Effective Date: March 1, 2026 | Last Updated: March 4, 2026
Global Materials Intelligence, Inc. (“GMI,” “we,” “us,” or “our”) is the data controller responsible for your personal data. We operate the website at globalmaterialsintelligence.com (the “Site”) and related supply chain verification services (the “Services”).
Contact:
Global Materials Intelligence, Inc.
Arlington, VA, United States
Email: privacy@globalmaterialsintelligence.com
Contact information (name, email, company, job title) when you request a briefing, complete the compliance assessment, or contact us; account credentials if you create a platform account; supply chain data, documents, and materials information you submit for verification; and communications you send us, including support requests and feedback.
When you visit the Site, our hosting provider may process technical request data (such as IP address) as strictly necessary to deliver and secure the Site. Beyond that, the optional telemetry described in Section 7 — device and browser information, approximate geographic location, pages visited, referral source, time spent on pages, and interaction patterns — is collected only after you grant consent, and may be declined.
We may receive information from business partners, publicly available sources, or data providers to supplement our records — for example, company information from public registries used in supply chain verification.
We process your personal data only when we have a valid legal basis under applicable law, including the EU General Data Protection Regulation (GDPR). The legal bases we rely on for each purpose are:
| Purpose | Legal Basis (Art. 6 GDPR) |
|---|---|
| Service delivery and account management | Performance of a contract (Art. 6(1)(b)) |
| Responding to inquiries and briefing requests | Legitimate interests (Art. 6(1)(f)) — responding to prospective customer inquiries |
| Analytics, error monitoring, and site improvement | Consent (Art. 6(1)(a)) — telemetry loads only after you opt in |
| Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) — protecting our services and users |
| Legal and regulatory compliance | Legal obligation (Art. 6(1)(c)) |
| Marketing communications | Consent (Art. 6(1)(a)) — opt-in only, withdrawable at any time |
We do not change the legal basis for processing retroactively. Where we rely on legitimate interests, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may request details of these assessments by contacting us.
We use collected information for service delivery (providing, maintaining, and improving our supply chain verification platform); communications (responding to inquiries and providing requested briefings); analytics (understanding Site usage to improve performance — only with your consent); security (detecting and preventing fraud and unauthorized access); and legal compliance (meeting regulatory obligations and responding to lawful requests).
We do not sell your personal information. We may share information in these limited circumstances: with service providers bound by data processing agreements (hosting, error and performance monitoring, analytics, email delivery); when required by law, subpoena, or court order; in connection with a merger, acquisition, or sale of assets (with prior notice to affected users); and with your explicit consent for a specific sharing purpose.
GMI is based in the United States. If you access the Site from the European Economic Area (EEA), the United Kingdom, or Switzerland, your information may be transferred to and processed in the United States.
For transfers of personal data outside the EEA, we rely on the following safeguards as appropriate: the European Commission’s Standard Contractual Clauses (SCCs) as adopted under Commission Implementing Decision (EU) 2021/914; adequacy decisions where applicable; and supplementary technical and organizational measures where required. You may request a copy of the applicable transfer safeguards by contacting us.
The Site uses strictly necessary browser storage required for core functionality and security, and to remember your telemetry choice (described below). These do not require consent.
We do not load any error-monitoring, performance, or analytics telemetry in your browser until you grant consent through the banner shown on your first visit. If you accept, we use Sentry (Functional Software, Inc.) for error and performance monitoring to keep the Site reliable. This telemetry does not record your screen or session, is not configured to send personally identifiable information such as your IP address, and is never used for advertising or cross-site tracking. If you decline, no such telemetry is loaded.
You can withdraw consent at any time by clearing this site’s browser storage, which causes the consent banner to reappear so you can change your choice.
We do not use cookies or other technologies for advertising, cross-site tracking, or behavioral profiling.
We retain personal information only for as long as necessary to fulfill the purposes described in this policy: contact and account data is retained for the duration of your relationship with us plus 24 months; analytics data is anonymized within 26 months; legal and compliance records are retained as required by law (typically 7 years for financial records); and correspondence is retained for 36 months after last interaction.
We periodically review retained data and delete or anonymize information that is no longer necessary.
Under the GDPR and other applicable privacy laws, you have the following rights regarding your personal data:
| Right | Description |
|---|---|
| Access (Art. 15) | Obtain a copy of the personal data we hold about you, provided in a commonly used electronic format. |
| Rectification (Art. 16) | Request correction of inaccurate or incomplete personal data. |
| Erasure (Art. 17) | Request deletion of your personal data where there is no compelling reason for continued processing. |
| Restrict Processing (Art. 18) | Request that we pause processing of your data in certain circumstances. |
| Data Portability (Art. 20) | Receive your personal data in a structured, machine-readable format (JSON or CSV). |
| Object (Art. 21) | Object to processing based on legitimate interests, including direct marketing. |
| Withdraw Consent | Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. |
| Automated Decisions (Art. 22) | Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such processing. |
To exercise any of these rights, contact us at privacy@globalmaterialsintelligence.com. We will respond within 30 days of receiving a verifiable request. For complex requests, we may extend this by an additional 60 days, and will notify you within the initial 30-day period if an extension is needed. Responses are provided free of charge.
If you believe that our processing of your personal data infringes the GDPR or other applicable data protection laws, you have the right to lodge a complaint with a supervisory authority. You may file a complaint with the supervisory authority in the EU/EEA member state of your habitual residence, your place of work, or the place of the alleged infringement. A list of EU/EEA supervisory authorities is available at edpb.europa.eu.
For individuals in the United Kingdom, complaints may be directed to the Information Commissioner’s Office (ICO) at ico.org.uk.
We implement technical and organizational measures to protect your information, including encryption in transit (TLS 1.2+), encryption at rest (AES-256), secure hosting infrastructure, role-based access controls, and regular security assessments. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. See our Security page for more details.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what personal information we collect and how we use it; the right to delete your personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right to non-discrimination for exercising your rights.
To exercise these rights, contact us at privacy@globalmaterialsintelligence.com. We will respond within 45 days.
The Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will provide notice through the Site or by email. Your continued use of the Site after changes become effective constitutes acceptance of the revised policy.
If you have questions or concerns about this Privacy Policy or our data practices:
Global Materials Intelligence, Inc.
Arlington, VA, United States
Email: privacy@globalmaterialsintelligence.com
Web: globalmaterialsintelligence.com