Privacy Policy

This Privacy Policy describes how Cryogenic Plastics Inc. ("CPI", "we", "us", or "our"), a Texas corporation located at 1098 Windy Hill Road, Kyle, Texas 78640, handles personal information. It applies to:

• our website at cpitx.com and our product subdomains, including marine.cpitx.com, amusement.cpitx.com, flags.cpitx.com, and rubbermolding.cpitx.com;
• the quote requests, contact forms, surveys, emails, and phone calls through which you reach us; and
• the ordinary course of our business with customers, prospects, suppliers, and other business contacts.

CPI is a business-to-business manufacturer. We do not run a consumer storefront, we do not operate an advertising network, and we do not build profiles about you for anyone else's benefit. Most of the personal information we hold is ordinary business contact information you gave us so that we could quote or deliver a job.

This policy does not cover third-party websites we link to, or information you give directly to our customers and distributors. Employees and contractors of CPI receive a separate internal notice.

We collect only what we need to answer you, quote your project, deliver your order, and keep the website running. The table below lists every category of personal information we process, where it comes from, and why.

You are never required to give us personal information to browse cpitx.com. If you choose not to complete the contact form, though, we will have no way to reply to your inquiry.

We do not buy personal information from data brokers, and we do not append or enrich third-party data onto the contact details you give us.

CPI does not seek, and asks that you do not send us, sensitive data as that term is defined by the Texas Data Privacy and Security Act and comparable laws — personal data revealing racial or ethnic origin, religious beliefs, a mental or physical health diagnosis, sexuality, citizenship or immigration status, genetic or biometric data used to identify you, precise geolocation, or the personal data of a known child.

We do not capture biometric identifiers for a commercial purpose under the Texas Capture or Use of Biometric Identifier Act, and we do not sell sensitive or biometric personal data. If you send us sensitive data anyway — in the free-text field of a message, for example — we will delete it once it has served the purpose for which you sent it.

We use personal information for these purposes, and no others:

• Responding to you. Answering inquiries, preparing quotes, and following up on requests for information.
• Delivering our products and services. Manufacturing, order processing, shipping, installation support, warranty, and service.
• Managing the business relationship. Invoicing, payment, account administration, and record-keeping.
• Operating and securing the website. Serving pages, blocking bots and abuse, detecting fraud, and debugging faults.
• Improving what we build and publish. Understanding, in aggregate, which pages and products interest visitors — only where you consented to analytics cookies.
• Communicating with you. Sending service messages and, where you asked for them or where the CAN-SPAM Act permits, occasional business updates. Every marketing email carries an unsubscribe link that we honor promptly.
• Meeting legal and safety obligations. Tax and accounting records, product-safety and quality documentation, export controls, insurance, responding to lawful requests, and establishing or defending legal claims.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects concerning you.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract — to quote, produce, and deliver the goods you order, and to support them afterwards.
• Legitimate interests — to run and secure our website, respond to business inquiries, keep accurate records, and protect our legal rights. We balance those interests against your rights before relying on them.
• Consent — for analytics and marketing cookies and for optional marketing email. You may withdraw consent at any time; doing so does not affect processing already carried out.
• Legal obligation — to comply with tax, accounting, trade, and product-safety law.

Cookies and similar technologies — including browser local storage — let a website remember information between page loads. We keep our use of them deliberately small and group them into three categories.

No analytics or marketing technology loads when the page first renders. The Google Analytics script is downloaded only after you grant analytics consent, so visitors who decline are never measured. Your choice is stored locally in your browser rather than on our servers, which means clearing your browser data brings the banner back.

You can change your mind at any time:

You can also block or delete cookies in your browser settings, though strictly necessary cookies are required for parts of the site to work correctly.

We share personal information only with parties that need it to do work for us, and only for the purposes described in this policy. Our written contracts require service providers to protect the information, use it solely on our instructions, and never sell it or use it for their own purposes.

We may also disclose personal information:

• To comply with the law — in response to a subpoena, court order, regulatory demand, or other lawful request, and to enforce our terms or protect the rights, property, or safety of CPI, our customers, or the public.
• In a corporate transaction — if CPI is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may transfer as part of that transaction. We will notify you if such a transfer would materially change how your information is handled.
• At your direction — when you ask us to coordinate with your installer, freight carrier, or engineering consultant, for instance.

Because we do not sell personal data, the specific sale notices required by Section 541.102 of the Texas Business and Commerce Code — the statements a company must post if it sells sensitive or biometric personal data — do not apply to CPI. Should that ever change, we will post the required notice here, in the same place and manner as this policy, before any such sale, and we will obtain your consent where the law requires it.

We also do not sell the personal information of consumers under 16 years of age, and have no actual knowledge of ever having done so.

We keep personal information only as long as we need it for the purpose we collected it, then delete it or render it unrecoverable. In practice:

Where information is subject to a legal hold or an open dispute, we retain it until the matter is resolved.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (HTTPS/TLS across the whole site and every form submission), access granted on a need-to-know basis, multi-factor authentication on business-critical accounts, network and bot protection at the edge, security review of vendors before we adopt them, and routine patching of the systems we operate.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please do not send confidential drawings, pricing, or other proprietary material through the public contact form — ask us for a secure transfer method instead.

If a breach of system security affecting your sensitive personal information occurs, we will notify you and, where required, the Texas Attorney General as quickly as practicable and within the timeframes set by Chapter 521 of the Texas Business and Commerce Code and any other applicable breach-notification law.

Your rights depend on where you live. We extend the core rights below to every resident of the United States, whether or not the law of your state obliges us to.

