling in a form. What you type into it is handled like any other message you send us.

We do not send message content, CAD filenames, or other sensitive form fields to any analytics platform. See our Cookie Policy for the consent categories and how to change your choice.

[LAUNCH GATE — as of 2026-08-17 only Google Analytics exists in the codebase. ThomasNet and the chat widget are planned. Neither may load before it is added to the CSP, wired to a consent-gated loader, and covered by the MARKETING consent category, which components/CookieConsent.tsx does not yet offer. This paragraph describes the intended launch state, not the current one.]

Your rights

Depending on your location, you may have rights to access, correct, or delete your personal information, or to opt out of certain processing. California residents: see our California Privacy Notice.

Contact us about privacy

Email info@wrexproducts.com with any privacy question or request, copying any other Wrex address you deal with. If it is time-sensitive, call (530) 895-3838 as well.