DanHil Containers Privacy Policy

1. Introduction

DanHil Containers ("DanHil," "we," "us," or "our") respects your privacy and is committed to protecting the personal information of visitors to danhilcontainers.com (the "Site") and individuals who interact with us through the Site or our business operations.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we retain it, and what rights you have regarding it. By using the Site, you acknowledge that you have read this Policy.

2. Service Area

DanHil Containers manufactures and supplies corrugated packaging products to customers in Texas and Mexico. The Site is intended for visitors located in or doing business in those regions. While the Site is publicly accessible, we do not actively market or sell our products to customers located outside Texas and Mexico, and our contact form asks visitors to identify a delivery location and city within Texas or Mexico so we can focus follow-up on inquiries we are able to serve.

3. Information We Collect

Information you provide

We collect personal information that you voluntarily provide to us, which may include:

• First and last name
• Business name and title
• Email address
• Telephone number
• Shipping or business address
• The content of any messages or inquiries you submit

Information collected automatically

When you visit the Site, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived from IP
• Browser type and version
• Operating system and device identifiers
• Referring website
• Pages visited, time spent, and date and time of visits
• Other server log data

Information from cookies

We use cookies and similar tracking technologies as described in Section 6.

4. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and quote requests
• Process and fulfill orders
• Communicate with customers about products, services, deliveries, and account matters
• Maintain, secure, and improve the Site and our services
• Detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations
• Pursue our legitimate business interests in operating and growing our business

5. How We Share Your Information

We do not sell, rent, or lease personal information to third parties. We may share personal information in the following limited circumstances:

Service providers

We engage third-party service providers to support our business operations. These may include website hosting, email delivery, IT infrastructure, analytics, customer support, and shipping and logistics partners. Service providers are contractually required to use personal information only for the purposes for which we engaged them and to maintain appropriate security and confidentiality.

Affiliates

We may share information with our corporate affiliates for business purposes consistent with this Policy.

Legal and protective disclosures

We may disclose personal information without notice if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, legal process, or governmental request
• Protect and defend the rights or property of DanHil
• Protect the safety of our employees, customers, or the public
• Investigate, prevent, or respond to fraud, security incidents, or violations of our terms

Business transactions

If DanHil is involved in a merger, acquisition, financing, or sale of business assets, personal information may be transferred as part of that transaction, subject to confidentiality protections.

6. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to enable basic functionality, remember preferences, analyze usage, and support security features. The categories of cookies we may use include:

• Strictly necessary cookies — required for the Site to function (e.g., session management, security)
• Functional cookies — remember user preferences and improve usability
• Analytics cookies — help us understand how visitors use the Site so we can improve it
• Performance cookies — measure Site performance and reliability

You can control cookies through your browser settings. The Site displays a notice describing our use of cookies and tracking technologies; granular per-category preference controls (e.g., opting out of analytics while keeping functional cookies) are not currently implemented but are planned. In the meantime, see Section 15 for working analytics opt-out paths. Disabling cookies through your browser may limit Site functionality.

7. Data Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Specific retention practices include:

• Inquiry and contact form submissions: retained as long as needed to respond and for a reasonable follow-up period thereafter, generally not exceeding three (3) years unless an active business relationship continues.
• Customer account and order records: retained as long as the business relationship is active and for a period thereafter as required by tax, accounting, and contractual obligations.
• Site logs and technical data: typically retained for up to twelve (12) months for security, troubleshooting, and analytics purposes.
• Records subject to legal hold: retained as required regardless of the periods above.

When personal information is no longer needed, we will securely delete or de-identify it.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, alteration, and disclosure. Measures include encryption in transit (TLS/SSL), access controls, network security, and regular review of our security practices.

No system can be guaranteed to be one hundred percent secure, and you acknowledge that there are inherent security risks in transmitting information over the Internet that are beyond our control.

9. Data Breach Notification

In the event of a security breach affecting your personal information, we will notify you and applicable regulators as required by applicable law, in the manner and timeframes those laws require.

10. Your Privacy Rights

Depending on where you reside, you may have rights regarding your personal information. We honor the following rights for all individuals to the extent practicable, and as required for residents of jurisdictions whose laws apply.

Rights generally available

• Access: request confirmation of whether we are processing your personal information and a copy of that information
• Correction: request correction of inaccurate personal information
• Deletion: request deletion of your personal information
• Portability: receive a copy of your personal information in a portable format
• Withdrawal of consent: where processing is based on consent, withdraw that consent at any time

Texas residents (Texas Data Privacy and Security Act)

If you are a Texas resident, you have the rights listed above and additionally the right to opt out of:

• The sale of your personal information
• Targeted advertising
• Profiling that produces legal or similarly significant effects

DanHil does not sell personal information, does not engage in targeted advertising through the Site, and does not engage in profiling that produces legal or similarly significant effects. We will respond to verifiable consumer requests within forty-five (45) days, with the option to extend by an additional forty-five (45) days when reasonably necessary, and will notify you of any extension.

