GDPR Compliance Policy

This GDPR Compliance Policy is intended to supplement the main Privacy Policy where the European Union General Data Protection Regulation may apply to personal data processed by or in connection with MaterialHubUSA.com. It outlines core data protection principles, rights-related expectations, and governance considerations relevant to EU/EEA privacy compliance contexts.

This page is not intended to exhaustively restate every GDPR concept, but rather to explain how GDPR-related privacy handling may be approached within the operational, commercial, technical, and support environments connected to MaterialHubUSA.com.

GDPR may apply where MaterialHubUSA.com processes personal data relating to individuals in the European Economic Area or otherwise falls within the territorial scope of the GDPR due to website activity, commercial engagement, cross-border business communications, digital services, or related data processing circumstances.

Applicability depends on the facts of a particular processing activity, including the nature of the interaction, the data involved, the location of the individual, and the legal context in which the processing occurs.

Where GDPR applies, MaterialHubUSA.com may rely on one or more lawful bases for processing personal data depending on the particular circumstance and purpose of the processing.

• Performance of a contract or steps requested prior to entering into a contract.
• Compliance with legal or regulatory obligations.
• Legitimate interests, where such interests are not overridden by the rights and freedoms of the individual.
• Consent, where consent is the appropriate legal basis and has been validly obtained.
• Protection of vital interests, where applicable under relevant circumstances.
• Public interest or official authority bases, where relevant and legally applicable.

Subject to applicable law and verification requirements, individuals may have rights under GDPR including the right to request access to personal data, rectification of inaccurate information, erasure in certain circumstances, restriction of processing, objection to certain processing, and data portability where applicable.

Individuals may also have the right to withdraw consent where consent is the basis of processing, without affecting the lawfulness of processing carried out before withdrawal.

Where GDPR applies, personal data may be retained only for as long as reasonably necessary for the relevant processing purpose, contractual need, legal obligation, security function, dispute resolution requirement, or legitimate recordkeeping basis.

MaterialHubUSA.com may also apply data minimization principles by seeking to limit the amount of personal data processed to what is reasonably necessary for the applicable purpose and operational context.

Personal data subject to GDPR may, in certain cases, be accessed, processed, stored, or transferred outside the EEA where operational, technical, commercial, or support-related circumstances make such handling reasonably necessary.

Where cross-border transfers are relevant, MaterialHubUSA.com may rely on appropriate measures, contractual safeguards, or other legally recognized mechanisms intended to support compliant transfer practices in light of the applicable circumstances.

MaterialHubUSA.com may implement reasonable administrative, technical, and organizational measures intended to help protect personal data against unauthorized access, loss, misuse, alteration, or disclosure, taking into account the nature of the data, processing context, operational environment, and relevant risks.

Internal governance, service provider management, access controls, operational oversight, and response procedures may also form part of the broader privacy and security posture relevant to GDPR-aligned handling.

Individuals seeking to exercise GDPR-related rights may submit a request through the appropriate MaterialHubUSA.com privacy, support, or contact pathway made available on the website. Requests may require identity verification and may be evaluated in light of legal obligations, operational feasibility, and applicable exemptions or limitations.

Where an individual believes their data has been handled inconsistently with applicable law, they may also have the right to contact a relevant supervisory authority, subject to the jurisdiction and circumstances involved.

MaterialHubUSA.com may revise this GDPR Compliance Policy from time to time to reflect legal developments, operational changes, platform updates, or refinements in privacy governance. When revisions are made, the Last Updated date on this page may be adjusted accordingly.

GDPR-related questions, privacy rights requests, or concerns about personal data handling may be directed through the appropriate MaterialHubUSA.com support, trust, or privacy request channel made available through the website.