Texas residents

Under the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code ch. 541), you have the right to:

• Confirm and access — confirm whether we are processing your personal data and obtain a copy of it.
• Correct — correct inaccuracies, taking into account the nature of the data and our purpose for processing it.
• Delete — delete personal data you provided or that we obtained about you.
• Port — obtain a copy in a portable and, to the extent technically feasible, readily usable format, where the data is processed by automated means.
• Opt out — opt out of the sale of personal data, of targeted advertising, and of profiling in furtherance of decisions producing legal or similarly significant effects. As explained above, CPI does none of these, so there is nothing to opt out of.
• Appeal — appeal any refusal to act on your request, as described in the next section.

A note on scope: the TDPSA exempts small businesses as defined by the U.S. Small Business Administration, except for its rule against selling sensitive personal data without consent. CPI may fall within that exemption, but we honor the rights above as a matter of policy rather than obligation.

California residents

Under the California Consumer Privacy Act as amended by the CPRA, you may request to know the categories and specific pieces of personal information we collected, the sources, the business purposes, and the categories of third parties to whom we disclosed it; request correction or deletion; and opt out of sale or sharing and limit the use of sensitive personal information. Because CPI does not sell or share personal information and does not use sensitive personal information to infer characteristics, we do not publish a "Do Not Sell or Share My Personal Information" link. You may also request the information described in California's Shine the Light law (Civil Code § 1798.83). We will never discriminate against you for exercising any of these rights.

Other states

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other states with comprehensive privacy laws have substantially similar rights of access, correction, deletion, portability, and opt-out, plus a right to appeal. Use the same process below and tell us which state you reside in.

EEA, UK, and Swiss residents

You have rights of access, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, data portability, and withdrawal of consent. You may also lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office.

Submit any privacy request by email to info@cpitx.com with "Privacy Request" in the subject line, by phone at (512) 295-2683, or by mail to Cryogenic Plastics Inc., Attn: Privacy, 1098 Windy Hill Road, Kyle, Texas 78640.

Please tell us:

• which right you want to exercise;
• the state or country you reside in;
• the email address, phone number, or company name you used when you contacted us, so we can find your records; and
• whether you are submitting the request yourself or as an authorized agent.

Verification. Before we grant access, correction, portability, or deletion, we must confirm the request really comes from you. We do that by matching the details you supply against our records and, where necessary, asking one follow-up question. We will not make you create an account or send identity documents just to file a request. If we cannot verify you, we will say why and, where the law allows, treat the request as an opt-out instead.

Authorized agents. An agent may act for you with written permission signed by you, or a valid power of attorney. We may contact you directly to confirm.

Our response time. We respond without undue delay and within 45 days of a verifiable request. Where reasonably necessary we may extend that once by a further 45 days, and we will tell you why within the first 45. Requests are free up to twice in any 12-month period; for a request that is manifestly unfounded, excessive, or repetitive we may charge a reasonable fee or decline to act, and we will explain which and why.

Appeals. If we decline to act, we will explain our reasoning and how to appeal. To appeal, reply to our decision or email info@cpitx.com with "Privacy Appeal" in the subject line within a reasonable period after you receive it. We will review the appeal and respond in writing within 60 days, setting out the reasons for our decision.

We recognize universal opt-out mechanisms, including the Global Privacy Control (GPC) signal, as Texas law has required since January 1, 2025. If your browser or extension sends a GPC signal, we treat it as an instruction to switch off every non-essential cookie for that browser, and we will not prompt you to opt in while the signal is present.

In practice this changes little on cpitx.com, because analytics and marketing are already off by default for every visitor until actively enabled, and we neither sell data nor run targeted advertising. Since an opt-out signal is tied to the browser or device that sends it, you will need to set it on each browser you use.

There is still no common industry standard for the older "Do Not Track" browser header. We do not respond to DNT separately, but the consent controls above give you equivalent — and more precise — control.

Our website and products are directed to businesses and industry professionals, not to children. We do not knowingly collect personal information from anyone under 13 years of age, consistent with the Children's Online Privacy Protection Act, and we do not knowingly process the personal data of a known child.

If you believe a child has given us personal information, contact us at info@cpitx.com and we will delete it promptly.

If you apply for a job with CPI, we collect the information in your application, resume, and references, and use it solely to evaluate your candidacy, verify your background where permitted, and satisfy employment and equal-opportunity recordkeeping requirements. We keep unsuccessful applications for the period required by federal and Texas recordkeeping rules, then delete them.

Where you deal with us as an employee or representative of another company, we process your business contact details for the same business purposes set out in this policy.

Our website links to third-party sites and services, including our profiles on Facebook, Instagram, YouTube, and LinkedIn, and our client experience survey hosted at feedback.cpitx.com. Once you leave cpitx.com, the privacy policy of that destination governs, not ours. We are not responsible for the content or privacy practices of sites we do not operate, and we encourage you to read their policies before providing information.

Our product subdomains — marine.cpitx.com, amusement.cpitx.com, flags.cpitx.com, and rubbermolding.cpitx.com — are operated by CPI and are covered by this policy.

CPI is based in the United States, and our website and business systems are hosted in the United States. If you visit or contact us from outside the U.S., the information you provide will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your country.

Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with supplementary measures where they are needed.

We may update this Privacy Policy as our practices, our technology, or the law changes. When we do, we will revise the "Last updated" date at the top of this page and post the new version here. If the changes are material, we will give more prominent notice — a banner on the site, for example, or a direct email where we hold your address and the law requires it.

Continuing to use cpitx.com after a revised policy takes effect means you accept the updated terms, so we encourage you to review this page periodically.

Questions, concerns, or complaints about this policy or how we handle your information are genuinely welcome — we would much rather hear from you first than have you go to a regulator.

Looking for something else? Send us a project inquiry or read the CPI blog.