If we decline a request, you have the right to appeal that decision. To appeal, contact us using the information in Section 16 with the subject line "Privacy Rights Appeal." We will respond to appeals within sixty (60) days.

Mexican residents (LFPDPPP)

If you are a resident of Mexico, your personal information is also subject to Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, or "LFPDPPP"). You have the rights of Access, Rectification, Cancellation, and Objection ("ARCO rights"), as well as the right to limit the use or disclosure of your information and the right to revoke consent.

A Spanish-language Aviso de Privacidad describing the processing of your personal information in detail is available on request and at the point of collection. To exercise ARCO rights or to obtain the Aviso de Privacidad in Spanish, contact us using the information in Section 16.

11. How to Exercise Your Rights

To exercise any of the rights described above, contact us at info@danhilcontainers.com with "Privacy Rights Request" in the subject line. We may need to verify your identity before fulfilling certain requests. You may also designate an authorized agent to make a request on your behalf, in which case we may require proof of authorization.

We will not discriminate against you for exercising your privacy rights.

12. Children's Privacy

The Site is not directed to children, and we do not knowingly collect personal information from children under the age of thirteen (13). If we learn that we have collected personal information from a child under thirteen, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at info@danhilcontainers.com.

13. Third-Party Links and External Sites

The Site may contain links to third-party websites or services. This Policy does not apply to those external sites, and we are not responsible for their content, privacy practices, or terms of use. We encourage you to review the privacy policies of any third-party sites you visit.

14. Email Communications

From time to time we may contact you by email regarding products, services, deliveries, account matters, surveys, or general business communications. You may opt out of non-transactional marketing communications by following the unsubscribe instructions in any such email or by contacting us directly. We will continue to send transactional and account-related communications as necessary.

15. Third-Party Services

The Site relies on a small number of well-known third-party services to operate. Where these services process personal information, we list them here.

Cloudflare Turnstile (bot detection)

Our contact form uses Cloudflare Turnstile, a privacy-preserving alternative to traditional CAPTCHA challenges, to distinguish human visitors from automated bots. Turnstile runs in the background when you load the contact page and submits a verification signal alongside your form submission.

When Turnstile is active, Cloudflare may collect:

• Your IP address
• Basic browser characteristics (user agent, screen size, language)
• Behavioral signals from your interaction with the page (e.g., mouse movements, timing, page focus)

Cloudflare uses this data solely for bot detection. They do not use it for advertising or cross-site profiling, and DanHil does not receive the raw signals — we only receive a pass/fail verdict indicating whether the submission appears to come from a human. Cloudflare's handling of this data is governed by their Turnstile Privacy Policy.

If you have concerns about this processing, you can reach us directly by phone at the number listed for any of our locations, or by email at info@danhilcontainers.com, instead of using the web form. Turnstile is not used anywhere else on the Site.

Microsoft 365 / Microsoft Graph (email delivery)

Contact form submissions are delivered to our inquiries inbox via Microsoft 365 and the Microsoft Graph API. Microsoft processes this data as a data processor under its Microsoft Privacy Statement and our Microsoft 365 service agreement.

Pipedrive (CRM)

Contact form submissions are also written to Pipedrive, our customer relationship management platform, so our sales team can follow up. Pipedrive processes this data as a data processor under its Pipedrive Privacy Policy.

Microsoft Azure (hosting + secrets)

The Site is hosted on Microsoft Azure App Service, with secrets stored in Azure Key Vault. Site logs and telemetry are processed by Microsoft Azure Monitor and Application Insights.

Google Analytics 4 (analytics)

We use Google Analytics 4 to understand how visitors use the Site. Google Analytics sets cookies and collects pseudonymized usage data such as pages viewed, referrer, device type, and approximate geographic location derived from IP.

At this time, Google Analytics loads on every page of the Site and is not gated by an in-page consent control. We are working on adding granular consent so visitors can opt out of analytics while keeping the rest of the Site fully functional. Until that ships, your options to opt out of Google Analytics tracking are:

• Use your browser's built-in tracking-protection settings (Safari Intelligent Tracking Prevention, Firefox Enhanced Tracking Protection, Brave Shields, etc.), which actively block Google Analytics requests.
• Install Google's opt-out browser add-on, which prevents Google Analytics from running for any site.
• Use a content-blocking extension (e.g., uBlock Origin) configured to block analytics trackers.
• Contact us at info@danhilcontainers.com and we will exclude your visits from our analytics dataset.

Note: simply blocking third-party cookies in your browser does not disable Google Analytics on this Site, because GA4 uses first-party cookies on the danhilcontainers.com domain.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. For material changes, we will provide additional notice (such as a prominent notice on the Site or, where appropriate, direct notice). Continued use of the Site after the effective date of any change constitutes acknowledgment of the revised Policy.

17. Contact Information

DanHil Containers welcomes your questions, comments, or requests regarding this Privacy Policy.